{"as_of":"2026-08-09T21:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c6031140e99158cadbea39902ad60d82c7adad62a95a2c88de6970e267d79e88","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:36:35.536497Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:24:26.679440Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-05T16:24:27.121271Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"cited_work":{"arxiv_id":"2505.18583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.18583","snapshot_observed_at":"2026-08-05T16:24:27.121271Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","venue":"cs.IR","work_id":"05bf8ca8-fa23-4d08-98bb-3b89a7bec0c1","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.679440Z"},"links":{"cited_paper":"/paper/2505.18583","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7ddba2a6fbc405c1603038f4a5c9561519717944df655e653831c2165f499a71","observation_id":"af7c86e6-7fca-4f82-973f-30bd4af86a6c","resolution":{"observed_at":"2026-08-05T16:24:27.124601Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.18583/citation-record","integrity":"/paper/2505.18583/integrity","json":"/paper/2505.18583/citation-record.json","paper":"/paper/2505.18583"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.707316Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.707316Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3ba73a0d3486886e06f0c1d57ff89f16ec861c8bf0f94f6baf6efff8359cea50","observation_id":"4f689c34-22d7-4bc8-847a-5f100381fa00","resolution":{"observed_at":"2026-08-07T14:36:32.707316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.759374Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.759374Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b0510564e49862d37f79742532e9891f826674ddc3e5864c6737ea821f8b904c","observation_id":"a7f595db-0cc8-4db6-93c0-86ba19e0d5d2","resolution":{"observed_at":"2026-08-07T14:36:32.759374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-07T14:36:32.811230Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.811230Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:6b7194afbc20d6e65915d949b404ef47edd2eb49ae85257d361772c0962aa69d","observation_id":"77fcf49e-c402-476e-92a4-7d0cb4071d75","resolution":{"observed_at":"2026-08-07T14:36:32.811230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.851612Z","title":"Choquette-Choo , Milad Nasr, Cristina Nita-Rotaru , and Alina Oprea","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.851612Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:02111ad36ea820b2041f3cf716c48576f12e5ed85f13b21d874f16db2e1fa470","observation_id":"cfc390c2-d69b-4ff7-82c1-4e89cc1c12d4","resolution":{"observed_at":"2026-08-07T14:36:32.851612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.798","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.839070Z","title":null,"venue":null,"work_id":"33ab6d83-2efc-4b9d-99a6-6d1bfbfe0b3e","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.901871Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8c3f569ecc505c310921105f9f2ec6a19bb2fbec27985980203d9040b26edf74","observation_id":"33b8f884-8f6c-4483-adec-bd6a28310652","resolution":{"observed_at":"2026-08-07T14:36:35.902379Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.13757","last_updated":"2024-07-18T17:55:55Z","snapshot_observed_at":"2026-07-06T18:48:42.015848Z","submitted_at":"2024-07-18T17:55:55Z","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.13757","snapshot_observed_at":"2026-08-07T14:36:32.957279Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.957279Z"},"links":{"cited_paper":"/paper/2407.13757","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:d4a1ddd1f2ed59be8a15741f66213f5d54f306baff4134acb3476a2e8076c293","observation_id":"d7e087c8-e0f5-4861-9069-6e7a7d7b40b2","resolution":{"observed_at":"2026-08-07T14:36:32.957279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.017166Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.017166Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:59acab6a8571d842c942ba57d3e051e586bc3aa93b172b8ca04aa8e77cb66731","observation_id":"cdfb7ba9-ca29-41b2-bfbb-eea4742a6d6c","resolution":{"observed_at":"2026-08-07T14:36:33.017166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.071212Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.071212Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7d05ef577b1c7f6cf5adab3eb5b3f6ced7f9a93845ca6af27683095d3448abc3","observation_id":"54ae42cc-4d2d-40a8-a1d6-421bc9d2bfab