{"as_of":"2026-08-09T19:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c537daaba011f7998b8b849f34fd164184219e7513fd1cd51f3c8ab6d3d03dc1","coverage":[{"denominator":82,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":82,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:24:26.938446Z","state":"measured"},{"denominator":88,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":88,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":6,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T12:01:22.824663Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T06:59:37.735034Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2604.05480","last_updated":"2026-07-01T11:18:13Z","snapshot_observed_at":"2026-08-09T19:35:15.833704Z","submitted_at":"2026-04-07T06:21:41Z","title":"Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T19:40:10.624513Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2604.05480"},"observation_digest":"sha256:b2a65433f3b40dd4cd127335eb3fa13b8c015aa1077b73195f9d6121feaaeeb4","observation_id":"c5e286fc-45d1-4552-b85e-0e61ac6d17c2","resolution":{"observed_at":"2026-05-10T22:40:48.550832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2605.28112","last_updated":"2026-05-27T08:06:10Z","snapshot_observed_at":"2026-08-01T07:44:42.742792Z","submitted_at":"2026-05-27T08:06:10Z","title":"A Wolf in Sheep's Clothing: Targeted Routing Hijacking in Federated RAG","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T11:38:20.766858Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2605.28112"},"observation_digest":"sha256:b12651b127340a774dd7b30544af92f7d564e1d1dfa500b351276ae6437a98a3","observation_id":"fffc698d-669e-4e72-bad5-ab8ee49dcc24","resolution":{"observed_at":"2026-06-29T11:43:24.176037Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.01212","last_updated":"2026-06-03T04:47:29Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T13:03:47Z","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T17:43:41.256808Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.01212"},"observation_digest":"sha256:ed84de3f9e02a7c3803155e7fe422e85a09b0d3a4cd37bcc4212c43e93b3c1f4","observation_id":"3cc3d0b9-713b-4135-a671-39f299e10dca","resolution":{"observed_at":"2026-07-01T20:46:13.951792Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.03354","last_updated":"2026-06-02T09:03:56Z","snapshot_observed_at":"2026-08-04T03:13:16.157376Z","submitted_at":"2026-06-02T09:03:56Z","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T10:02:27.652157Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.03354"},"observation_digest":"sha256:d5a82d53ddbba436f09a67ff3fa0e54099dce6af8a3b1de7e5651e92e348b08e","observation_id":"4ea75eff-7e73-470b-b2ad-feab2155ebf1","resolution":{"observed_at":"2026-07-02T03:26:29.493660Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.21377","last_updated":"2026-06-19T12:35:00Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T12:35:00Z","title":"ARENA: An Architecture for Measuring the Transferability of Autonomous Cyber Defense","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T14:00:04.412804Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.21377"},"observation_digest":"sha256:e7f88a889254b92395a622945963f064a71853bacb443116159a8dde32b0e961","observation_id":"dfcc4d77-dd42-4f9a-9b32-484c93ec1f5a","resolution":{"observed_at":"2026-07-04T06:59:37.737225Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:d30db14b7493036e5157bc4058b87f82d45d8eb32545dba97a32e3131f23c09f","observation_id":"df58ede7-4d91-491a-8eee-6be9474f9fc3","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.18652/citation-record","integrity":"/paper/2508.18652/integrity","json":"/paper/2508.18652/citation-record.json","paper":"/paper/2508.18652"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:25.874745Z","title":"Bing copilot","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.874745Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:6de57ac1e6508a4b36bfc5efb5a2c0bcd9d31a5344ff382f3ad098acc69184d6","observation_id":"376fe348-b7ed-4afb-ba7d-9a283fed43bb","resolution":{"observed_at":"2026-08-05T16:24:25.874745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:25.885599Z","title":"Searchgpt","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.885599Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5bb9784bc3121b93df33df3d8cc44f81ca4900b367fa24726568143c2a6567d5","observation_id":"1c6d9323-5d27-46d9-adea-c481926156ea","resolution":{"observed_at":"2026-08-05T16:24:25.885599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.969007Z","title":"Google ai search","venue":null,"work_id":"8ab4731d-516d-4f9c-af3d-ab9b68302809","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.914756Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5f31c7fb1f7dcb695259f31a2457a27659c861ceabe4659dca45a4646e8ac6e2","observation_id":"c37bee79-b3d6-4ff8-868b-03d87683e369","resolution":{"observed_at":"2026-08-05T16:24:27.972043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.960902Z","title":"LlamaIndex,","venue":null,"work_id":"78b7c6f4-30ee-4213-b93f-8626a6912828","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.964008Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:acbf83c2b38150f76a7f5d99b141dcb42df20939ae0462315887edd39b500837","observation_id":"a211dc29-54a7-4a29-b225-e4e1be190665","resolution":{"observed_at":"2026-08-05T16:24:27.963607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.952389Z","title":"LangChain","venue":null,"work_id":"2a7f9cc0-ecc7-4857-9bd0-88d4af669b37","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.989097Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:59df61eb7250a5d35c5a2f2c6c6b78f38afbf152228bc58178ab9e212a9c4caa","observation_id":"ce9ee25e-3ee0-4a13-830a-e62c85cc4c49","resolution":{"observed_at":"2026-08-05T16:24:27.955594Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.944445Z","title":"Chatrtx","venue":null,"work_id":"8a1d4a7e-f6e8-4827-975e-3e0f4b554567","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.016054Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:fd78738c9f23554491a3903cab6805172b59a77d2ec9d9f986c019acbbcff266","observation_id":"c8a972e5-4018-4994-8dbb-0295c3e5cfcb","resolution":{"observed_at":"2026-08-05T16:24:27.947409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.936742Z","title":"Wikimedia