{"as_of":"2026-08-10T12:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d4ef104194544a9ee9fa1088b6d39d8216a723fd1946c16127fac7fe9364c3cf","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:10:30.637151Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:08:57.754979Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T21:28:59.129123Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-05T16:24:26.675242Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.675242Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3c8ae5dadd4e1f9bd8df89f6735dff7fd390c115137517d86100862e08c9f7d8","observation_id":"7d88d0b4-fc0c-4592-b4ff-567e1d06b3e0","resolution":{"observed_at":"2026-08-05T16:24:26.675242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-03T07:48:45.422843Z","title":"Basilakos, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.19407","last_updated":"2026-07-25T06:19:31Z","snapshot_observed_at":"2026-08-06T17:54:10.767124Z","submitted_at":"2026-01-27T09:43:09Z","title":"Atomic clocks and gravitational waves as probes of non-metricity","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-03T07:48:45.422843Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2601.19407"},"observation_digest":"sha256:0626a276212080386fcc53840ea94fbdf82c4a99526962d3f9a6d1a2432ea73a","observation_id":"8012415b-f996-43d8-b7ca-2841402e00a8","resolution":{"observed_at":"2026-08-03T07:48:45.422843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2604.00387","last_updated":"2026-04-04T07:18:50Z","snapshot_observed_at":"2026-08-04T09:28:38.404006Z","submitted_at":"2026-04-01T02:16:42Z","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T23:14:47.704353Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2604.00387"},"observation_digest":"sha256:4903c9174ec988d5e29f913380bfca1d672c4b8c14ae697ef7900f0cf2d164d6","observation_id":"be974dc6-7a58-41bd-9f37-d4e1824463a7","resolution":{"observed_at":"2026-05-13T23:18:25.918662Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2604.07403","last_updated":"2026-04-08T10:33:54Z","snapshot_observed_at":"2026-07-31T08:32:09.299699Z","submitted_at":"2026-04-08T10:33:54Z","title":"RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T18:13:22.221234Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2604.07403"},"observation_digest":"sha256:77b594bfef1638124bb47574b94f8adfd639d49704fc082ad35869ad8bca7ac2","observation_id":"fcaad7e1-fa84-44b2-b102-80911461e43c","resolution":{"observed_at":"2026-05-11T05:16:04.888069Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2605.00460","last_updated":"2026-05-01T06:51:58Z","snapshot_observed_at":"2026-07-06T23:13:52.304925Z","submitted_at":"2026-05-01T06:51:58Z","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-05-09T19:41:49.394967Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2605.00460"},"observation_digest":"sha256:6457d19ea0eb5603454776d490534f92c551e6be90d29ec1b2fe96fc9a0c8ec3","observation_id":"1fa20cf7-b8ca-4b9e-acc6-7cdba9fc5831","resolution":{"observed_at":"2026-05-11T15:36:05.181107Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:d2f5b8ecba3a95bacfaf46ada207785abe8f7772fe169bcd9931869c728971b2","observation_id":"1aeb5030-59cc-48cb-a729-c3132108daee","resolution":{"observed_at":"2026-07-03T05:57:41.075926Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:ac280522e21deedbdd0b2e14833e22d28e3feb7feb7340ba28a28f6e71a6aebc","observation_id":"bc29ac4a-de12-4e3f-96a1-196ea7bf1b97","resolution":{"observed_at":"2026-07-03T21:28:59.131479Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:4f1d7f3c448486f69686196e7789700ec25c8893edf974e91789594668a5b28a","observation_id":"827af0f7-c975-4788-9ad7-0d6af76750d3","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-06T00:08:57.754979Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.754979Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:eb02e4f77f222c91fc88019f670b54a70e83fa6ca9dcea83f38e70ec90d11f50","observation_id":"5a9fb543-f8cf-43f2-86eb-ce9ae019f9d5","resolution":{"observed_at":"2026-08-06T00:08:57.754979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.19864/citation-record","integrity":"/paper/2505.19864/integrity","json":"/paper/2505.19864/citation-record.json","paper":"/paper/2505.19864"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T14:10:26.469581Z","title":"Gpt-4 technical report.arXiv preprint