","resolution":{"observed_at":"2026-08-07T14:36:33.071212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06211","last_updated":"2024-06-17T08:56:38Z","snapshot_observed_at":"2026-07-06T18:12:26.233112Z","submitted_at":"2024-05-10T02:48:45Z","title":"A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.06211","snapshot_observed_at":"2026-08-07T14:36:33.123994Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.123994Z"},"links":{"cited_paper":"/paper/2405.06211","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7f61c1e363e73c4d35f2ab72e3f2dc44ca1d4f1efeba38da88046966aba5b1a4","observation_id":"369c166c-12c2-45cc-b3d3-8eaa406420e8","resolution":{"observed_at":"2026-08-07T14:36:33.123994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18141","last_updated":"2025-03-10T09:49:31Z","snapshot_observed_at":"2026-07-06T19:38:39.889993Z","submitted_at":"2024-10-22T11:23:11Z","title":"SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18141","snapshot_observed_at":"2026-08-07T14:36:33.198505Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.198505Z"},"links":{"cited_paper":"/paper/2410.18141","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:bee090b7001fe28ba33cbcad967a1d68a231e59fde435da40b25a588d16b7488","observation_id":"da198664-b929-4889-b955-bcf42bf09e65","resolution":{"observed_at":"2026-08-07T14:36:33.198505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.249379Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.249379Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:e3a800fcd3434fe06d2da4cb2867b870830d107e7762bb124aa22b3aa202af8a","observation_id":"e3a2c021-6502-4f94-b9f3-088cae4b1630","resolution":{"observed_at":"2026-08-07T14:36:33.249379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.05765","last_updated":"2022-03-11T05:47:45Z","snapshot_observed_at":"2026-08-05T09:47:00.921624Z","submitted_at":"2022-03-11T05:47:45Z","title":"Tevatron: An Efficient and Flexible Toolkit for Dense Retrieval","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.05765","snapshot_observed_at":"2026-08-07T14:36:33.312428Z","title":"Lin, and Jamie Callan","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.312428Z"},"links":{"cited_paper":"/paper/2203.05765","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:d8568af11a398aa93603b9b3125761639b7b098d0eace6626ce86f271fc80a2d","observation_id":"ec0cd476-5f88-4e77-8989-bea8ec5b9226","resolution":{"observed_at":"2026-08-07T14:36:33.312428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-07T14:36:33.368306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.368306Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:47b1f19e958950d406c100759c900fa7fc4c8ba631185db2a9af76941ad906f8","observation_id":"57e30868-0a42-4af5-9be2-25ee4546b8ec","resolution":{"observed_at":"2026-08-07T14:36:33.368306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T14:36:33.439988Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.439988Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3f9fc6a3c42e8fbaff977d7c53113ec4a2ec774e57857c00b97622626fce13ac","observation_id":"f36c0f3d-df56-40a7-9de9-c74fa3a46d06","resolution":{"observed_at":"2026-08-07T14:36:33.439988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.497637Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.497637Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:e3aa2acee28e77cd8c27a9c4c19fd3e91dd9863579ff489108ca8214865fa781","observation_id":"e7232a15-5ca3-4050-85d0-e5b9cbab749d","resolution":{"observed_at":"2026-08-07T14:36:33.497637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.543068Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.543068Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:c5149d1ecf9f5a7f91b0e8bc6907577fa63154cc0464564378a89964d8ca8234","observation_id":"f7dfc848-c684-40fe-82c7-99e9ca0eaf6b","resolution":{"observed_at":"2026-08-07T14:36:33.543068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-07T14:36:33.599203Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.599203Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:38b4e9e7c69cb9effc65ec53a8199bf54f2296a9db47965170705aa6a859f864","observation_id":"6dc2dde5-1603-4bd6-95a0-9e4eccd4565f","resolution":{"observed_at":"2026-08-07T14:36:33.599203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.638453Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.638453Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:d9d8d20e4f6484533c6d913674a9dc36368ac8f00d96d0933e3ac98c89d9e0b2","observation_id":"a574f3d4-cc7d-43eb-ac39-a254cab3be7c","resolution":{"observed_at":"2026-08-07T14:36:33.638453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.690092Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.690092Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b01ccd756098991c3524e0324fe2aa86595f789f1bb587d44e01ee626b4ca872","observation_id":"c9c2b61c-c6c8-4ece-bd7d-d5f8f3950f70","resolution":{"observed_at":"2026-08-07T14:36:33.690092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.737839Z","title":"u