{"as_of":"2026-08-07T22:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fce2e773b875e4f3d2ac9c96e88abfd292600f2c98ad87ce8d13662b8660f0f7","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:36:35.536497Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:24:26.679440Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-05T16:24:27.121271Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"cited_work":{"arxiv_id":"2505.18583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.18583","snapshot_observed_at":"2026-08-05T16:24:27.121271Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","venue":"cs.IR","work_id":"05bf8ca8-fa23-4d08-98bb-3b89a7bec0c1","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-07T14:00:32.145765Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.679440Z"},"links":{"cited_paper":"/paper/2505.18583","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8c2d546bb0ab4f4546ae3a68dac12ee3dbcce274f9df7e9ce53e4d7a633e25d8","observation_id":"af7c86e6-7fca-4f82-973f-30bd4af86a6c","resolution":{"observed_at":"2026-08-05T16:24:27.124601Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.18583/citation-record","integrity":"/paper/2505.18583/integrity","json":"/paper/2505.18583/citation-record.json","paper":"/paper/2505.18583"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.707316Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.707316Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:0d61eaf6a850439b53d7f9bea89a3abb792175f8d795b8934f439031a77790de","observation_id":"4f689c34-22d7-4bc8-847a-5f100381fa00","resolution":{"observed_at":"2026-08-07T14:36:32.707316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.759374Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.759374Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:450cc1c6b3031fd18a091175db8e24ebeae1ac7c10df545d4b09e5813f32fa4d","observation_id":"a7f595db-0cc8-4db6-93c0-86ba19e0d5d2","resolution":{"observed_at":"2026-08-07T14:36:32.759374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-07T14:36:32.811230Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.811230Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:58e22f70a6eb6e272232c6ce742e2ac851517c1cfd171911aa6cf60e01f4b8b6","observation_id":"77fcf49e-c402-476e-92a4-7d0cb4071d75","resolution":{"observed_at":"2026-08-07T14:36:32.811230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:32.851612Z","title":"Choquette-Choo , Milad Nasr, Cristina Nita-Rotaru , and Alina Oprea","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.851612Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:f536930970a38fbe4d359775fd2819a30b6672ec8d25a26cc7203c555848b9d2","observation_id":"cfc390c2-d69b-4ff7-82c1-4e89cc1c12d4","resolution":{"observed_at":"2026-08-07T14:36:32.851612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.798","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.839070Z","title":null,"venue":null,"work_id":"33ab6d83-2efc-4b9d-99a6-6d1bfbfe0b3e","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.901871Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:7bc032e8a6b65f7cd9fe6cec6daf923261961697e0505ab0f050024ce3fa30ea","observation_id":"33b8f884-8f6c-4483-adec-bd6a28310652","resolution":{"observed_at":"2026-08-07T14:36:35.902379Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.13757","last_updated":"2024-07-18T17:55:55Z","snapshot_observed_at":"2026-07-06T18:48:42.015848Z","submitted_at":"2024-07-18T17:55:55Z","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.13757","snapshot_observed_at":"2026-08-07T14:36:32.957279Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:32.957279Z"},"links":{"cited_paper":"/paper/2407.13757","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:5d7466e6a22efd62944ef4b5bb61a8c387d89e185552a3a8652ddeb003bb29a8","observation_id":"d7e087c8-e0f5-4861-9069-6e7a7d7b40b2","resolution":{"observed_at":"2026-08-07T14:36:32.957279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.017166Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.017166Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:e36646cc34bb7e1759e8c5efa2459623ac71b4cd8411431a03b1610fb4a05ed8","observation_id":"cdfb7ba9-ca29-41b2-bfbb-eea4742a6d6c","resolution":{"observed_at":"2026-08-07T14:36:33.017166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.071212Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.071212Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:50bcbbc32edd59cdb84681c0cc4307ccf163f0fe52056c900c6e1bec842162bd","observation