{"as_of":"2026-08-08T02:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8e26f36841f7d13190300bf0c6e782f535e0d614c8cabf7d810c0b1c3b42e6ae","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:06:01.723487Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:39:07.088945Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-12T00:01:16.554293Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-08-05T10:39:07.088945Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03871","last_updated":"2025-09-04T04:12:31Z","snapshot_observed_at":"2026-08-06T11:50:02.157285Z","submitted_at":"2025-09-04T04:12:31Z","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","version":1},"reference_index":174,"source":"pdf_text","source_observed_at":"2026-08-05T10:39:07.088945Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2509.03871"},"observation_digest":"sha256:4bbd68125f78bb8fd8ebf63892bcd5bb81d45f218138d843563e9dcc0a2a1250","observation_id":"72c408c2-aaed-4bde-8547-0bd0804a7583","resolution":{"observed_at":"2026-08-05T10:39:07.088945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":"2505.16367","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Chain-of-thought poison- ing attacks against r1-based retrieval-augmented genera- tion systems.arXiv preprint arXiv:2505.16367","venue":null,"work_id":"2aafbf8c-0a12-4393-a68c-c74612a9e246","year":2025},"citing_paper":{"arxiv_id":"2604.25247","last_updated":"2026-04-28T05:52:57Z","snapshot_observed_at":"2026-07-06T23:11:07.254460Z","submitted_at":"2026-04-28T05:52:57Z","title":"R-CoT: A Reasoning-Layer Watermark via Redundant Chain-of-Thought in Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-07T15:54:22.189376Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2604.25247"},"observation_digest":"sha256:3e672cd9b6c7c78ddae3d64492eee3e537b6cc1498c5db38ddd469e84e2aab83","observation_id":"6ec2ceac-ab58-4b21-8e2f-2ae4bdb76475","resolution":{"observed_at":"2026-05-12T00:01:16.557240Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16367","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":165,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2505.16367","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:34b8d31fa4c41c9a4fd5b72f3b84dc58841f8f7132619c21c764a4f9b30224e1","observation_id":"21fc57e3-cd92-4242-b30a-126d1f858baa","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.16367/citation-record","integrity":"/paper/2505.16367/integrity","json":"/paper/2505.16367/citation-record.json","paper":"/paper/2505.16367"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.906627Z","title":null,"venue":null,"work_id":"165525de-41d7-4a42-8bac-1523fc7066b9","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:58.967224Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:dd0d67a37bf2bd1e5c2f6472888fbb049e1972ae33ed7ad9c363b7f00eb5d83f","observation_id":"0cd33fc5-fd63-413e-8871-ca78e1bf4acb","resolution":{"observed_at":"2026-08-07T15:06:04.945458Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.727507Z","title":null,"venue":null,"work_id":"b78f4042-14e8-4652-968f-ee1e7fd6cb0b","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.056606Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:b13e761bab473c25983e4a5f8518a94477b2c4812a9d6d53b464b16b68afb3f7","observation_id":"192ae9ad-ea0b-4d20-b229-956fb10b5962","resolution":{"observed_at":"2026-08-07T15:06:04.820017Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18141","last_updated":"2025-03-10T09:49:31Z","snapshot_observed_at":"2026-07-06T19:38:39.889993Z","submitted_at":"2024-10-22T11:23:11Z","title":"SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18141","snapshot_observed_at":"2026-08-07T15:05:59.144675Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.144675Z"},"links":{"cited_paper":"/paper/2410.18141","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:5353e22173f5caac43cd19c1789d79398a80093a57aea63c59a5eed884eab9b3","observation_id":"48bcc0fa-aa76-43b6-baa8-27c2fe91f01b","resolution":{"observed_at":"2026-08-07T15:05:59.144675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.607132Z","title":null,"venue":null,"work_id":"b9e88eeb-5a2d-4d3e-9eee-82e61840a1f3","year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.233018Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:dc7dbab342ab8551545ba39d6b1e031138a432669ec088fb59a6620852cdfc9d","observation_id":"180bc1d0-c708-4f3f-8f8e-ad3d05a644aa","resolution":{"observed_at":"2026-08-07T15:06:04.675384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-07T15:05:59.394365Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.394365Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:a5092c6606a5ed5a0a908694983e9ba3cb70538b15e143c2fed88b340cbab3c8","observation_id":"ce927490-5733-4e4d-93c0-a66490992792","resolution":{"observed_at":"2026-08-07T15:05:59.394365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.01142","last_updated":"2025-06-08T17:17:01Z","snapshot_observed_at":"2026-07-06T20:30:08.210991Z","submitted_at":"2025-02-03T08:22:45Z","title":"DeepRAG: