{"as_of":"2026-08-15T10:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5c75cb77dcbd8f3417e484cef16f8befced645265519be81d869952bee89a764","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:54:11.636927Z","state":"measured"},{"denominator":76,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":76,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:56:20.240732Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T10:04:58.889638Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-08-06T05:56:20.240732Z","title":"Pirates of the rag: Adaptively attacking llms to leak knowledge bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.240732Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:bd604817bff1f105eb5c07f67929796ca5050b837b159f4adb9c7eada6547de1","observation_id":"8fe632d5-e408-4752-ad1a-394b58330a0f","resolution":{"observed_at":"2026-08-06T05:56:20.240732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-08-04T17:46:19.515086Z","title":"Pirates of the RAG: Adaptively attacking LLMs to leak knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-12T22:01:07.249587Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":205,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.515086Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:df45993f4187c8f6632881027fc1651e0b8be2e8f4325e0abc2433b347d3001b","observation_id":"34a29ea7-8c3a-46af-a8b5-afdbdb0187f0","resolution":{"observed_at":"2026-08-04T17:46:19.515086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":"2412.18295","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2412.18295 , year=","venue":null,"work_id":"7445e3e5-f91a-4524-99f9-6b0f536017cc","year":2025},"citing_paper":{"arxiv_id":"2510.06719","last_updated":"2026-05-12T15:11:19Z","snapshot_observed_at":"2026-08-13T17:53:41.272987Z","submitted_at":"2025-10-08T07:15:50Z","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-18T09:49:12.493851Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2510.06719"},"observation_digest":"sha256:b401cde917d6d1be02f0db304ec414eff3692541f4472b7f006796f1129adfa6","observation_id":"f8ebe584-3b4e-44f6-9049-6f329ae4a973","resolution":{"observed_at":"2026-05-18T09:51:13.518929Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":"2412.18295","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2412.18295 , year=","venue":null,"work_id":"7445e3e5-f91a-4524-99f9-6b0f536017cc","year":2025},"citing_paper":{"arxiv_id":"2604.09747","last_updated":"2026-04-10T07:22:11Z","snapshot_observed_at":"2026-08-12T18:04:41.858776Z","submitted_at":"2026-04-10T07:22:11Z","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T17:57:59.918483Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2604.09747"},"observation_digest":"sha256:7aea273170141eba8276821b05c24af223f3a3d14843205ad3c9f954c600c895","observation_id":"0f87a458-9827-4d2a-9c74-dfa02ad46705","resolution":{"observed_at":"2026-05-11T05:45:57.658270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":"2412.18295","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2412.18295 , year=","venue":null,"work_id":"7445e3e5-f91a-4524-99f9-6b0f536017cc","year":2025},"citing_paper":{"arxiv_id":"2605.18762","last_updated":"2026-04-10T08:26:40Z","snapshot_observed_at":"2026-08-15T01:43:08.367809Z","submitted_at":"2026-04-10T08:26:40Z","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-05-21T10:04:45.173272Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2605.18762"},"observation_digest":"sha256:edfd988e20f2d0ebf04698fdb616d20bc4b02394d81cbd1dfc2fd03a91ba328e","observation_id":"2355abbd-f0fe-4c26-b1e0-ca3aebc4bcbf","resolution":{"observed_at":"2026-05-21T10:04:58.892469Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.18295/citation-record","integrity":"/paper/2412.18295/integrity","json":"/paper/2412.18295/citation-record.json","paper":"/paper/2412.18295"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.312317Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.312317Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:0dec4be1ee54d8a6d361ddb209d6f15fb162297cb096c0ee5e11ff6c891c1209","observation_id":"0ecd34b5-08d1-433b-b0ea-1b0f2e496132","resolution":{"observed_at":"2026-08-11T04:54:11.312317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.318125Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.318125Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:49ef71704e5cf18b7093650dae7da4cd8f56f9f2534dc88e3d233e8069f22946","observation_id":"25654916-c861-4cfa-a0b5-4e84da0d4e5d","resolution":{"observed_at":"2026-08-11T04:54:11.318125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14219","last_updated":"2024-08-30T21:17:17Z","snapshot_observed_at":"2026-08-10T14:07:02.234322Z","submitted_at":"2024-04-22T14:32:33Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.14