arXiv:2303.08774, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.469581Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:a4e565f2580d2ac6c35e56a669507129154a216a3cccbc798171eb45e19c259b","observation_id":"29521612-a2c8-4f36-86c9-6d1e6c27f3cf","resolution":{"observed_at":"2026-08-07T14:10:26.469581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:35.516785Z","title":"Applying generative ai with retrieval augmented generation to summarize and extract key clinical information from electronic health records","venue":null,"work_id":"e39a4f42-54bd-4109-a9a9-5058420f6871","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.536256Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:89f0d5e1e6bce691419c2b0c685b60d61691e8af89f61c21e26288d421b7bf45","observation_id":"85a8e50d-fb41-4f0f-b282-3d759f7993cd","resolution":{"observed_at":"2026-08-07T14:10:35.605123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-07T14:10:26.597745Z","title":"Ms marco: A human generated machine reading comprehension dataset.arXiv preprint arXiv:1611.09268, 2016","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.597745Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:0b8f4df99f5ed8a6b78bc3b960906daa9502e27a6e7f5f1f9e1b2296b722c01e","observation_id":"032a1b81-f937-44b1-aa7a-a4b6d79b5374","resolution":{"observed_at":"2026-08-07T14:10:26.597745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.17297","last_updated":"2024-03-26T00:53:24Z","snapshot_observed_at":"2026-08-02T11:10:24.263044Z","submitted_at":"2024-03-26T00:53:24Z","title":"InternLM2 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.17297","snapshot_observed_at":"2026-08-07T14:10:26.653841Z","title":"Internlm2 technical report.arXiv preprint arXiv:2403.17297, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.653841Z"},"links":{"cited_paper":"/paper/2403.17297","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:a4636b3445c3ec65807889ffc95731f14f2b55269dbef8eea1ca2cf3754840f2","observation_id":"df71ab86-883a-4aa7-8686-fad8041ef2b3","resolution":{"observed_at":"2026-08-07T14:10:26.653841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:26.720754Z","title":"Phantom: General trigger attacks on retrieval augmented language generation.arXiv preprint arXiv:2405.20485, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.720754Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:47ec50a7e3c64276a186c2c51ebe5cd0df9b594148778b355910d201701e08a0","observation_id":"6d1ee5b0-75fb-40ca-b4ef-35fbff9a52ca","resolution":{"observed_at":"2026-08-07T14:10:26.720754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:35.330268Z","title":"Benchmarking large language models in retrieval- augmented generation","venue":null,"work_id":"106032cc-7a0d-45ab-8640-d69da3d8c1a4","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.774923Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:f5a7fcb01354257bb339d42a700cb05600fb8f4cd13652ab25eb1247592b98ca","observation_id":"ab3a3ce9-8b71-49fc-aec2-a5b61fcce89b","resolution":{"observed_at":"2026-08-07T14:10:35.412657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:35.170066Z","title":"Vicuna: An open-source chatbot impressing gpt-4 with 90%* chatgpt quality.See https://vicuna","venue":null,"work_id":"0b348585-1a72-489e-a920-254f8592400b","year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.838923Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:8f8efcb1134a8f3b8bef9249befbd7a989493afe5a600354d42fec898d081cad","observation_id":"0a3bb760-3cb9-432a-9ea4-d93f89a3f9ae","resolution":{"observed_at":"2026-08-07T14:10:35.238790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-07-06T18:03:33.406287Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-07T14:10:26.880068Z","title":"Typos that broke the rag’s back: Genetic attack on rag pipeline by simulating documents in the wild via low-level perturbations.arXiv preprint arXiv:2404.13948, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.880068Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:33ca0386c760c959414d5012cf1d3e8cb4c4fb0d2637ea7df7007f11a2a92436","observation_id":"9b305ce9-8835-4542-8c02-f70e6c6177af","resolution":{"observed_at":"2026-08-07T14:10:26.880068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:26.919055Z","title":"The rag paradox: A black-box attack exploiting unintentional vulnerabilities in retrieval-augmented generation systems.arXiv preprint arXiv:2502.20995, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:26.919055Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:d0c136334962655c02e8d7012c41b1da96d0dd2133f01ecb427932cd00b79ffc","observation_id":"532fbbfc-6b8d-4268-b013-e94504ae2087","resolution":{"observed_at":"2026-08-07T14:10:26.919055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-09T04:03:23.171418Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-07T14:10:27.017860Z","title":"Hotflip: White-box adversarial examples for text classification.arXiv preprint arXiv:1712.06751, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.017860Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:1c0c4b5c4a032e032089f4721548bfda06c91b260e571a516b121068a5ab5781","observation_id":"2dac1c8f-f054-44c6-ba6f-e87e72dcbaf4","resolution":{"observed_at":"2026-08-07T14:10:27.017860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16130","last_updated":"2025-02-19T10:49:41Z","snapshot_observed_at":"2026-07-06T18:05:11.700127Z","submitted_at":"2024-04-24T18:38:11Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16130","snapshot_observed_at":"2026-08-07T14:10:27.128932Z","title":"From local to global: A graph rag approach to query-focused summarization.arXiv preprint arXiv:2404.16130, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.128932Z"},"links":{"cited_paper":"/paper/2404.16130","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:5036a0d861b6d64c1e8f1cfceb4dbfb5930f8396944acd3082ed01158ebe3f55","observation_id":"768efb1d-d160-40ac-aa7a-5be0bd074f82","resolution":{"observed_at":"2026-08-07T14:10:27.128932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.976329Z","title":"A survey on rag meeting llms: Towards retrieval-augmented large language models","venue":null,"work_id":"f65ed193-1153-49fb-b614-d15d1c0ca1a8","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.209261Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:3c171be4d93a412a3ed1fa4e0cab295800fd9851e6df21bc889eb97f16ef96d9","observation_id":"702308f4-eb02-477b-bec3-7faca8ffa6ad","resolution":{"observed_at":"2026-08-07T14:10:35.054390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.17186","last_updated":"2024-06-27T15:55:57Z","snapshot_observed_at":"2026-07-06T18:36:30.295995Z","submitted_at":"2024-06-24T23:57:57Z","title":"CLERC: A Dataset for Legal Case Retrieval and Retrieval-Augmented Analysis Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.17186","snapshot_observed_at":"2026-08-07T14:10:27.284119Z","title":"Clerc: A dataset for legal case retrieval and retrieval-augmented analysis generation.arXiv preprint arXiv:2406.17186, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.284119Z"},"links":{"cited_paper":"/paper/2406.17186","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:cd0bbc7371e4740eae6aa650441d07fc28583aa5ecf320b4d9ac6fc75857b57c","observation_id":"004ed97d-6616-407c-8cbb-5ee2b0698719","resolution":{"observed_at":"2026-08-07T14:10:27.284119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-07T14:10:27.350672Z","title":"Unsupervised dense information retrieval with contrastive learning.arXiv preprint arXiv:2112.09118, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.350672Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:c2c6ab3f73055b2ad9fcb8dff6ce4d6432197e32d5e36bc3a95387c391e7d198","observation_id":"e0e7690b-a9f4-454e-841e-36d553516da0","resolution":{"observed_at":"2026-08-07T14:10:27.350672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.809027Z","title":"Dense passage retrieval for open-domain question answering","venue":null,"work_id":"e2ba9df5-c39d-40bd-b2c6-6518365d455b","year":2020},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.479034Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:6b1cafd49cce4e51205388b3aa46f1a70de7ec5e35b135439c37c181ce06db4e","observation_id":"e8ceed11-e8fc-45db-a13e-a8009bafb673","resolution":{"observed_at":"2026-08-07T14:10:34.896472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.617292Z","title":"Natural questions: a benchmark for question answering research.Transactions of the Association for Computational Linguistics, 2019","venue":null,"work_id":"f5010d09-5ad3-4030-a5a0-f588565f4bd2","year":2019},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.548285Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:b95431f1e136299b38d6c34caa3ab68d66e44fec1b12cec3911d053aecb248f3","observation_id":"87513cf4-d18d-415c-93df-e93facd85e25","resolution":{"observed_at":"2026-08-07T14:10:34.704860Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.425182Z","title":"Retrieval-augmented generation for knowledge- intensive nlp tasks.Advances in neural information processing systems, 33, 