ttler, Mike Lewis, Wen-tau Yih, Tim Rockt\\","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.737839Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8456d4745a96768e9be52c41bf09d3bc754a5008d81df71996ff64699c721a38","observation_id":"5957b4a4-9e34-455a-9b16-8c81be1c80f0","resolution":{"observed_at":"2026-08-07T14:36:33.737839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.785408Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.785408Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:d9ffa88ec7a0ed4f830ff2efbced1e6c20c7cb1055b4e8de5904d912cc452398","observation_id":"f0ac6ec0-f090-4de3-bf68-f35301a404b7","resolution":{"observed_at":"2026-08-07T14:36:33.785408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:39.424159Z","title":null,"venue":null,"work_id":"c700258e-93cc-4721-b2f8-654163006801","year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.845471Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7f65144093129f6ddd4b39c7d7041375986c63a0611882726e7fd9d3afe93a49","observation_id":"e38666c0-571b-4ef0-be12-a183e228c488","resolution":{"observed_at":"2026-08-07T14:36:39.578222Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T14:36:33.957906Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.957906Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:279d6fce57b511579984b7e515e13d998e42ad958bf81836b4709ac0e30e7b94","observation_id":"3079d3eb-1484-41d6-b770-ef2f77812de0","resolution":{"observed_at":"2026-08-07T14:36:33.957906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:39.119063Z","title":null,"venue":null,"work_id":"90169c96-22a0-4fb7-b12d-907964f136cd","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.998382Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8a6b25df44c2074872f33ed84b98d8f69e9a1e2079b9886fa18a36b638da8c3c","observation_id":"a3704325-7c6c-4536-b00a-8a3ad139c7e6","resolution":{"observed_at":"2026-08-07T14:36:39.272673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.904415Z","title":null,"venue":null,"work_id":"e28242e0-8e6b-4872-b7b8-57dfdf54c353","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.026973Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7965c77663bfa5f68ac07d4a75b0df72e4fb29787331df340ffdfbe55b8c411a","observation_id":"6f18bdab-2e69-477a-afbd-14d795113959","resolution":{"observed_at":"2026-08-07T14:36:39.019633Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.629384Z","title":null,"venue":null,"work_id":"b87d867d-0f58-4a5d-b996-640111ccd0ae","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.062934Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3f5bc2f3edc206594affbbda35d5220d97137245dc5c4e40f0c7fd1f431cd22f","observation_id":"cbd8f999-0737-41f5-ab8e-1e72602fe9a4","resolution":{"observed_at":"2026-08-07T14:36:38.754347Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.420094Z","title":null,"venue":null,"work_id":"b36dfb3b-678e-4565-8774-ca8ef26a64a7","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.133063Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3aabc180199bc69b1e5c7cc0cc2b0a9ae4f2b05e2f38fe12414d181e37d38612","observation_id":"4aa5278c-7026-4d37-93c7-f1fbedfd68b7","resolution":{"observed_at":"2026-08-07T14:36:38.524355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.203045Z","title":null,"venue":null,"work_id":"0cc21ed1-46df-4730-924e-82bd1b105a6f","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.172699Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:cfa620346b45c5c1ea0a9e4b7205e582299f3ee6e2e679e81780981e5300a475","observation_id":"f93efbb1-00e6-456e-9070-47bff05bd7ef","resolution":{"observed_at":"2026-08-07T14:36:38.312996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.962165Z","title":null,"venue":null,"work_id":"9d7ce080-70e3-41f3-ae97-ad843a589cfe","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.215211Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:5dc7000195bece0ea15b797659a757353af26