downloads","venue":null,"work_id":"f6161cdd-e59e-478b-a27c-2d57ea2e95ae","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.034773Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:1bf1bf747fe1fd5e7912962700e7e2f8ffb82285968e2aaa8cc34fa70c7ba30c","observation_id":"c0a2af76-392d-41a0-bcfb-e4bcd89f3f13","resolution":{"observed_at":"2026-08-05T16:24:27.939409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.928020Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":"ec59736b-c3c1-4734-a642-d855a9f98bb9","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.074689Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:69ae3beb86e17a4181f8fc49a27e97b1fa8041806ee30e92bd82f5227dfced2d","observation_id":"1a37e376-5dba-46c7-9650-74291bcd1f2e","resolution":{"observed_at":"2026-08-05T16:24:27.931413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.916275Z","title":"Machine against the rag: Jamming retrieval-augmented generation with blocker documents,","venue":null,"work_id":"5a46553f-5069-4dbd-91e6-b85389b614ef","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.104948Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0bb88adf5cd59544769d11fc2f9a7b25b4d33fcad68254e7aa0dc3515d1b420f","observation_id":"85cca0c3-58db-411e-badc-d538e9aaa01e","resolution":{"observed_at":"2026-08-05T16:24:27.919381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.06254","last_updated":"2025-03-14T04:16:23Z","snapshot_observed_at":"2026-08-07T17:20:04.863802Z","submitted_at":"2025-03-08T15:46:38Z","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.06254","snapshot_observed_at":"2026-08-05T16:24:26.144765Z","title":"Poisoned-mrag: Knowledge poisoning attacks to multimodal retrieval augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.144765Z"},"links":{"cited_paper":"/paper/2503.06254","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d0fd6eef1de4244f283f83e0804563f9e6aba68dc0215dee3dc24143b5ef7320","observation_id":"a84b3aa3-2592-421d-9acd-6218ca858aa7","resolution":{"observed_at":"2026-08-05T16:24:26.144765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-07-06T18:03:33.406287Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-05T16:24:26.170327Z","title":"Typos that broke the rag’s back: Genetic attack on rag pipeline by simulating documents in the wild via low-level perturbations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.170327Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8a7327f194fe3a7ba5854c6149d9acd24a1dee574e38d6f287421b6722c4561b","observation_id":"03c00e83-8c71-4bb6-93f3-aebd7131c264","resolution":{"observed_at":"2026-08-05T16:24:26.170327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.204776Z","title":"Practical poisoning attacks against retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.204776Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8d1849a49d8c00db1c5e8bc4c1c16cc79fa5ac33eddbaaef35f45769f9d52a8d","observation_id":"03b79a46-9725-4fe6-bb6d-f558ba5931b5","resolution":{"observed_at":"2026-08-05T16:24:26.204776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.907798Z","title":"Glue pizza and eat rocks-exploiting vulnerabilities in retrieval-augmented generative models,","venue":null,"work_id":"67e44dc6-e8c4-4d51-8c5d-e2e50b7ac88d","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.254753Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f4b24a9cb44f4ea84d3050cc3a14576aaac24b1bb9638dd0fc0ad204f734fe78","observation_id":"207ccbe3-834c-4b0b-a131-f0ff4c3b108d","resolution":{"observed_at":"2026-08-05T16:24:27.910891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.291512Z","title":"Gasliteing the retrieval: Exploring vulnerabilities in dense embedding-based search,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.291512Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:69dd0d8346b400d0a26257b522957eeb14b7308bce584f30ec5cfe0e75c62489","observation_id":"ee8bce63-c68c-40c4-9ef1-06eef30cffcf","resolution":{"observed_at":"2026-08-05T16:24:26.291512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02163","last_updated":"2025-03-06T00:58:55Z","snapshot_observed_at":"2026-08-07T02:18:22.354749Z","submitted_at":"2024-10-03T03:06:42Z","title":"Adversarial Decoding: Generating Readable Documents for Adversarial Objectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02163","snapshot_observed_at":"2026-08-05T16:24:26.364762Z","title":"Controlled generation of natural adversarial documents for stealthy retrieval poisoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.364762Z"},"links":{"cited_paper":"/paper/2410.02163","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:72a49b5a39a7e9535abe0f0584224d2d85ebd12d315c7056df9df7a201c78468","observation_id":"f94c558f-41b4-4793-9259-4efc0621cb4f","resolution":{"observed_at":"2026-08-05T16:24:26.364762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.898793Z","title":"Trojanrag: Retrieval-augmented generation can be backdoor driver in large language models,","venue":null,"work_id":"381588d5-6f3a-4cc6-a9ad-0c2df66afde2","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.398214Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:56cad849a85f9608e8669a1e3d90786534b2ecf0a503dc274008819066eb2a26","observation_id":"d31c5873-243c-4bf9-bf9b-6344c9fb680a","resolution":{"observed_at":"2026-08-05T16:24:27.901924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.889420Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":"35c42795-7984-4618-ae8a-bcb49979cee9","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.442220Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:1535dea1d8df03e835dac5e0969660b2127fa079898e2b420abeb3fbc8d9c7df","observation_id":"2b087758-0a58-4a44-afc0-498e736cc755","resolution":{"observed_at":"2026-08-05T16:24:27.892417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.881039Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":"c0a76dcc-9619-4bba-8097-6195d84b3e42","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.476766Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8917dd368453c82ad5c14d1de94e074358607a9e4bc54b39dfeeb203f8789fbc","observation_id":"62ba5850-17c3-4c8d-aa60-fc5ee2f23843","resolution":{"observed_at":"2026-08-05T16:24:27.884180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.873017Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":"beaf419e-d032-4fa3-a7e8-d135616a4cf6","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.524764Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b9a3f147f06246f9785266d3b4f2c233f2aaea73957d12e5fb3e0e65c1f12221","observation_id":"04cb1227-90c1-45ed-9584-fab76d51fe14","resolution":{"observed_at":"2026-08-05T16:24:27.875899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13532","last_updated":"2025-08-25T08:33:56Z","snapshot_observed_at":"2026-08-08T07:32:37.775984Z","submitted_at":"2024-02-21T05:03:07Z","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13532","snapshot_observed_at":"2026-08-05T16:24:26.553837Z","title":"Whispers in grammars: Injecting covert backdoors to compromise dense retrieval systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.553837Z"},"links":{"cited_paper":"/paper/2402.13532","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5679786b311fb5bcd95dde6655fbb39362c6065f4c98eb5413bd48e3eba74fb2","observation_id":"d27ceba6-2e4f-4dd7-b992-c33bbeba1b0e","resolution":{"observed_at":"2026-08-05T16:24:26.553837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.595259Z","title":"Graphrag under fire,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.595259Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7cc0f7cc19747eec154c56bdf9bfdc9f3c92eb5f36f2dd59f5bb2539f2eee13c","observation_id":"fc8d3c27-c344-4eff-9287-efedabd53166","resolution":{"observed_at":"2026-08-05T16:24:26.595259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.864742Z","title":"Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models,","venue":null,"work_id":"99805e91-52a3-4962-95aa-a8d3099c3c86","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.643007Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3b1194ce98c11cd34cdc786b3b5461f197c4601f5225a6a5081560f08228d319","observation_id":"3d6e0c5c-b8a4-4e19-8565-405659ad3c8c","resolution":{"observed_at":"2026-08-05T16:24:27.867705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.856265Z","title":"Flippedrag: Black-box opinion manipulation adversarial attacks to retrieval-augmented generation models,","venue":null,"work_id":"14908efc-95d5-4ca6-8fed-ac11147ba7f9","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.658229Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:a15a6f4fd0d0e3d380f2b51c817f1a06118b1bf2e587c3f22f4a66e09b914c2a","observation_id":"7437f6be-e14a-4d74-ae5d-babaf660b7c9","resolution":{"observed_at":"2026-08-05T16:24:27.859053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-05T16:24:26.675242Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.675242Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3c8ae5dadd4e1f9bd8df89f6735dff7fd390c115137517d86100862e08c9f7d8","observation_id":"7d88d0b4-fc0c-4592-b4ff-567e1d06b3e0","resolution":{"observed_at":"2026-08-05T16:24:26.675242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-09T12:28:45.999719Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"cited_work":{"arxiv_id":"2505.18583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.18583","snapshot_observed_at":"2026-08-05T16:24:27.121271Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","venue":"cs.IR","work_id":"05bf8ca8-fa23-4d08-98bb-3b89a7bec0c1","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.679440Z"},"links":{"cited_paper":"/paper/2505.18583","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7ddba2a6fbc405c1603038f4a5c9561519717944df655e653831c2165f499a71","observation_id":"af7c86e6-7fca-4f82-973f-30bd4af86a6c","resolution":{"observed_at":"2026-08-05T16:24:27.124601Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.848369Z","title":"Poisoning web-scale training datasets is practical,","venue":null,"work_id":"5411fffe-e9c8-4e0c-88a0-ba4b26c6bb79","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.684041Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f6267584c867160785a80a4a2e382cc900837efc54cd19f508b2f6af0793603f","observation_id":"6fd26a46-23ea-430b-a173-5c231195047e","resolution":{"observed_at":"2026-08-05T16:24:27.851093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.840163Z","title":"Ai-based