219","snapshot_observed_at":"2026-08-11T04:54:11.323370Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.323370Z"},"links":{"cited_paper":"/paper/2404.14219","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:e7aa2dee54e5a68574e160d6993538a7d8b3ec2361f66a55ba5934419b5bfa56","observation_id":"a35ca8a6-fb75-4e26-be9e-68ae1f6f596a","resolution":{"observed_at":"2026-08-11T04:54:11.323370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.562660Z","title":null,"venue":null,"work_id":"cdb7c241-7adc-47a9-88e2-fdf9a8bb1831","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.328037Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:7d2223a50e859dc0c391e1e2ccb258946f2db272612ae85ca44ca345bafcb083","observation_id":"9b7ad65a-8bc3-4c76-8daf-44b0d6cead84","resolution":{"observed_at":"2026-08-11T04:54:12.567091Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.548295Z","title":null,"venue":null,"work_id":"00c0285e-bd5c-4e55-a539-743f873068be","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.332728Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:0bab89703793c231ace9649bc9150ac72438f7f8378b650d7b316023d0c817c2","observation_id":"82ebe3e2-fe8f-4701-9adf-362bc0ef9b43","resolution":{"observed_at":"2026-08-11T04:54:12.552922Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20446","last_updated":"2025-02-04T14:35:38Z","snapshot_observed_at":"2026-08-14T05:56:56.003325Z","submitted_at":"2024-05-30T19:46:36Z","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20446","snapshot_observed_at":"2026-08-11T04:54:11.337481Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.337481Z"},"links":{"cited_paper":"/paper/2405.20446","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:3fdbe33519bbccb022cfe72366af136d827b24c7942131d461009b9e24c58702","observation_id":"4191b830-5e75-4d8b-a94c-081621176b80","resolution":{"observed_at":"2026-08-11T04:54:11.337481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04023","last_updated":"2023-11-28T09:01:12Z","snapshot_observed_at":"2026-08-07T14:17:12.140094Z","submitted_at":"2023-02-08T12:35:34Z","title":"A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivity","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04023","snapshot_observed_at":"2026-08-11T04:54:11.342559Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.342559Z"},"links":{"cited_paper":"/paper/2302.04023","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:1d4602d1dd20f21ef7b497e5d3371c90cdd4c783592735cecbfb08a4d6090bdb","observation_id":"02368c7a-7d23-46b8-bbb3-cd8ad98203cb","resolution":{"observed_at":"2026-08-11T04:54:11.342559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.533334Z","title":null,"venue":null,"work_id":"e863c563-292a-4695-99c3-461c3f0fe193","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.347425Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:808ba66779ff9eea5a601aa0ed7a9a938919972ac55b922b7af416b3196788b8","observation_id":"3938e034-0a0c-433e-bd01-a674366e0819","resolution":{"observed_at":"2026-08-11T04:54:12.538131Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-11T04:54:11.352491Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.352491Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:6e2b3fd4971d60ecc2eedd432dc8fb2bba1686e89adf88f9bb1e4415c6c7e770","observation_id":"d721f177-182a-4d91-b88d-419327ad24ff","resolution":{"observed_at":"2026-08-11T04:54:11.352491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.519052Z","title":null,"venue":null,"work_id":"b5fde34e-bc27-4400-bcb0-a0c4210b5816","year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.356960Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:065bf428051581eb63ebbbaaf749c9c8ba4e834bf603b02b3acdcd634c2f043a","observation_id":"04378b3d-db82-451f-a398-a0ffd6d1f99d","resolution":{"observed_at":"2026-08-11T04:54:12.523557Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.361604Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.361604Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:f41fec1b6f9b6e69b21ed737c6aa793a898dcd70f183ed4f23e1bd2ebd291cb3","observation_id":"3efcae3e-d178-4553-b814-803be2b95722","resolution":{"observed_at":"2026-08-11T04:54:11.361604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.494910Z","title":null,"venue":null,"work_id":"d3f6ae28-0a5d-4429-baa2-8073f01d6719","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.366225Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:1d5f307314355ac69926508786936c57da27424ed92128b73067cc1dd6382c14","observation_id":"273421f7-70af-4352-8956-f00954a8256a","resolution":{"observed_at":"2026-08-11T04:54:12.499578Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-14T21:26:02.529499Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-11T04:54:11.370961Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