f995e24a42eea5def0e4bf68bc9","observation_id":"ae33cee0-8ebe-4ab1-b826-acf4095ebef2","resolution":{"observed_at":"2026-08-07T14:36:38.072405Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:34.283029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.283029Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:2d1f62ee8cbee1c25f69c3838f4b67ff680e758b6f5c2ac518135840470a2ec7","observation_id":"78761fc4-75fe-4554-ae83-01b009d5480d","resolution":{"observed_at":"2026-08-07T14:36:34.283029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.06992","last_updated":"2024-08-16T08:18:19Z","snapshot_observed_at":"2026-08-09T06:06:40.708347Z","submitted_at":"2024-07-09T16:07:01Z","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.06992","snapshot_observed_at":"2026-08-07T14:36:34.358507Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.358507Z"},"links":{"cited_paper":"/paper/2407.06992","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:4ce5d9289ae0fda0350f60bfcba812a46e226633d289fcfae229fdae040b884b","observation_id":"c798d26d-c647-450e-a3dc-666e5fc2e320","resolution":{"observed_at":"2026-08-07T14:36:34.358507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.680094Z","title":null,"venue":null,"work_id":"a16b5dbc-4e53-49b5-924a-9a4c04c194b6","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.409390Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b38499ff85a4558c120ba14d95b6680af7958df47c15025722692511c61da030","observation_id":"88b64d75-0f80-4554-a27b-2d4604da5890","resolution":{"observed_at":"2026-08-07T14:36:37.826784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.483075Z","title":null,"venue":null,"work_id":"efac961b-4aa6-483f-b704-bd5c4eed459a","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.484498Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:1934ab434d748b1522bf874ecf22f975485505b79bacdc1c5d18b4f2333764cd","observation_id":"36960f18-9138-4467-8f4f-e5d7a9ce997b","resolution":{"observed_at":"2026-08-07T14:36:37.574396Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T14:36:34.583436Z","title":"Goucher, et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.583436Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:39814b8caefe8c2361566ef8834bfb941e6dd0109f93ab67fc60f2b7f2028194","observation_id":"809a9c84-8c73-41ea-9fa2-97b7a1e7f87a","resolution":{"observed_at":"2026-08-07T14:36:34.583436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T14:36:34.731721Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.731721Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:460c68b3f1995b5198c048180c8a75e8644d11aab87c2f51dee6abbfbaba8fd4","observation_id":"6cd24989-3875-4ef9-8930-eea80f517191","resolution":{"observed_at":"2026-08-07T14:36:34.731721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-07T14:36:34.808268Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.808268Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:cd0eb517d4b84ced1bc67f8f15d422d6f563ed5afc3a99b8e90d8ab338c21a22","observation_id":"0d34feb2-82fd-4e91-843c-df64a17c1e19","resolution":{"observed_at":"2026-08-07T14:36:34.808268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.245387Z","title":null,"venue":null,"work_id":"cfef58b7-bf21-4e34-b47e-616261ada555","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.879238Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b2c6041dfca2bee19db5828b7ef3cab8e0af5d99f1d597c6dd6235996c9ba556","observation_id":"0f7a46aa-1a08-4c17-9b98-cc13cf1f7fe4","resolution":{"observed_at":"2026-08-07T14:36:37.363054Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.06347","last_updated":"2017-08-28T09:20:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-07-20T02:32:33Z","title":"Proximal Policy Optimization Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.06347","snapshot_observed_at":"2026-08-07T14:36:34.946998Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.946998Z"},"links":{"cited_paper":"/paper/1707.06347","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:a23e38574368c22d41f1f18c59cceceb6fd4af0ffdd2957244bb0128975cd23f","observation_id":"4a754c33-4b63-4201-a8f1-5be9bce176c5","resolution":{"observed_at":"2026-08-07T14:36:34.946998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.075123Z","title":"Sutton and Andrew