{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3NSHONV75SCQJMHEEJIWKCCM6F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"54bf4ebcd96d94380944d554d1f17262d0852d59c2549f48e9078b40ef6f1b60","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-07-24T03:55:51Z","title_canon_sha256":"9b1f524fbad3678a0663041666d47a1181ee674c5c67a0212c00080f22fbd11f"},"schema_version":"1.0","source":{"id":"2607.21951","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.21951","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2607.21951v1","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.21951","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"3NSHONV75SCQ","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"3NSHONV75SCQJMHE","created_at":"2026-07-27T00:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"3NSHONV7","created_at":"2026-07-27T00:20:29Z"}],"graph_snapshots":[{"event_id":"sha256:2224c1aa3d8cc0169d99f0f0c58cb772195a573d11e0eb74c58dd61bdd2a47be","target":"graph","created_at":"2026-07-27T00:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.21951/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper investigates the adversarial manipulation of the ranked recommendations produced by web-augmented large language models (LLMs). When an LLM answers a recommendation query by retrieving and reading live webpages, it acts as a recommender, and each retrieved page becomes a potential attack surface. Prior work has examined fabricated products, retrieval poisoning, and rank promotion. However, these studies do not compare how different edits to an already retrieved page change the model's final ranking while the surrounding source set remains unchanged. To address this gap, we propose S","authors_text":"Billy Sung, Evan Caville, Marius Portmann, Sara Dolnicar, Siamak Layeghy","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-07-24T03:55:51Z","title":"SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.21951","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6697f30ee3d4151b34a7fef90d1bc8a702dc5d99aecd1031eb3fee809c696e65","target":"record","created_at":"2026-07-27T00:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"54bf4ebcd96d94380944d554d1f17262d0852d59c2549f48e9078b40ef6f1b60","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2026-07-24T03:55:51Z","title_canon_sha256":"9b1f524fbad3678a0663041666d47a1181ee674c5c67a0212c00080f22fbd11f"},"schema_version":"1.0","source":{"id":"2607.21951","kind":"arxiv","version":1}},"canonical_sha256":"db647736bfec8504b0e4225165084cf168618faf46431495be47b7003e0a85a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db647736bfec8504b0e4225165084cf168618faf46431495be47b7003e0a85a6","first_computed_at":"2026-07-27T00:20:29.429821Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-27T00:20:29.429821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iD3c8ix8DOybBVhJxt6eTbmeElVhv1pJkF5CMkHALpvd23qrxq9zPtPjOBsA7wctu9jYcfgHnh9+yPIkYZ8OCw==","signature_status":"signed_v1","signed_at":"2026-07-27T00:20:29.430596Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.21951","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6697f30ee3d4151b34a7fef90d1bc8a702dc5d99aecd1031eb3fee809c696e65","sha256:2224c1aa3d8cc0169d99f0f0c58cb772195a573d11e0eb74c58dd61bdd2a47be"],"state_sha256":"9b80e62f9988bb6f7b1e9fb8c92d23872a7e2bfadd81b97fbd26d4adae80b4e5"}