.370961Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:110da43d81e70fa748b3ecc067fb51a1e7dee1a32e0037e7265038e192cffc66","observation_id":"6e8adb25-0ec8-494d-94ed-8a04f9346431","resolution":{"observed_at":"2026-08-11T04:54:11.370961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.480390Z","title":null,"venue":null,"work_id":"9ecedb29-feb4-4458-9ae5-e8e361074ef7","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.376189Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:c11f1fe5cf73fed3cfb5ef8d91f63324c729c8fc2a99666efe34120ac607033d","observation_id":"3b716d36-12f9-47f2-92f3-f3c3fb5a74a5","resolution":{"observed_at":"2026-08-11T04:54:12.484930Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.380571Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.380571Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:ce45f59859a08f7c5a859d3e098b84107fbefe45ce8cbff3c1bac6515c0bcf90","observation_id":"0bf0bf01-af56-4f98-b862-c24c5ae19a8f","resolution":{"observed_at":"2026-08-11T04:54:11.380571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.456254Z","title":null,"venue":null,"work_id":"4790cff9-fe3e-4fb3-b4a0-82eac53d08d0","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.384967Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:9c66324a0e2a2f1082dce6627d836072d7e2750e77881de9c33022544600a0f5","observation_id":"86d8c3af-f606-4768-acda-478eab29ea88","resolution":{"observed_at":"2026-08-11T04:54:12.460894Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2301.00234","last_updated":"2024-10-05T11:47:02Z","snapshot_observed_at":"2026-07-06T14:36:25.690733Z","submitted_at":"2022-12-31T15:57:09Z","title":"A Survey on In-context Learning","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.00234","snapshot_observed_at":"2026-08-11T04:54:11.389489Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.389489Z"},"links":{"cited_paper":"/paper/2301.00234","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:84e64548effce51ea1884c2401914f63ef2406827be0cdc6181e4ae77e15e66c","observation_id":"28de6a46-2707-44f5-bc63-8cca6f1bc8da","resolution":{"observed_at":"2026-08-11T04:54:11.389489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.394199Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.394199Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:52a72e35725421982d1cd5180ec61a4cc646b077ea22db7bf06494b52f22bf03","observation_id":"eee2f769-d4e4-440c-bf62-5aef2076d1e7","resolution":{"observed_at":"2026-08-11T04:54:11.394199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.398942Z","title":null,"venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.398942Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:9dad09a05d6682fd3c53efff02161c350c571c939d62320ecad8e277e6a8e055","observation_id":"a00217ff-4c17-4e8a-87a2-399a0fb27982","resolution":{"observed_at":"2026-08-11T04:54:11.398942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.423303Z","title":null,"venue":null,"work_id":"9cf4de79-3fb8-4179-8a2c-0ba16be9cf56","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.403346Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:3a7e9570bd4f072a4f974345cc1f1e71e23ca68a1da7c3a63180559c9d5d2dfd","observation_id":"e2e8edd1-649b-42da-be07-44ecaf983b58","resolution":{"observed_at":"2026-08-11T04:54:12.427863Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.408519Z","title":null,"venue":null,"work_id":"d9096ba6-7817-473a-a31b-b9c32aca28a9","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.407703Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:65582b9dd43e4e2cd331681ed24f88fbe2f5d0292f40661b918cb6c4e82f7eb7","observation_id":"c6afff55-0b39-41bb-9fde-871c458daf6d","resolution":{"observed_at":"2026-08-11T04:54:12.413250Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.393953Z","title":null,"venue":null,"work_id":"baab3d5c-cb69-4426-84e2-9b045b8488f7","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.412130Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:79a2c3ffd7952175162bf5accafcd4657aa19f39fe080cf6676b0c75f4b415b8","observation_id":"876dbf1e-300d-4509-bd1e-0ef1e7f0401b","resolution":{"observed_at":"2026-08-11T04:54:12.398454Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.379703Z","title":null,"venue":null,"work_id":"de0ba462-ef09-43d4-8f6b-9b560ca2509b","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.416491Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:93fed0cccec371754ffd2b47a07fa60e6253d2d98ae8a0ef8cd6a16d951ceb7e","observation_id":"9edca4fe-97e2-4550-86c6-a1fa92afb78a","resolution":{"observed_at":"2026-08-11T04:54:12.384187Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.420931Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.420931Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:ccd22