chatbots in customer service and their effects on user compliance,","venue":null,"work_id":"46b97ce3-6f75-40af-9622-8b5c7e985bd1","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.688082Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:421df45ce87caa066b5dc8fe976e78f0ba0bf1fdeb525a0279c4ca1445660b38","observation_id":"0f3ca802-2230-4faa-badf-2075cfa2dad1","resolution":{"observed_at":"2026-08-05T16:24:27.842956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.831700Z","title":"Ai in academia: An overview of selected tools and their areas of application,","venue":null,"work_id":"35e1e721-d57d-4646-bb01-cbcb2f0fe258","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.694541Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3a063251eae153eed5e7794b54276feacafbc5dceba022caf5c99f8ef7accb96","observation_id":"9c8dda39-b236-4f15-be4f-be6119a6e522","resolution":{"observed_at":"2026-08-05T16:24:27.834488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.823185Z","title":"Ai in health and medicine,","venue":null,"work_id":"122458af-d456-4fdb-9d31-1111e6120028","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.703998Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:9f1f2c71c4de3c0f69d14b3d2af367e435fec911a06f8d979c5fc48c64187526","observation_id":"7d1f0b11-b630-4c86-8dce-a85a6635cf5f","resolution":{"observed_at":"2026-08-05T16:24:27.826417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.814471Z","title":"Making llms worth every penny: Resource- limited text classification in banking,","venue":null,"work_id":"57b25057-72af-4b24-a6da-31e41db763b2","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.708001Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:10d9c2191b3146bc4f09f75322b9b5c1b1e4b1cf9bab42a0c331686d3d00d7f2","observation_id":"1fbc13a4-c10c-424f-ad25-cc911da382c3","resolution":{"observed_at":"2026-08-05T16:24:27.817566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.806304Z","title":"Chain of reference prompting helps llm to think like a lawyer,","venue":null,"work_id":"2098ddf0-c0a1-4935-afe6-8166ce596795","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.710936Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:06929f521361dc1a139e75efb5ea786e6de6baae85fe5f1a8da176d54ce641ba","observation_id":"b4bade37-fcc1-4dd7-b771-6e32668be186","resolution":{"observed_at":"2026-08-05T16:24:27.809193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.798250Z","title":"Autolaw: Augmented legal reasoning through legal precedent prediction,","venue":null,"work_id":"4fb49b54-edf1-4eaa-82cb-a127190f4c2f","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.715582Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8f4832d2cec97cfdaa57b04917461b2f414d381445b9876ce8a3b03419ef8337","observation_id":"d8f0101f-4a0e-4af3-9c9e-717df6bbb6e8","resolution":{"observed_at":"2026-08-05T16:24:27.800970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.789736Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":"02939d2a-f0be-46c2-a47c-7ec03eec1d74","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.718575Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:1ddbd2f2c827564d47ef0f75f49111b35d015893b36985505fd0e698c1c39739","observation_id":"8d1fa559-35a6-4db4-b456-bfd066e76bd1","resolution":{"observed_at":"2026-08-05T16:24:27.792486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.781618Z","title":"Prompt injection attacks against GPT-3","venue":null,"work_id":"d5dd3152-5317-425d-b90d-7173f51247e3","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.723483Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f5f6acaf6c4fbb1adb98ae62daa63aed893b35dd4f92e7dc22a9653b2bfbf0f0","observation_id":"91251107-fd17-4ffd-870f-651929c2fca8","resolution":{"observed_at":"2026-08-05T16:24:27.784505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.727038Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.727038Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:ac60f0c5473a0911c0489ef96bfc5628c5233fc2e3f2f5f415f65ef9fa4902ac","observation_id":"2bbf0cf4-6660-4cf0-aa49-cf90458973b9","resolution":{"observed_at":"2026-08-05T16:24:26.727038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.767808Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"c6aef014-f021-4742-81da-640e415d6772","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.730799Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:a2d84f3fb16f98130220a3340ec08839e11206e6d01685d86fbdc8858dbba943","observation_id":"0d8d3fd6-50f8-413f-b099-e428fdbd33de","resolution":{"observed_at":"2026-08-05T16:24:27.770549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.759909Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":"417e4986-a61b-4075-9fbe-4ae13b22ca71","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.733966Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:979cd9ff07fa493d2290332fa937cce77ab6a7f7696d30465cc2e6b7c19da04f","observation_id":"ad8edcc8-5ea0-430e-bef2-d4950c2c8fa1","resolution":{"observed_at":"2026-08-05T16:24:27.762680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T16:24:26.737248Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.737248Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0f8f787be03a385a5381d34953c89e3c2f5a8a7f38a46517dd587d96204c0c4f","observation_id":"dd32dd8d-6c3c-41b0-931d-d716d8c7d025","resolution":{"observed_at":"2026-08-05T16:24:26.737248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-08T04:50:42.660630Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:24:26.741048Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.741048Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f42582d32d873fecae9a6189f842d838d116a107ac8bea4d9d45487ca50399d8","observation_id":"ded80d7c-1156-4ac7-8bdd-2c9422582adc","resolution":{"observed_at":"2026-08-05T16:24:26.741048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.751620Z","title":"Natural