{"as_of":"2026-08-10T05:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:27843cc5ac5efb90c19baf79f5e20983772cec65856da20a6947f53c9f2ce395","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:11:31.999012Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:14:45.340582Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-07T15:14:51.485538Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":"2506.00281","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.00281","snapshot_observed_at":"2026-08-07T15:14:51.485538Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","venue":"cs.CR","work_id":"e473b0f8-07c9-46a9-9520-24d8e8abf019","year":2025},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-09T00:27:14.897803Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:45.340582Z"},"links":{"cited_paper":"/paper/2506.00281","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:28b298add637f174d861d944c0af587c4870af656c32dc35b9caa437b0f2373f","observation_id":"8a1afa82-2e9a-4833-80b1-567215b9281d","resolution":{"observed_at":"2026-08-07T15:14:51.551953Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.00281/citation-record","integrity":"/paper/2506.00281/integrity","json":"/paper/2506.00281/citation-record.json","paper":"/paper/2506.00281"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:39.215490Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":"fac9615d-dc3c-494a-9f54-e536b09ea461","year":2020},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.593269Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:badc7f90070931b8a76a08e80669d89110133619347d5b05946b073522fc7fd2","observation_id":"333eeb46-5cc6-426d-b6b2-1306bda305e0","resolution":{"observed_at":"2026-08-07T12:11:39.303746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:39.028984Z","title":"2024: The state of generative ai in the enterprise","venue":null,"work_id":"fc60290b-a300-4002-aeb5-58d09c565f5b","year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.681066Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:8cd2e1507526f5e66752c1d1389c535e0177bbdd9b59a40d549cf02ed3cf1719","observation_id":"482db92d-33d1-40b3-b501-90811c90bf53","resolution":{"observed_at":"2026-08-07T12:11:39.129684Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:38.843566Z","title":"Is your rag a security risk?","venue":null,"work_id":"af8fd97d-861f-4226-8836-9648fe33c079","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.739049Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:17a6ae6e32028fd6f8e4eea303d9fbe64d58b9051bbe3cf492ebacd16ba584c9","observation_id":"c7ab7b3d-7b09-4c14-935b-c785bf65f500","resolution":{"observed_at":"2026-08-07T12:11:38.950340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-10T01:34:02.862915Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T12:11:28.794640Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.794640Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:c76ee8507b2fc18790b296b5fc5a5e61a6174058b941c25ae5367decf1837b72","observation_id":"ffc3afd1-f751-4182-93cf-2015b845a542","resolution":{"observed_at":"2026-08-07T12:11:28.794640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:38.639443Z","title":"Mapping the stony road toward trustworthy AI: Expectations, problems, conundrums,","venue":null,"work_id":"91ed4c80-c3fa-4c2d-90f9-aa0841ce383b","year":2021},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.857538Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:c2e4b6b1e1aec272081e0294b7d28c3813819a2e3ffef7b812e3d4e305b8b27c","observation_id":"306be24d-c23d-43eb-8586-c607e4acde8c","resolution":{"observed_at":"2026-08-07T12:11:38.733393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:38.438880Z","title":null,"venue":null,"work_id":"9953744c-1b03-479b-9065-c5bf8e664b5f","year":2022},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.934068Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:07a024b2ce4c34445778b63c8667ac49c39cd95a291b35ece4728c130b0b33ee","observation_id":"9001aef1-c39c-4102-b7e7-3979cb8b4962","resolution":{"observed_at":"2026-08-07T12:11:38.546035Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:38.262801Z","title":"Artificial intelligence risk management framework (ai rmf 