_id":"54ae42cc-4d2d-40a8-a1d6-421bc9d2bfab","resolution":{"observed_at":"2026-08-07T14:36:33.071212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06211","last_updated":"2024-06-17T08:56:38Z","snapshot_observed_at":"2026-07-06T18:12:26.233112Z","submitted_at":"2024-05-10T02:48:45Z","title":"A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.06211","snapshot_observed_at":"2026-08-07T14:36:33.123994Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.123994Z"},"links":{"cited_paper":"/paper/2405.06211","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:46ecc670ae066ed9b036102dc00ab5cb94fa80ebbc207522144bba021ee67985","observation_id":"369c166c-12c2-45cc-b3d3-8eaa406420e8","resolution":{"observed_at":"2026-08-07T14:36:33.123994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18141","last_updated":"2025-03-10T09:49:31Z","snapshot_observed_at":"2026-07-06T19:38:39.889993Z","submitted_at":"2024-10-22T11:23:11Z","title":"SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18141","snapshot_observed_at":"2026-08-07T14:36:33.198505Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.198505Z"},"links":{"cited_paper":"/paper/2410.18141","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:c1fc5091ca395ea184b1f14868943998ca5411245718a38b616f85202e14278d","observation_id":"da198664-b929-4889-b955-bcf42bf09e65","resolution":{"observed_at":"2026-08-07T14:36:33.198505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.249379Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.249379Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3c347c3908b567d958697a4dd777f4f1ad2994c4e43a0b41c41776ff59c0b80d","observation_id":"e3a2c021-6502-4f94-b9f3-088cae4b1630","resolution":{"observed_at":"2026-08-07T14:36:33.249379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.05765","last_updated":"2022-03-11T05:47:45Z","snapshot_observed_at":"2026-08-05T09:47:00.921624Z","submitted_at":"2022-03-11T05:47:45Z","title":"Tevatron: An Efficient and Flexible Toolkit for Dense Retrieval","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.05765","snapshot_observed_at":"2026-08-07T14:36:33.312428Z","title":"Lin, and Jamie Callan","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.312428Z"},"links":{"cited_paper":"/paper/2203.05765","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:61b2bd4eff63bb0676e044fc754dc746a25421e5638a2cbdea7de1f276fc0c79","observation_id":"ec0cd476-5f88-4e77-8989-bea8ec5b9226","resolution":{"observed_at":"2026-08-07T14:36:33.312428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-07T14:36:33.368306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.368306Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b8d1663fa610b96c9f7c3b58ff7446292bc6e1375dcc9801f1f2c862c6381102","observation_id":"57e30868-0a42-4af5-9be2-25ee4546b8ec","resolution":{"observed_at":"2026-08-07T14:36:33.368306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-07T14:36:33.439988Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.439988Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:21681f8db4f4f5d431f5abc37a7d7dc22554260c138c1c160aa6fbf3afb545dd","observation_id":"f36c0f3d-df56-40a7-9de9-c74fa3a46d06","resolution":{"observed_at":"2026-08-07T14:36:33.439988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.497637Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.497637Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:f0419725079179397c1e146bf1edbe0500744c583e549aea299b9fdfe71ff6aa","observation_id":"e7232a15-5ca3-4050-85d0-e5b9cbab749d","resolution":{"observed_at":"2026-08-07T14:36:33.497637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.543068Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.543068Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:601f23731e1872fa42a76035cfcc9cf0a5a0fd00b6bc147945facc7b74ab5ea3","observation_id":"f7dfc848-c684-40fe-82c7-99e9ca0eaf6b","resolution":{"observed_at":"2026-08-07T14:36:33.543068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-07T14:36:33.599203Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.599203Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:28a51d385ec40c89b69bc8dc2f8d553677435691d34afaf5048126b337ebf0f3","observation_id":"6dc2dde5-1603-4bd6-95a0-9e4eccd4565f","resolution":{"observed_at":"2026-08-07T14:36:33.599203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.638453Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.638453Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:6997e79bc09549fa392d04716dff7975edff3d044b0b77d350e8b1495513340d","observation_id":"a574f3d4-cc7d-43eb-ac39-a254cab3be7c","resolution":{"observed_at":"2026-08-07T14:36:33.638453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.690092Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.690092Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:c938c8df9a79d54a25c5e2f1cb4a22265cad827b70f06e0a1de019c4b08253b6","observation_id":"c9c2b61c-c6c8-4ece-bd7d-d5f8f3950f70","resolution":{"observed_at":"2026-08-07T14:36:33.690092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.737839Z","title":"u