Thinking to Retrieve Step by Step for Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01142","snapshot_observed_at":"2026-08-07T15:05:59.548315Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.548315Z"},"links":{"cited_paper":"/paper/2502.01142","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:40983cefef98d703f62083a4313721759f4e675f04ed4bf1c35b403ab5b0bb0c","observation_id":"1ce4ef23-5c31-46d0-9eca-a6e5e9b5247a","resolution":{"observed_at":"2026-08-07T15:05:59.548315Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T15:05:59.685090Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.685090Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:aebe0e87aa0c45820f4dc1a01b8ebb18ff42e1b94533b73e36dbd13dae0c0db2","observation_id":"3444797e-fc21-4869-b8e6-6103644a509d","resolution":{"observed_at":"2026-08-07T15:05:59.685090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:59.799523Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.799523Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:7cf06b9a5630975ddc594c54133572fab53f697a501829b0c892ec5e54f32edb","observation_id":"e8553720-b96e-44d6-a4dc-df4139c8d5f0","resolution":{"observed_at":"2026-08-07T15:05:59.799523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.384776Z","title":null,"venue":null,"work_id":"32c65359-9a78-48ae-802d-f20f96028545","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.928463Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:3acd459c533256a5d9368a47a6fbcf442db7c22a631f02a30f8c9396141e498b","observation_id":"6ea09b43-da77-4211-8172-04ac064234eb","resolution":{"observed_at":"2026-08-07T15:06:04.503314Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.287533Z","title":null,"venue":null,"work_id":"6d34329c-b9cb-4bef-8faa-d2a85f91ce12","year":2021},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.022349Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:40f7e4ae0c5783ee60584cf3b38a56544ef98bb4be868b44b1ee972abb34b854","observation_id":"384f99b1-a769-4a90-a781-2b1fd98b969b","resolution":{"observed_at":"2026-08-07T15:06:04.328668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.03299","last_updated":"2022-11-16T16:38:18Z","snapshot_observed_at":"2026-08-05T00:57:17.859949Z","submitted_at":"2022-08-05T17:39:22Z","title":"Atlas: Few-shot Learning with Retrieval Augmented Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.03299","snapshot_observed_at":"2026-08-07T15:06:00.112164Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.112164Z"},"links":{"cited_paper":"/paper/2208.03299","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:ef5a50953690b64c81bfd23e805df601ca7ffa74406311dcfa76d8ed4f738d54","observation_id":"e4a61431-e6d1-4db3-9036-71621e10bbad","resolution":{"observed_at":"2026-08-07T15:06:00.112164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:00.173553Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.173553Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:edbc841db32cd3187c7eddf4cffd238d01299bd4c3eefc1da82fb95883ff1459","observation_id":"675f3265-373f-4b75-b5c3-8407c2822da2","resolution":{"observed_at":"2026-08-07T15:06:00.173553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:04.108033Z","title":null,"venue":null,"work_id":"e6ed783e-1675-4128-912f-dbb32b215750","year":2022},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.230594Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:bafb06866bc6deddad844caedc121266546ddfccc7634d8b4a1536caddd15cf9","observation_id":"a2721451-e822-471c-871d-03d4454bbb76","resolution":{"observed_at":"2026-08-07T15:06:04.199786Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:00.344119Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.344119Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:38a5e72cdbe582a5e95922b5fcba46ad8be61aef63b222f3e4ddf3ef665d09b5","observation_id":"8a8f6b29-ab54-4f18-9fac-c5a4b6243b7a","resolution":{"observed_at":"2026-08-07T15:06:00.344119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.965141Z","title":null,"venue":null,"work_id":"ece3d646-67fd-403b-be4b-