1.0),","venue":null,"work_id":"f90722bd-cb41-4861-8fe7-7f98528b0714","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.938042Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:a3f3b6b5a05ba641ef0c63c0650c99cbf8c41d04ad2f0f3aee3a3b463cef7aac","observation_id":"ffa4a7dd-bceb-44da-95e6-cccf3731b162","resolution":{"observed_at":"2026-08-07T12:11:38.362295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:38.017029Z","title":null,"venue":null,"work_id":"1ef1f078-5824-411e-a050-f436dfbd8403","year":2014},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.983927Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:205e2936003506e06aaeda9d474d1e0825465aa2eef3a4492746e23dfba30807","observation_id":"4e464b97-5664-47f3-8a47-61907e047396","resolution":{"observed_at":"2026-08-07T12:11:38.150352Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:37.840314Z","title":"The ai security pyramid of pain,","venue":null,"work_id":"5bbe68fd-1043-42bb-bbd4-0b794e3f2bb1","year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.081600Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:56f4bfbc30982a74b61e4e1b05370cbf5aa1e48770d4fc3fd77e91e10e76a616","observation_id":"2fff2937-0ee9-4b51-8147-14641125179c","resolution":{"observed_at":"2026-08-07T12:11:37.921333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:37.666330Z","title":"Attention is all you need,","venue":null,"work_id":"b39225e1-77ff-4a83-a038-03565fbe9966","year":2017},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.171779Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:67de930ccc9e1336b4a34b7d92e8b14eef76f6d4de9cc80147ad949466847353","observation_id":"988a4976-9932-4eb5-a3a4-dc0547ea0189","resolution":{"observed_at":"2026-08-07T12:11:37.758694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-06T23:27:24.356320Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-07T12:11:29.278205Z","title":"A survey of large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.278205Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:9c975af4b7d703d1fbcc346990f65e6664c5ea8eea37ed7c2a7f873a4c735c7a","observation_id":"7b0e2648-5f7a-46d5-bae4-b899c2ca57e1","resolution":{"observed_at":"2026-08-07T12:11:29.278205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:37.497089Z","title":"Common weakness enumeration (cwe)","venue":null,"work_id":"87e772be-baf7-4b86-b2c9-e34e98dc3ac8","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.378543Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:01abd7ab958a1c217eb7d1585376e4831639534626277d1dc4bcf99aaf272ca0","observation_id":"8cce0f81-8351-48d3-b3d4-f990f50e6ff6","resolution":{"observed_at":"2026-08-07T12:11:37.568927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:37.375518Z","title":"Cwe community working groups & special interest groups","venue":null,"work_id":"aa5162eb-d5c2-4d4a-b1ff-76f83ccf0961","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.490999Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:0dcdf6e647a36c4adc49e5cfbed1804386ba78ae8719f6b45f455249d0bff9d9","observation_id":"648ab7c7-ad21-46ad-9060-135f4a6d945e","resolution":{"observed_at":"2026-08-07T12:11:37.422306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:37.181486Z","title":"Common weakness enumeration (cwe)","venue":null,"work_id":"9e16f99a-e084-46d2-ab30-eb4b38d6b8ba","year":2006},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.615846Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:690bc9c720282cd00e09c5b9b6de3435058b524ed1493ebcbb94c2a346be0777","observation_id":"75ac59cd-5daa-439a-a164-4120d3ca259a","resolution":{"observed_at":"2026-08-07T12:11:37.250704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.984001Z","title":"Common weakness enumeration (cwe) status update,","venue":null,"work_id":"025becd3-da1e-4be1-ac82-4893dec05699","year":2008},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.732960Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:812021c6523bf4a28cc83a41292e1edb0fbd6d728a225fd2e30377e4a9d54e49","observation_id":"61cc42c5-99cf-4db5-bf4b-ad8efd40e89f","resolution":{"observed_at":"2026-08-07T12:11:37.105066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.779045Z","title":"CWE-20: Improper Input Validation","venue":null,"work_id":"b264c719-d807-4310-9700-474c9babbe08","year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.835286Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:3d121e64e55818534f1ed96d4124915b146cce7cd381964ce0605d1c62b1b81d","observation_id":"9c12bf26-2865-4c1b-a4d8-62a55158b00a","resolution":{"observed_at":"2026-08-07T12:11:36.860653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.595729Z","title":"CVE-2023-5423: SQL Injection in SourceCodester Online Pizza Ordering System 