ttler, Mike Lewis, Wen-tau Yih, Tim Rockt\\","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.737839Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:866f0951fb8bfaf9d4e84b4bd48dd719763656643c4f0ef7a606cd43b7d8ce3e","observation_id":"5957b4a4-9e34-455a-9b16-8c81be1c80f0","resolution":{"observed_at":"2026-08-07T14:36:33.737839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:33.785408Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.785408Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:22a1effdfd0aec2966020d1e3f34f28bd5a4a66e22a220223b03df556583a70d","observation_id":"f0ac6ec0-f090-4de3-bf68-f35301a404b7","resolution":{"observed_at":"2026-08-07T14:36:33.785408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:39.424159Z","title":null,"venue":null,"work_id":"c700258e-93cc-4721-b2f8-654163006801","year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.845471Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:5747432a9d8e119c2498760799159c4062d7f3f0f879542befb0dea22342bd4d","observation_id":"e38666c0-571b-4ef0-be12-a183e228c488","resolution":{"observed_at":"2026-08-07T14:36:39.578222Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-07T14:36:33.957906Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.957906Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:578ac68b32e69dd9e1f4cd662ec96a25e65867d710fe61268a79d13486e340b1","observation_id":"3079d3eb-1484-41d6-b770-ef2f77812de0","resolution":{"observed_at":"2026-08-07T14:36:33.957906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:39.119063Z","title":null,"venue":null,"work_id":"90169c96-22a0-4fb7-b12d-907964f136cd","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:33.998382Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:e653b82abcdfaaea0eb135b059f44bbd61612f694dab48a73736e0a32794639e","observation_id":"a3704325-7c6c-4536-b00a-8a3ad139c7e6","resolution":{"observed_at":"2026-08-07T14:36:39.272673Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.904415Z","title":null,"venue":null,"work_id":"e28242e0-8e6b-4872-b7b8-57dfdf54c353","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.026973Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:6c28b575e89be9d6df838943992d1409aa53efc4a0a7d924a216c5054779882c","observation_id":"6f18bdab-2e69-477a-afbd-14d795113959","resolution":{"observed_at":"2026-08-07T14:36:39.019633Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.629384Z","title":null,"venue":null,"work_id":"b87d867d-0f58-4a5d-b996-640111ccd0ae","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.062934Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8f070ae0f7babe286e3b88f00e0b702851f41ee9d51bd359a8c36116aec0a20d","observation_id":"cbd8f999-0737-41f5-ab8e-1e72602fe9a4","resolution":{"observed_at":"2026-08-07T14:36:38.754347Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.420094Z","title":null,"venue":null,"work_id":"b36dfb3b-678e-4565-8774-ca8ef26a64a7","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.133063Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:d38926323141c577a3978edd5af5934e4fb335b94b02850a6138596e0b2b0ec7","observation_id":"4aa5278c-7026-4d37-93c7-f1fbedfd68b7","resolution":{"observed_at":"2026-08-07T14:36:38.524355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:38.203045Z","title":null,"venue":null,"work_id":"0cc21ed1-46df-4730-924e-82bd1b105a6f","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.172699Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:badb44befb6cd95ec2bbf9e8e80db002c10f466f8cef915b0309bff08e71da59","observation_id":"f93efbb1-00e6-456e-9070-47bff05bd7ef","resolution":{"observed_at":"2026-08-07T14:36:38.312996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.962165Z","title":null,"venue":null,"work_id":"9d7ce080-70e3-41f3-ae97-ad843a589cfe","year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.215211Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:e9790c66a1b710affacc08f54d944a47aa5798253b9a63ab