{"as_of":"2026-08-21T15:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:af8462947a9f482f2128bb2693c2db86018f7c8c11d21ed89df5b2364705b2b9","coverage":[{"denominator":46,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T10:47:45.879873Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:24:26.452708Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T20:57:34.959834Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-08-07T10:24:26.452708Z","title":"InProceedings of the 2022 Conference on Empirical Methods in Nat- ural Language Processing, pages 2078–2093, Abu Dhabi, United Arab Emirates","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05451","last_updated":"2025-06-05T17:56:05Z","snapshot_observed_at":"2026-08-15T21:12:10.172980Z","submitted_at":"2025-06-05T17:56:05Z","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T10:24:26.452708Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2506.05451"},"observation_digest":"sha256:53b879a3ab30a8d5bc59b6bfb99c1eb8d16439f5b4806f570d649f8abcb5b39f","observation_id":"d2f08816-1d81-41f5-87dd-077d24031298","resolution":{"observed_at":"2026-08-07T10:24:26.452708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-08-05T15:36:42.755529Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19720","last_updated":"2025-08-30T05:54:41Z","snapshot_observed_at":"2026-08-19T08:37:16.354821Z","submitted_at":"2025-08-27T09:30:24Z","title":"Continuously Steering LLMs Sensitivity to Contextual Knowledge with Proxy Models","version":3},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-05T15:36:42.755529Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2508.19720"},"observation_digest":"sha256:f8842ae04c8c0fcc20d86839428bc675775bdff2d4de9bd05b3c818ffc137610","observation_id":"b709dbac-dee6-4372-9e34-bdb6ad384872","resolution":{"observed_at":"2026-08-05T15:36:42.755529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-08-04T17:46:19.712663Z","title":"Knowledge database or poison base? detecting RAG poisoning attack through LLM activations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.10682","last_updated":"2025-09-12T20:26:16Z","snapshot_observed_at":"2026-08-21T08:43:25.498819Z","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","version":1},"reference_index":285,"source":"pdf_text","source_observed_at":"2026-08-04T17:46:19.712663Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2509.10682"},"observation_digest":"sha256:5fbe0e00c27250963bb93c0586a40ed0dd2dbf2d004fd3e5d2502c4e1fad1d97","observation_id":"673ec37c-e6eb-4828-a143-e56dfe98c9f7","resolution":{"observed_at":"2026-08-04T17:46:19.712663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-08-15T18:39:48.992890Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:518e40199ec6482cdc61dfd2b825722677c40d5ef406ecf75e4f9cdc40e7c092","observation_id":"25a2cf83-68a9-45be-be8a-aea5b65407a4","resolution":{"observed_at":"2026-05-11T11:31:00.607006Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-05-08T18:42:06.418583Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:69beb4da9d30c29a2850fe4125d48614ad3fb77a3bcb1c74808fd844edd1bb03","observation_id":"c50d10ef-63aa-4012-a101-0ffb9be0ecdf","resolution":{"observed_at":"2026-05-09T06:15:38.458692Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-08-02T15:04:28.795792Z","title":"Revprag: Revealing poisoning attacks in retrieval-augmented generation through llm activation analysis.arXiv preprint arXiv:2411.18948, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2605.02187","last_updated":"2026-07-22T08:25:06Z","snapshot_observed_at":"2026-08-11T08:50:00.509790Z","submitted_at":"2026-05-04T03:35:17Z","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-02T15:04:28.795792Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.02187"},"observation_digest":"sha256:c9598120486542a0e25d7cac544131b8967e2be795bd148ac82e0aa3d22cfda5","observation_id":"1e5d41db-e97e-41d2-8336-75a749900c05","resolution":{"observed_at":"2026-08-02T15:04:28.795792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-08-16T05:35:49.579965Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-07T15:57:39.809778Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:7f4c7cb1bf63cc5e43b653e3a56ae5ee5cf3079f859fe94d95919541c0a6f607","observation_id":"54d6e5ee-809d-4611-b599-e649af824c37","resolution":{"observed_at":"2026-05-12T00:01:14.235914Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-08-16T05:35:49.579965Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T18:50:41.401393Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:ab27c7db2f407b2baacd7fe84f0306dd67de5f7935a2c1f64b12fabaad263f43","observation_id":"5ed12662-c16d-4cd7-8da4-3bce69a791c1","resolution":{"observed_at":"2026-05-09T06:10:41.446718Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2605.06812","last_updated":"2026-05-07T18:14:29Z","snapshot_observed_at":"2026-08-08T00:53:41.268638Z","submitted_at":"2026-05-07T18:14:29Z","title":"Towards