1.0","venue":null,"work_id":"ff580159-0a08-400e-bd42-f3724fa5c1b6","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:29.934194Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:68590ec3677a0c8e829f88c8b534d2c60845d9bfecd2454ad352b48a5b192611","observation_id":"48a8112c-7897-458b-942a-c3bef98ea4cc","resolution":{"observed_at":"2026-08-07T12:11:36.698457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.384005Z","title":"CWE-1039: Automated Code Generation Based on Stale Schemas or Spec- ifications","venue":null,"work_id":"7d45e541-b203-4df7-a1ab-48ee72a2badf","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.022703Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:75d1f9b9c35ae1f4c4ff56fbc1884d566441ba28041ee63a919e4867d3ad91f3","observation_id":"5e09e5c0-ea83-453d-9fcf-f45c3c61c305","resolution":{"observed_at":"2026-08-07T12:11:36.478758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.205059Z","title":"CWE-1426: Unintended Exposure of Sensitive Information in Generated Code","venue":null,"work_id":"c81ca9b3-8e31-438e-9825-e6fb430723af","year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.177888Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:6c0eb573242f338040b6ed9faed3d8f24fd3834af9bc26a899e0c18fdead7690","observation_id":"0b9a2de9-b42b-4cb3-b28f-c0f29028f198","resolution":{"observed_at":"2026-08-07T12:11:36.298695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:36.023035Z","title":"Threat modeling","venue":null,"work_id":"374dce6b-b32f-4ba7-9f90-8ba1ba32f4fa","year":2022},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.288618Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:55ffbdaea278f81d40be7a79e71bf0365a414b10c21243a7b021973f0dbf48b7","observation_id":"2c18eac5-5574-4f8c-b727-a4c4c57e46c0","resolution":{"observed_at":"2026-08-07T12:11:36.094323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:35.868355Z","title":"The vulnerability of uavs: An adversarial machine learning perspective,","venue":null,"work_id":"dbca9221-1dd5-4889-a0fa-6c635408245b","year":2021},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.418725Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:a903d7f871af0caf08059113d9628a37ea4e4e763eb6f9956c0d432328b13ce4","observation_id":"c8795609-f06d-41e7-95ac-e30122b21020","resolution":{"observed_at":"2026-08-07T12:11:35.954792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:35.679501Z","title":"Infer training data membership (aml.t0024.000)","venue":null,"work_id":"2cca936e-07b1-4a2a-aa85-28b32a84add8","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.574596Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:290b991e9bc1c19e71a4a3b94e40620a669d41f232db1aa537faa972730d3864","observation_id":"4110b01d-9b89-492e-9170-c701b521b5d5","resolution":{"observed_at":"2026-08-07T12:11:35.755041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:35.499133Z","title":"Invert ml model (aml.t0024.001)","venue":null,"work_id":"50d17ce7-39b8-4469-bc3c-5054acb62097","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.660589Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:159d13a594555e84a615f2176db89dcbe66b303ed890c94a03021060d79ecb31","observation_id":"43cfa3c0-3b9a-4621-b86e-1beeabc10304","resolution":{"observed_at":"2026-08-07T12:11:35.601334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:35.295246Z","title":"Prompt leakage (aml.t0051.000)","venue":null,"work_id":"902c297e-b6f8-4e8a-a41d-0bc74dad6519","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.785351Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:42a5fd5925bb0253d6f736e178735b96505652297570eeed05da28163c6ea951","observation_id":"8782c394-8d33-49d4-804b-badcf1d97c3f","resolution":{"observed_at":"2026-08-07T12:11:35.367814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:35.059737Z","title":"Llm07:2025 system prompt leakage – owasp top 10 for llm applications","venue":null,"work_id":"3bc5e98a-e0c2-4a08-ad5e-e0f438b3a3c1","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:30.890605Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:47f63d8a9d8d50f59ecf3bc5b935bff3f74d095ce4d19cb679b96002a517f0bd","observation_id":"7679e00b-1769-48ca-ba75-a0d320567806","resolution":{"observed_at":"2026-08-07T12:11:35.215910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:34.864211Z","title":"Exploit vector embeddings (aml.t0024.002)","venue":null,"work_id":"851c1e61-0862-44f2-8b6e-2fa79916b890","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.002173Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:8a9815751fbf6a7003ec3a5ffe91a7cf32bae059a279e988e6dd3e1d437e03f8","observation_id":"7dc3a2d3-d6c9-4071-bc8e-4ac1c7a216b1","resolution":{"observed_at":"2026-08-07T12:11:34.945519Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:34.549797Z","title":"Llm08:2025 