2020","venue":null,"work_id":"52f97091-0b41-4584-81aa-54fbce705bbf","year":2020},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.636737Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:0b3c4d0db1d1f077fa6d6458ec2fce5a2256863f90eb6788702be4b0fba80199","observation_id":"9b53bd99-0c94-42ea-a13d-35e803e95247","resolution":{"observed_at":"2026-08-07T14:10:34.481725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-07T14:10:27.773579Z","title":"Deepseek-v3 technical report.arXiv preprint arXiv:2412.19437, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.773579Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:141982abd446e9dda492639e9500b19970dedf2ca3645fd02b148d6a6a33f79c","observation_id":"bcdae5e4-f9b9-46d0-8d03-89568c641d88","resolution":{"observed_at":"2026-08-07T14:10:27.773579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13532","last_updated":"2025-08-25T08:33:56Z","snapshot_observed_at":"2026-08-08T07:32:37.775984Z","submitted_at":"2024-02-21T05:03:07Z","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13532","snapshot_observed_at":"2026-08-07T14:10:27.908756Z","title":"Backdoor attacks on dense passage retrievers for disseminating misinformation.arXiv preprint arXiv:2402.13532, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:27.908756Z"},"links":{"cited_paper":"/paper/2402.13532","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:d7b5c94909a27049bef09862e104d8d987cf277f9a9051b30bcfd5370861a0c2","observation_id":"15517f4f-d838-4b4e-9a5c-7398c98f1332","resolution":{"observed_at":"2026-08-07T14:10:27.908756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.272531Z","title":"Crud-rag: A comprehensive chinese benchmark for retrieval-augmented generation of large language models.ACM Transactions on Information Systems, 43(2), 2025","venue":null,"work_id":"0f47414b-9854-411b-8799-e942c4940225","year":2025},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.039813Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:d2d540117782a4668098bf0c3568bbf18350e2600b98063cf12e9f301903762f","observation_id":"25d1c000-8ccf-4ffe-8c2c-852aa35531f9","resolution":{"observed_at":"2026-08-07T14:10:34.365768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:28.137768Z","title":"Training language models to follow instructions with human feedback.Advances in neural information processing systems, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.137768Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:f2ead4540ccfeccd581fc3003559b60c9b51db294828fe52858f87d699cc8889","observation_id":"fb1f9b12-2909-4a86-987c-bd2ecccace17","resolution":{"observed_at":"2026-08-07T14:10:28.137768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.10343","last_updated":"2024-08-19T18:30:18Z","snapshot_observed_at":"2026-07-06T19:03:09.004554Z","submitted_at":"2024-08-19T18:30:18Z","title":"LegalBench-RAG: A Benchmark for Retrieval-Augmented Generation in the Legal Domain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.10343","snapshot_observed_at":"2026-08-07T14:10:28.231858Z","title":"Legalbench-rag: A benchmark for retrieval-augmented genera- tion in the legal domain.arXiv preprint arXiv:2408.10343, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.231858Z"},"links":{"cited_paper":"/paper/2408.10343","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:30298917df4cb705f826c84ef4197f28e93dfd51db9d4aeea95c1db190e0c871","observation_id":"ada1333a-fc42-4d91-8b3a-e65768243590","resolution":{"observed_at":"2026-08-07T14:10:28.231858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:34.063359Z","title":"Evaluating retrieval quality in retrieval-augmented generation","venue":null,"work_id":"3cec3515-3ee1-4f6f-a4b2-092428bd0b54","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.360701Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:aea33d06e2b279381d142c7ab2ecbb918efbb7e8846f68edd6fd978b31ca6ea6","observation_id":"5df4df5c-7f6d-48f2-948b-9ad3def21432","resolution":{"observed_at":"2026-08-07T14:10:34.134677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:28.426164Z","title":"Ctrlrag: Black-box adversarial attacks based on masked language models in retrieval-augmented language generation.arXiv preprint arXiv:2503.06950, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.426164Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:85077ec06c7405b6bbc25351ca48d1ebed575d1907bce4fb978d489deb541e95","observation_id":"53d8fe85-cbbf-4e45-a7b3-dc0cce0db2e9","resolution":{"observed_at":"2026-08-07T14:10:28.426164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08663","last_updated":"2021-10-21T01:18:28Z","snapshot_observed_at":"2026-08-09T23:22:21.200279Z","submitted_at":"2021-04-17T23:29:55Z","title":"BEIR: A Heterogenous Benchmark for Zero-shot Evaluation of Information Retrieval Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08663","snapshot_observed_at":"2026-08-07T14:10:28.513999Z","title":"Beir: A heteroge- nous benchmark for zero-shot evaluation of information retrieval models.arXiv preprint arXiv:2104.08663, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.513999Z"},"links":{"cited_paper":"/paper/2104.08663","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:4833b9e3df44619f558351e1809184db9c411908eeea15c04f75149a6fccefe3","observation_id":"adfb90fa-39af-4f16-8a66-8e977be92ee6","resolution":{"observed_at":"2026-08-07T14:10:28.513999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-07T14:10:28.573262Z","title":"Llama 2: Open foundation and fine-tuned chat models.arXiv preprint arXiv:2307.09288, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.573262Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:fe01afde4d69c8323e2b4f2f199ec77cb93347e9a7895649800fc60827573ccd","observation_id":"e5095846-3b33-44bb-9870-5a38cdb5c500","resolution":{"observed_at":"2026-08-07T14:10:28.573262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.914028Z","title":"Potential for gpt technology to optimize future clinical decision-making using retrieval-augmented generation.Annals of biomedical engineering, 2024","venue":null,"work_id":"102ae986-1af2-491b-8249-c2c4016747cf","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.724123Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:816780b5875709114633f4003950744cc177e8744579fcbaf58f9f159d668efe","observation_id":"9d277370-7de5-4f43-b1eb-128abb4f7765","resolution":{"observed_at":"2026-08-07T14:10:33.979616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.777420Z","title":"Cbr-rag: case-based reasoning for retrieval augmented generation in llms for legal question answering","venue":null,"work_id":"4f705ee2-a4b6-4151-8db6-41fb0eccbbde","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.822058Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:efe9737a1b48f46dc1f28282657cc7c390ea6d451a0fb64fd8d3bc18ec953c93","observation_id":"91f831da-72b3-4144-9b5e-268a50d7cba1","resolution":{"observed_at":"2026-08-07T14:10:33.830438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.652205Z","title":"Benchmarking retrieval-augmented generation for medicine","venue":null,"work_id":"1cf39471-b4eb-4b31-bca8-5223742d8bae","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:28.912118Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:89bc6f14e2f4528c193a0aec86bf3711bdec29aa84d4f18d46d6676c4ee4ccbc","observation_id":"9b205070-5805-495f-9ce7-2dfd05221a80","resolution":{"observed_at":"2026-08-07T14:10:33.711175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.00808","last_updated":"2020-10-20T22:17:19Z","snapshot_observed_at":"2026-08-06T15:45:53.027828Z","submitted_at":"2020-07-01T23:15:56Z","title":"Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrieval","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.00808","snapshot_observed_at":"2026-08-07T14:10:29.013246Z","title":"Approximate nearest neighbor negative contrastive learning for dense text retrieval.arXiv preprint arXiv:2007.00808, 2020","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.013246Z"},"links":{"cited_paper":"/paper/2007.00808","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:5a35bd5ca54a777d88c336d8268ef8e96aac51eb37fd28d7b8e3be1ade3e3e31","observation_id":"7415313f-79aa-4b89-ba19-dc78a236c6ee","resolution":{"observed_at":"2026-08-07T14:10:29.013246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13345","last_updated":"2023-10-20T08:16:46Z","snapshot_observed_at":"2026-08-07T01:43:48.385782Z","submitted_at":"2023-10-20T08:16:46Z","title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13345","snapshot_observed_at":"2026-08-07T14:10:29.095286Z","title":"An llm can fool itself: A prompt-based adversarial attack.arXiv preprint arXiv:2310.13345, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.095286Z"},"links":{"cited_paper":"/paper/2310.13345","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:51abcc9c1e421efcc7c5048c5b7dc01283477fd12650008bd8070eb3f9c101cf","observation_id":"ad3665db-4331-49e8-bf14-e2d05e012165","resolution":{"observed_at":"2026-08-07T14:10:29.095286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.489610Z","title":"An