{"as_of":"2026-08-11T08:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:de69c31a7629e37591dc722becdd3329a4fcbf1a8026dabcc9be86cf69c0537f","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:49:00.970194Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:44:10.601057Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T20:00:07.849622Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-08-05T10:44:10.601057Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-08T11:14:03.361977Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.601057Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:11a6bbee550a2cedd3ce85b1723716525151e079b3e5329a395ebeb99089fd72","observation_id":"349d7963-e035-454b-a5f8-dcefb9cfe494","resolution":{"observed_at":"2026-08-05T10:44:10.601057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":"2507.15042","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-07-04T20:00:07.849622Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection.arXiv preprint arXiv:2507.15042, 2025","venue":null,"work_id":"61e52c88-e3e9-4b0e-a626-0de292a38c11","year":2025},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:cb31c5822b62ca6d70046259749aafc638b40f7210ac93418099469f03c85462","observation_id":"2a5047a3-ee61-4305-8648-5807f6b954a8","resolution":{"observed_at":"2026-07-03T21:28:59.112223Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":"2507.15042","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-07-04T20:00:07.849622Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection.arXiv preprint arXiv:2507.15042, 2025","venue":null,"work_id":"61e52c88-e3e9-4b0e-a626-0de292a38c11","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:34b952d86e43e1178a8ed5571ec834f777a4f1ec8794317e58b1538daed3a007","observation_id":"a06c6220-4bae-4214-864c-7ec085aefb4f","resolution":{"observed_at":"2026-07-04T20:00:07.851452Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.15042/citation-record","integrity":"/paper/2507.15042/integrity","json":"/paper/2507.15042/citation-record.json","paper":"/paper/2507.15042"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-06T15:48:56.106561Z","title":"MS MARCO: A Human Generated Machine Reading Comprehension Dataset","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.106561Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:e6528b7380913a46f0127a952249bae23dab783be122705009c784417b85383a","observation_id":"5d655d0d-c75d-4cc5-b2dd-dd1bc81bc65a","resolution":{"observed_at":"2026-08-06T15:48:56.106561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.990051Z","title":"WWW’18 open challenge: Financial opinion mining and question answering","venue":null,"work_id":"78fb50a5-b4b5-42d9-841a-bbd581685218","year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.187227Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:caefbc258138057bd81ff02add38e0dbfda16f2e988d40cd84500c6107119393","observation_id":"3a9a8c58-d999-40b8-be0d-4ac180811128","resolution":{"observed_at":"2026-08-06T15:49:05.144970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.737556Z","title":"Fact or Fiction: Verifying Scientific Claims","venue":null,"work_id":"d0088707-dda7-4dd9-8022-42d7651033df","year":2020},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.277376Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:753a4b53a5e06f1e490bfb067480f0a470026ec6f931229cbe45ed0617ba96f5","observation_id":"a91a3ef5-86b5-4d5b-9afe-b04dcb38cc9e","resolution":{"observed_at":"2026-08-06T15:49:04.846766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.456896Z","title":"FEVER: A large-scale dataset for fact extraction and VERification","venue":null,"work_id":"3d33637b-1b5d-4f3c-9464-f49b94ca56f4","year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.362806Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:04b10bac93078658d7df9c11b24c7535629d715d56edafcb097ca2718f21edb3","observation_id":"8183669c-5363-4780-acc4-f8cdfcc1192f","resolution":{"observed_at":"2026-08-06T15:49:04.619938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.163859Z","title":"SQuAD: 100,000+ questions for machine comprehension of text","venue":null,"work_id":"989b940c-5d69-42e5-b1e8-32369d5f161c","year":2016},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.481652Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:cf5f06b066da8ea576baf23f31430af3d1a224077d98880cd7649a52c71059e4","observation_id":"3bdc3bb4-e328-447f-a096-83ebf39b5f17","resolution":{"observed_at":"2026-08-06T15:49:04.341382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08663","last_updated":"2021-10-21T01:18:28Z","snapshot_observed_at":"2026-08-09T23:22:21.200279Z","submitted_at":"2021-04-17T23:29:55Z","title":"BEIR: A Heterogenous Benchmark for Zero-shot Evaluation of Information Retrieval Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08663","snapshot_observed_at":"2026-08-06T15:48:56.617124Z","title":"BEIR: A Heterogeneous Benchmark for Zero-shot Evaluation of Information Retrieval Models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.617124Z"},"links":{"cited_paper":"/paper/2104.08663","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:3d40e0c915b210003e81f9a39334544fdad5f24cc537fca131b4cfaf3e59c119","observation_id":"32d60f6b-c450-4e6f-ae73-fa52e357ab80","resolution":{"observed_at":"2026-08-06T15:48:56.617124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.936092Z","title":"Dai, Jakob Uszkoreit, Quoc Le, and Slav Petrov","venue":null,"work_id":"52571d47-b90d-4941-b5aa-a3d48438c027","year":2019},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.746555Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:520882b4875f61d1a0676cbac4044905d7a8fa32d9d910259168a5f3e346fda7","observation_id":"d9847514-dc4c-424c-a875-2971cb3b76eb","resolution":{"observed_at":"2026-08-06T15:49:04.046023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.713776Z","title":"Differential evolution – a simple and efficient heuristic for global optimization over continuous spaces","venue":null,"work_id":"53a91569-ffc6-4fb3-a1d7-96da7e7592d1","year":1997},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.864144Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:fc10dca4393f37a8b4ea0d003a5eea431172719fd4137c3a0828da3463a40dc0","observation_id":"92af87fd-150b-4984-8085-12ff84a97ae4","resolution":{"observed_at":"2026-08-06T15:49:03.810414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.450387Z","title":"Salem, and Ahmed E","venue":null,"work_id":"e6e400e6-73da-41cd-b463-16ef904938f9","year":2021},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.967589Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:ce94b0e01bce415543d728e6720b29a66e9b15caa945d3145b9aa965e541640b","observation_id":"f6818379-ce7c-496d-b0e3-c8dd9fa3f5a5","resolution":{"observed_at":"2026-08-06T15:49:03.555565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.10446","last_updated":"2024-03-15T16:30:14Z","snapshot_observed_at":"2026-08-08T10:26:33.779967Z","submitted_at":"2024-03-15T16:30:14Z","title":"Enhancing LLM Factual Accuracy with RAG to Counter Hallucinations: A Case Study on Domain-Specific Queries in Private Knowledge-Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.10446","snapshot_observed_at":"2026-08-06T15:48:57.081874Z","title":"Enhancing LLM Factual Accuracy with RAG to Counter Hallucinations: A Case Study on Domain-Specific Queries in Private Knowledge-Bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.081874Z"},"links":{"cited_paper":"/paper/2403.10446","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:349692e33a884cdf21809cbd648f1a8f65119aeea49c8e16627d89ffdfd9bdf1","observation_id":"a359d608-5344-4049-ac7d-a401460176e9","resolution":{"observed_at":"2026-08-06T15:48:57.081874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04415","last_updated":"2024-12-05T18:38:30Z","snapshot_observed_at":"2026-08-09T15:50:55.635798Z","submitted_at":"2024-12-05T18:38:30Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04415","snapshot_observed_at":"2026-08-06T15:48:57.225641Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.225641Z"},"links":{"cited_paper":"/paper/2412.04415","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:533a05ed6198e05dadf65c6cd6e3a2f45c1839e1946cc052fa49743269027813","observation_id":"630c11ab-c934-4e03-8fb2-5715dda31ee6","resolution":{"observed_at":"2026-08-06T15:48:57.225641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-10T01:34:02.862915Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T15:48:57.340757Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.340757Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:1120ff2d767477bbaf4177b7bf3ab27370603c8867ffbbb058ef599588e0c341","observation_id":"ea27f41a-2e62-4e1a-8a1a-c919c5fc8c86","resolution":{"observed_at":"2026-08-06T15:48:57.340757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-06T15:48:57.497059Z","title":"Detecting Language Model Attacks with