{"as_of":"2026-08-10T03:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c6f364d30a9dbca69707d279c85d0626194dd8b041b32fffc0f17e5c9d86d740","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":22,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T19:15:25.782530Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T20:48:55.403948Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-08T19:15:25.782530Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-08T19:10:42.419238Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":229,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.782530Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:f67736bf9d12d3f775623db12ba2e222f0bb6c2dd03dcc9b936e9a8d1c412ed5","observation_id":"6cdd55d8-30db-4c96-854b-93292eea7f95","resolution":{"observed_at":"2026-08-08T19:15:25.782530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T15:15:48.802863Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.15753","last_updated":"2025-05-21T16:58:14Z","snapshot_observed_at":"2026-08-07T15:09:59.174634Z","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:15:48.802863Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.15753"},"observation_digest":"sha256:c08a55819410c2462edb6792768a69b08414d96e690a83e0e60d963737593a90","observation_id":"dee30cea-29b1-40b1-b489-8b9ad2672dad","resolution":{"observed_at":"2026-08-07T15:15:48.802863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T14:33:00.710112Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18543","last_updated":"2025-05-24T06:17:59Z","snapshot_observed_at":"2026-08-09T13:15:45.915554Z","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-07T14:33:00.710112Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.18543"},"observation_digest":"sha256:2fab436e3e85a2309daa7c45c0565f39814c71d95b8c29bab656de132286f279","observation_id":"98309379-6233-4c3a-a018-9a47b5a839bd","resolution":{"observed_at":"2026-08-07T14:33:00.710112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T14:10:29.785258Z","title":"Poisoning retrieval corpora by injecting adversarial passages.arXiv preprint arXiv:2310.19156, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-09T12:55:36.998329Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T14:10:29.785258Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.19864"},"observation_digest":"sha256:ff45ea0de43d92807f4fcac0a2170b8ae43d49a952b778281a9e3f11a9c3221e","observation_id":"ab2d30a3-cda8-4b78-9131-51617e5d1c12","resolution":{"observed_at":"2026-08-07T14:10:29.785258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T13:21:40.196536Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-09T10:35:51.717096Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.196536Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:504e51aee9d31990c713b076997a81d552a811fa01a513a6d714d5dd97ada20c","observation_id":"1352cddc-bea4-444d-a0c2-ac35e9a1594a","resolution":{"observed_at":"2026-08-07T13:21:40.196536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2506.04390","last_updated":"2026-05-22T04:35:08Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-04T19:15:09Z","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-25T08:10:31.473565Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2506.04390"},"observation_digest":"sha256:b8271daac7de439afc8c54e5a60df977b9748c66c06c30c6aae0fb8f78d46594","observation_id":"227adf8d-6938-4757-9eed-a3deb23d1055","resolution":{"observed_at":"2026-05-25T08:15:34.194437Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T04:15:36.006831Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-07T23:47:33.467619Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:36.006831Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:e2f1a0e8bd459be8ec719a82d26a75d1e4c18a8fb829c390a1592d0a9eadfaf6","observation_id":"187d8aaa-509a-4ab2-a7de-a92141cd0eb0","resolution":{"observed_at":"2026-08-07T04:15:36.006831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-07T00:32:36.766672Z","title":"Poisoning retrieval corpora by injecting adversarial passages.arXiv preprint arXiv:2310.19156, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":104,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.766672Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:cc861e2cfb6773ffda3822203fcff4886ae2acad2f21289fdcd077194ec70655","observation_id":"ac521aa4-d960-4a5f-9b62-bcb9a8d4712f","resolution":{"observed_at":"2026-08-07T00:32:36.766672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2508.03793","last_updated":"2026-04-17T19:17:37Z","snapshot_observed_at":"2026-07-06T22:08:21.728198Z","submitted_at":"2025-08-05T17:56:51Z","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-05-19T00:33:53.280563Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2508.03793"},"observation_digest":"sha256:1b65a79a134a6f46c9f4a3808b7e75b7d32f7b8f4c805ecb540e1fb217330163","observation_id":"695659b7-2f50-4bd9-b1d9-39a6c49741b1","resolution":{"observed_at":"2026-05-19T00:36:56.372080Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-05T15:18:37.129287Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:37.129287Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bfdd4db6dead7ff08a78381e41529b0a958b85b1e3c23bca3046d931d49a3797","observation_id":"f2b911c7-cfd5-487d-abc9-14a1fca88c14","resolution":{"observed_at":"2026-08-05T15:18:37.129287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-04T21:34:00.476143Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-09T14:05:01.644916Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T21:34:00.476143Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:00d90c4cc20d05b1d60907c3ca100bbd88a6b213e915ad19c6b77176ad4e5e0d","observation_id":"35b64f81-59e0-486d-aa8e-70fea927b5ae","resolution":{"observed_at":"2026-08-04T21:34:00.476143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:ca6d27ecbfed3b2d49c5dba9446a5f6a322816d911981a4ece11c06032b41f7f","observation_id":"c246311c-67fd-417a-980c-a33ef9bd42e4","resolution":{"observed_at":"2026-05-18T03:42:22.418270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2605.01591","last_updated":"2026-05-02T19:26:34Z","snapshot_observed_at":"2026-07-06T23:14:47.444386Z","submitted_at":"2026-05-02T19:26:34Z","title":"Led