Security-Auditable LLM Agents: A Unified Graph Representation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-11T01:23:23.514576Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2605.06812"},"observation_digest":"sha256:a2e24cbdc3a4b5da292dc922f70120ef273d042e76093c41a1301b428aeff3ef","observation_id":"5c063290-aa9e-4af0-a11a-5170f5463230","resolution":{"observed_at":"2026-05-11T04:25:58.549272Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":"2411.18948","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-07-10T20:57:34.959834Z","title":"11 Florian Tramèr, Nicholas Carlini, Wieland Brendel, Aleksander Madry, Alexey Kurakin, and Nico- las Papernot","venue":"cs.CR","work_id":"3a5be880-4072-42a5-9135-b55e2a0e6826","year":2024},"citing_paper":{"arxiv_id":"2607.06807","last_updated":"2026-07-07T21:12:27Z","snapshot_observed_at":"2026-08-17T03:24:12.985218Z","submitted_at":"2026-07-07T21:12:27Z","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-10T20:55:21.031591Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2607.06807"},"observation_digest":"sha256:009f77746443ccc9f5f6445594e91bef0ea77ad9db2c5ba1b74a1a05cd545436","observation_id":"a6478b69-8110-4f00-9e8e-b95600c45bc3","resolution":{"observed_at":"2026-07-10T20:57:34.974946Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18948","snapshot_observed_at":"2026-08-02T01:34:13.121805Z","title":"Revprag: Revealing poisoning attacks in retrieval-augmented generation through llm activation analysis.arXiv preprint arXiv:2411.18948, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14651","last_updated":"2026-07-16T07:19:33Z","snapshot_observed_at":"2026-08-20T22:03:24.592631Z","submitted_at":"2026-07-16T07:19:33Z","title":"MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T01:34:13.121805Z"},"links":{"cited_paper":"/paper/2411.18948","citing_paper":"/paper/2607.14651"},"observation_digest":"sha256:8bacad27a0ba8c89c01577b031ac0ba6ed65e576196bd20f9de0093983d930de","observation_id":"92944e81-a041-401b-8bb5-220526e741ed","resolution":{"observed_at":"2026-08-02T01:34:13.121805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.18948/citation-record","integrity":"/paper/2411.18948/integrity","json":"/paper/2411.18948/citation-record.json","paper":"/paper/2411.18948"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.647908Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.647908Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:c8a3c08b672660cd6b624cb7a927187c89b91e21a51f5afddc0620a66a7c1fc0","observation_id":"efd91058-0792-43b0-b73e-264249dc50ac","resolution":{"observed_at":"2026-08-12T10:47:45.647908Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.654141Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.654141Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:9a28ad209d8f5bf8addd25f17c1312154bd56dfbb14ebbe746c93f906c72e721","observation_id":"d9beb0df-6311-4579-a2ff-f1491c5941cd","resolution":{"observed_at":"2026-08-12T10:47:45.654141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00799","last_updated":"2025-03-06T17:43:10Z","snapshot_observed_at":"2026-08-16T13:46:59.275887Z","submitted_at":"2024-06-02T16:53:21Z","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00799","snapshot_observed_at":"2026-08-12T10:47:45.660196Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.660196Z"},"links":{"cited_paper":"/paper/2406.00799","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:9ce6817c0604783571fbb89e1b6466e5d1cffbbd3e5a7c910f8184567a19b80c","observation_id":"5bac9ba5-0724-4c15-8c82-bc4cecbe455e","resolution":{"observed_at":"2026-08-12T10:47:45.660196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11511","last_updated":"2023-10-17T18:18:32Z","snapshot_observed_at":"2026-08-12T20:38:07.563701Z","submitted_at":"2023-10-17T18:18:32Z","title":"Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11511","snapshot_observed_at":"2026-08-12T10:47:45.665777Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.665777Z"},"links":{"cited_paper":"/paper/2310.11511","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:9fc37fcedcbeb6829c5aff0ea640a598d2cc491a6fd4df57f9b5ccfb0f49ce65","observation_id":"13060b2e-e9d1-4393-ba49-fbf1b169f3ce","resolution":{"observed_at":"2026-08-12T10:47:45.665777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.725688Z","title":null,"venue":null,"work_id":"739a5781-35af-45ad-a8af-f32990c62558","year":2018},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.671444Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:8c1803696d7d4066f60dfed5882b18ba903ff9d4bbac39296821b1b36e5dc351","observation_id":"0107c67f-115f-42c2-92f3-479b9dbc0237","resolution":{"observed_at":"2026-08-12T10:47:46.731040Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.676488Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.676488Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:8fbdc99d1bfc03853c4698d8aefad3edeb8464ddba354e76feea3832658bdcf1","observation_id":"dfa81ce6-a8da-4e67-8663-de16b346fd12","resolution":{"observed_at":"2026-08-12T10:47:45.676488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-12T10:47:45.681476Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.681476Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:d353bc708531b06a254b950f1f5a9cd6d5f749f5cff9bdd3e61a65f2cd8fb96d","observation_id":"aa482548-2a6d-43b2-aca5-ad11f20d829c","resolution":{"observed_at":"2026-08-12T10:47:45.681476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.15023","last_updated":"2021-06-28T23:19:02Z","snapshot_observed_at":"2026-08-19T21:49:31.921460Z","submitted_at":"2021-06-28T23:19:02Z","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.15023","snapshot_observed_at":"2026-08-12T10:47:45.686898Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.686898Z"},"links":{"cited_paper":"/paper/2106.15023","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:bd3aef1636defb8d64bb72bd73ad88f4be410ae52895a114ad382f24bef53c2e","observation_id":"b53d152a-33b4-4b2f-93f7-34eda75aa012","resolution":{"observed_at":"2026-08-12T10:47:45.686898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15008","last_updated":"2023-07-20T17:33:25Z","snapshot_observed_at":"2026-08-20T07:40:46.617542Z","submitted_at":"2023-07-20T17:33:25Z","title":"A LLM Assisted Exploitation of AI-Guardian","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15008","snapshot_observed_at":"2026-08-12T10:47:45.692928Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.692928Z"},"links":{"cited_paper":"/paper/2307.15008","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:53c3bc8034363d7700daf6dcf98692eeaebfec6fe14c75eb8ccf5ea770c9cd73","observation_id":"b5cdd109-1b03-4d1b-9c18-084ff0f4b01a","resolution":{"observed_at":"2026-08-12T10:47:45.692928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.698775Z","title":null,"venue":null,"work_id":"c51a97ce-0932-4fd2-b10c-1b29e6cefbdc","year":2017},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.698146Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:c7388df465a829b270316815b617c126c8d1f6aff93edca2d6c0afd147f9823c","observation_id":"d6d2da79-5f9b-4da5-bd87-3aab33d066c2","resolution":{"observed_at":"2026-08-12T10:47:46.703571Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-08-19T01:07:39.255482Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-12T10:47:45.703313Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.703313Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:ab987aab46be5343ae58942d6f70051f4a1af6f3d2ff4ce8c01d447ed7b099bc","observation_id":"d5aa124d-72e3-4399-b157-2167612605be","resolution":{"observed_at":"2026-08-12T10:47:45.703313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.708753Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.708753Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:6c8f4d948f910c74008767b57e51484cc624190d957fd341ad20f5c5390075d4","observation_id":"de22944d-5648-4716-aec7-acaf2af4f1b1","resolution":{"observed_at":"2026-08-12T10:47:45.708753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.00208","last_updated":"2024-10-13T21:05:31Z","snapshot_observed_at":"2026-08-20T19:03:39.687438Z","submitted_at":"2024-04-30T21:20:17Z","title":"A Primer on the Inner Workings of Transformer-based Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.00208","snapshot_observed_at":"2026-08-12T10:47:45.713695Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.713695Z"},"links":{"cited_paper":"/paper/2405.00208","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:a0aa6c069615a3a38ceb2f9713e2c97d1e54f9de7c295c64493fb9a09b23b9b8","observation_id":"88c67020-6368-4df0-95b5-e3a433e48f2c","resolution":{"observed_at":"2026-08-12T10:47:45.713695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.718859Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.718859Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:b832f0ff8e21ebd46f23624c8a19e101add79a60ea74a2fd65e822540b912b2b","observation_id":"105c7d14-7e09-4a8b-a1d5-d251c41418a5","resolution":{"observed_at":"2026-08-12T10:47:45.718859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.660186Z","title":null,"venue":null,"work_id":"2f46fbab-c666-4401-bf68-d94bd5dacf5b","year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.723736Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:a99f051617150be69a81a0b42a0cd5df59bc3a443bf500b66c1c004edc3e2f18","observation_id":"03921c43-aee5-4a72-b4c7-87ad795ecfbc","resolution":{"observed_at":"2026-08-12T10:47:46.665278Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.728464Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.728464Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:03b78885f7f3d28547ded31064b0aaf3b7b0e85fbff544b49fba54f2d8ea3bec","observation_id":"ec034590-ab74-4610-aab8-6a712c8191c1","resolution":{"observed_at":"2026-08-12T10:47:45.728464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.630747Z","title":null,"venue":null,"work_id":"18cfa5c7-b2a7-4929-be15-89247a23c30d","year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.733462Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:382ee4f09a6474634b40a06892d7f5ddbb4c52a72c7d877bfdb5da56a95de605","observation_id":"1341ee39-6128-40b5-a5d3-560bf601aed1","resolution":{"observed_at":"2026-08-12T10:47:46.637376Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-08-14T13:19:21.742321Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-12T10:47:45.739286Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.739286Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:6d22e7fda40e9070facc45566202693ae45f6bf2cf2b1ded9492d7c3dc32cdd5","observation_id":"c792380a-e5cd-4e2b-a86f-e4a6281bc6e3","resolution":{"observed_at":"2026-08-12T10:47:45.739286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.744483Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.744483Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:da891a1da6ba4d24860c556fa6911309ae760cb832a9ece3278420aa40c6cc84","observation_id":"0e3ceb7a-8185-4342-8ea5-1950e21966df","resolution":{"observed_at":"2026-08-12T10:47:45.744483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-08-17T20:30:34.016254Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-12T10:47:45.749393Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.749393Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:5d4174cbcb6de1797b7573f74f2ed115a2b7c017de6a1354bde0aebb261af20c","observation_id":"8c3ea858-042b-4fd6-994b-a4be6b010d91","resolution":{"observed_at":"2026-08-12T10:47:45.749393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20774","last_updated":"2025-04-30T17:59:57Z","snapshot_observed_at":"2026-08-20T02:12:29.279616Z","submitted_at":"2024-05-27T17:59:43Z","title":"Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20774","snapshot_observed_at":"2026-08-12T10:47:45.754281Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.754281Z"},"links":{"cited_paper":"/paper/2405.20774","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:69b64df33152f92ddfa554768c4bc8250911be494ff60f012419e8c2b08c36c8","observation_id":"c6033087-edbf-4d27-b6d0-757f7cd3ed99","resolution":{"observed_at":"2026-08-12T10:47:45.754281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.602821Z","title":null,"venue":null,"work_id":"852d21bf-c5c8-4b28-a3c7-ba3c6f2746a0","year":2020},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.759177Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:230e40daf06cdabef6e719abb787e86029215c45212e3034a7fb6c333fec2850","observation_id":"9f7595f9-3f18-4dee-9732-886e6b3ccb28","resolution":{"observed_at":"2026-08-12T10:47:46.607846Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.764959Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.764959Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:bfdd16f69ffb909e5b14f10140a3d9097c6522b6eac22adb26b4c2fc9a51f2db","observation_id":"d39496ca-5e41-4a25-9be4-30b3b165e89b","resolution":{"observed_at":"2026-08-12T10:47:45.764959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.05115","last_updated":"2022-05-23T16:41:08Z","snapshot_observed_at":"2026-08-18T13:49:25.475974Z","submitted_at":"2022-03-10T02:24:14Z","title":"Internet-augmented language models through few-shot prompting for open-domain question answering","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.05115","snapshot_observed_at":"2026-08-12T10:47:45.770062Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.770062Z"},"links":{"cited_paper":"/paper/2203.05115","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:6faa22a3be11557bf8827d9eca50279aab7d1fda6a1f058ffb4f0ebde41094b7","observation_id":"ca32e063-c0ac-416a-8b43-b39ecd245dbf","resolution":{"observed_at":"2026-08-12T10:47:45.770062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.775197Z","title":"u ttler, Mike Lewis, Wen-tau Yih, Tim Rockt \\","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.775197Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:64f91928f5c7721f8ecbd1c6be4234c8057984b3f4da7c66ed86efb75654ae7a","observation_id":"c3f39845-ea4b-46a2-b070-a3582f9e6d5f","resolution":{"observed_at":"2026-08-12T10:47:45.775197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.779937Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.779937Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:5d77288483551cf83650345c1bf839a5de4fed66b191ca268a63db799900a807","observation_id":"9f085c0c-9949-494a-8f72-219328db6ea6","resolution":{"observed_at":"2026-08-12T10:47:45.779937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.784918Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.784918Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:b49750832d7519c30fdf0ecee5257bd422aa3ae984ad08f91b190adeb50c66d0","observation_id":"7175d654-0250-4b75-8826-6e7c6c418aec","resolution":{"observed_at":"2026-08-12T10:47:45.784918Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.789809Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.789809Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:1f0cd6ae819124bd088601280285ffe9f4d53b2e1bf9babc24629918e74601b2","observation_id":"1b2d563a-a69f-4655-a3cb-e993dee82e05","resolution":{"observed_at":"2026-08-12T10:47:45.789809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.542513Z","title":null,"venue":null,"work_id":"189ae235-9999-4a97-8169-d85d71f9088b","year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.794641Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:e070ec9ae8190d65979c3a33ec00b982988cd5019d911d9243e7ba23db9d23a6","observation_id":"c61f2484-b5e9-4bb7-ae16-e9bb09c3f8e4","resolution":{"observed_at":"2026-08-12T10:47:46.548031Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.799584Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.799584Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:5079ba76c8ea6fe15f28a7da4c9bec7c3ccfe80b812fdb19640dae90d87e2d3c","observation_id":"d957c52d-1013-462c-af9a-03f34bf70e9e","resolution":{"observed_at":"2026-08-12T10:47:45.799584Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.804514Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.804514Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:4ccf661d11d5b9c9be08ea93d662824a54c757842a2e7c24eff3559c6f322c6b","observation_id":"3104067b-9522-44b8-8d33-74e20e8fc1f5","resolution":{"observed_at":"2026-08-12T10:47:45.804514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.809508Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.809508Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:42e97c46fffab040b2be7122a7d86d525e78a103603afc95653bb17d4d87a94a","observation_id":"fbdc00ff-d2f4-4c6a-802a-33da5c981754","resolution":{"observed_at":"2026-08-12T10:47:45.809508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.491942Z","title":null,"venue":null,"work_id":"d5af5928-7351-4dbd-bdc4-8156a5ee78cd","year":2018},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.814364Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:c48a166b91542ea52d2d12406e5b1d1d0487040066073ac0f41128ff4b31fc58","observation_id":"936cf67b-ebfb-47e8-a69d-4c399363226f","resolution":{"observed_at":"2026-08-12T10:47:46.497142Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08663","last_updated":"2021-10-21T01:18:28Z","snapshot_observed_at":"2026-08-09T23:22:21.200279Z","submitted_at":"2021-04-17T23:29:55Z","title":"BEIR: A Heterogenous Benchmark for Zero-shot Evaluation of Information Retrieval Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08663","snapshot_observed_at":"2026-08-12T10:47:45.819230Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.819230Z"},"links":{"cited_paper":"/paper/2104.08663","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:83cae2d4beb2a5568df78be2db6c893e4e7678a6b50a51a310d9cd8f5fd2c49a","observation_id":"20e40f56-cbc0-4b43-8d36-ad884435810c","resolution":{"observed_at":"2026-08-12T10:47:45.819230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-12T10:47:45.824801Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.824801Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:2ca6a0dcf44fc26fe0381389a47e2f07c2c93b4020f6f2fc59327750230416f0","observation_id":"a30e2553-5c1a-46d3-86a1-39fc75719b41","resolution":{"observed_at":"2026-08-12T10:47:45.824801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.475686Z","title":null,"venue":null,"work_id":"26648b4e-7a4e-4422-8c4f-7bee4204ef57","year":2020},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.830374Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:e5cc88c5885df1ed30cbdb20effe40a8e9e4d8ec57e54073fd7106269224838b","observation_id":"2b88d30f-9917-4e16-b4f6-b4f0cb24c6da","resolution":{"observed_at":"2026-08-12T10:47:46.480798Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13629","last_updated":"2025-03-02T00:46:31Z","snapshot_observed_at":"2026-08-16T13:41:24.913158Z","submitted_at":"2024-06-19T15:25:29Z","title":"InstructRAG: Instructing Retrieval-Augmented Generation via Self-Synthesized