G","venue":null,"work_id":"95b334b8-d897-40e3-82c0-adb78458e83b","year":2018},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.007380Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:47ee3e6d85ecf3ccb0fac086d20c49f5e112015411bb7463175130ff14e5e204","observation_id":"e1923dfe-aea7-4b9c-b0c0-e20babea1cdd","resolution":{"observed_at":"2026-08-07T14:36:37.149030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:36.606066Z","title":null,"venue":null,"work_id":"46e876cc-a322-4f1c-9e3a-8777ac7f0db8","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.083797Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:fa195c0d4033adcf882181c07480b893421e0aba5ca06c3ab1ffe09fa2210164","observation_id":"a50b2da3-d7e4-45b3-85ea-21f37b19aaf9","resolution":{"observed_at":"2026-08-07T14:36:36.978439Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.167957Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.167957Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:c4e305711a46f5707b5192d4edc169a952cbd6a7a4e370ea4e5220b157bac736","observation_id":"6baf1194-9689-4f77-bb22-e0862373379f","resolution":{"observed_at":"2026-08-07T14:36:35.167957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01796","last_updated":"2025-05-23T04:38:57Z","snapshot_observed_at":"2026-07-06T18:39:56.856612Z","submitted_at":"2024-07-01T20:47:47Z","title":"Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01796","snapshot_observed_at":"2026-08-07T14:36:35.227545Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.227545Z"},"links":{"cited_paper":"/paper/2407.01796","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:188c49f7bfb92a3a7e71b0f9231f2d236371428fa835a173081d472f77f7da20","observation_id":"cb7398e4-ad57-4350-9d0a-c8dbbc38170f","resolution":{"observed_at":"2026-08-07T14:36:35.227545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:36:35.283940Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.283940Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:4e7feb51af58a0d46f242cfa59e7018bc3fda97c3bfb46e30df8bda6d111ca5e","observation_id":"4265ee53-a561-4244-b577-fe49af649332","resolution":{"observed_at":"2026-08-07T14:36:35.283940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.194","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.664736Z","title":null,"venue":null,"work_id":"d6b46ad2-75d5-4b8b-849a-678c13db3aa2","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.326323Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:47e05546b139a650f72fb204130c7ecb66762768705155f6094879aea945ca37","observation_id":"1c92269d-a5d7-43e5-b8b2-134808639e21","resolution":{"observed_at":"2026-08-07T14:36:35.721062Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22832","last_updated":"2024-10-30T09:15:51Z","snapshot_observed_at":"2026-08-08T06:11:31.040933Z","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22832","snapshot_observed_at":"2026-08-07T14:36:35.388751Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.388751Z"},"links":{"cited_paper":"/paper/2410.22832","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:26d34a2bd071300ab32d68b0695b2a12f921ac26bf06efffd021173cd80d7deb","observation_id":"f4f147ee-0ad1-4b5d-a07d-5de93edcfcc2","resolution":{"observed_at":"2026-08-07T14:36:35.388751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.443076Z","title":"Xu, Zhiruo Wang, Zhengbao Jiang, and Graham Neubig","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.443076Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7cb7e3ac18a1b5cb717d34c53a885b6da28b5aca3e55be9922cc7a4b6480ce55","observation_id":"238e9412-407f-46e0-8d0e-23d25ecfca51","resolution":{"observed_at":"2026-08-07T14:36:35.443076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T14:36:35.501994Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.501994Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:51dac9961697b68da8eefec9cab81c4635c60ec962442420d9289d7206286a4b","observation_id":"ba85a349-1974-44e4-81c5-a95e0a96464f","resolution":{"observed_at":"2026-08-07T14:36:35.501994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T14:36:35.536497Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.536497Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:020cbc90a7dcb1c7a081d03c609efde3d46e72b870b9f8088257c808d5ddeb73","observation_id":"63b0bf57-701b-43b9-9cd2-c6965c5b5d85","resolution":{"observed_at":"2026-08-07T14:36:35.536497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","latest_version":2,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":45,"verified_exact":2,"verified_fuzzy":1},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 1 inbound Pith citation observation for arXiv:2505.18583."}