{"as_of":"2026-08-09T13:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:74533d135fb85ad290fa5703ce9598a0f856cee5ba14495e1311fe40d83b1122","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:06:01.723487Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:39:07.088945Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-12T00:01:16.554293Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-08-05T10:39:07.088945Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-08T03:54:26.940042Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":174,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:07.088945Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:943825a32c68597c4e8a2c834f594a53754a8da2c8ffb13b93fc423bb5200077","observation_id":"72c408c2-aaed-4bde-8547-0bd0804a7583","resolution":{"observed_at":"2026-08-05T10:39:07.088945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":"2505.16367","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Chain-of-thought poison- ing attacks against r1-based retrieval-augmented genera- tion systems.arXiv preprint arXiv:2505.16367","venue":null,"work_id":"2aafbf8c-0a12-4393-a68c-c74612a9e246","year":2025},"citing_paper":{"arxiv_id":"2604.25247","last_updated":"2026-04-28T05:52:57Z","snapshot_observed_at":"2026-07-06T23:11:07.254460Z","submitted_at":"2026-04-28T05:52:57Z","title":"R-CoT: A Reasoning-Layer Watermark via Redundant Chain-of-Thought in Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-07T15:54:22.189376Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2604.25247"},"observation_digest":"sha256:5aa2b2ab3746ca59e2586aef1db30f55c6a4d48fca70ed4ddfdbc15b6479c0b0","observation_id":"6ec2ceac-ab58-4b21-8e2f-2ae4bdb76475","resolution":{"observed_at":"2026-05-12T00:01:16.557240Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":165,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:cf0c385b6d924db61cab37bd598999f3852bb58222b2835a693fb4036324dc3f","observation_id":"21fc57e3-cd92-4242-b30a-126d1f858baa","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.16367/citation-record","integrity":"/paper/2505.16367/integrity","json":"/paper/2505.16367/citation-record.json","paper":"/paper/2505.16367"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.906627Z","title":null,"venue":null,"work_id":"165525de-41d7-4a42-8bac-1523fc7066b9","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:58.967224Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:bec196e4226fddad474bee20c0653ef02e4358112e88d8e911c41eeb602bd5fa","observation_id":"0cd33fc5-fd63-413e-8871-ca78e1bf4acb","resolution":{"observed_at":"2026-08-07T15:06:04.945458Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.727507Z","title":null,"venue":null,"work_id":"b78f4042-14e8-4652-968f-ee1e7fd6cb0b","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.056606Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:ea7754b311943b7bcc20dfe86be6e014cc88c0442e25532a649cd18f13e9c4e0","observation_id":"192ae9ad-ea0b-4d20-b229-956fb10b5962","resolution":{"observed_at":"2026-08-07T15:06:04.820017Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18141","last_updated":"2025-03-10T09:49:31Z","snapshot_observed_at":"2026-07-06T19:38:39.889993Z","submitted_at":"2024-10-22T11:23:11Z","title":"SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18141","snapshot_observed_at":"2026-08-07T15:05:59.144675Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.144675Z"},"links":{"cited_paper":"/paper/2410.18141","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:8928f6a778dab933646f63e767557f77d4d6842b866ecb90249101bc62fa4520","observation_id":"48bcc0fa-aa76-43b6-baa8-27c2fe91f01b","resolution":{"observed_at":"2026-08-07T15:05:59.144675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.607132Z","title":null,"venue":null,"work_id":"b9e88eeb-5a2d-4d3e-9eee-82e61840a1f3","year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.233018Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:a015365edf9457d77a93640b5c82076668298aae8286ad10df1dbdf55de293be","observation_id":"180bc1d0-c708-4f3f-8f8e-ad3d05a644aa","resolution":{"observed_at":"2026-08-07T15:06:04.675384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-07T15:05:59.394365Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.394365Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:5dc0247cd4bbc5b5d8cf6076a9d6abddb71a41ca65e4edb73096b735efbec2a1","observation_id":"ce927490-5733-4e4d-93c0-a66490992792","resolution":{"observed_at":"2026-08-07T15:05:59.394365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.01142","last_updated":"2025-06-08T17:17:01Z","snapshot_observed_at":"2026-07-06T20:30:08.210991Z","submitted_at":"2025-02-03T08:22:45Z","title":"DeepRAG: Thinking to Retrieve Step by Step for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01142","snapshot_observed_at":"2026-08-07T15:05:59.548315Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.548315Z"},"links":{"cited_paper":"/paper/2502.01142","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:7b47ceceb1c03db6cc11793b5af536009531b65ca94b223d3bfa8b7a2e4a5585","observation_id":"1ce4ef23-5c31-46d0-9eca-a6e5e9b5247a","resolution":{"observed_at":"2026-08-07T15:05:59.548315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T15:05:59.685090Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.685090Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:bd01e01610d1dcb6a1ed7c4636ff364e7d083c96f7965e24eed661c9d8dee68d","observation_id":"3444797e-fc21-4869-b8e6-6103644a509d","resolution":{"observed_at":"2026-08-07T15:05:59.685090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:59.799523Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.799523Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:b2873fb2545d779259db0e9ea0d183704c3db51427e724c3200522712dcdb683","observation_id":"e8553720-b96e-44d6-a4dc-df4139c8d5f0","resolution":{"observed_at":"2026-08-07T15:05:59.799523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.384776Z","title":null,"venue":null,"work_id":"32c65359-9a78-48ae-802d-f20f96028545","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.928463Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:dd0e2e7ee4e1c7b3e35eeb0ebff196aa65a5bd9987eab473f1582c49047a69e7","observation_id":"6ea09b43-da77-4211-8172-04ac064234eb","resolution":{"observed_at":"2026-08-07T15:06:04.503314Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.287533Z","title":null,"venue":null,"work_id":"6d34329c-b9cb-4bef-8faa-d2a85f91ce12","year":2021},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.022349Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:bbdf4969c8e75e17e8147d790cf1fb0642ceb09967022c0123390f6a4fe59e57","observation_id":"384f99b1-a769-4a90-a781-2b1fd98b969b","resolution":{"observed_at":"2026-08-07T15:06:04.328668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.03299","last_updated":"2022-11-16T16:38:18Z","snapshot_observed_at":"2026-08-05T00:57:17.859949Z","submitted_at":"2022-08-05T17:39:22Z","title":"Atlas: Few-shot Learning with Retrieval Augmented Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.03299","snapshot_observed_at":"2026-08-07T15:06:00.112164Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.112164Z"},"links":{"cited_paper":"/paper/2208.03299","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:d5ba635c3e86c08440a2eb57d11b0dc69bc51dbd98feb9aaeeeac66159fa4907","observation_id":"e4a61431-e6d1-4db3-9036-71621e10bbad","resolution":{"observed_at":"2026-08-07T15:06:00.112164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:00.173553Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.173553Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:04bb0a96ca050267a89b2874babcdf2c5758daf829d29fc0ac7a34a144c117e5","observation_id":"675f3265-373f-4b75-b5c3-8407c2822da2","resolution":{"observed_at":"2026-08-07T15:06:00.173553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.108033Z","title":null,"venue":null,"work_id":"e6ed783e-1675-4128-912f-dbb32b215750","year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.230594Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:a75be83a9b59abfaa5c9722f7f675dfa77b4501819dbc2c32ddd9ce8fd3afc3c","observation_id":"a2721451-e822-471c-871d-03d4454bbb76","resolution":{"observed_at":"2026-08-07T15:06:04.199786Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:00.344119Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.344119Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:2048f9d1d4ac8822369b3e5666599e182d8ea3c52bd475407fd8b43970a18d20","observation_id":"8a8f6b29-ab54-4f18-9fac-c5a4b6243b7a","resolution":{"observed_at":"2026-08-07T15:06:00.344119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.965141Z","title":null,"venue":null,"work_id":"ece3d646-67fd-403b-be4b-b4ad389b0dda","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.430765Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:1b4