113cf035fd80e79931e92d42512613fca484ead45fcf7588f9bbf6b47ca","observation_id":"c5fb58c8-8053-4c99-8b9f-57460c3d77ab","resolution":{"observed_at":"2026-08-11T04:54:11.420931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.355853Z","title":null,"venue":null,"work_id":"3aef0365-d95d-4e44-afcf-e37f8fe9fff5","year":2020},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.425215Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:41809a697d920a6e1cc2ec33152e4b1059b806bbc6bf9f2d6c0b2b37b1ad0edd","observation_id":"519e255b-a2bb-47c2-bce4-d3a16c6e5792","resolution":{"observed_at":"2026-08-11T04:54:12.360505Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.429675Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.429675Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:e41087f9a654f6b11cd290ff03b42c593d76fc4655acc8785f84686b2ac56b5e","observation_id":"905f7f88-48b1-4e31-97ba-16d6581997b6","resolution":{"observed_at":"2026-08-11T04:54:11.429675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.436008Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.436008Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:3e4ef277558b334fdadcae15a0d8a287c257d0e5abc0aa15c6e3c80e32c982b3","observation_id":"202c9a42-7eab-46e8-be49-760ab8a40c75","resolution":{"observed_at":"2026-08-11T04:54:11.436008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.323431Z","title":null,"venue":null,"work_id":"29a5e5fd-8f1a-4340-bf93-b4777da31ba4","year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.440510Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:9d273e0a658cd7ff96c1854761a181413a25c2f28b80a6acb07151e39f99b6fe","observation_id":"0fe2b552-4225-4361-9263-5eb4049711ae","resolution":{"observed_at":"2026-08-11T04:54:12.327802Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.309331Z","title":"watching-eye","venue":null,"work_id":"92d02afb-628c-44eb-8fd1-3e1de4684cf6","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.444811Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:edc56b20913c4201e01f4832e94d9ae895e694a2a2eab936ded58fb33eb25904","observation_id":"99e92286-f0c9-43dc-9482-b0e52dc4ccfa","resolution":{"observed_at":"2026-08-11T04:54:12.314025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.449329Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.449329Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:a9dbfe13451499492e31b4eb8cbb2962847f3dd2981d23c13ecedb3ec7df665a","observation_id":"651bb8ee-cf47-4db4-af15-2c903017e323","resolution":{"observed_at":"2026-08-11T04:54:11.449329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-12T22:37:38.495989Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14110","snapshot_observed_at":"2026-08-11T04:54:11.453761Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.453761Z"},"links":{"cited_paper":"/paper/2411.14110","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:704ff70237895aae7285abc24f8f48dee07e0a84e3fc569fa8e7c445c075b693","observation_id":"9997a7d4-40b9-42ec-a01c-df6866c1fed5","resolution":{"observed_at":"2026-08-11T04:54:11.453761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-08-14T16:40:35.729198Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-11T04:54:11.458613Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.458613Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:8b2fcfbfde927ef67030734505c96b36fdf010f69b7a25b9066b5e838cce8081","observation_id":"3687e1fe-2fac-465f-97e4-6d0b7019bc7f","resolution":{"observed_at":"2026-08-11T04:54:11.458613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06984","last_updated":"2023-07-06T18:52:08Z","snapshot_observed_at":"2026-08-13T11:44:16.668662Z","submitted_at":"2023-05-11T17:14:33Z","title":"Evaluating Open-Domain Question Answering in the Era of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06984","snapshot_observed_at":"2026-08-11T04:54:11.463366Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.463366Z"},"links":{"cited_paper":"/paper/2305.06984","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:efbc8cacaeeddccb015f77687751a964abb9daaf9f4145f966ed99943d70f53a","observation_id":"82a01a12-e0d4-42d7-b1e4-1a9b9d443074","resolution":{"observed_at":"2026-08-11T04:54:11.463366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.467857Z","title":"u chemann, Maria Bannert, Daryna Dementieva, Frank Fischer, Urs Gasser, Georg Groh, Stephan G \\","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.467857Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:e04a372c1f0d0bebacba6f836d26e8c6308d618b01b3ddea6a8026c69f6297a4","observation_id":"5c2c8208-3234-48de-8e5d-bb055b7fe362","resolution":{"observed_at":"2026-08-11T04:54:11.467857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.472445Z","title":"Gonzalez, Hao Zhang, and Ion