{"as_of":"2026-08-15T10:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:35cba0daa761ab3c1091d0b88ac7f213ef853e57c66ceb524f141db85633cedb","coverage":[{"denominator":133,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:56:20.462380Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.01084/citation-record","integrity":"/paper/2508.01084/integrity","json":"/paper/2508.01084/citation-record.json","paper":"/paper/2508.01084"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.198469Z","title":"Fabbri, Ben Risher, Philippe Laban, Shafiq Joty, and Chien- Sheng Wu","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.198469Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c308b6a34331eaeb246a3720276b8f32a807c2c7de3d3c71b73a941cec417fc6","observation_id":"091a5a52-89d4-49e1-ac52-515bccd2156b","resolution":{"observed_at":"2026-08-06T05:56:20.198469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.202077Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.202077Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5fd5df1c46c6fd6d7fe52c4032dc21dff7bbcaac5cc192cf62e6a0b6225d5cc6","observation_id":"4c49ed30-7d48-40f6-a991-94a1a76d49ba","resolution":{"observed_at":"2026-08-06T05:56:20.202077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.205005Z","title":"Introducing Claude","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.205005Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9e3072dd671a7ea9f39765e8793b7ff0369db91d6dcd5b00b87097309385b7c8","observation_id":"912cdb52-3791-4afc-9b89-75fc40a5ac45","resolution":{"observed_at":"2026-08-06T05:56:20.205005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-06T05:56:20.207900Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.207900Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d33c6123111148c38fa47641601302ad14cad4b92ec8b9904a4f99aff8b46b6b","observation_id":"6d9a9c96-531a-44a5-bd9c-3c5f98b5494d","resolution":{"observed_at":"2026-08-06T05:56:20.207900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.211117Z","title":"Keying hash functions for message authen- tication","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.211117Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ac240e7af55cfceda2c73dc6b7e2cd96eff530acc6cf904212fe0c0632b14fe1","observation_id":"8443b602-bd50-49e9-8ab6-78527fbfddcd","resolution":{"observed_at":"2026-08-06T05:56:20.211117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.214009Z","title":"Hash function balance and its impact on birthday attacks","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.214009Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:0afc4aa6a2ac2db8d47a55f8ff866ed94fb0d648c5eb178bf0377ce8a6f8db3b","observation_id":"83fa7530-48ef-4cf2-98cf-570b65868676","resolution":{"observed_at":"2026-08-06T05:56:20.214009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.217144Z","title":"Hash function balance and its impact on birthday attacks","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.217144Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:0b3b98c176dfe937d84e57bbe1cc7e82af66fbdd25adc026b28bee452ced4df0","observation_id":"2ac4f35e-502e-46e7-b66c-f8e54af4a443","resolution":{"observed_at":"2026-08-06T05:56:20.217144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.219706Z","title":"Quantifying memorization across neural language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.219706Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:92ba8702f499941784127006391b36a65165ed2830b29ab1df5bfd0015646ba7","observation_id":"f863edaa-f7f4-495d-9011-b0562aab0ae0","resolution":{"observed_at":"2026-08-06T05:56:20.219706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.222603Z","title":"Phantom: General trigger attacks on retrieval augmented language generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.222603Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:44bb8d5c13cac3fcbbdb84948b662dd566a1dada33192e20d89c042f15b93fa2","observation_id":"7cd35cc4-6a58-410b-ba97-a5158abe87df","resolution":{"observed_at":"2026-08-06T05:56:20.222603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.225412Z","title":"Trojanrag: Retrieval-augmented generation can be backdoor driver in large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.225412Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5b0a53ab2fe97a20c6a4ffa72b2d990ac46e9aef56ace79d65f746ed8b96b422","observation_id":"f7e2bd29-0a12-40b6-92e0-275157dc09a7","resolution":{"observed_at":"2026-08-06T05:56:20.225412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.227897Z","title":"xRAG: Extreme context compression for retrieval-augmented generation with one token","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.227897Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:04bd84634934d064ab53ec62278bafec4030262b2b1cc5a61de6aff5002fc889","observation_id":"0ef22ada-c67a-4ad5-b5f4-954008b2a6b1","resolution":{"observed_at":"2026-08-06T05:56:20.227897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-14T21:26:02.529499Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-06T05:56:20.230391Z","title":"Unleashing worms and extracting data: Escalating the outcome of attacks against rag-based inference in scale and severity using jailbreaking","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.230391Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:4f1d120c0294e013ab6dc955351d65ccf11f66ed1d5b35708872751804c7a51e","observation_id":"f00606c0-a63f-4c5e-814e-3f0024de8c16","resolution":{"observed_at":"2026-08-06T05:56:20.230391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.233265Z","title":"Intel SGX