a3e1b30e3d0a73fd704d352b60b8d21f37919e1a667d462e59937cf5f8d1c","observation_id":"a5a4b398-f36f-4308-a2e0-21f7f0873373","resolution":{"observed_at":"2026-08-07T15:06:04.039110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.821404Z","title":null,"venue":null,"work_id":"4fc3c1ff-0958-4c95-8bd2-a68e584472e3","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.493967Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:5e769328311371a990261cbf74f83013ffcbe5e83ee401f54308b51793ab43f9","observation_id":"8862e341-3a56-443c-ad09-b3de71f3d453","resolution":{"observed_at":"2026-08-07T15:06:03.889266Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.686483Z","title":null,"venue":null,"work_id":"c3ebdc28-efe1-4f35-8546-4f3abff5ecf2","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.556091Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:90883f133ce8d41667e690dab1c4682e8b3338d569809d9579029f394216569c","observation_id":"3800296c-2901-40bc-a7ef-94f085465f61","resolution":{"observed_at":"2026-08-07T15:06:03.746037Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.536001Z","title":null,"venue":null,"work_id":"267dffef-ee69-4c38-8d92-c5dee4580c2a","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.663950Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:afa4b6180d256e61507db7273bd290c055a29064e885ec34e41cc022fe8da42b","observation_id":"8b0c747e-a8f0-417b-82a9-41b7b4e721a8","resolution":{"observed_at":"2026-08-07T15:06:03.607299Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.379492Z","title":null,"venue":null,"work_id":"c0ddbc59-8d46-4f99-8dc2-87c4716be057","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.736411Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:91d2ed00966e730145843d2cfb23d29fc043561433446557bc3ed2460e60ca12","observation_id":"e16ce8ec-d0ff-4153-b014-691d03f9b2d3","resolution":{"observed_at":"2026-08-07T15:06:03.425008Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.217707Z","title":null,"venue":null,"work_id":"3241be03-ed6d-4a46-9e72-64fdfaef9e50","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.789736Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:5a67f7d7a8a4fbd82d554a772658b247fb043ad211adeb9096804eca78abc0dc","observation_id":"91c5538d-268d-4681-b483-ca4b1c7ad5b5","resolution":{"observed_at":"2026-08-07T15:06:03.299578Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.027070Z","title":null,"venue":null,"work_id":"5066688b-0d32-4828-8d91-fcd323a235a0","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.892416Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:a4ddc1bef98a03c783f02bd440d11a8705d3d99ad8f137654795a94802ecbedd","observation_id":"dd4de5d6-56a7-4d2d-bfe0-56e046249ea2","resolution":{"observed_at":"2026-08-07T15:06:03.093892Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.06992","last_updated":"2024-08-16T08:18:19Z","snapshot_observed_at":"2026-08-09T06:06:40.708347Z","submitted_at":"2024-07-09T16:07:01Z","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.06992","snapshot_observed_at":"2026-08-07T15:06:00.965871Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.965871Z"},"links":{"cited_paper":"/paper/2407.06992","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:b47a5127facf0490b2d064934d9c2c8a1f4d048c53c1eac72feec791533a6415","observation_id":"a073e4ab-e117-4eca-80e1-be09aef864c6","resolution":{"observed_at":"2026-08-07T15:06:00.965871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.045920Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.045920Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:49a516ad23718e52d81676ea0f9aeb2edbd04c7f271e178bb7cf71408847fcb8","observation_id":"649a7435-1b39-4dac-8017-73181122e19b","resolution":{"observed_at":"2026-08-07T15:06:01.045920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.097544Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.097544Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:138beaf77d366db77ba06ac1a8ae8929e802a68f04fc3eaa5159a7a30b18bca7","observation_id":"f094cbc6-61df-4762-877a-8c3b6c67ddfd","resolution":{"observed_at":"2026-08-07T15:06:01.097544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.827602Z","title":null,"venue":null,"work_id":"396c2008-da32-47a5-a894-93ea7c6cdc61","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.148770Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:b9cbe6c5292f884a0187714fac57066fe53c339dbdef819d76a030a337106dd2","observation_id":"06492