llm- assisted easy-to-trigger backdoor attack on code completion models: Injecting disguised vulnerabilities against strong detection","venue":null,"work_id":"6a684970-4f0c-4c8e-a636-a9417d5fe1d5","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.209179Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:bcc1638294018fec8f5ddafd0b45f65cebeb12f85883f0b631f8ecd2f16e0187","observation_id":"22c15008-96fb-4937-b186-37067ed30236","resolution":{"observed_at":"2026-08-07T14:10:33.592853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-07T14:10:29.298881Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.298881Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:6453956d07e5aa38c73899dcd42f54004d8ebc6ad7448a945dbda069f473d79c","observation_id":"7b037daa-0382-4422-8762-10b1b22939dd","resolution":{"observed_at":"2026-08-07T14:10:29.298881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.09600","last_updated":"2018-09-25T17:28:20Z","snapshot_observed_at":"2026-08-09T10:11:58.541007Z","submitted_at":"2018-09-25T17:28:20Z","title":"HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.09600","snapshot_observed_at":"2026-08-07T14:10:29.402249Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering.arXiv preprint arXiv:1809.09600, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.402249Z"},"links":{"cited_paper":"/paper/1809.09600","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:678755bc5ec080c85b665b1880b87ed70e0069f5fc12219c50c87ca3d47e73c6","observation_id":"6e7232a5-4fd9-474a-b980-8fe9068fa0f2","resolution":{"observed_at":"2026-08-07T14:10:29.402249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.05131","last_updated":"2024-03-16T09:08:26Z","snapshot_observed_at":"2026-08-09T01:58:44.559717Z","submitted_at":"2024-02-05T22:35:42Z","title":"Financial Report Chunking for Effective Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.05131","snapshot_observed_at":"2026-08-07T14:10:29.479041Z","title":"Financial report chunking for effective retrieval augmented generation.arXiv preprint arXiv:2402.05131, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.479041Z"},"links":{"cited_paper":"/paper/2402.05131","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:9ded1c43467cdedfbd4e15bd7ffd13b7b4156f9d2c71bc326e50b88e9c929c25","observation_id":"4796b999-d99e-4a4a-9fd8-3a63dacb6d6d","resolution":{"observed_at":"2026-08-07T14:10:29.479041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.378168Z","title":"Enhancing financial sentiment analysis via retrieval augmented large language models","venue":null,"work_id":"d09de94b-1068-44db-a2c3-695d12da12f0","year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.564672Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:991ab811a6e772024643b0ef4f2083f1fd414f3a5c410173bb7e8e43aae42661","observation_id":"9bbcce3a-27e3-4172-9929-b9fcc807415a","resolution":{"observed_at":"2026-08-07T14:10:33.399498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:33.160767Z","title":"Medrag: Enhancing retrieval-augmented generation with knowledge graph-elicited reasoning for healthcare copilot","venue":null,"work_id":"1f24ebb2-4dad-48f7-b5a1-e34ed7355fd6","year":2025},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.645579Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:44f04cb07f5718ba067af4b61504dc3f14eddc6d874f331416f03693e3603709","observation_id":"89f98b10-11ea-4407-bae3-161604192baf","resolution":{"observed_at":"2026-08-07T14:10:33.271935Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.985934Z","title":"Optimizing llm based retrieval augmented generation pipelines in the financial domain","venue":null,"work_id":"b6dbcfe9-f128-4a84-b1ab-d74030362728","year":2024},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.740706Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:99d35cf76d4e47dedddf26cc691ef9e6f011d1899b7e6026cc4a76303b884a0e","observation_id":"a79808e6-d544-4845-973a-4c97cd020dc1","resolution":{"observed_at":"2026-08-07T14:10:33.069968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T14:10:29.785258Z","title":"Poisoning retrieval corpora by injecting adversarial passages.arXiv preprint arXiv:2310.19156, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.785258Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:ff45ea0de43d92807f4fcac0a2170b8ae43d49a952b778281a9e3f11a9c3221e","observation_id":"ab2d30a3-cda8-4b78-9131-51617e5d1c12","resolution":{"observed_at":"2026-08-07T14:10:29.785258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T14:10:29.901795Z","title":"Universal