explained","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.233265Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:1942ffd5510ab4bca45d311ccd2e5374f2a26cb0ffe4dcf79712cfc6a92027a0","observation_id":"6b3fdf88-eb28-44b9-96bb-66f7c8966eeb","resolution":{"observed_at":"2026-08-06T05:56:20.233265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.235727Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.235727Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e4afd852c5566bff4f848df5271ae0fd61486d524bb264f72df7d261d447494f","observation_id":"534c9646-6e90-488f-b85e-294e150d93cc","resolution":{"observed_at":"2026-08-06T05:56:20.235727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.238284Z","title":"Aes proposal: Rijndael","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.238284Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:36d829a404371bf7f72d229eab1f8b358702d06f4f0af0a7178eeb0588118217","observation_id":"c021c88a-fef8-4ba4-a376-3cc71cbb09b9","resolution":{"observed_at":"2026-08-06T05:56:20.238284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-15T07:45:30.603987Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-08-06T05:56:20.240732Z","title":"Pirates of the rag: Adaptively attacking llms to leak knowledge bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.240732Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:bd604817bff1f105eb5c07f67929796ca5050b837b159f4adb9c7eada6547de1","observation_id":"8fe632d5-e408-4752-ad1a-394b58330a0f","resolution":{"observed_at":"2026-08-06T05:56:20.240732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.243536Z","title":"Attacks, defenses and evaluations for llm conversation safety: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.243536Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:580a49726817aba4da4fd85694ef95de44a6fb3c0730f18977a4b178b4955278","observation_id":"3a5af633-defa-4a0c-bb94-5718980dbda3","resolution":{"observed_at":"2026-08-06T05:56:20.243536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.246188Z","title":"A comprehensive survey of attack techniques, implementation, and mitigation strategies in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.246188Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:774d457018b613371d985baea2015ecda323f486a97eebb696c8720fe44d6129","observation_id":"1d9d6e1e-e8ba-4244-9984-3ed50c350859","resolution":{"observed_at":"2026-08-06T05:56:20.246188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.248689Z","title":"A survey on rag meeting llms: Towards retrieval-augmented large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.248689Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:80401510b5912a7af841911002aa056c64f1ff674e22f18c9110fc7f62a1dd0d","observation_id":"c2f30071-92cc-4f4c-944c-e1be8abaac44","resolution":{"observed_at":"2026-08-06T05:56:20.248689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.251390Z","title":"How to construct random functions","venue":null,"work_id":null,"year":1986},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.251390Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5d2cc98524abeda6ea8d49869832857b3cd3943f0f59b5ce09f30341bcaabf40","observation_id":"752e4e07-dadf-4e26-b841-edc62c5780d1","resolution":{"observed_at":"2026-08-06T05:56:20.251390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.253716Z","title":"Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.253716Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:78be934b2a308d8316cb360a31c65446279b7c5f311bfbb6231dd4c6a3708ba3","observation_id":"0f16d05e-dfc7-43f6-b9e7-3bc7e7881fa1","resolution":{"observed_at":"2026-08-06T05:56:20.253716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.256332Z","title":"Detecting and preventing hallucinations in large vision language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.256332Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:19bfe9143ab19304e3f9c90b273ccec9217a37689c6b65afa61a376379a9fe3c","observation_id":"18111436-614b-415a-a13e-ee29429f24d2","resolution":{"observed_at":"2026-08-06T05:56:20.256332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-08-13T15:58:13.809876Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T05:56:20.258748Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.258748Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:311fa3b0b978ece886905ec582cedce8e3c31617c26b4912459c7f96de855174","observation_id":"50f5ffb5-f86f-4221-8332-bfa0f190d2b1","resolution":{"observed_at":"2026-08-06T05:56:20.258748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.261571Z","title":"Realm: retrieval- augmented language model pre-training","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.261571Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ca89b6daef330e59a79c012ff0665d68f6a710ef7684285cd4a45ac826e3601f","observation_id":"9060a5b3-72d8-4695-901b-1bf36d6be96e","resolution":{"observed_at":"2026-08-06T05:56:20.261571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T05:56:20.264246Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.264246Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:00af538394777e9af487247f9e7100d110ca86f62e20fb7bcce02c1188f33e0e","observation_id":"4d7dbf2d-5024-4188-9bf2-190d7779a207","resolution":{"observed_at":"2026-08-06T05:56:20.264246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.15361","last_updated":"2024-09-18T08:04:24Z","snapshot_observed_at":"2026-08-12T22:42:40.335825Z","submitted_at":"2024-09-18T08:04:24Z","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.15361","snapshot_observed_at":"2026-08-06T05:56:20.267268Z","title":"Mul- titask mayhem: Unveiling and mitigating safety gaps in llms fine-tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.267268Z"},"links":{"cited_paper":"/paper/2409.15361","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5552266d2c64edc74ff76ee0a89c35671ff5db5f551667d428ffe0fde58ca1c3","observation_id":"ee423bff-4488-45d3-bc88-149282b15fdd","resolution":{"observed_at":"2026-08-06T05:56:20.267268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.270013Z","title":"Rag-thief: Scalable extraction of private data from retrieval-augmented generation applications with agent-based attacks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.270013Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f7a85c14a7a088ecfd163bf8abbce659fd802c0d973c24a0d47d9211b588e1c1","observation_id":"ba783cfe-3a4d-495b-85f3-ffc22ac05bd2","resolution":{"observed_at":"2026-08-06T05:56:20.270013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01763","last_updated":"2025-06-23T04:05:15Z","snapshot_observed_at":"2026-08-13T04:30:37.947155Z","submitted_at":"2024-01-30T23:35:28Z","title":"When Large Language Models Meet Vector Databases: A Survey","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01763","snapshot_observed_at":"2026-08-06T05:56:20.272731Z","title":"When large language models meet vector databases: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.272731Z"},"links":{"cited_paper":"/paper/2402.01763","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:69a1665942106d39b6b4c517519c8130503dfd79ac92b541530b0a3b907d0586","observation_id":"d2731010-478a-4b2a-bdfe-d5ffe2ecbb45","resolution":{"observed_at":"2026-08-06T05:56:20.272731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.275450Z","title":"Deduplicating training data mitigates privacy risks in language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.275450Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:36cb81fef830b372628825b1480782278ffeb76b9e612046e679bc8f52f4a67d","observation_id":"7c29597b-6481-466a-82ea-016c9bc315b2","resolution":{"observed_at":"2026-08-06T05:56:20.275450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.277938Z","title":"Introduction to modern cryptography: principles and protocols","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.277938Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ced3f33e729256596be8d5c0dfa37f8e52650f4f5b6009568be9055c968b6b50","observation_id":"d267c94d-b1ec-495b-8a35-be46e34ad999","resolution":{"observed_at":"2026-08-06T05:56:20.277938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.280404Z","title":"Colbert: Efficient and effective passage search via contextual- ized late interaction over bert","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.280404Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:3008a26fa25ce725df6903df1d29cd3798e3526eb91be57c48e7251c345e0dbc","observation_id":"8bc6ae60-013d-4ea3-8dda-dbe0c61fd54b","resolution":{"observed_at":"2026-08-06T05:56:20.280404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.282848Z","title":"The enron corpus: A new dataset for email classification research","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.282848Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:dcdf2e6cd0eb6ca15ce2dcb4b0271f57dcdabb4488fd3a8203c301c0fa380eb7","observation_id":"82e9775d-0092-49c5-bc48-e3b3a0a3b809","resolution":{"observed_at":"2026-08-06T05:56:20.282848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.285370Z","title":"Billsum: A corpus for automatic summarization of us congressional bills","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.285370Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:47a0b5bbfcb5f0d1e185c9d665ff42baeb27de2f05f47334d4aaa20d3db2e903","observation_id":"9e45f6cf-4504-4b89-8e01-720633e4ea3a","resolution":{"observed_at":"2026-08-06T05:56:20.285370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.288074Z","title":"Cryptographic extraction and key derivation: The hkdf scheme","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.288074Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e09a0453b884a005ff2644fc573eac977f2338ed9a555874d777aecb65b73acb","observation_id":"53e4db9d-b8db-4e3b-96b7-1dc0609509b5","resolution":{"observed_at":"2026-08-06T05:56:20.288074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.290614Z","title":"Hmac: Keyed-hashing for message authenti- cation","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.290614Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c782fe990f1ec0e17e5dfda668cc4cde848d09413b3bc8ea7c4074b27f439df2","observation_id":"791a9f9b-17fd-42dc-8868-b1a1c97f8e43","resolution":{"observed_at":"2026-08-06T05:56:20.290614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.293229Z","title":"Watch your language: Inves- tigating content moderation with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.293229Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:939cfa49431816fda1373168035c14a78678203eca8ee2aeb14d06dacb9d969f","observation_id":"218056fc-73ee-48f7-8c90-a3cb35a635eb","resolution":{"observed_at":"2026-08-06T05:56:20.293229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.06499","last_updated":"2022-03-24T19:29:45Z","snapshot_observed_at":"2026-08-14T07:55:03.346803Z","submitted_at":"2021-07-14T06:06:52Z","title":"Deduplicating Training Data Makes Language Models Better","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.06499","snapshot_observed_at":"2026-08-06T05:56:20.295734Z","title":"Deduplicating training data makes language models better","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.295734Z"},"links":{"cited_paper":"/paper/2107.06499","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:902898c7523be5e1f656e631fba6af09dfa4d60dd84b5d9f34792fc074b5c38d","observation_id":"3bebfdcc-bb9f-485e-a549-7ce9dae11fbf","resolution":{"observed_at":"2026-08-06T05:56:20.295734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.298478Z","title":"A new generation of perspective api: Efficient multilingual character-level