{"as_of":"2026-08-19T19:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f3a288e18cade827e3573f42ff53580270a422d892302451799b642e6b4175dd","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:12:44.422459Z","state":"measured"},{"denominator":13,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":13,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.05196/citation-record","integrity":"/paper/2505.05196/integrity","json":"/paper/2505.05196/citation-record.json","paper":"/paper/2505.05196"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.374329Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.374329Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:103727ea7f024677cf3e28124ad04cd8eab8213c06ab3752e1b12d1e6635fc8f","observation_id":"1d82abd6-cc21-4987-a58d-47f657531cec","resolution":{"observed_at":"2026-08-15T23:12:44.374329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.378936Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.378936Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:3b9ff7a88d56f30985242802d2e9182f37efd036c1234c9386177cecc72ead43","observation_id":"dc45d55f-94d0-49f1-8033-f45666e49f22","resolution":{"observed_at":"2026-08-15T23:12:44.378936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.15173","last_updated":"2024-09-18T18:29:15Z","snapshot_observed_at":"2026-08-16T13:17:23.804918Z","submitted_at":"2024-09-18T18:29:15Z","title":"Recommendation with Generative Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.15173","snapshot_observed_at":"2026-08-15T23:12:44.383201Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.383201Z"},"links":{"cited_paper":"/paper/2409.15173","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:bccefc321bec14cd47f7d955d225d867c7f34628e1321eb0864ebe5287f57488","observation_id":"768309cd-9f7d-4992-8e14-2e599af827dd","resolution":{"observed_at":"2026-08-15T23:12:44.383201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.608305Z","title":null,"venue":null,"work_id":"10291759-a164-4f7f-bdba-588a6416c8d2","year":2025},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.387463Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:0752dce97deb38a2aeecb9bafe18a5781e4ae00acd7f5e7879f1515f8fb0e98b","observation_id":"f9bf77d9-75a9-4807-aa17-7ca9ff952748","resolution":{"observed_at":"2026-08-15T23:12:44.612130Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.391520Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.391520Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:8765d5a755c7ec2325f2560da9df6f19e490cbfe2ad0b0edb4453dc839789070","observation_id":"47ec71b9-e4ca-486f-8bbd-e3dbe052be9e","resolution":{"observed_at":"2026-08-15T23:12:44.391520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.395360Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.395360Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:d633d980b37e926b18ac1641c04db4bac91638ab5b9d78b48b8cc8cd34d7c528","observation_id":"9f3f06f1-d365-4e68-9fbc-2a3187b17117","resolution":{"observed_at":"2026-08-15T23:12:44.395360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-15T23:12:44.399465Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.399465Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:1e6f5aee5bb8cb5fc4a53626d435fb4863454248c0e99a878e5821d3232d6389","observation_id":"24da4a7f-bedb-46dd-b770-2a1c451e4605","resolution":{"observed_at":"2026-08-15T23:12:44.399465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.582662Z","title":null,"venue":null,"work_id":"a95c7867-00a0-4a15-a2ab-d5eaaeec7583","year":2025},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.403439Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:56c3ca2a22ce91c8855332b92d806fc7323f0ef9f0abc3fea4d30ba862a4f72a","observation_id":"8e3b3d6a-57f6-48d5-9b81-e57cc9b49111","resolution":{"observed_at":"2026-08-15T23:12:44.587906Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-08-14T05:02:11.716316Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-15T23:12:44.407132Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.407132Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:40320d5e6abc6e4ca0e2da5ada9d5ed2c7b7d0f67937b93b77162310884efd8c","observation_id":"5d7a6027-e1fa-47b0-b423-d2842b833eb2","resolution":{"observed_at":"2026-08-15T23:12:44.407132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-08-18T18:56:43.968763Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-15T23:12:44.411103Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.411103Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:c5268c496c2e86adf02d937ba92d0487618b5afb9431c1e8554fbe28bcd9a7da","observation_id":"b05f480b-11ec-4cf6-8441-ecab607efae5","resolution":{"observed_at":"2026-08-15T23:12:44.411103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:12:44.415096Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.415096Z"},"links":{"citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:d267898a4b2eeee934cd0f75d4fb0b946c92282151e16b58c46c3b43ef927556","observation_id":"cc18ecd5-c4f5-4a71-8a8c-5bbb70763c8a","resolution":{"observed_at":"2026-08-15T23:12:44.415096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-18T22:35:56.156622Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-15T23:12:44.418510Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.418510Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:b386096a71c89adf230126bee04cc3dda5a6a4a017c6d14ef3d20a4c484e78d3","observation_id":"a57a277e-e644-4f01-b244-d976d12d1cd5","resolution":{"observed_at":"2026-08-15T23:12:44.418510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-15T23:12:44.422459Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.422459Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:df6ee67b02756db6ef0bc4e5444d06c6c9f6bff6474b5525c287c1d8c38c9284","observation_id":"b15c7f28-be0b-45ac-b0bb-499b8c0e8a2c","resolution":{"observed_at":"2026-08-15T23:12:44.422459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","latest_version":1,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 0 inbound Pith citation observations for arXiv:2505.05196."}