{"as_of":"2026-08-09T17:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:45c0abeb84cd0c2e320a833dd11b734a5ef32299d067f159aa3e1c3d6a534f10","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:08:59.996070Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02678/citation-record","integrity":"/paper/2608.02678/integrity","json":"/paper/2608.02678/citation-record.json","paper":"/paper/2608.02678"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.959494Z","title":"A survey of large language models,","venue":null,"work_id":"e31b9a4c-1217-459f-97d7-85876920083c","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.705195Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:f5a739c4d94538d24deb5b0accae1b05df864732d4e67ab494accb1024784de6","observation_id":"e89d9bc8-32c4-4e42-933b-2448c5889893","resolution":{"observed_at":"2026-08-06T00:09:05.031265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.736171Z","title":"Large language models encode clinical knowledge,","venue":null,"work_id":"f42fb442-dfe3-4727-850b-ffa785c674b9","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.793296Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:b0d7fdad327becae5e1a957c8abed92b090dfd69e3ae1f7a54b0e8918edbb5cd","observation_id":"4aa1c024-4bd5-49be-af1d-dd060837f527","resolution":{"observed_at":"2026-08-06T00:09:04.844502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.569689Z","title":"When flue meets flang: Bench- marks and large pretrained language model for financial domain,","venue":null,"work_id":"1863d68c-bc5a-433b-a056-371085499271","year":2022},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.934771Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:abc69cb1e6436ef3933767dbc3bf01a10c05348dfae3af2f436929b3ca484f6f","observation_id":"ee08156c-9337-4924-88bd-d86469714f6e","resolution":{"observed_at":"2026-08-06T00:09:04.645981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.362555Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":"9f800486-184b-4c99-9610-9a1eb8bc02a2","year":2020},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.155179Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:a007ae20bbb32df780d962ca84c1a437035df869f627522f0ff33033efd6f55f","observation_id":"25e51f3e-a969-428b-bdb0-41ff3e6005d6","resolution":{"observed_at":"2026-08-06T00:09:04.481292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.138949Z","title":"{PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models,","venue":null,"work_id":"80e45e4b-3966-4d03-b8d3-3cbf24f34c9f","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.355982Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:0eb3a177b754de8603099700a9933fed28e30f3af5c53ad838bdac2e09998cb8","observation_id":"b2a9c1e0-61a9-4da9-80fb-bb3df4b24ced","resolution":{"observed_at":"2026-08-06T00:09:04.238964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.960864Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"e29f3c75-b0e9-4008-96ae-b666f92f90b6","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.514424Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:9b4d77c7b3a12f1615fad8cc15c56b636c7c3eae4a821f436564284ded83cbe6","observation_id":"73574ac3-eac0-47ac-9fd2-26612ac3535c","resolution":{"observed_at":"2026-08-06T00:09:04.051344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.741993Z","title":"Confusedpilot: Confused deputy risks in rag-based llms,","venue":null,"work_id":"092dccc2-5b36-4deb-a573-d15644939b32","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.666055Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:eac18f0f6661cfa5e98bc1d7cd5a68f62782ee6381c1c1ddd0355cd3c4576154","observation_id":"b3e9c1eb-d909-4f79-9940-c5c001e03b63","resolution":{"observed_at":"2026-08-06T00:09:03.867001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.471405Z","title":"Adversarial search engine optimization for large language models,","venue":null,"work_id":"ac0f4543-f1bf-4ecf-b62b-4b8c27c52bda","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.755120Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:09d3ab712f45be9672ab19a5072454d25f4ea7fe21376e11abe7da8914b0cb63","observation_id":"ce901d2c-f8f1-42dd-89f2-7e4284bc3714","resolution":{"observed_at":"2026-08-06T00:09:03.583907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.172690Z","title":"Poisoning retrieval corpora by injecting adversarial passages,","venue":null,"work_id":"c7489176-a349-4507-aa60-5422e3fe73a6","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.876666Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:2e4500365c766342ab8e923d91ea9697414b6af5d3d457e99efce4fad8a826e3","observation_id":"8929c9fe-90f1-4729-a352-8c0660feaaa7","resolution":{"observed_at":"2026-08-06T00:09:03.308880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T00:08:56.979447Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models. arxiv 