b4ad389b0dda","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.430765Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:80ad70a9d031032a2fbb93547c68a3246c45f296085ac129497b0753e389746b","observation_id":"a5a4b398-f36f-4308-a2e0-21f7f0873373","resolution":{"observed_at":"2026-08-07T15:06:04.039110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.821404Z","title":null,"venue":null,"work_id":"4fc3c1ff-0958-4c95-8bd2-a68e584472e3","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.493967Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:dba9eda7bc788b0b9440ee0d19cdabef9f48efc9dc9787bbf546914d151c695b","observation_id":"8862e341-3a56-443c-ad09-b3de71f3d453","resolution":{"observed_at":"2026-08-07T15:06:03.889266Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.686483Z","title":null,"venue":null,"work_id":"c3ebdc28-efe1-4f35-8546-4f3abff5ecf2","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.556091Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:dcebb972b0c6e540feb72f65d7214061f6e6de64706339d9a4ffb89cc1588918","observation_id":"3800296c-2901-40bc-a7ef-94f085465f61","resolution":{"observed_at":"2026-08-07T15:06:03.746037Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.536001Z","title":null,"venue":null,"work_id":"267dffef-ee69-4c38-8d92-c5dee4580c2a","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.663950Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:2ef28f714b386ca696ef1c963b7d2ad8182e2844b37eb3507d064a5c203d8e2d","observation_id":"8b0c747e-a8f0-417b-82a9-41b7b4e721a8","resolution":{"observed_at":"2026-08-07T15:06:03.607299Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.379492Z","title":null,"venue":null,"work_id":"c0ddbc59-8d46-4f99-8dc2-87c4716be057","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.736411Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:50772c748dc2e7683254ad10ee64fffa35a08eb427a8f9f2325b93a51d2e0daf","observation_id":"e16ce8ec-d0ff-4153-b014-691d03f9b2d3","resolution":{"observed_at":"2026-08-07T15:06:03.425008Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.217707Z","title":null,"venue":null,"work_id":"3241be03-ed6d-4a46-9e72-64fdfaef9e50","year":2025},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.789736Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:19375c7cf6a557d18ef1cda1040bc65c4f9a91e30afcb12e7dd9f7c52775d786","observation_id":"91c5538d-268d-4681-b483-ca4b1c7ad5b5","resolution":{"observed_at":"2026-08-07T15:06:03.299578Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:03.027070Z","title":null,"venue":null,"work_id":"5066688b-0d32-4828-8d91-fcd323a235a0","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.892416Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:892035bc98d98d6d890e996a62f1480d64d8ac25fd163cabe42000a2655fa64d","observation_id":"dd4de5d6-56a7-4d2d-bfe0-56e046249ea2","resolution":{"observed_at":"2026-08-07T15:06:03.093892Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.06992","last_updated":"2024-08-16T08:18:19Z","snapshot_observed_at":"2026-07-06T18:43:47.559289Z","submitted_at":"2024-07-09T16:07:01Z","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.06992","snapshot_observed_at":"2026-08-07T15:06:00.965871Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:00.965871Z"},"links":{"cited_paper":"/paper/2407.06992","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:e2b8d0524de93453627a9dc8f4c640150b307d730f12b982d0a9f25c211131a0","observation_id":"a073e4ab-e117-4eca-80e1-be09aef864c6","resolution":{"observed_at":"2026-08-07T15:06:00.965871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.045920Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.045920Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:10114850584e5bcee71b7e12fc9e1b66d1ecd19b15cde86eba6ce3f91729cda9","observation_id":"649a7435-1b39-4dac-8017-73181122e19b","resolution":{"observed_at":"2026-08-07T15:06:01.045920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.097544Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.097544Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:87af3fac01eff67ca5fa73bc63a6cfe0a7ce2333d6736801ea04ed04af336f35","observation_id":"f094cbc6-61df-4762-877a-8c3b6c67ddfd","resolution":{"observed_at":"2026-08-07T15:06:01.097544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.827602Z","title":null,"venue":null,"work_id":"396c2008-da32-47a5-a894-93ea7c6cdc61","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.148770Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:56bde78067a18fad74686711d03495bf246c5f