questions: a benchmark for question answering research,","venue":null,"work_id":"9a5bc9cb-c267-4071-ba01-a224a429d109","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.744283Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b6797d0885135cb1f8c1eab27574e00724e4735775ea5fec469b4c31337dc359","observation_id":"31305030-9104-43e7-9c99-1973060cc691","resolution":{"observed_at":"2026-08-05T16:24:27.754888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.743833Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering,","venue":null,"work_id":"5e3791ff-8040-47a9-9aad-21aea1ae931a","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.748087Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:ecf4cb6c23cf6097a08c549b9280f9bc3d3aaee02ccb5cd1d4f956e9e1d742de","observation_id":"4cabb9f9-40e6-41e2-98cc-fa578611cbdf","resolution":{"observed_at":"2026-08-05T16:24:27.746695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.736263Z","title":"Ms marco: A human generated machine reading comprehension dataset,","venue":null,"work_id":"5c93aa23-4748-4e10-b2a5-f8217f98662e","year":2016},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.751060Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:19eea430432d475810bcb4ad5f35ec3f3d62186a3d85f61f4f3c01bf95863afd","observation_id":"2b806c03-b3c2-4225-8436-634298064de3","resolution":{"observed_at":"2026-08-05T16:24:27.738943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-05T16:24:26.761737Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.761737Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:e094dbe2d303bd6b87a72d30aff2001bfeb167aa1d32a0bbf2dbd42c053b2729","observation_id":"2f31de9e-9511-4172-a89d-d7fe60f67b18","resolution":{"observed_at":"2026-08-05T16:24:26.761737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-05T16:24:26.764936Z","title":"Gpt-4o system card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.764936Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:907d5bd6c7a31aa8e5ddde48bf330cd4587163d679eebf92b9996362e0ef8225","observation_id":"9039784c-88df-4cda-899f-6c4851970bd2","resolution":{"observed_at":"2026-08-05T16:24:26.764936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.727798Z","title":"Poisoning retrieval corpora by injecting adversarial passages,","venue":null,"work_id":"2d55e70c-0afd-4ee0-a7ad-8becb7ecb0d8","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.767886Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:57e4fa2cd0f28487f62218adce64379741b14971877f5827daf576de66d22029","observation_id":"6848f411-29db-46d5-a0e9-9e09415ac3e9","resolution":{"observed_at":"2026-08-05T16:24:27.730884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.719781Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":"81c8f886-984e-4276-88b8-9713275f77eb","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.770414Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d13712d3d211bc27f64281f6a00e84c1d9d2b2bb3ed8d52f8f4fda94c428a55e","observation_id":"5e9c26ce-838a-4dcb-a356-142ef2c48e76","resolution":{"observed_at":"2026-08-05T16:24:27.722683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.711816Z","title":"InstructRAG: Instructing retrieval-augmented generation via self-synthesized rationales,","venue":null,"work_id":"b287d220-75d8-43f5-8bec-83f4ea0abb1b","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.774801Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:9b11d89adf322afdb09cb83cf0eaf685ff5304258dcb77944be18ec3d95e8714","observation_id":"77fc09f9-f69b-4725-8cf4-fdeed1b7f998","resolution":{"observed_at":"2026-08-05T16:24:27.714581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.703639Z","title":"Self-rag: Learning to retrieve, generate, and critique through self- reflection,","venue":null,"work_id":"96fa6e6b-94aa-4410-8fcd-316a69035ad3","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.777478Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5900acf85b13ede4988b5a36074555cd57e7b978ad2a66188ff48f3d57792175","observation_id":"79b2a7a2-9377-4894-af17-87186b707440","resolution":{"observed_at":"2026-08-05T16:24:27.706458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.694445Z","title":"Corrective retrieval augmented generation,","venue":null,"work_id":"8f77b96a-bbc8-4153-8a8e-d9f433d39fae","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.780864Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:fc1408343681ff4360c32dded536b288d42b475bbf5ad6b33e10506644392715","observation_id":"ffb9a1e1-2bf6-4d3a-818c-702e96704517","resolution":{"observed_at":"2026-08-05T16:24:27.697410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.681911Z","title":"Certifiably robust rag against retrieval corruption,","venue":null,"work_id":"a77c2fac-4553-4211-8854-a18c019f8212","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.786020Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5701ea5341e3e8197b0b6f491f8756ae531c9796cf3b1952d6214eb7034f9ac5","observation_id":"34212d96-a7ee-4e64-9d9b-3745ba063bab","resolution":{"observed_at":"2026-08-05T16:24:27.686874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.666493Z","title":"Beir: A heterogeneous benchmark for