trans- formers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.298478Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:606986c23ccd7ded8d3e1b59cae795d264ec2511e9f79f8f9dfa0aa056a8fccf","observation_id":"7dacf7fd-f580-4145-a26b-45d8d3e65e49","resolution":{"observed_at":"2026-08-06T05:56:20.298478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.300987Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.300987Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e0e2426c7e781a870b41d7f619bdace55f4f44627ea99e1abc6d7f44a2935881","observation_id":"797257d1-b324-44e6-8bf9-bb21caba542c","resolution":{"observed_at":"2026-08-06T05:56:20.300987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.303743Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.303743Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d3011d909c69387d8b4f3cf4647e3f25911edf02aba23a9c49013fdd34867c80","observation_id":"c6686953-acd0-47a5-89b1-39c504a5431b","resolution":{"observed_at":"2026-08-06T05:56:20.303743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.306191Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.306191Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b800df94318f57ed1f3bcebb66061fd846fc1a5b429a3c9c48a1ce42f142f76e","observation_id":"aec0da2a-3978-4639-b720-be0e6eabad28","resolution":{"observed_at":"2026-08-06T05:56:20.306191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T05:56:20.308848Z","title":"Prompt injection attack against llm-integrated applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.308848Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:3dd1205bc37685904fe451e016e56c65662f01797a50175d5f514caa803ba2a6","observation_id":"c51b96cf-9ccd-4c24-af97-286ba4bef4a9","resolution":{"observed_at":"2026-08-06T05:56:20.308848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.311494Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.311494Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:964f8ea31ce2d23a3d7960c6b7f887993c8ca1470c1099b1dcd8d647bf760d73","observation_id":"1c735267-17f1-4fc3-9a5e-2609a067ce01","resolution":{"observed_at":"2026-08-06T05:56:20.311494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.314060Z","title":"Financial document summarization with structure- aware pre-training","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.314060Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:1acadc5fb63ed1160a77c27440d6073ccb6cefe4b558cbf39adf5c2104b2cb8e","observation_id":"92366c12-f225-430d-8dd9-09b056703909","resolution":{"observed_at":"2026-08-06T05:56:20.314060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.316679Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.316679Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ef66ea259cd56ae2f1323307ac2e1cc5524ba96631c078141a2112753404d3d2","observation_id":"9b8f7777-2960-4e3e-8844-3669fcdf91f0","resolution":{"observed_at":"2026-08-06T05:56:20.316679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.319097Z","title":"Llama Guard 2: Model cards and prompt formats","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.319097Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:df57f04c5eb3730be1dcfe9eacafc75f4ec0ed23c91cb32d9e16d5de5f1bfc33","observation_id":"ad6b4507-aff0-4bf7-a7cf-0958e8d65fc6","resolution":{"observed_at":"2026-08-06T05:56:20.319097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.321742Z","title":"Text embeddings reveal (almost) as much as text","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.321742Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:adbd5f77dd33805929f2c51cf27ad33ca2ca97454f0ac896023d0ce7d0e9db62","observation_id":"3d6a72b8-ba96-4866-ae56-1eaac121a0f8","resolution":{"observed_at":"2026-08-06T05:56:20.321742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.324143Z","title":"Poison-rag: Adversarial data poisoning attacks on retrieval-augmented generation in recommender systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.324143Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6311d470bd5f0143a80827f6caccf893fd8144a8db66cc566206ea0c7deab785","observation_id":"64463b8a-7658-471b-985f-47703d884eef","resolution":{"observed_at":"2026-08-06T05:56:20.324143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.326730Z","title":"A survey of published attacks on intel sgx, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.326730Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:8f9b60862b198ce796dd3956b83deac7d597a03f4590ff094c4c04d492f8cddf","observation_id":"ac128896-96ef-455b-bd5b-24e13f7f6aaf","resolution":{"observed_at":"2026-08-06T05:56:20.326730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.329423Z","title":"ChatGPT: Optimizing Language Models for Dialogue","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.329423Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9daa57243e9aec628c8ee00c36647b91fc7c9f6c79ac1ebdd12a6468a4683702","observation_id":"0b1cd6d4-5e29-4354-9841-344c66d5fe7b","resolution":{"observed_at":"2026-08-06T05:56:20.329423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.331990Z","title":"Openai text-embedding-ada-002","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.331990Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d3d847332ebc2b650daaae0eadc2640924e351f6617792cecfa9e2c2455ef502","observation_id":"e60b298c-d69a-421c-8060-6a33b27b8689","resolution":{"observed_at":"2026-08-06T05:56:20.331990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.334379Z","title":"Gpt-4o mini","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.334379Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:40332211b0a95c652bc0a4ded1758df7d48d6fa6bf17199029d32a429b472465","observation_id":"6525c947-db99-4685-9f4f-0c211425c1cd","resolution":{"observed_at":"2026-08-06T05:56:20.334379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.336967Z","title":"Training language models to follow instructions with human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.336967Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2dc908cfac8a613f8663f43de6f9c05c5c2cb06799a33f7a478ecd113b78f5a9","observation_id":"3d474fc8-3ac7-42cc-962b-ef66786aaa4a","resolution":{"observed_at":"2026-08-06T05:56:20.336967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.339520Z","title":"Development