9cd6fd3ff1e18c1a6d54152812","observation_id":"06492b56-c355-4086-a496-9313bf09673f","resolution":{"observed_at":"2026-08-07T15:06:02.935697Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.561371Z","title":null,"venue":null,"work_id":"33079108-60da-4f3a-ae98-4036dd8080e1","year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.198412Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:63cf4064b0e71532aded13ba683a65ea99f7fd0c2836d05e216b44c2f8707ba0","observation_id":"167cfa9a-f4c4-4e27-968b-bf0d875fdea2","resolution":{"observed_at":"2026-08-07T15:06:02.693559Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.245591Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.245591Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:efe108cadd3e97aba14101aeccfc4b44ddcc02f43107b502a348faa24cd92ba9","observation_id":"e86c2ffb-66a6-43fb-9b2f-12f9fca48364","resolution":{"observed_at":"2026-08-07T15:06:01.245591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01796","last_updated":"2025-05-23T04:38:57Z","snapshot_observed_at":"2026-07-06T18:39:56.856612Z","submitted_at":"2024-07-01T20:47:47Z","title":"Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01796","snapshot_observed_at":"2026-08-07T15:06:01.290122Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.290122Z"},"links":{"cited_paper":"/paper/2407.01796","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:d03da4893b75e9e7766c610f54cf6004d798bd99b5aa67566462b04376774b6b","observation_id":"aa2c4216-658b-4fe3-a05e-9c8c72636e4d","resolution":{"observed_at":"2026-08-07T15:06:01.290122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-07T15:06:01.329799Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.329799Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:156fab70158c7cbf26799e60a5e87344f6a7e011da2113784a34ed61efdd7dd5","observation_id":"a72d2c34-d6ab-4e69-86dd-8cb8febe9ba7","resolution":{"observed_at":"2026-08-07T15:06:01.329799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:02.198680Z","title":null,"venue":null,"work_id":"57fcfe56-db35-42fd-a195-9ca116b2a53b","year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.395211Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:790ba3d044337185a5b55ea9b99f5aeb2d56b83beef919e78056fa6d8810c025","observation_id":"fe7a0973-e50e-477f-b163-3076f30f343d","resolution":{"observed_at":"2026-08-07T15:06:02.371910Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22832","last_updated":"2024-10-30T09:15:51Z","snapshot_observed_at":"2026-07-06T19:42:08.241610Z","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22832","snapshot_observed_at":"2026-08-07T15:06:01.505577Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.505577Z"},"links":{"cited_paper":"/paper/2410.22832","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:df49f03de406d1076148789f0724d79d1167987a205485a00b95ec3d0c601675","observation_id":"72a4c8a2-d4b4-43e3-8418-316624126672","resolution":{"observed_at":"2026-08-07T15:06:01.505577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:06:01.960086Z","title":null,"venue":null,"work_id":"12c679b1-9fd8-42c3-8e88-5df04649d838","year":null},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.610972Z"},"links":{"citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:0ea7e815edf5302780a10544c555869d5270121090060ddb3caa816b1d6c72a3","observation_id":"eb5ac088-dc01-4053-b769-9815fd6a2425","resolution":{"observed_at":"2026-08-07T15:06:02.036668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:06:01.723487Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.723487Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:b912a8b02958b85f0f1232514ace418b7fbb0e7dafe3ac1df20f4e99f018ad38","observation_id":"3429a0c7-ebfc-42f1-a537-070773e75f4b","resolution":{"observed_at":"2026-08-07T15:06:01.723487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-07-06T18:03:33.406287Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-07T15:05:59.068125Z","title":"arXiv preprint arXiv:2404.13948 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:59.068125Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:8362cb5b08e609ccf5c8bfb1ed12cfdb61080f723ce438b251614918c146b5f3","observation_id":"f000a477-8361-4580-beea-f77337147880","resolution":{"observed_at":"2026-08-07T15:05:59.068125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","latest_version":1,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-07T15:00:32.077142Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 3 inbound Pith citation observations for arXiv:2505.16367."}