Perplexity","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.497059Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:81f7907194b9df13dd5ef289c287ce9ff8baf1d80fd74bd8928fe75156f3d0fe","observation_id":"bcc68161-d6d3-4a8e-9e44-af07f4c51e9f","resolution":{"observed_at":"2026-08-06T15:48:57.497059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.188751Z","title":"Robust Safety Classifier Against Jailbreaking Attacks: Adversarial Prompt Shield","venue":null,"work_id":"6d305bfb-b010-4e9a-863e-e877cf63b2a9","year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.685054Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:d20804b306d43f583dbb985150cd8dc3a3fbb491751a8f9b8dc29a3e17d832a3","observation_id":"55540e38-55c3-47d6-af28-bcc07804aa99","resolution":{"observed_at":"2026-08-06T15:49:03.327394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:57.797958Z","title":"CtrlRAG: Black-box Adversarial Attacks Based on Masked Lan- guage Models in Retrieval-Augmented Language Generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.797958Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:9c883c4c8fb8538f3729cc29e35fa8051935d2afa962c6fc4ad533e085ba60ea","observation_id":"7e39d900-ffb7-4ff9-9304-3e2b534f6d06","resolution":{"observed_at":"2026-08-06T15:48:57.797958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:57.903143Z","title":"PRADA: Practical Black-box Adversarial Attacks against Neural Ranking Models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.903143Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:dc85943ccfcbcdb7723941e015529028ebc1e8a7c204010b954aa5071125c283","observation_id":"283a017a-c98d-43e1-a8de-d9ec0d9e2f31","resolution":{"observed_at":"2026-08-06T15:48:57.903143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:58.038712Z","title":"One Pixel Attack for Fooling Deep Neural Networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.038712Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:764d3722e9963b365baa79aa94c35083623b10b319ec73a4c4a73437bfb0be0c","observation_id":"5e2d89c9-d531-433b-b9e0-93a1b4e3b595","resolution":{"observed_at":"2026-08-06T15:48:58.038712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-06T15:48:58.165779Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.165779Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:8eea546adfc6cbf7057c49bef3fde6df81d9a64d93edbd0e639639b6237064d8","observation_id":"75787886-0a10-4a7e-81a2-6873fad46b03","resolution":{"observed_at":"2026-08-06T15:48:58.165779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T15:48:58.294900Z","title":"Ignore Previous Prompt: Attack Techniques for Language Models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.294900Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:f12cb0bbd813916cb75784bc440746ba5debada16796334058d94df2e15b02b8","observation_id":"57954197-763d-49be-905e-01ddf0c74363","resolution":{"observed_at":"2026-08-06T15:48:58.294900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:48:58.472087Z","title":"Auto- matic and Universal Prompt Injection Attacks Against Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.472087Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:9de8bb54a34a26be4e1b6df5f2556578b984fe00949faf1994f5993d354e38a2","observation_id":"e7e68571-f96e-4f65-ada3-7426759e29b2","resolution":{"observed_at":"2026-08-06T15:48:58.472087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-08-09T06:49:45.084464Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T15:48:58.642580Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.642580Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:311cd1158deef96809c384f9557e35a8122625c0cb56da327085ae90dd914426","observation_id":"91050d90-8900-4fe2-a68c-2446cd62a221","resolution":{"observed_at":"2026-08-06T15:48:58.642580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-06T15:48:58.758345Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.758345Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:8d5d5362e61b73bd96d3466d10dc03c7bf801aad521c282a21cbae8541927498","observation_id":"bd98d08a-721e-473e-af78-e6286c03d56b","resolution":{"observed_at":"2026-08-06T15:48:58.758345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07179","last_updated":"2024-07-23T19:41:05Z","snapshot_observed_at":"2026-07-06T17:28:31.413289Z","submitted_at":"2024-02-11T12:25:41Z","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07179","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.07179","snapshot_observed_at":"2026-08-06T15:49:01.487958Z","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","venue":"cs.CL","work_id":"7a22519e-12b2-4a74-acdd-845e5eef0eea","year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.906697Z"},"links":{"cited_paper":"/paper/2402.07179","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:d7b1d7ad2813f42153bb8d0f1b3a32fcaa2998dbc0f9865bcbfae001c9d44461","observation_id":"9014105d-ea42-4b63-9c8d-5165e2519b28","resolution":{"observed_at":"2026-08-06T15:49:01.623652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.900634Z","title":"TEMPEST: Multi-Turn Jailbreaking of Large Language Models with Tree Search","venue":null,"work_id":"33f92b7a-ac61-4aaa-98ed-d24a21c4a910","year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.050059Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:2f48abe2bd8dba4c08527a310a4aadb15ecdca0e4dc279a65f5feefc68e80343","observation_id":"5176bed5-3ecb-4986-945d-bf5989dd8968","resolution":{"observed_at":"2026-08-06T15:49:03.044417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.11401","last_updated":"2021-04-12T15:42:18Z","snapshot_observed_at":"2026-08-07T05:44:30.677502Z","submitted_at":"2020-05-22T21:34:34Z","title":"Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.11401","snapshot_observed_at":"2026-08-06T15:48:59.178419Z","title":"Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.178419Z"},"links":{"cited_paper":"/paper/2005.11401","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:7baa9a3db719d84699f0ba48c32e079447fe16ffcba53885e7092e3bce853f5c","observation_id":"1a961bf6-c059-4e95-a1b3-03cbde47ff4e","resolution":{"observed_at":"2026-08-06T15:48:59.178419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.09203","last_updated":"2019-11-13T03:54:12Z","snapshot_observed_at":"2026-08-03T18:37:05.537362Z","submitted_at":"2019-08-24T20:41:40Z","title":"Release Strategies and the Social Impacts of Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.09203","snapshot_observed_at":"2026-08-06T15:48:59.296515Z","title":"Release strategies and the social impacts of language models","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.296515Z"},"links":{"cited_paper":"/paper/1908.09203","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:067bb8e22acb06a6f81e8dd2ebaf5b022731b2b3c73f7c38e54b468a3bc05db4","observation_id":"2dd1cd2d-204b-4f1a-858e-be4a3f7284bf","resolution":{"observed_at":"2026-08-06T15:48:59.296515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.15310","last_updated":"2020-07-30T08:43:45Z","snapshot_observed_at":"2026-08-09T07:50:39.910880Z","submitted_at":"2020-07-30T08:43:45Z","title":"Black-box Adversarial Sample Generation Based on Differential Evolution","version":1},"cited_work":{"arxiv_id":"2007.15310","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.15310","snapshot_observed_at":"2026-08-06T15:49:01.207083Z","title":"Black-box Adversarial Sample Generation Based on Differential Evolution","venue":"cs.LG","work_id":"57c6415a-ae01-48e8-b05b-9b3f33abc410","year":2020},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.697092Z"},"links":{"cited_paper":"/paper/2007.15310","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:78663b9118e2303980c30690473fc27ef7d4e8d5d0de42f16213bf407764cca5","observation_id":"31d56b97-da33-4b56-9e70-1cad8fd199f8","resolution":{"observed_at":"2026-08-06T15:49:01.309111Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.620474Z","title":"Black-Box Prompt Learning for Pre-trained Language Models","venue":null,"work_id":"f68d30cc-a17c-4115-94bc-dbb03ccedbe7","year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.802354Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:c054cb8820c1e9952fcf8e717f1c523687638f19209d3b72660d5aab0b5d8d04","observation_id":"80dc2c97-6a6f-4fea-a748-0319b4caf0bc","resolution":{"observed_at":"2026-08-06T15:49:02.776909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09906","last_updated":"2025-03-03T04:28:49Z","snapshot_observed_at":"2026-07-06T17:30:34.153488Z","submitted_at":"2024-02-15T12:12:19Z","title":"Generative Representational Instruction Tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09906","snapshot_observed_at":"2026-08-06T15:48:59.910252Z","title":"Generative Representational Instruction Tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.910252Z"},"links":{"cited_paper":"/paper/2402.09906","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:82f29af235d1b55ad49eebab224891f1d7a0b273dc98ed6ea0c698284abed89a","observation_id":"7cd9529c-51c7-47a5-a0f0-311c75fa2bac","resolution":{"observed_at":"2026-08-06T15:48:59.910252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05374","last_updated":"2024-05-08T19:05:18Z","snapshot_observed_at":"2026-07-06T18:11:48.858911Z","submitted_at":"2024-05-08T19:05:18Z","title":"Arctic-Embed: Scalable, Efficient, and Accurate Text Embedding Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05374","snapshot_observed_at":"2026-08-06T15:49:00.035067Z","title":"Arctic-Embed: Scalable, Efficient, and Accurate Text Embedding Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.035067Z"},"links":{"cited_paper":"/paper/2405.05374","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:c0be590a89bc3c06f1deca6c3c98850133d623faaa345db04398776f0cd416a7","observation_id":"84bbaabe-9546-4bca-8463-bf6be57a6fd4","resolution":{"observed_at":"2026-08-06T15:49:00.035067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11509","last_updated":"2024-02-18T06:04:27Z","snapshot_observed_at":"2026-08-10T07:10:22.134647Z","submitted_at":"2023-11-20T03:17:21Z","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11509","snapshot_observed_at":"2026-08-06T15:49:00.202243Z","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.202243Z"},"links":{"cited_paper":"/paper/2311.11509","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:7a77e650a05dc93cbd72347a6260031a09369ee3bba7a37b1b351713c7303e4d","observation_id":"fbc1b277-a695-4a6e-8905-ad112feabcc2","resolution":{"observed_at":"2026-08-06T15:49:00.202243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:00.374240Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.374240Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:46ea0ad49c612515b60f6a47f7c7d5d1f43ee552339516116a7bff03080b97a3","observation_id":"ba24aec9-af6d-43cc-addf-a10ad5a86257","resolution":{"observed_at":"2026-08-06T15:49:00.374240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.421610Z","title":null,"venue":null,"work_id":"4ca6b316-3b24-4973-9d90-f858f4f71cad","year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.485686Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:8b24e18d5119cc547016dab2def978fa2e42f357c7bbc957db156d38fe1272cc","observation_id":"2d87080b-84f7-4314-b8b6-392c0126f2ca","resolution":{"observed_at":"2026-08-06T15:49:02.507055Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.211484Z","title":"The Probabilistic Relevance Framework: BM25 and Beyond","venue":null,"work_id":"0d738260-6d89-421c-b590-c63d74268277","year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.641358Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:645ac9d46f926eaaf38e7858e2678427897f89f2ffe3da417f2ab96a57cbbc5c","observation_id":"08737cbd-b2c2-4bd1-89eb-03e6da87eac7","resolution":{"observed_at":"2026-08-06T15:49:02.322604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:01.987183Z","title":"Download to CSV","venue":null,"work_id":"25866a06-dbe0-4fa8-9919-e238fa95135f","year":1996},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.970194Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:99149c619c90fb4758f59f919cfc347adc041d7291a682b9bc4bc52f28341e96","observation_id":"fc70a480-734b-4b62-a382-fd83cec2d94f","resolution":{"observed_at":"2026-08-06T15:49:02.064640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:00.794927Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.794927Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:5b10f53952c4d301abe902ea5cab64a8db771241eb4f2568cedfca7acecd5ba7","observation_id":"6d6ba860-845d-409d-b954-ada883c11048","resolution":{"observed_at":"2026-08-06T15:49:00.794927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08532","last_updated":"2025-05-01T11:56:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-15T16:50:09Z","title":"EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.08532","snapshot_observed_at":"2026-08-06T15:48:59.538886Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.538886Z"},"links":{"cited_paper":"/paper/2309.08532","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:4220534b581df32ad6790d3e7169bdd26e395d386d3510f78f921576fd3e89e7","observation_id":"3fb4155e-17e1-42f1-a4aa-c79b8b5123de","resolution":{"observed_at":"2026-08-06T15:48:59.538886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":2,"verified_fuzzy":12},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 3 inbound Pith citation observations for arXiv:2507.15042."}