Rationales","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13629","snapshot_observed_at":"2026-08-12T10:47:45.835409Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.835409Z"},"links":{"cited_paper":"/paper/2406.13629","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:07863220355a29e724ce9903453f2ffc1aacfbfda6f8364f5c19d8d7a30360f6","observation_id":"2014a9cb-0165-4d6b-b2c1-00dddce6f68b","resolution":{"observed_at":"2026-08-12T10:47:45.835409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.459011Z","title":null,"venue":null,"work_id":"464a858b-2da6-4d61-9d28-a8353ac68a41","year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.840625Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:ad4b099180c62d728c02e49a8dec781e4e788f22d7e4ea9541010604c9ed4227","observation_id":"21b61347-55ec-4e22-8df0-6b303b35883c","resolution":{"observed_at":"2026-08-12T10:47:46.463999Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.845337Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.845337Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:94cd11801cafe340ea6fe557079f7cfb3c25e27729ec63e43d9f7ee0584880c3","observation_id":"d89f0015-8efa-474c-aa59-f2e987e63c09","resolution":{"observed_at":"2026-08-12T10:47:45.845337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.00808","last_updated":"2020-10-20T22:17:19Z","snapshot_observed_at":"2026-08-13T17:48:59.734798Z","submitted_at":"2020-07-01T23:15:56Z","title":"Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrieval","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.00808","snapshot_observed_at":"2026-08-12T10:47:45.850113Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.850113Z"},"links":{"cited_paper":"/paper/2007.00808","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:9c6e2520f62b24f25a17328a4aeb24fecd1b1ca6c52488a0d2c2eeb8bc2f259b","observation_id":"509e5d81-d0c3-46a9-9ac0-da6274623ecd","resolution":{"observed_at":"2026-08-12T10:47:45.850113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-18T22:35:56.156622Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-12T10:47:45.854995Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.854995Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:1b367b2395dd31258ed51dcf55fbbe7032a85690ecae12d0ccb6d706fb872030","observation_id":"e119561a-e9c9-4659-a5b8-f3d84e5bb700","resolution":{"observed_at":"2026-08-12T10:47:45.854995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.442914Z","title":null,"venue":null,"work_id":"705ab673-9e33-46f6-b9df-eeeb38a1a9f3","year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.859917Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:41e1c2ef362b9c730ecc75c42f2dc6920f39150c73317418147196f88ea4d14b","observation_id":"e7da467e-5252-48d6-948f-c5b43181b55f","resolution":{"observed_at":"2026-08-12T10:47:46.447700Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:45.864806Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.864806Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:f39468f8ab1d3edc91299cb82e40de5dc74cba77f1fac04141e48a01cdd6d9c6","observation_id":"3f3b472a-c110-46e3-9813-1a98fd754632","resolution":{"observed_at":"2026-08-12T10:47:45.864806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01558","last_updated":"2024-05-05T15:58:24Z","snapshot_observed_at":"2026-08-18T16:59:52.630229Z","submitted_at":"2023-10-02T18:52:35Z","title":"Making Retrieval-Augmented Language Models Robust to Irrelevant Context","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01558","snapshot_observed_at":"2026-08-12T10:47:45.869686Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.869686Z"},"links":{"cited_paper":"/paper/2310.01558","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:997c552ade2155006e39d711ff088e473ea91345e225018b9ffa02eed7b3d30c","observation_id":"719fb4c3-8863-457a-b7e1-41b6d78af716","resolution":{"observed_at":"2026-08-12T10:47:45.869686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:47:46.414366Z","title":null,"venue":null,"work_id":"bf5e5b98-a846-4d06-96d1-b652e49bf79b","year":2023},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.875013Z"},"links":{"citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:0c6c43d0f19bcb3d4d677e6d7e53f60dcf6104b0e0bfbc1001f4f6e88fa076bd","observation_id":"8d699f0d-6864-4e4c-85b5-78b1c3ec866e","resolution":{"observed_at":"2026-08-12T10:47:46.420270Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-12T10:47:45.879873Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.879873Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:2352ef34b98fc0ab3a3122442747e380c94c0511f6ee053b7dbb26d45bc960bf","observation_id":"221bd099-962e-4ceb-abdc-b0dc605dd0a0","resolution":{"observed_at":"2026-08-12T10:47:45.879873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T21:31:43.676123Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis"},"reference_resolution":{"displayed":46,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":46,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":46},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 11 inbound Pith citation observations for arXiv:2411.18948."}