and transferable adversarial attacks on aligned language models.arXiv preprint arXiv:2307.15043, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.901795Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:0369ce6bd6b40135e52640652761e854162f2331d50f08be9bad0768c1013919","observation_id":"cd607889-5dbe-41a1-ba0e-c8372564d09e","resolution":{"observed_at":"2026-08-07T14:10:29.901795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.837703Z","title":"[Q]”. Here is the desired answer: “[R]","venue":null,"work_id":"39f94f7e-64d1-468c-8677-634a7d8b6dfd","year":2025},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.009615Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:276dc1565dc727b1193344255cbed25add679eb8e45ed1a0a25ff6a7b008d44b","observation_id":"6df26f02-16ec-4f8e-a0a7-c0d203ce0b6e","resolution":{"observed_at":"2026-08-07T14:10:32.903948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.694739Z","title":null,"venue":null,"work_id":"13c98d42-60ac-4aea-b7c5-87e27178edf3","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.121824Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:f6f691ce9fc7f5fc5428b24fef3bad7f03b12c30512e8197b43cde322b955b5a","observation_id":"2139def9-d5f2-4739-b5f9-235c11bbf872","resolution":{"observed_at":"2026-08-07T14:10:32.750406Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.520740Z","title":null,"venue":null,"work_id":"6c87ad14-3a3c-427d-b52c-ca9baa1bb6e7","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.234553Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:32789652f7c25c1ffbdf024829e38b2ea4b501b15c8a3fee9c8806dd35aa395b","observation_id":"ad308c7e-00aa-4ca7-b6ae-ce6f26788455","resolution":{"observed_at":"2026-08-07T14:10:32.615080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.316581Z","title":"I don’t know","venue":null,"work_id":"a42e4fc4-665f-4778-979f-fb67ea4b09ac","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.312917Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:2b30ce3827ac860d4d6a3712031d1b7214b9fcb3ab58b8febf2ac71758c9c4d9","observation_id":"346cfee5-5e96-4d23-9dfa-5776e1001426","resolution":{"observed_at":"2026-08-07T14:10:32.405265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:32.127796Z","title":"•Comprehensive ASR (CASR): A weighted average of ASR across top-kvalues: CASR= Pn k=1 k·ASR kPn k=1 k","venue":null,"work_id":"e9cddfb3-bf31-49f6-a319-b7c1cabfc5dd","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.399953Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:ab51c32a425dd3f965ff97a0377bf854242560801b966b495d4cfa067641b560","observation_id":"ec988d04-1ca4-452f-a169-a840382b275b","resolution":{"observed_at":"2026-08-07T14:10:32.212319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:31.926992Z","title":"F1 = 2·Precision·Recall Precision+Recall 16 •Toxicity Efficiency Score (TES): Captures the ratio of attack success to retrievability: T ES= ASR F1","venue":null,"work_id":"184991e7-7edc-484a-b422-04a6f0eea2b6","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.494445Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:8597e3a5817f6462b14e7025502302f123cee7ba5d05a5bf3b85055464796f36","observation_id":"af8b713c-ccba-4f5c-bd9a-8cbac8d8e05c","resolution":{"observed_at":"2026-08-07T14:10:32.016413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:31.741194Z","title":"When asked... please output","venue":null,"work_id":"87b262a3-5029-424b-9f30-4477ac128175","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.578728Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:1198da61f7bbc6837f4ed00c09c16c15ce60900983b692345bd65ae4dc056547","observation_id":"347263ff-15c1-45c7-a9ff-52857e369093","resolution":{"observed_at":"2026-08-07T14:10:31.799214Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:10:31.604722Z","title":"To Make You Feel My Love","venue":null,"work_id":"070c7c81-d279-48bd-8c39-8a92751b0116","year":null},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:30.637151Z"},"links":{"citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:fe06fc89032bd6f6ccfd870d77a64701f0a04ad057e977fcb0ee2f0b99f61e1d","observation_id":"c846deed-ddf9-418f-a299-b6869c4e2fb0","resolution":{"observed_at":"2026-08-07T14:10:31.656278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":26,"verified_exact":0,"verified_fuzzy":21},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 9 inbound Pith citation observations for arXiv:2505.19864."}