Stoica","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.472445Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:5e9b21e7422c20a1f8e3d84ad62809490650fd09ae26b770c757cd11d5d1d6ff","observation_id":"34b6a491-b6c2-420f-9e3b-8a2634fe2b3f","resolution":{"observed_at":"2026-08-11T04:54:11.472445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.476927Z","title":"u ttler, Mike Lewis, Wen-tau Yih, Tim Rockt \\","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.476927Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:12769aa9f91d5fcb3b4f46a2839487a665b0e1ea7c2e17845fd673452ea17550","observation_id":"8eb6749a-49f8-4337-9eba-fd72fbec4074","resolution":{"observed_at":"2026-08-11T04:54:11.476927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.267282Z","title":null,"venue":null,"work_id":"15b5f33a-c9ad-4fb9-aa44-8934d6ba6453","year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.481620Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:72dacbac3352dcbe22e0c4c15eb096360d06c919220f9be153cded6736c07fca","observation_id":"d7152ee9-e465-4045-850d-fe30821cef7f","resolution":{"observed_at":"2026-08-11T04:54:12.272187Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.252805Z","title":null,"venue":null,"work_id":"b280bf59-5d54-4c5e-a6d7-8c48aba1a51b","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.486268Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:88b6a556015a19f95dc4bdbd73b185ae09af5b92094edc6252690b4c9c310441","observation_id":"3f3d13c9-bc0a-47e2-8827-5bde15ad6e79","resolution":{"observed_at":"2026-08-11T04:54:12.257819Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.237086Z","title":null,"venue":null,"work_id":"41266d7d-7310-47cd-8acd-8c2f033a7c9b","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.490877Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:74e0b3c3828dbc59eec3863676c590bfbd19bd6fd0d775bfcb0318bb0bb56089","observation_id":"4f76df22-7d92-4dd3-a23c-1d8e4d081e2e","resolution":{"observed_at":"2026-08-11T04:54:12.242485Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-12T23:33:34.870971Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-11T04:54:11.495292Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.495292Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:9fe68a5872ff93d1a48ebb94df6d9c4b042791ae8252baf74a0adb7cefd81f15","observation_id":"c07f9467-a2f6-436f-a9ca-fd38c776d93e","resolution":{"observed_at":"2026-08-11T04:54:11.495292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03281","last_updated":"2023-08-07T03:52:59Z","snapshot_observed_at":"2026-08-14T21:56:20.223557Z","submitted_at":"2023-08-07T03:52:59Z","title":"Towards General Text Embeddings with Multi-stage Contrastive Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03281","snapshot_observed_at":"2026-08-11T04:54:11.499762Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.499762Z"},"links":{"cited_paper":"/paper/2308.03281","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:1884c5d0e5113eeee2d6838939db88d1eb0ebc313ed2201d94d713a9013932cf","observation_id":"ca5fce51-2d42-4806-a707-f4c8f194bc49","resolution":{"observed_at":"2026-08-11T04:54:11.499762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.06256","last_updated":"2024-10-13T19:27:20Z","snapshot_observed_at":"2026-08-13T10:15:10.982867Z","submitted_at":"2023-09-12T14:16:54Z","title":"Mitigating the Alignment Tax of RLHF","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.06256","snapshot_observed_at":"2026-08-11T04:54:11.504308Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.504308Z"},"links":{"cited_paper":"/paper/2309.06256","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:cd7642afee99d9698c7a9c427d829226af29a36bd8337a5088c6367f842d5617","observation_id":"f61c338c-fcaf-4fbe-a3d2-6370dee08ef4","resolution":{"observed_at":"2026-08-11T04:54:11.504308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-08-13T17:20:44.002518Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-11T04:54:11.509112Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.509112Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:fc05c3c4f25dab62b3521ee0fd93a3cc743b3952a8ff76b2c8f870521c5e1972","observation_id":"2fd36d31-39ca-49f3-802f-a74a0902a846","resolution":{"observed_at":"2026-08-11T04:54:11.509112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.513560Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.513560Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:151f22731609cffd9c2540894e7837bb1b83c6a13ffd6c15142e2f7a3f231d4a","observation_id":"c5f9247a-8846-4c36-86db-73882e8500b8","resolution":{"observed_at":"2026-08-11T04:54:11.513560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-08-15T05:02:49.183338Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-11T04:54:11.518118Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.518118Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:83069f710c8a7b29ea96435cb764644ee5d99dac2d1dc2f319037dfe519bbcb2","observation_id":"9823ced2-1101-48c1-8eff-77db802e7d05","resolution":{"observed_at":"2026-08-11T04:54:11.518118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.223156Z","title":null,"venue":null,"work_id":"5216dd04-4af6-466c-a477-e21ecea6a119","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.522520Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:0715de76d680acf755cb52dd82935c16f96a143f3c92a4920c658e19f2b04e0f","observation_id":"2d431647-4dc8-4937-a3f8-a14587cfcba5","resolution":{"observed_at":"2026-08-11T04:54:12.227384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-14T01:01:26.117384Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-11T04:54:11.526843Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.526843Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:acdb4b035172596f36d21cdb95569cb96d4d86a7e426a73aca1d4479ead51320","observation_id":"3f01cb3c-421b-4275-95c6-d04ec4d8190d","resolution":{"observed_at":"2026-08-11T04:54:11.526843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.208437Z","title":null,"venue":null,"work_id":"0cc03696-485c-4c94-83a1-8bed0feec1d1","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.531339Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:fa61b054551e8a8cb753196c2ba202689a9e97c55298c57970f5c8cbf9e435c8","observation_id":"76d0c00a-3243-498d-8d79-fc37eb1fd182","resolution":{"observed_at":"2026-08-11T04:54:12.212958Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.193567Z","title":null,"venue":null,"work_id":"17c5df51-6b3a-419f-86a6-eed1bd30de74","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.535701Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:1784e6c344c2b50ceb8a4ba7bc37fe4cd8af16e9e000c2578c635cc3cf23f522","observation_id":"6187dc30-9520-4a6b-90bf-414df76356e8","resolution":{"observed_at":"2026-08-11T04:54:12.198094Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.179382Z","title":null,"venue":null,"work_id":"c94c2478-ca73-4ba1-ac23-cdbd6b6c6bed","year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.540077Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:a4e5ea0bac1f04e670094b5c2552c28bd50832a3fa5ad753e8dab6c5dc041860","observation_id":"ffc6b8e3-105f-4107-9e66-50c5372e79c8","resolution":{"observed_at":"2026-08-11T04:54:12.183898Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.544848Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.544848Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:4c2e95f15bd8ae76d3b1b99d8bf8eca85c31b1371d6af9061ad6221d86c1549e","observation_id":"aa13fc8f-019f-47b1-949d-93bb5b236fdc","resolution":{"observed_at":"2026-08-11T04:54:11.544848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.155971Z","title":null,"venue":null,"work_id":"7932e767-9c97-4a0a-a913-246fa15709c7","year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.549514Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:3c53c5cbe64dd9da79d5041d4d73a588204713dc3f563cdbb6b7f057a799039e","observation_id":"a335467a-76a6-4c83-9266-b2b92564aa62","resolution":{"observed_at":"2026-08-11T04:54:12.160525Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-08-13T13:39:31.035855Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-08-11T04:54:11.553862Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.553862Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:f72bce175d6373271885ec960a82148f5379ba0f5e4c6b12d8b5d841ec719ad1","observation_id":"8bdd049a-c809-413f-88b8-9116081a2156","resolution":{"observed_at":"2026-08-11T04:54:11.553862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:12.141027Z","title":null,"venue":null,"work_id":"9f2ab962-a514-4ea1-a2e1-b2106610cb35","year":2021},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.558763Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:b6c5998b63474ac88449131eb0e5cdc1b429a8007a64e190e2999fd7d697be55","observation_id":"5d532b7e-bcd3-4796-972c-63d3455c7742","resolution":{"observed_at":"2026-08-11T04:54:12.146096Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.562950Z","title":"Logan IV, Eric Wallace, and Sameer