of dental consultation chatbot using retrieval augmented llm","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.339520Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:0b3a7bc5afcfe92df3dda0acdbfd19e8d6a29bdefd2eab4f6b0b94776b8f7266","observation_id":"c4745978-bedb-4bda-a406-40651d66d33c","resolution":{"observed_at":"2026-08-06T05:56:20.339520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.342750Z","title":"197: Advanced encryption standard (aes)","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.342750Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:265ded9cec23d9ff3bfd0f4db3d5190d8cb89a42b7ad165b38617ade11cc7ddb","observation_id":"fac1419c-ed57-4fcf-85c1-00f54df5821c","resolution":{"observed_at":"2026-08-06T05:56:20.342750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-14T01:01:26.117384Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-06T05:56:20.345257Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.345257Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:84d8a6e32d05b61045f69166987b23dd986c64c1258ec5dc0f0f6f6744da70e7","observation_id":"17444477-7d41-4668-a3b1-4a5da87d1633","resolution":{"observed_at":"2026-08-06T05:56:20.345257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.348137Z","title":"Scaling up llm reviews for google ads content moderation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.348137Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ebff3c22db6f92ff2042332577052b0eac4461f13f076554e82f7615c7f79a0b","observation_id":"e0524313-5b63-4cac-8171-5c1c4b54cbe9","resolution":{"observed_at":"2026-08-06T05:56:20.348137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.350867Z","title":"RocketQA: An optimized training approach to dense passage retrieval for open-domain question answering","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.350867Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:77053c6b14f511784cf9eb6c7cc90fe9b10c6f8511fb2088f4e07732db1d2617","observation_id":"bb9858d3-336d-4c63-afed-2f339ec49185","resolution":{"observed_at":"2026-08-06T05:56:20.350867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.353761Z","title":"A rag-based medical assistant especially for infectious diseases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.353761Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b29029fc3ac61e1c91b9cfc0c36ed2cad799b0d55abd5a1a93526de3cc2734ee","observation_id":"dccd3910-801c-444a-acba-b44d70679ca3","resolution":{"observed_at":"2026-08-06T05:56:20.353761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.356416Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.356416Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a12d91059308a49957e5458f82ed6d99706955aaf2ad47970f7a1f32fbae886a","observation_id":"efa47010-2e87-4f2e-999c-25993a279cc6","resolution":{"observed_at":"2026-08-06T05:56:20.356416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.358920Z","title":"Evaluation of some blockcipher modes of operation","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.358920Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e0845f0ab950f89d3c1fbc7e140b5eab6f8cf0a1292461d110efe5ea10095e9e","observation_id":"f30d9ef4-ea58-4f38-a4a2-fa3c9267370d","resolution":{"observed_at":"2026-08-06T05:56:20.358920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.05870","last_updated":"2025-03-10T12:56:54Z","snapshot_observed_at":"2026-08-12T23:46:54.336861Z","submitted_at":"2024-06-09T17:55:55Z","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.05870","snapshot_observed_at":"2026-08-06T05:56:20.361393Z","title":"Machine against the rag: Jamming retrieval-augmented generation with blocker documents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.361393Z"},"links":{"cited_paper":"/paper/2406.05870","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:61016c3682ecd0fb8ab2f14560b2b523a785f54f5f12a3b983ea32677f661107","observation_id":"1feeb62c-2a26-422d-bcfd-f7332760e5e0","resolution":{"observed_at":"2026-08-06T05:56:20.361393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.364210Z","title":"Communication theory of secrecy systems","venue":null,"work_id":null,"year":1949},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.364210Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:25fda096129623b68c73cb527023a5e643c6f4dd8490010003f522ff7d857c95","observation_id":"1185ab8e-d4d5-43fc-ae54-fcf28d274211","resolution":{"observed_at":"2026-08-06T05:56:20.364210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.366967Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.366967Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:aa0c16d713f5cfb48de9736c675cb16cde5d39ccdc679ef94969f132bdebab97","observation_id":"98e8c811-39c5-4638-93bc-a0fe156017a0","resolution":{"observed_at":"2026-08-06T05:56:20.366967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.369542Z","title":"Reflexion: Language agents with verbal reinforcement learning.Advances in Neural Information Processing Systems, 36:8634–8652, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.369542Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:19a2976a28ad57684e9c3d239520e5bf261052b08adb76779ccc7d6733870dd1","observation_id":"edb82eb8-4fdd-4621-8103-9773386842bd","resolution":{"observed_at":"2026-08-06T05:56:20.369542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.372241Z","title":"Membership inference attacks against machine learning models, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.372241Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:300e8b05e85ee762a991ffa332e08942ba61475085bf054577f1bfe2dd71a64f","observation_id":"8af396e4-03b3-44a4-8334-9c6a32509d10","resolution":{"observed_at":"2026-08-06T05:56:20.372241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-08-13T05:34:28.228740Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-06T05:56:20.374600Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.374600Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e15c6d0bf6eb9878f0c938cf0bb842dfe992341c024b279cd9961122146226fd","observation_id":"b8553c24-fc90-4633-9db7-1c66e6a638ba","resolution":{"observed_at":"2026-08-06T05:56:20.374600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.528880Z","title":"A generalized birthday problem","venue":null,"work_id":"8fcdb833-3d93-4adb-9e22-2f540e131826","year":2002},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.377312Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6bc5e2326871b8198f8fb3e5c33c49a381143e9fed4e99362431df2d6862acc0","observation_id":"11cc9749-a13e-4da5-8748-e2832aced596","resolution":{"observed_at":"2026-08-06T05:56:21.531627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.520339Z","title":"HealthCareMagic-100k-en Dataset","venue":null,"work_id":"75818bd8-b029-4beb-929e-7770b8c35c7e","year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.379881Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:05f7d5fd4d232251558371cf656f6f3ee8b01455f0de5aab7f27eedc680b279c","observation_id":"8551accf-d083-4315-9b9c-e0e940695129","resolution":{"observed_at":"2026-08-06T05:56:21.523185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19487","last_updated":"2025-02-25T09:06:14Z","snapshot_observed_at":"2026-08-12T22:35:21.863237Z","submitted_at":"2024-09-28T23:59:46Z","title":"HealthQ: Unveiling Questioning Capabilities of LLM Chains in Healthcare Conversations","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19487","snapshot_observed_at":"2026-08-06T05:56:20.382756Z","title":"Healthq: Unveiling questioning capabilities of llm chains in healthcare conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.382756Z"},"links":{"cited_paper":"/paper/2409.19487","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ac74bfaf7ae808cce37eaba1b66b964c0ba9e2018d723485d76bd33505068e34","observation_id":"7b8b6403-f851-41e8-b2c2-70d1ed398e7e","resolution":{"observed_at":"2026-08-06T05:56:20.382756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.511446Z","title":"Clasheval: Quantifying the tug-of-war between an llm’s internal prior and external evidence","venue":null,"work_id":"fd981774-180c-474a-8e44-d2b160826f78","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.385601Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5e8ea9d581566c2a5ce356a271996ceef704f93062c136a587d6025500a6fc08","observation_id":"3f5cf24f-d3bb-4d27-bfd8-ee9498bad9de","resolution":{"observed_at":"2026-08-06T05:56:21.514525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09164","last_updated":"2025-07-22T08:55:25Z","snapshot_observed_at":"2026-08-12T23:23:33.561984Z","submitted_at":"2024-07-12T10:59:32Z","title":"ShadowCode: Towards (Automatic) External Prompt Injection Attack against Code LLMs","version":6},"cited_work":{"arxiv_id":"2407.09164","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.09164","snapshot_observed_at":"2026-08-06T05:56:20.730517Z","title":"ShadowCode: Towards (Automatic) External Prompt Injection Attack against Code LLMs","venue":"cs.CR","work_id":"37cffe56-568a-4dbe-9193-f0f474960b7f","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.388204Z"},"links":{"cited_paper":"/paper/2407.09164","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a90f2e45bca3536fe80afef7d521f5c0f2ed2955891a5be5bf6d69ea07297ca8","observation_id":"5b326037-181d-41e0-a69c-5e587320ee90","resolution":{"observed_at":"2026-08-06T05:56:20.735922Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.502771Z","title":"Poisonprompt: Backdoor attack on prompt-based large language models","venue":null,"work_id":"44c658f8-da7a-42c9-9690-05e4b364f0f3","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.391196Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:dd382e00395bc71bf23eedfdb4361d031f3e665a2b95f38e231de20c9f1f9e93","observation_id":"722b493e-85f2-4d1e-9c04-19fc9d0e24a6","resolution":{"observed_at":"2026-08-06T05:56:21.505675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-11T21:00:53.689605Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-06T05:56:20.394074Z","title":"Controlnet: A firewall for rag-based llm system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.394074Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:938340f9760c6a1dd10da25cf80741706760d18d89b98229b18780beb66fbf49","observation_id":"1102c1bf-d5cc-42c0-b2e5-7844190859c8","resolution":{"observed_at":"2026-08-06T05:56:20.394074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.06794","last_updated":"2023-09-13T08:33:09Z","snapshot_observed_at":"2026-08-13T10:14:37.423969Z","submitted_at":"2023-09-13T08:33:09Z","title":"Cognitive Mirage: A Review of Hallucinations in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.06794","snapshot_observed_at":"2026-08-06T05:56:20.396846Z","title":"Cognitive mirage: A review of hallucinations in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.396846Z"},"links":{"cited_paper":"/paper/2309.06794","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:61feaec438c39a240aec8b7afed948223f9f464c61c94f13525d386074d1b70d","observation_id":"9c59aafc-0e4e-4835-9ef4-6fbcb55dff4d","resolution":{"observed_at":"2026-08-06T05:56:20.396846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.493834Z","title":"Assessing prompt injection risks in 200+ custom gpts","venue":null,"work_id":"57c93dff-74dd-400a-b5c7-691cd218afe9","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.399598Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d57bb5cd1792d594a954d20cfdbd9e5b13cab3492cfa3c0cc34a3c5d2fae7f79","observation_id":"ad7a90f3-d468-4cfb-a237-3404a836417f","resolution":{"observed_at":"2026-08-06T05:56:21.497016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.402245Z","title":"Rankrag: Unifying context ranking with retrieval-augmented generation in llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.402245Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2c07a268e9400a9bdb0da5a73a610691f3a0a39bde3f9ba02b47420236f93eb1","observation_id":"a90dc2e9-69e5-4981-9841-a668e08ec049","resolution":{"observed_at":"2026-08-06T05:56:20.402245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.479508Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG)","venue":null,"work_id":"c8e52364-19ce-4abf-83ff-8da26a17324b","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.404686Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ccc68fb4b2e0232a6403c999e6f7537ed80b8478f7858eca31c632e2b39d3440","observation_id":"af5484ae-76a2-4a4c-811b-4ed23ce3881a","resolution":{"observed_at":"2026-08-06T05:56:21.482914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.471012Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":"a7551d21-be07-4547-97a0-c3b03013136b","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.407216Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a3db42a4fb92d2cb2d30b83e47116e89ed8c0b6c51563b0c41228cf903571935","observation_id":"90af08ff-428c-4c74-a635-16f488c2a0a5","resolution":{"observed_at":"2026-08-06T05:56:21.474307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.409736Z","title":"Prac- tical poisoning attacks against retrieval-augmented generation.arXiv preprint arXiv:2504.03957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.409736Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6e4d02f37eaf3ead95c29ac63c44cef9c694f85f89600233ed0760a30d35b4d8","observation_id":"1d6da652-5a0d-44e7-854b-8850c302a734","resolution":{"observed_at":"2026-08-06T05:56:20.409736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.463082Z","title":"Hijackrag: Hijacking attacks against retrieval-augmented large language models, 2024","venue":null,"work_id":"42718882-64e9-4b60-8e5f-7be92f2528c3","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.412267Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:762ded9de1d2ba1dc138de790fe2e0dd7e48af9bb9257aa6aa456469a43f3ab4","observation_id":"bee57026-d43b-4ecd-870c-47e95853d300","resolution":{"observed_at":"2026-08-06T05:56:21.465927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19473","last_updated":"2024-06-21T08:26:36Z","snapshot_observed_at":"2026-08-13T05:27:55.126585Z","submitted_at":"2024-02-29T18:59:01Z","title":"Retrieval-Augmented Generation for AI-Generated Content: A Survey","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19473","snapshot_observed_at":"2026-08-06T05:56:20.415308Z","title":"Retrieval-augmented generation for ai-generated content: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.415308Z"},"links":{"cited_paper":"/paper/2402.19473","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:61d7c64dda70efd144823b3bd4ae18fc640e967a7ae401ae1ca7e231e643e775","observation_id":"b599b312-950e-466d-a92f-00bd7f1a42c5","resolution":{"observed_at":"2026-08-06T05:56:20.415308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.455054Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"9042296f-f111-4994-9233-6a1965dc745a","year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.417992Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:151aac688609855eed56b2cec6b70aa7e7fb1db76aa9b0e9bf7b38bb59cdfabb","observation_id":"f129fd33-ea02-4249-aac6-9bceaeff3c75","resolution":{"observed_at":"2026-08-06T05:56:21.458082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.446445Z","title":"Promptbench: A unified library for evaluation of large language models","venue":null,"work_id":"40a65251-b710-4ce7-bc82-1b7745ad2e68","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.420618Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2b732ca8dc0837c6756171d8409c1634d82710bc827eb940123958d98ddb5f04","observation_id":"a4b03626-5eff-42e6-bcc5-b38b79f9b9ff","resolution":{"observed_at":"2026-08-06T05:56:21.449323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.437907Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models, 2024","venue":null,"work_id":"098e7e5b-744a-4ce5-bc7d-241daa6f761a","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.423208Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6f10043d3d3f648134fde732ed7eddb1ef381d50765f7c687a9e1fadc1a6bd59","observation_id":"57956076-0f7a-4e38-b853-e0a9cea6b1be","resolution":{"observed_at":"2026-08-06T05:56:21.441004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.430190Z","title":null,"venue":null,"work_id":"725a565d-34b7-4297-9bb3-8cb91698b882","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.425964Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:dd2204256c8356418ca8663706cecaa7555c7ed543a7224ca1e7740e38edad13","observation_id":"fa36c9d2-957c-4319-a6d3-9d646cbfab16","resolution":{"observed_at":"2026-08-06T05:56:21.432880Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.422237Z","title":null,"venue":null,"work_id":"7498e0bd-76ea-4f7a-b019-40427b98bf42","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.428572Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5261bea41843436549f5056bc7bbe2fef5957078dc598f128a28e84175cef28e","observation_id":"364a5013-0a41-4a04-9c88-c948492a9c3d","resolution":{"observed_at":"2026-08-06T05:56:21.424944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.414193Z","title":"(b) Submit (m0, m1) to the AES-CBC challenger, receive cb ← AESCBC .EK,IV (mb) for random b $ ← − {0, 