b56-c355-4086-a496-9313bf09673f","resolution":{"observed_at":"2026-08-07T15:06:02.935697Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.561371Z","title":null,"venue":null,"work_id":"33079108-60da-4f3a-ae98-4036dd8080e1","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.198412Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:6e9c945907ee53892daf11432bde6df7cba41f9e585c6371f114dbbf76622153","observation_id":"167cfa9a-f4c4-4e27-968b-bf0d875fdea2","resolution":{"observed_at":"2026-08-07T15:06:02.693559Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.245591Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.245591Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:568548e6fbedd351b243f83168db8b2d3557acab23c60bb6b2a852e331976fa8","observation_id":"e86c2ffb-66a6-43fb-9b2f-12f9fca48364","resolution":{"observed_at":"2026-08-07T15:06:01.245591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01796","last_updated":"2025-05-23T04:38:57Z","snapshot_observed_at":"2026-07-06T18:39:56.856612Z","submitted_at":"2024-07-01T20:47:47Z","title":"Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01796","snapshot_observed_at":"2026-08-07T15:06:01.290122Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.290122Z"},"links":{"cited_paper":"/paper/2407.01796","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:4c990383e6c56a90a31097cf1c088c42575fe64d3efc0656d9af07d09aec64c1","observation_id":"aa2c4216-658b-4fe3-a05e-9c8c72636e4d","resolution":{"observed_at":"2026-08-07T15:06:01.290122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-07T15:06:01.329799Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.329799Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:2e710caef6a4255adc001a79808bad18746afe3662e48652dd582a4a8b323730","observation_id":"a72d2c34-d6ab-4e69-86dd-8cb8febe9ba7","resolution":{"observed_at":"2026-08-07T15:06:01.329799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.198680Z","title":null,"venue":null,"work_id":"57fcfe56-db35-42fd-a195-9ca116b2a53b","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.395211Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:38e8b3da5fd4394e784eee4c549c9c9292772dee6a83415f239ff065e28d9a34","observation_id":"fe7a0973-e50e-477f-b163-3076f30f343d","resolution":{"observed_at":"2026-08-07T15:06:02.371910Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22832","last_updated":"2024-10-30T09:15:51Z","snapshot_observed_at":"2026-08-08T06:11:31.040933Z","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22832","snapshot_observed_at":"2026-08-07T15:06:01.505577Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.505577Z"},"links":{"cited_paper":"/paper/2410.22832","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:c306e052c14356c7d2537036e6b12db56d5ab7084632bcc409b9cf92b9a8898e","observation_id":"72a4c8a2-d4b4-43e3-8418-316624126672","resolution":{"observed_at":"2026-08-07T15:06:01.505577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.960086Z","title":null,"venue":null,"work_id":"12c679b1-9fd8-42c3-8e88-5df04649d838","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.610972Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:cc2f4b3727b4d31418756fd06a70d32d63c308d360438b543788eae77f38186d","observation_id":"eb5ac088-dc01-4053-b769-9815fd6a2425","resolution":{"observed_at":"2026-08-07T15:06:02.036668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:06:01.723487Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.723487Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:5df8cc17ed31c6dd7c38c8c86297cc36968a02a9df93d2d55549b39644e09869","observation_id":"3429a0c7-ebfc-42f1-a537-070773e75f4b","resolution":{"observed_at":"2026-08-07T15:06:01.723487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-07-06T18:03:33.406287Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-07T15:05:59.068125Z","title":"arXiv preprint arXiv:2404.13948 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.068125Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:98f05d61954cad7d9cc6af779e7482f29a765e5cf9f64893b9b45e9ed6517328","observation_id":"f000a477-8361-4580-beea-f77337147880","resolution":{"observed_at":"2026-08-07T15:05:59.068125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","latest_version":1,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-09T00:00:10.605984Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 3 inbound Pith citation observations for arXiv:2505.16367."}