Singh","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.562950Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:13e23f4049df17be8c9293f05f67a05b4013af3ca7f815be8102cc9a4e2f9bbc","observation_id":"68da5e44-7082-4e6f-8ed2-462861a1d240","resolution":{"observed_at":"2026-08-11T04:54:11.562950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.567362Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.567362Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:497ddb24caf72cf6d5cb27b2a1eb69cdb5ae95e3a28748b2dcabc696534aefc1","observation_id":"aae9fb0f-0c63-4e7b-9668-c2f29888aef0","resolution":{"observed_at":"2026-08-11T04:54:11.567362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.06470","last_updated":"2024-07-17T06:53:58Z","snapshot_observed_at":"2026-08-14T03:28:07.899049Z","submitted_at":"2022-12-13T10:41:12Z","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.06470","snapshot_observed_at":"2026-08-11T04:54:11.571702Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.571702Z"},"links":{"cited_paper":"/paper/2212.06470","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:4447dfd512c6feb5d2e2edf95a50a1f5ffb6bad9821fefeb13c740673f936654","observation_id":"32c9fd31-f1d7-4e4e-867c-ba38f28b8ff6","resolution":{"observed_at":"2026-08-11T04:54:11.571702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.576253Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.576253Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:e4b2302b6a3bb62b79545dd032ad4d3fec6a8c6e406f31699aab48a3b081046c","observation_id":"3623e8e9-c56c-4ecb-ae2a-5b3a48f5e6b0","resolution":{"observed_at":"2026-08-11T04:54:11.576253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.03533","last_updated":"2024-02-22T06:21:51Z","snapshot_observed_at":"2026-07-06T14:27:46.217000Z","submitted_at":"2022-12-07T09:25:54Z","title":"Text Embeddings by Weakly-Supervised Contrastive Pre-training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.03533","snapshot_observed_at":"2026-08-11T04:54:11.580876Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.580876Z"},"links":{"cited_paper":"/paper/2212.03533","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:604d606c3bdaf5c57e159b1efa0e93cbe8400ba79edc1ed43d47e9f10e56d99a","observation_id":"466b4d6d-e3fb-4c49-9723-eedb3591a974","resolution":{"observed_at":"2026-08-11T04:54:11.580876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19487","last_updated":"2025-02-25T09:06:14Z","snapshot_observed_at":"2026-08-12T22:35:21.863237Z","submitted_at":"2024-09-28T23:59:46Z","title":"HealthQ: Unveiling Questioning Capabilities of LLM Chains in Healthcare Conversations","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19487","snapshot_observed_at":"2026-08-11T04:54:11.585685Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.585685Z"},"links":{"cited_paper":"/paper/2409.19487","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:0bdd1e7c732f2b4cf5e54477cf3d7e1e122e703a5a277e342270d300be81e107","observation_id":"c566b0b8-700a-48b3-a735-3d42b46fc878","resolution":{"observed_at":"2026-08-11T04:54:11.585685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.07682","last_updated":"2022-10-26T05:06:24Z","snapshot_observed_at":"2026-08-02T15:56:35.249569Z","submitted_at":"2022-06-15T17:32:01Z","title":"Emergent Abilities of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.07682","snapshot_observed_at":"2026-08-11T04:54:11.590423Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.590423Z"},"links":{"cited_paper":"/paper/2206.07682","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:db698112565f2357f7a8cd04e5cf6ba2ae12f73e4a9ff113d0cd82aae177932b","observation_id":"5d791cea-3624-49ba-a4ca-890554e05192","resolution":{"observed_at":"2026-08-11T04:54:11.590423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1911.05268","last_updated":"2019-11-15T23:07:01Z","snapshot_observed_at":"2026-08-13T05:53:29.834753Z","submitted_at":"2019-11-13T03:09:40Z","title":"Adversarial Examples in Modern Machine Learning: A Review","version":2},"cited_work":{"arxiv_id":"1911.05268","doi":null,"metadata_source":"pith","pith_arxiv_id":"1911.05268","snapshot_observed_at":"2026-08-11T04:54:11.812992Z","title":"Adversarial Examples in Modern Machine Learning: A Review","venue":"cs.LG","work_id":"2dfeeb4b-4cbf-4961-b849-b5dcc2f050e6","year":2019},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.594890Z"},"links":{"cited_paper":"/paper/1911.05268","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:a5be900721747596c14e332eed0d95ba3c905d3e06e551e85ff3f39e8bf046ee","observation_id":"225abb94-ee29-47b8-bfb3-d4c1230f68d2","resolution":{"observed_at":"2026-08-11T04:54:11.820000Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-08-13T04:07:55.529174Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-11T04:54:11.599671Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.599671Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:ca940e7777982e9301b6bc3c0fad22468a03c0114d63659dfa64bdf92cce0238","observation_id":"93552101-d2fc-4bc9-875a-748569923ad9","resolution":{"observed_at":"2026-08-11T04:54:11.599671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07597","last_updated":"2024-09-24T03:01:25Z","snapshot_observed_at":"2026-08-14T00:16:39.034955Z","submitted_at":"2023-09-14T10:57:50Z","title":"C-Pack: Packed Resources For General Chinese