1}","venue":null,"work_id":"a07e8007-9139-4cad-adee-5c3432852e37","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.431235Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:4554aa63bdf20c470cbd82e29b58b3f2b1e71175073bde7ca37491c8782bca28","observation_id":"8a377dda-7d6f-4e8c-ab65-a55d9a5a722a","resolution":{"observed_at":"2026-08-06T05:56:21.417246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.406275Z","title":null,"venue":null,"work_id":"45ed1257-dd8b-4bb2-a3b9-14bf1a7255c5","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.433964Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:afdcab8555a0a9af4f60e25c15449a0c4a04279c8b15093bc00df9a27532f025","observation_id":"6f8bf0c1-6201-45de-8146-00b22766976e","resolution":{"observed_at":"2026-08-06T05:56:21.409044Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.397958Z","title":"16 B.2 Forward Security Game Game 2 captures the reduction for forward security of the key derivation mechanism","venue":null,"work_id":"ffc87fef-f580-43dd-b66a-73b84f9f1ea2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.436571Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ebf4bcf3a5ea6692b2ea220a5b38c251bdf8408afec4dafc6ff2a7e1996ec730","observation_id":"61223519-6de9-4db2-8057-e66cc4b74c1b","resolution":{"observed_at":"2026-08-06T05:56:21.401193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.389612Z","title":null,"venue":null,"work_id":"96f6feac-713c-4fef-84fa-0b4151eb1d40","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.439220Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:41c0f31afcb630ae897c13e5452883616269a0cd3a089f9c971fcd089bc4e3d3","observation_id":"3d9e375e-3c0f-4792-8586-5596f52a8bc4","resolution":{"observed_at":"2026-08-06T05:56:21.392234Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.381445Z","title":null,"venue":null,"work_id":"df701980-cc81-4c3a-9a28-03aaa01ae41f","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.442019Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a05f3fce1c2f1988a33e86d7ebe391cf9a79caea2dbb8f6e22be2377d14014b5","observation_id":"2305cb96-1e84-4342-a39b-9a05326a5472","resolution":{"observed_at":"2026-08-06T05:56:21.384122Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.373042Z","title":null,"venue":null,"work_id":"bf6579a6-1136-42dd-ad83-909f7c6a27f1","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.444472Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e2720a77ddbd3752b453b3f7a4095765f314e1c5b4844eb5adcdee98f2156447","observation_id":"58c6e099-7f99-4d69-9896-0aedb6cedefc","resolution":{"observed_at":"2026-08-06T05:56:21.375869Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.363891Z","title":null,"venue":null,"work_id":"d7c79260-45f7-4187-8bc8-2d094247e6e6","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.446970Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c79994c04b0e723c3d956a5f92af92a2f7a8e3d6a81280d2e33bfa43dd027a59","observation_id":"2d3d5efc-74f5-4fe9-a3da-befea9282fde","resolution":{"observed_at":"2026-08-06T05:56:21.367335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.355880Z","title":null,"venue":null,"work_id":"d5a2fd2a-47cc-4d67-bd0d-8f8c9cc44548","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.449470Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:455e32ecabc45f0eef39e8f804ad3ce53f6b5d53c86717360a08a6556811f89d","observation_id":"05f4ac0f-5053-4b42-bfe9-aced9bc60fc5","resolution":{"observed_at":"2026-08-06T05:56:21.358539Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.347673Z","title":"B.3 Chain Integrity Game Game 3 describes the reduction for the chain integrity property based on hash collision resistance","venue":null,"work_id":"37d7561b-615b-4320-81d7-f432287ba58e","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.452080Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:34e915c10cb829d00f7e84fd9256afa29159aab03a83ea2676a5c03c4fbfe4d0","observation_id":"08f376c4-066c-49e9-afd8-e9d14e23d629","resolution":{"observed_at":"2026-08-06T05:56:21.350564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.339407Z","title":null,"venue":null,"work_id":"33427e67-a1b5-484d-bdd6-b2aa1c02cbe2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.454684Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a86486b69b91b31093a45bba1ca54af4bccd17585795ccb8e558d4ae1e98383e","observation_id":"7d8978c0-248a-4aa3-82d4-b8ce5f05bdc3","resolution":{"observed_at":"2026-08-06T05:56:21.342299Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.331596Z","title":null,"venue":null,"work_id":"515ed06a-7fea-4f79-8592-b2cbb1c029d2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.457356Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e90e76080abfe972742e8ee4fca5206cc87bad527bc222571286d8326597fe22","observation_id":"98714414-9fef-4812-bdcf-853cb89e49d4","resolution":{"observed_at":"2026-08-06T05:56:21.334256Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.323617Z","title":null,"venue":null,"work_id":"1e992c56-d533-4616-bacd-4de5bb863b82","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.459947Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2df5d84c2103e947ee30ea63fc88951dfee25fd1b79e1018cb52fd0776085628","observation_id":"0de92fb8-1d48-44ee-9cc2-0ab3bf10b2e3","resolution":{"observed_at":"2026-08-06T05:56:21.326365Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.315621Z","title":null,"venue":null,"work_id":"4face67b-ceba-40c4-bc58-155ed4c84287","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.462380Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:879067fa553486c521f7a3c345725007fa48e067c707efa03bdca78924fb0133","observation_id":"ee685d93-0336-4729-b6f4-fa8dc9892743","resolution":{"observed_at":"2026-08-06T05:56:21.318271Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T07:55:51.182958Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":84,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":133},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 100 of 133 outbound references and 0 inbound Pith citation observations for arXiv:2508.01084."}