8d1e904ccfade8a8","observation_id":"ae33cee0-8ebe-4ab1-b826-acf4095ebef2","resolution":{"observed_at":"2026-08-07T14:36:38.072405Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:34.283029Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.283029Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3dc866a98a69570c0028ba1894bdb867213073ed35b9396c94a911d603c43d30","observation_id":"78761fc4-75fe-4554-ae83-01b009d5480d","resolution":{"observed_at":"2026-08-07T14:36:34.283029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.06992","last_updated":"2024-08-16T08:18:19Z","snapshot_observed_at":"2026-07-06T18:43:47.559289Z","submitted_at":"2024-07-09T16:07:01Z","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.06992","snapshot_observed_at":"2026-08-07T14:36:34.358507Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.358507Z"},"links":{"cited_paper":"/paper/2407.06992","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:1f1b995e138e9aea1f857ee170f552bf3309d4a86f7d810e89b250e3abaa592e","observation_id":"c798d26d-c647-450e-a3dc-666e5fc2e320","resolution":{"observed_at":"2026-08-07T14:36:34.358507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.680094Z","title":null,"venue":null,"work_id":"a16b5dbc-4e53-49b5-924a-9a4c04c194b6","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.409390Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:2ad90c5c3c3c9dc6665e316f72c8680257fb058164764401edec44febcc53205","observation_id":"88b64d75-0f80-4554-a27b-2d4604da5890","resolution":{"observed_at":"2026-08-07T14:36:37.826784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.483075Z","title":null,"venue":null,"work_id":"efac961b-4aa6-483f-b704-bd5c4eed459a","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.484498Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:0542f09170194384a78922c8061fbcdc524c50a49d464dd96f9a295440397483","observation_id":"36960f18-9138-4467-8f4f-e5d7a9ce997b","resolution":{"observed_at":"2026-08-07T14:36:37.574396Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T14:36:34.583436Z","title":"Goucher, et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.583436Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:5c66d679812ce6cdbc39fab7fb69ca2d914d1c095dac167df98f508ae570f77a","observation_id":"809a9c84-8c73-41ea-9fa2-97b7a1e7f87a","resolution":{"observed_at":"2026-08-07T14:36:34.583436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T14:36:34.731721Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.731721Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:eeb2ca090c7a19bff9f33a9a4ead0ae0918cd84a59825755c1b25d5f29f66a49","observation_id":"6cd24989-3875-4ef9-8930-eea80f517191","resolution":{"observed_at":"2026-08-07T14:36:34.731721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-07T14:36:34.808268Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.808268Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:3c5c6ba489557fbb291bddaddc0008aa15b9ac5c0eec7c3af24738876a4596d1","observation_id":"0d34feb2-82fd-4e91-843c-df64a17c1e19","resolution":{"observed_at":"2026-08-07T14:36:34.808268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.245387Z","title":null,"venue":null,"work_id":"cfef58b7-bf21-4e34-b47e-616261ada555","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.879238Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:58de350a9f4cc2432d2d0ce291f74ed14391e7efa15eae32aadb1e91ffdd127c","observation_id":"0f7a46aa-1a08-4c17-9b98-cc13cf1f7fe4","resolution":{"observed_at":"2026-08-07T14:36:37.363054Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.06347","last_updated":"2017-08-28T09:20:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-07-20T02:32:33Z","title":"Proximal Policy Optimization Algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.06347","snapshot_observed_at":"2026-08-07T14:36:34.946998Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:34.946998Z"},"links":{"cited_paper":"/paper/1707.06347","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:b9627b2b929972a349d62b6d537035cc8884dbc098026a268b29c2ce21b73710","observation_id":"4a754c33-4b63-4201-a8f1-5be9bce176c5","resolution":{"observed_at":"2026-08-07T14:36:34.946998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:37.075123Z","title":"Sutton and Andrew