zero-shot evaluation of information retrieval models,","venue":null,"work_id":"129e01cd-6a17-4324-b2e2-069745780fb4","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.788816Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7e15b2d46a7b9818d651e2737c741e49d69a22ab2015afc25e6055093fc15e3a","observation_id":"018cc2b7-1373-4676-ba86-86280b9d3daa","resolution":{"observed_at":"2026-08-05T16:24:27.671058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.647819Z","title":"Trec 2019 news track overview.,","venue":null,"work_id":"2aa186ff-c0c3-4362-8200-843f8bac2741","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.792447Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:932eac479673cb62274ce70b624342b31867c8c4c49f3d7453f0c5dad0f5b90a","observation_id":"a2e8d238-4310-4724-be2c-cf6296b283da","resolution":{"observed_at":"2026-08-05T16:24:27.651796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.638488Z","title":"Dense passage retrieval for open- domain question answering,","venue":null,"work_id":"36b14cd2-ca9e-42b9-a798-4717366d3345","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.795003Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f64c2a0aefbd2538927d64e3963fa9d1da6eb8d88b7b207618a7d406a8fdf460","observation_id":"6f31de8f-c905-498b-8256-60235deac471","resolution":{"observed_at":"2026-08-05T16:24:27.641297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.624737Z","title":"Unsupervised dense information retrieval with contrastive learning,","venue":null,"work_id":"19f6ad0b-e303-48fd-8173-502e681406c8","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.797632Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:c1570d610786ae9692a1f376c291297dfb029b7322752839686dde978c781583","observation_id":"7e2855cc-aed3-4af3-b2e4-5d2cd3cc5284","resolution":{"observed_at":"2026-08-05T16:24:27.632954Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.615464Z","title":"Approximate nearest neighbor negative contrastive learning for dense text retrieval,","venue":null,"work_id":"855ad8fb-df98-4ab7-90c0-842944440737","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.800231Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5ecb65d7347ebcf1bb0771f63b51c3a72ae808386a967a0d74b5e1609c8a1ed4","observation_id":"98975d4b-e95b-4885-a693-e7b3a77f7e79","resolution":{"observed_at":"2026-08-05T16:24:27.619467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.00879","last_updated":"2025-05-22T22:00:19Z","snapshot_observed_at":"2026-07-06T20:15:31.955797Z","submitted_at":"2025-01-01T15:57:34Z","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.00879","snapshot_observed_at":"2026-08-05T16:24:26.802996Z","title":"Trustrag: Enhancing robustness and trustworthiness in rag,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.802996Z"},"links":{"cited_paper":"/paper/2501.00879","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8ae453cc0e239b0f1c491cc91702e629167250740cfc7594c37dc2c4a24ce0e7","observation_id":"dd07344c-a108-4973-9785-ddb537bdea22","resolution":{"observed_at":"2026-08-05T16:24:26.802996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.806377Z","title":"Least squares quantization in pcm,","venue":null,"work_id":null,"year":1982},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.806377Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:fb43538029820dfab089239e8623885316d60590e799d1f85a12c1c10fdd80ca","observation_id":"1b534293-5139-415e-8ac8-151495a49109","resolution":{"observed_at":"2026-08-05T16:24:26.806377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T16:24:26.815232Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.815232Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0f6c54b6cabf4c4c1d3bbec99b447892161d98e58acb5e1a6930a6168957e99a","observation_id":"5b907a44-d126-4496-a4db-3ba67956ff53","resolution":{"observed_at":"2026-08-05T16:24:26.815232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.599935Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models,","venue":null,"work_id":"a7914ddb-7218-47fb-9e33-7831238eaeb6","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.827295Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:2708dfa3c73d90ba7ab0ad9ced1c78b9a255c886c5b4f9bf7883de89b3a30f54","observation_id":"23dd6321-fb7c-46c8-baa6-0f32f7818220","resolution":{"observed_at":"2026-08-05T16:24:27.604327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.587317Z","title":"Textattack: A framework for adversarial attacks, data augmentation, and adversarial training in nlp,","venue":null,"work_id":"805cc96f-ce4a-4acf-bda7-038ba3bbc178","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.835261Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7fb4f2d67c1d08f90d4aca24c983f1ab8c896830c5cd261518d87489d1128796","observation_id":"acaf36e5-2bd0-4e22-9e9f-2ae2602dbf54","resolution":{"observed_at":"2026-08-05T16:24:27.590810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.857014Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.857014Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:e6270a1ed7523d4791ba7378a1fe0565d0c24ab887c67041b754679a96521611","observation_id":"f0f53df0-71ef-40ba-a9df-872c6e28284f","resolution":{"observed_at":"2026-08-05T16:24:26.857014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.565287Z","title":"Textbugger: Generating adversarial text against real-world