vector and embedding weaknesses – owasp top 10 for llm appli- cations","venue":null,"work_id":"2baf150b-d055-4ffd-906f-b2e54a620a85","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.135194Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:0d4c60d2a7b6436d99b8ff952698b39cd67dda878e0af875700dd42f468d77c3","observation_id":"2e531d99-49bd-4161-93cf-30f9855ee199","resolution":{"observed_at":"2026-08-07T12:11:34.714287Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:34.195204Z","title":"Aml.t0018.000 – poison training data","venue":null,"work_id":"36a312c3-7a80-4253-8418-2329bb17f977","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.250161Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:e7a225f8ef6e126771d3825d3fe938461a7a96ad4c2b2154737fa95383e8199e","observation_id":"eae38d54-eb5c-4139-88ed-f241687be2ac","resolution":{"observed_at":"2026-08-07T12:11:34.425763Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:33.930071Z","title":"Llm04:2025 data and model poisoning,","venue":null,"work_id":"88ce35e3-e44a-4c16-82d5-9e249dd50471","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.341550Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:518404d1612c780ef92273609f0019b32097e9b5e6f15efe0085b2dab4ffe9a8","observation_id":"dfc0c884-a52c-46b1-98af-a942cdddb2db","resolution":{"observed_at":"2026-08-07T12:11:34.053834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:33.699857Z","title":"Llm01: Prompt injection – owasp top 10 for llm applications","venue":null,"work_id":"1229416a-903e-4a0a-8abf-e5cdbc6ef94d","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.434695Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:004398173405313b39fdeb316c676ad98ba942ec1f60763c2e56094053c46ba4","observation_id":"819bc63a-2fef-49b7-92bc-0f5b2cf3f8fa","resolution":{"observed_at":"2026-08-07T12:11:33.840511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:33.412455Z","title":"Llm03:2025 supply chain vulnerabilities – owasp top 10 for llm applications","venue":null,"work_id":"9ecfb267-2667-4e12-a699-38180ef414b9","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.555675Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:c6eec4be32191f98ca691be738c2569e01415a04570915d785484f61a16effe8","observation_id":"6aea8d5e-b01c-4153-bb48-92bea80fb1b1","resolution":{"observed_at":"2026-08-07T12:11:33.580922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:33.114770Z","title":"OW ASP Top 10 for LLM Applications – LLM02:2025 Sensitive Information Disclo- sure","venue":null,"work_id":"71a2340b-dbfb-4ff7-a048-f845ec15b1cf","year":2025},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.685142Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:747ae5af2acba1fd78a7e1a1c862a5fea508174c18712b79a699d578e5190864","observation_id":"d2a76f26-a154-457a-9560-4abc966f785b","resolution":{"observed_at":"2026-08-07T12:11:33.300585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:32.752751Z","title":"MITRE ATLAS Adversarial Threat Landscape for Artificial-Intelligence Sys- tems","venue":null,"work_id":"2f081ef7-92e4-4792-961a-4f8bc78243ed","year":2023},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.781184Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:f2c5b1f1d914d8c8b66bbe243257edf99e1ce96109035640628d6731465f9b46","observation_id":"bab93146-8cb0-42c6-9cde-482dbd53283a","resolution":{"observed_at":"2026-08-07T12:11:32.923633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:32.418830Z","title":"Towards crisp-ml (q): a machine learning process model with quality assurance methodology,","venue":null,"work_id":"3c8a4d17-dbdc-4a29-952e-86e65776d71c","year":2021},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.861464Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:345cb355d4f9846374a6a549c4518cacc7ac216389a313096ab4e3fd83347c8d","observation_id":"ee4d8fcb-8e91-4612-ab33-0366387c3e44","resolution":{"observed_at":"2026-08-07T12:11:32.532291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:11:32.164357Z","title":null,"venue":null,"work_id":"6b587c10-c9b8-49dd-9174-2a11fe159421","year":2020},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:31.999012Z"},"links":{"citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:a7f7e44ba6657762baa62e97d8132dd54efd93bee88d3ee07cf4df5f438d86bc","observation_id":"be130b4c-577c-4f23-aee9-de995eb58ebb","resolution":{"observed_at":"2026-08-07T12:11:32.287626Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":30},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 1 inbound Pith citation observation for arXiv:2506.00281."}