G","venue":null,"work_id":"95b334b8-d897-40e3-82c0-adb78458e83b","year":2018},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.007380Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:6a2c205f2b2938b2be5c644893565da530d890bfcc0a17bd014793f19392a573","observation_id":"e1923dfe-aea7-4b9c-b0c0-e20babea1cdd","resolution":{"observed_at":"2026-08-07T14:36:37.149030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:36.606066Z","title":null,"venue":null,"work_id":"46e876cc-a322-4f1c-9e3a-8777ac7f0db8","year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.083797Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8b0bd8e996ec4c7ed3e4ebbe05f762bc27f310d763afa728a6d88ea61d8d92b0","observation_id":"a50b2da3-d7e4-45b3-85ea-21f37b19aaf9","resolution":{"observed_at":"2026-08-07T14:36:36.978439Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.167957Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.167957Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:a4fd58d3b91517993bb7f0e1fc401271bd2f9ca98b4ef34c5f276de8098eb472","observation_id":"6baf1194-9689-4f77-bb22-e0862373379f","resolution":{"observed_at":"2026-08-07T14:36:35.167957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01796","last_updated":"2025-05-23T04:38:57Z","snapshot_observed_at":"2026-07-06T18:39:56.856612Z","submitted_at":"2024-07-01T20:47:47Z","title":"Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01796","snapshot_observed_at":"2026-08-07T14:36:35.227545Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.227545Z"},"links":{"cited_paper":"/paper/2407.01796","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:8ee16f09c02c4822d3508ed69a3597cc42d1592501a6fe43affe9d095274b73a","observation_id":"cb7398e4-ad57-4350-9d0a-c8dbbc38170f","resolution":{"observed_at":"2026-08-07T14:36:35.227545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:36:35.283940Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.283940Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:60398b069f3416280ea29ad5a0bcbf8d02be38c88e0bcb50458c8a3e0e3e12f0","observation_id":"4265ee53-a561-4244-b577-fe49af649332","resolution":{"observed_at":"2026-08-07T14:36:35.283940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.194","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.664736Z","title":null,"venue":null,"work_id":"d6b46ad2-75d5-4b8b-849a-678c13db3aa2","year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.326323Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:f91341007f874949de976f441ce684615143a85d8788bc603e624695f2351ac5","observation_id":"1c92269d-a5d7-43e5-b8b2-134808639e21","resolution":{"observed_at":"2026-08-07T14:36:35.721062Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22832","last_updated":"2024-10-30T09:15:51Z","snapshot_observed_at":"2026-07-06T19:42:08.241610Z","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22832","snapshot_observed_at":"2026-08-07T14:36:35.388751Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.388751Z"},"links":{"cited_paper":"/paper/2410.22832","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:2463de34aa5c6bce6b3ff393a18b39078cccb86b00933e205c0f6efaabd40cd1","observation_id":"f4f147ee-0ad1-4b5d-a07d-5de93edcfcc2","resolution":{"observed_at":"2026-08-07T14:36:35.388751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:36:35.443076Z","title":"Xu, Zhiruo Wang, Zhengbao Jiang, and Graham Neubig","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.443076Z"},"links":{"citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:de24ab68752dae13ab148802fe4b24eb16a059d4b0a1d455d4fac719f240e90f","observation_id":"238e9412-407f-46e0-8d0e-23d25ecfca51","resolution":{"observed_at":"2026-08-07T14:36:35.443076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-07T14:36:35.501994Z","title":"Zico Kolter, and Matt Fredrikson","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.501994Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:9bc07514c8f806d8a6e825975f6468e4fd43243174d77a7a2dd81093025ebf2e","observation_id":"ba85a349-1974-44e4-81c5-a95e0a96464f","resolution":{"observed_at":"2026-08-07T14:36:35.501994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T14:36:35.536497Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.536497Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:350927c6260e50c06a86e5ba00b6da0e63b1e5b368306484c8e3e542297b346e","observation_id":"63b0bf57-701b-43b9-9cd2-c6965c5b5d85","resolution":{"observed_at":"2026-08-07T14:36:35.536497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","latest_version":2,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":45,"verified_exact":2,"verified_fuzzy":1},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 1 inbound Pith citation observation for arXiv:2505.18583."}