applications,","venue":null,"work_id":"120f259c-cbee-43fc-baea-ac1b39285717","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.874745Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:122bccdb620ec25b27b981ca07d7f65e360da80ed64d9d9ee179100ead3d082d","observation_id":"355be88f-5e12-4f6b-b51d-38c73536f65c","resolution":{"observed_at":"2026-08-05T16:24:27.568190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.878217Z","title":"Bert-attack: Adversarial attack against bert using bert,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.878217Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:db13bb5e2e60054c7cc7888987bb7913effc3d5d67039d2e39cee639d900e1a0","observation_id":"9957a14e-a55a-4a39-b56c-4878e0ca2ba0","resolution":{"observed_at":"2026-08-05T16:24:26.878217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.551020Z","title":"Black-box generation of adversarial text sequences to evade deep learning classifiers,","venue":null,"work_id":"da95772b-301a-4687-9e79-c0e8bf9d352b","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.881847Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:32957e8538d3a907e37e4c874675d99e0d84b9e5d2f67a03a071dcad2a340a14","observation_id":"5534a1b4-121e-446f-96bc-93fc691fecca","resolution":{"observed_at":"2026-08-05T16:24:27.554199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07221","last_updated":"2024-08-01T03:02:44Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-03-23T00:49:40Z","title":"Improving Retrieval for RAG based Question Answering Models on Financial Documents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07221","snapshot_observed_at":"2026-08-05T16:24:26.885481Z","title":"Improving retrieval for rag based question answering models on financial documents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.885481Z"},"links":{"cited_paper":"/paper/2404.07221","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:4699b588d0ad8756f952ccfc1ba3e5d1d357acda2642f97b7e5578c3d88e32d1","observation_id":"d62f8e4f-14ba-43fe-8b79-c738f2c3f743","resolution":{"observed_at":"2026-08-05T16:24:26.885481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07883","last_updated":"2024-01-15T18:25:18Z","snapshot_observed_at":"2026-08-06T16:08:33.380543Z","submitted_at":"2024-01-15T18:25:18Z","title":"The Chronicles of RAG: The Retriever, the Chunk and the Generator","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07883","snapshot_observed_at":"2026-08-05T16:24:26.890089Z","title":"The chronicles of rag: The retriever, the chunk and the generator,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.890089Z"},"links":{"cited_paper":"/paper/2401.07883","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f4656b69849cbeb66f7e0dd0de8955dcfbe94bfa16c746773d4f3864f93154fa","observation_id":"fabf6f85-f2f7-4d25-ad2f-e118c8d95970","resolution":{"observed_at":"2026-08-05T16:24:26.890089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.19794","last_updated":"2024-08-17T11:31:56Z","snapshot_observed_at":"2026-08-07T14:30:14.274747Z","submitted_at":"2024-07-29T08:38:14Z","title":"Introducing a new hyper-parameter for RAG: Context Window Utilization","version":2},"cited_work":{"arxiv_id":"2407.19794","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.19794","snapshot_observed_at":"2026-08-05T16:24:26.986025Z","title":"Introducing a new hyper-parameter for RAG: Context Window Utilization","venue":"cs.CL","work_id":"6f0394fd-fade-4760-b73a-cb8228312ed4","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.895704Z"},"links":{"cited_paper":"/paper/2407.19794","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:4dcb1cd6e51095e95ca6b2552c80d5e0cb2bbbd594a42fab515c555c1585de90","observation_id":"762df6c9-65c9-441e-ba41-abb8a942088a","resolution":{"observed_at":"2026-08-05T16:24:26.991409Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.543339Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":"5515abf1-5d73-4ab0-8592-cb86c6cf0157","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.898925Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:17b61dd05050249d8ec966b29068b7d38f1203835f96654c5d66a51319fe019b","observation_id":"eee5a6f4-5a0b-423d-832b-d5d7bc74bf5b","resolution":{"observed_at":"2026-08-05T16:24:27.546172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-05T16:24:26.901552Z","title":"Llama 2: Open foundation and fine-tuned chat models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.901552Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:31398cd034df56166430da19a176a4eb3369bf0aa854f03f241662aead40185e","observation_id":"0935f282-c561-46ec-9817-cb0575cae64c","resolution":{"observed_at":"2026-08-05T16:24:26.901552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.530705Z","title":"Language models are few-shot learners,","venue":null,"work_id":"c65616ed-d483-4183-8003-0500d68e4532","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.904776Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:82590357a9f7648022c904d1931806bde4fa9856a2ef2ccc26672a13cef23d3e","observation_id":"56ea0577-a0cc-4e48-a055-860cc86966cf","resolution":{"observed_at":"2026-08-05T16:24:27.533838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.522225Z","title":"Introducing the model context protocol","venue":null,"work_id":"aa718da4-7f85-477b-85d1-827b8525229c","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.907421Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:72ba4ebfb57b251be36d45b59d1cb6d1c53dedb689230a0ce2bb290ba310cc79","observation_id":"e42099f8-6833-4897-9b68-ea096240108f","resolution":{"observed_at":"2026-08-05T16:24:27.525194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.514378Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":"fc49e17f-7555-41db-b841-1d997b939d5d","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.910081Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:738e23867be7942a2fd7b862a15e4cffcb8e1960641849abd0b490191bc83017","observation_id":"ed7955a3-ad2c-42ee-868a-86f5cc3c3855","resolution":{"observed_at":"2026-08-05T16:24:27.517255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.506246Z","title":"Reflexion: Language agents with verbal reinforcement learning,","venue":null,"work_id":"60538113-b14c-4bae-9771-0c09069d4732","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.912782Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d9352cbe12cdf05147ad1d3e329008008b645c515ecf3afdfd6119e49ebf1999","observation_id":"ddb23993-78ba-4c49-939c-46db8bf8ecf0","resolution":{"observed_at":"2026-08-05T16:24:27.509351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.497686Z","title":"Executable code actions elicit better llm agents,","venue":null,"work_id":"f68238e1-1f06-4231-bf01-026fae9f1e96","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.915392Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7540182f72254d218f15410419572b386739d50a7193b3e30d747bded317d75e","observation_id":"f3a73943-79f2-4fa8-a096-895e9fb27660","resolution":{"observed_at":"2026-08-05T16:24:27.500851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.488590Z","title":"Bolaa: Benchmarking and orchestrating llm-augmented autonomous agents,","venue":null,"work_id":"87383cf4-15e9-4a67-a4ac-c1dd5c1bd95b","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.918193Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:2accc555d37c1df66032ddd58a7632bf74832fc80a3ffc4848ee186515778f0b","observation_id":"466cbde8-f518-412a-a437-3add5374d6df","resolution":{"observed_at":"2026-08-05T16:24:27.491344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.480358Z","title":"Qasina: Religious domain question answering using sirah nabawiyah,","venue":null,"work_id":"17f7c31e-ec79-4113-be23-eaaf35fa242a","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.921022Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:fb57ff3b815921d865a106424708b8dddb9584b3d1eac517329ae13cad48c8ad","observation_id":"a515583b-1d5c-4c20-a39f-6019674c6549","resolution":{"observed_at":"2026-08-05T16:24:27.483182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.471843Z","title":"Catastrophic jailbreak of open-source llms via exploiting generation,","venue":null,"work_id":"1aca827a-94b3-4c3f-b590-10185ac6cbde","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.923663Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:6c80aeb8a56eefc509ded8716c0698a66e6b5af87990f38538d945b16af9d9da","observation_id":"239c75cf-8528-4de1-a378-1c8cc1927ed9","resolution":{"observed_at":"2026-08-05T16:24:27.474962Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.463644Z","title":"Neural exec: Learning (and learning from) execution triggers for prompt injection attacks,","venue":null,"work_id":"c2d3ee71-be68-441c-83bc-7ebbc8899724","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.926269Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:285bdc7cf987324a47e827fee7b81d54ef5a8108c02cbafb5b8596af4b7c6678","observation_id":"916d27eb-ffc7-4e14-803b-0932c9d899f5","resolution":{"observed_at":"2026-08-05T16:24:27.466490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.455279Z","title":"A density-based algorithm for discovering clusters in large spatial databases with noise,","venue":null,"work_id":"15f06265-0720-4931-b783-eade045ff367","year":1996},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.929086Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:54b0a0303c67b4be50bb0f2a81f91bad1dd4580885fabfa263b468049ce1a06b","observation_id":"18255eed-9f4d-4b31-9174-5c3576987783","resolution":{"observed_at":"2026-08-05T16:24:27.458215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.932262Z","title":"hdbscan: Hierarchical density based clustering,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.932262Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0bc2a7724b401a659f383ea67dfa38629a3e50315983dbba00b9b1f303560179","observation_id":"24d73751-bcbc-4a89-bf07-80692eb68daa","resolution":{"observed_at":"2026-08-05T16:24:26.932262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.441332Z","title":"Data clustering using bisecting k-means,","venue":null,"work_id":"e7cad79b-ef8d-48b9-b85f-c64e978819cb","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.935685Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:161ebc66e149b2f926b51e1fdbeafc14753955aa272317565a9ad93f66f8401e","observation_id":"d1d54638-9fc4-4d37-b800-2fe070de0839","resolution":{"observed_at":"2026-08-05T16:24:27.444127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.431662Z","title":"Scikit-learn: Machine learning in python,","venue":null,"work_id":"a7a8e331-e96c-4d04-b5a3-a32f7e0508aa","year":2011},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.938446Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:59649445a5b3c4dea291c1a2b065a7cfef131eeaf94fca05450f0c2b6c23dc54","observation_id":"2324b795-6608-48dd-a4db-43940b01a4c4","resolution":{"observed_at":"2026-08-05T16:24:27.435603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T00:00:30.596813Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation"},"reference_resolution":{"displayed":82,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":2,"verified_fuzzy":56},"total_outbound_references":82},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 82 of 82 outbound references and 6 inbound Pith citation observations for arXiv:2508.18652."}