to Mislead: Adversarial Content Injection for Attacks on Neural Ranking Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-09T17:37:56.757376Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2605.01591"},"observation_digest":"sha256:39bae866f364830a818301fda27b4c4d5d7b727c2c267f222796679df1f0ca26","observation_id":"67470691-85b9-48fe-9b34-06971ecda5e1","resolution":{"observed_at":"2026-05-11T16:21:06.618031Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:44984cb169f5a40edb334cf677a2661257179bdfb65b39172efc95194375234d","observation_id":"27827127-08a7-4472-9350-f53c41f2a442","resolution":{"observed_at":"2026-05-11T11:31:00.613037Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2605.27157","last_updated":"2026-05-26T15:18:43Z","snapshot_observed_at":"2026-08-05T03:04:01.161346Z","submitted_at":"2026-05-26T15:18:43Z","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-29T17:06:46.379906Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2605.27157"},"observation_digest":"sha256:977dff0e8973d665e68487531571e9c3b7fbe5218482e908696848a9769869d5","observation_id":"54fe4814-5bc3-4cf2-9cd7-81677cd8f0ab","resolution":{"observed_at":"2026-06-29T17:13:44.834477Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2606.12290","last_updated":"2026-06-10T16:26:46Z","snapshot_observed_at":"2026-08-02T00:16:37.704294Z","submitted_at":"2026-06-10T16:26:46Z","title":"Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-27T09:13:58.485088Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2606.12290"},"observation_digest":"sha256:57611ad2cf3d6e3f22a6f51b460e7fb98ff43c944c97d39bbfc1d60a01068c61","observation_id":"6925d48b-eef5-498d-9b67-d49e48083da9","resolution":{"observed_at":"2026-07-03T11:58:06.295628Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2606.27736","last_updated":"2026-06-26T05:35:27Z","snapshot_observed_at":"2026-08-08T00:59:39.330375Z","submitted_at":"2026-06-26T05:35:27Z","title":"ToE: A Hierarchical and Explainable Claim Verification Framework with Dynamic Multi-source Evidence Retrieval and Aggregation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T05:03:26.118083Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2606.27736"},"observation_digest":"sha256:15592f7e07cc3fabdf481c414ca661ce1c16ae75fcd0610cd7de9aaefb625330","observation_id":"7ee4c39b-35b6-4a48-bc81-fc063e177287","resolution":{"observed_at":"2026-06-29T18:43:51.212151Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":"2310.19156","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-03T20:48:55.403948Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"7a9045de-d851-40eb-835f-e52dc6379bcb","year":2023},"citing_paper":{"arxiv_id":"2607.01276","last_updated":"2026-07-01T02:56:39Z","snapshot_observed_at":"2026-08-07T20:05:48.951900Z","submitted_at":"2026-07-01T02:56:39Z","title":"Embedding Inference Attack","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-07-03T20:40:52.467421Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2607.01276"},"observation_digest":"sha256:37ddd69bd5533a970453dc7770be98deee1906d3530cedfc97e529bc6b44ab0c","observation_id":"45eb349e-fb94-4e99-bd5c-3fe22ccdf53f","resolution":{"observed_at":"2026-07-03T20:48:55.406514Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-11T09:51:06.966438Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.05029","last_updated":"2026-07-06T13:10:13Z","snapshot_observed_at":"2026-08-02T16:42:25.901342Z","submitted_at":"2026-07-06T13:10:13Z","title":"Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-11T09:51:06.966438Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2607.05029"},"observation_digest":"sha256:678abdbda1273d8e056244aba43b49afdefc075716ee5b3890fa4ba73a884982","observation_id":"32d7a8f9-a12f-459c-b003-fd50fa74ecc8","resolution":{"observed_at":"2026-07-11T09:51:06.966438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-07-14T16:32:10.501693Z","title":"Poisoning retrieval corpora by injecting adversarial passages.arXiv preprint arXiv:2310.19156, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09748","last_updated":"2026-07-03T19:59:03Z","snapshot_observed_at":"2026-07-16T23:18:00.443934Z","submitted_at":"2026-07-03T19:59:03Z","title":"Replicating Belief, Not Bits: Epistemic State Replication for Agentic Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-14T16:32:10.501693Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2607.09748"},"observation_digest":"sha256:563b87085de901778fd1648e7ca71936782904d4c8a1e1facc1dd01ae4a09693","observation_id":"9ed3f77b-6fc9-4574-bc8b-46317a26396a","resolution":{"observed_at":"2026-07-14T16:32:10.501693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-01T06:04:46.664778Z","title":"arXiv preprint arXiv:2310.19156 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":281,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.664778Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:9788ef149a56d3dd6c82c1a960fcce414d8110246d81099ebb599e93cbabf3c0","observation_id":"bfa797df-0fbb-4917-9bf9-e4f623a4eafa","resolution":{"observed_at":"2026-08-01T06:04:46.664778Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-08T18:59:12.533013Z","title":"Poisoning re- trieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04366","last_updated":"2026-08-05T02:13:37Z","snapshot_observed_at":"2026-08-09T05:05:12.792555Z","submitted_at":"2026-08-05T02:13:37Z","title":"Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T18:59:12.533013Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2608.04366"},"observation_digest":"sha256:5274a5fc40190ff14b0cb199276e7106e6a5c50c5552d173aec5fc7bb196097e","observation_id":"2765eacf-69e5-4cb9-8559-ba23ca6dadff","resolution":{"observed_at":"2026-08-08T18:59:12.533013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2310.19156/citation-record","integrity":"/paper/2310.19156/integrity","json":"/paper/2310.19156/citation-record.json","paper":"/paper/2310.19156"},"outbound":[],"paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 22 inbound Pith citation observations for arXiv:2310.19156."}