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.979447Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:1a4f8a929cd7b7fba8ce08e9243c9ed31b6c916cd7bbf755ca3723b6dfd98ecd","observation_id":"773c8ce7-9fb7-439e-bfb2-53574988c585","resolution":{"observed_at":"2026-08-06T00:08:56.979447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.897691Z","title":"One shot dominance: Knowledge poisoning attack on retrieval-augmented generation systems","venue":null,"work_id":"8605ea99-a317-4202-90cf-ee66dd8e4fb1","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.063942Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:0daeecbde6f078566e3f60ad5eb6be6e9840aa288f99fd8703fc6553a8743c44","observation_id":"1bc58718-7302-4394-9e70-93a0f911a995","resolution":{"observed_at":"2026-08-06T00:09:03.048824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.617056Z","title":"Practical poisoning attacks against retrieval-augmented generation,","venue":null,"work_id":"55695e99-f86c-40a7-ba06-6f8365a30564","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.149347Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:5dc84c72abc096a5b4ee8ba13067d3a4066027065d5ca8f6dbe57ff63becbfe0","observation_id":"ace8509d-d722-4787-9301-f918ff9a6cdd","resolution":{"observed_at":"2026-08-06T00:09:02.733797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-06T00:08:57.235015Z","title":"Unsupervised dense information retrieval with con- trastive learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.235015Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:5a0f009ffb9c6a7deb5715c332555ffa63cec1fafbad512642328b81bcb122ac","observation_id":"f7293d19-2f15-4c48-8596-0366b38e9719","resolution":{"observed_at":"2026-08-06T00:08:57.235015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.247583Z","title":"Joint-gcg: Unified gradient-based poisoning attacks on retrieval-augmented generation systems,","venue":null,"work_id":"b1515d99-37eb-4103-8fcf-90edd71d5c86","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.407325Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:fe2cb5c4f4442c20fd4a5598290931c6150db5e55052efd4bf59fcc8aaa6179a","observation_id":"2a04a548-5906-472c-a79c-7d63b2ac3d21","resolution":{"observed_at":"2026-08-06T00:09:02.454739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:08:57.600027Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.600027Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:e57e6983935b84f79d1285f856c8b20016cb82f4bafb73596a572788df1d2b43","observation_id":"23a61e54-789b-4d0b-9a03-65ce8862cb6b","resolution":{"observed_at":"2026-08-06T00:08:57.600027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-06T00:08:57.754979Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.754979Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:eb02e4f77f222c91fc88019f670b54a70e83fa6ca9dcea83f38e70ec90d11f50","observation_id":"5a9fb543-f8cf-43f2-86eb-ce9ae019f9d5","resolution":{"observed_at":"2026-08-06T00:08:57.754979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.12201","last_updated":"2026-04-14T02:10:23Z","snapshot_observed_at":"2026-08-03T02:44:54.974207Z","submitted_at":"2026-04-14T02:10:23Z","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","version":1},"cited_work":{"arxiv_id":"2604.12201","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.12201","snapshot_observed_at":"2026-08-06T00:09:00.182095Z","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","venue":"cs.IR","work_id":"5dffe85e-5f49-4cef-ab0d-96d67e1c199b","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.938030Z"},"links":{"cited_paper":"/paper/2604.12201","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:35a62837aa9ce38b7514109247435e53915be8c2cfd55975a317bc505d992a1a","observation_id":"e4e81593-7437-4ba4-a183-4fa95c379147","resolution":{"observed_at":"2026-08-06T00:09:00.254511Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-06T00:08:58.115745Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.115745Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:c858af1866072cb6abc256ac2bc65c5cc22b8602e14a549c9af4964c8163ce30","observation_id":"070bb755-99df-4510-84f6-b877be8d4642","resolution":{"observed_at":"2026-08-06T00:08:58.115745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.979350Z","title":"Instructrag: Instructing retrieval- augmented generation via self-synthesized rationales,","venue":null,"work_id":"b0e6e73a-ae6c-4c55-82e2-009a5f6a4a56","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.315399Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:c2a7485fdbe30bb001e7f643266f5a4262780e21d42402ec7fe636f13c3dc295","observation_id":"4dc1c3e1-a57e-4b0b-a52d-8975e19da2ff","resolution":{"observed_at":"2026-08-06T00:09:02.068374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.00879","last_updated":"2025-05-22T22:00:19Z","snapshot_observed_at":"2026-07-06T20:15:31.955797Z","submitted_at":"2025-01-01T15:57:34Z","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.00879","snapshot_observed_at":"2026-08-06T00:08:58.464347Z","title":"Trustrag: Enhancing robustness and trustworthiness in retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.464347Z"},"links":{"cited_paper":"/paper/2501.00879","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:663eb644f6e41cc982cba707beb06adb796a9c733f978030b24b977bb012dad2","observation_id":"388a33ac-7604-42ef-b875-0cc2da37e103","resolution":{"observed_at":"2026-08-06T00:08:58.464347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.707665Z","title":"Certifiably robust rag against retrieval corruption,","venue":null,"work_id":"b78e9910-ab4f-431e-9378-1075d07ba0f5","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.596841Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:b5bd73f069f7f7845880b90adc52af44e2de2f640072c15a42399b92f202ba3d","observation_id":"060b992f-5dda-4bf1-a519-d8b56606878e","resolution":{"observed_at":"2026-08-06T00:09:01.828990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.429311Z","title":"Astute rag: Overcoming imperfect retrieval augmentation and knowledge conflicts for large language models,","venue":null,"work_id":"0de215a7-e102-40fe-aba4-9a9bb93f308a","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.782021Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:71ccb60ebaf4ee8c666e28c3541b25c44fba1dc7dc2bf1b62026268218dc4ed9","observation_id":"c3d1dbb0-8069-48a3-91fd-883026d4db48","resolution":{"observed_at":"2026-08-06T00:09:01.546520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.310888Z","title":"Adaptive chameleon or stubborn sloth: Revealing the behavior of large language models in knowledge conflicts,","venue":null,"work_id":"bee5283d-3688-426f-8049-82a161eaa737","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.038294Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:348029aea2e7d65109ea0fa0afaa9861c39ea88896db1beb07162ca9a3a4f748","observation_id":"4a5fd4dc-a918-4ddc-a8b8-f333e148e794","resolution":{"observed_at":"2026-08-06T00:09:01.362377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.120830Z","title":"Investigating context faithfulness in large language models: The roles of memory strength and evidence style,","venue":null,"work_id":"efae3f94-ef24-4397-b893-f24ccb3b5cd6","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.242582Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:c1435868d1532bff14c3cd81d000818a86ebd8f4073ae597f6a8673fbd0817cb","observation_id":"0548051e-c953-4b9d-becc-1f2082c0549c","resolution":{"observed_at":"2026-08-06T00:09:01.222872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.874464Z","title":"Context-faithful prompt- ing for large language models,","venue":null,"work_id":"351909cf-50dd-4431-98d4-d8d9c9c897a8","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.412762Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:5703217620a215a3b96c6747479c6049ba8024b8dbccd6b27a40e4bfff08d7fc","observation_id":"707683b0-e4bc-467b-b4d4-3b1daf8172e4","resolution":{"observed_at":"2026-08-06T00:09:00.987441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.719671Z","title":"What is seen cannot be unseen: The disruptive effect of knowledge conflict on large language models,","venue":null,"work_id":"a5c33342-cd69-4b0e-8d52-ed0c201966bf","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.584576Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:add0a3ae9c9a465308972372acecb49c2348ebccc60f4a2e1b70648b6df6ee9a","observation_id":"c7f4d3f6-632f-487b-aa49-cd42b7926a89","resolution":{"observed_at":"2026-08-06T00:09:00.780452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.566083Z","title":"Redeep: Detecting hallucination in retrieval-augmented generation via mechanistic interpretability,","venue":null,"work_id":"c32c68ef-ed98-4281-8da6-fa8c2d5bdb34","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.802655Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:82c1eab2e22e174564916d65919e78c4e27a741977ac1dc82f2e909167a3d7c5","observation_id":"37db2f43-29c9-4f0f-b474-27eabbb4b1b8","resolution":{"observed_at":"2026-08-06T00:09:00.632040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.379951Z","title":"Beir: A heterogenous benchmark for zero-shot evaluation of informa- tion retrieval models,","venue":null,"work_id":"5baaeb92-a379-4b6b-a436-9f10f724611b","year":2021},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.996070Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:96ef5c495414e0f8eaac9e93bb48c6269be8877d9fcfec6bdb0ce532c48e45ee","observation_id":"b62e0bf1-c001-46b5-a84a-27ebd8795e1f","resolution":{"observed_at":"2026-08-06T00:09:00.455894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":1,"verified_fuzzy":21},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2608.02678."}