Embeddings","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07597","snapshot_observed_at":"2026-08-11T04:54:11.604258Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.604258Z"},"links":{"cited_paper":"/paper/2309.07597","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:d4af6058a1831b9287c0e8d9ec7a225f47df70573405af9170fec4921748ef0f","observation_id":"1477e477-17a8-4058-b909-1181819e6295","resolution":{"observed_at":"2026-08-11T04:54:11.604258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.608934Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.608934Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:6a9bd34bb7c10736e4e6c6f76777620a7c6c50759d31fa1311cec4dde6434879","observation_id":"41908256-4517-4d14-9d6a-6c3ca1cea570","resolution":{"observed_at":"2026-08-11T04:54:11.608934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04959","last_updated":"2023-10-08T01:16:55Z","snapshot_observed_at":"2026-08-13T05:54:45.121381Z","submitted_at":"2023-10-08T01:16:55Z","title":"Towards Better Chain-of-Thought Prompting Strategies: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04959","snapshot_observed_at":"2026-08-11T04:54:11.613254Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.613254Z"},"links":{"cited_paper":"/paper/2310.04959","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:0cc832180c1a5bf3601c86e5d56043aa5c2316b4a18efac73ee5fdc2bcb9583b","observation_id":"7c545d0a-66f1-4201-a30c-d22a78467826","resolution":{"observed_at":"2026-08-11T04:54:11.613254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:54:11.618234Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.618234Z"},"links":{"citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:01e3394977b92304989503d516a8f01f8ada8c0846d8c9ed9e152a563e426152","observation_id":"db62e02c-1fc8-4357-821e-ade150bc3fb5","resolution":{"observed_at":"2026-08-11T04:54:11.618234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.01219","last_updated":"2025-09-14T09:34:46Z","snapshot_observed_at":"2026-07-06T16:13:46.112815Z","submitted_at":"2023-09-03T16:56:48Z","title":"Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.01219","snapshot_observed_at":"2026-08-11T04:54:11.622757Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.622757Z"},"links":{"cited_paper":"/paper/2309.01219","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:3ec3c6b43fb8a5814b18643ef3a703aa58a022b37a52869e17a348051647a784","observation_id":"be45df20-56c1-47ad-840c-2a2843494988","resolution":{"observed_at":"2026-08-11T04:54:11.622757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19473","last_updated":"2024-06-21T08:26:36Z","snapshot_observed_at":"2026-08-13T05:27:55.126585Z","submitted_at":"2024-02-29T18:59:01Z","title":"Retrieval-Augmented Generation for AI-Generated Content: A Survey","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19473","snapshot_observed_at":"2026-08-11T04:54:11.627434Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.627434Z"},"links":{"cited_paper":"/paper/2402.19473","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:319b5db293f1840b19919db0db6fcec9bdf078236ab1412304d677229c806ab0","observation_id":"a2f44f95-a3b4-4a24-9b9b-50d6d210c0c0","resolution":{"observed_at":"2026-08-11T04:54:11.627434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-04T19:12:49.508911Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.10102","snapshot_observed_at":"2026-08-11T04:54:11.632118Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.632118Z"},"links":{"cited_paper":"/paper/2409.10102","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:9e764558b2a3550db3b7cc6e2807e3eab39c74866d7493e6be4dd86797800087","observation_id":"9986ffdd-4486-4542-baf2-d1d551b94e16","resolution":{"observed_at":"2026-08-11T04:54:11.632118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.04675","last_updated":"2024-06-14T11:40:52Z","snapshot_observed_at":"2026-08-13T12:05:36.251539Z","submitted_at":"2023-04-10T15:51:30Z","title":"Multilingual Machine Translation with Large Language Models: Empirical Results and Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.04675","snapshot_observed_at":"2026-08-11T04:54:11.636927Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.636927Z"},"links":{"cited_paper":"/paper/2304.04675","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:8c6567c4c0abbcb6ebf9778a5235aa6abeb896b3421ae9304257ce4e51bdd81d","observation_id":"b46c353c-9fd5-4f31-bbcd-03d956a4651d","resolution":{"observed_at":"2026-08-11T04:54:11.636927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","latest_version":2,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":69,"verified_exact":1,"verified_fuzzy":1},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 5 inbound Pith citation observations for arXiv:2412.18295."}