{"as_of":"2026-08-07T13:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3832ccd247ed9c3d6279afbc1963e964df9a128a71da0faa0618ca8f20f37998","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":9,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":9,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:08:57.754979Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T21:28:59.129123Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-05T16:24:26.675242Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.675242Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:83b9cc06af009d178379f99bbc4f069daadc04ddc8bd68a7264028c25c57c317","observation_id":"7d88d0b4-fc0c-4592-b4ff-567e1d06b3e0","resolution":{"observed_at":"2026-08-05T16:24:26.675242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-03T07:48:45.422843Z","title":"Basilakos, A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.19407","last_updated":"2026-07-25T06:19:31Z","snapshot_observed_at":"2026-08-06T17:54:10.767124Z","submitted_at":"2026-01-27T09:43:09Z","title":"Atomic clocks and gravitational waves as probes of non-metricity","version":2},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-03T07:48:45.422843Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2601.19407"},"observation_digest":"sha256:c49022dde944a85a42c60cac222fbcebf2b870f3f72e8a4b74b1281c60a2f945","observation_id":"8012415b-f996-43d8-b7ca-2841402e00a8","resolution":{"observed_at":"2026-08-03T07:48:45.422843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2604.00387","last_updated":"2026-04-04T07:18:50Z","snapshot_observed_at":"2026-08-04T09:28:38.404006Z","submitted_at":"2026-04-01T02:16:42Z","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-13T23:14:47.704353Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2604.00387"},"observation_digest":"sha256:590dfe5fdd7b635a2469a72751f9363a694a980373440c2169435a7d6e853acc","observation_id":"be974dc6-7a58-41bd-9f37-d4e1824463a7","resolution":{"observed_at":"2026-05-13T23:18:25.918662Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2604.07403","last_updated":"2026-04-08T10:33:54Z","snapshot_observed_at":"2026-07-31T08:32:09.299699Z","submitted_at":"2026-04-08T10:33:54Z","title":"RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T18:13:22.221234Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2604.07403"},"observation_digest":"sha256:3d13bee90c970687b44d0d4cc5a08fcf8224a943aa0e1168ccce606f6cf61eef","observation_id":"fcaad7e1-fa84-44b2-b102-80911461e43c","resolution":{"observed_at":"2026-05-11T05:16:04.888069Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2605.00460","last_updated":"2026-05-01T06:51:58Z","snapshot_observed_at":"2026-07-06T23:13:52.304925Z","submitted_at":"2026-05-01T06:51:58Z","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-05-09T19:41:49.394967Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2605.00460"},"observation_digest":"sha256:8f1e91e95c0ece7e2ef15b234d253817a2e0d576964ed6d29d03dc236600d550","observation_id":"1fa20cf7-b8ca-4b9e-acc6-7cdba9fc5831","resolution":{"observed_at":"2026-05-11T15:36:05.181107Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:f1fad60f63bf764ae385bf782a3cbf1373cb62ff29c603ca498d81549eed67c8","observation_id":"1aeb5030-59cc-48cb-a729-c3132108daee","resolution":{"observed_at":"2026-07-03T05:57:41.075926Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-07-06T23:53:45.117607Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:0a7e5503a1f1f1dc4a9df59b39a5ae65f3b7af271c82940d86382bd9bca8f278","observation_id":"bc29ac4a-de12-4e3f-96a1-196ea7bf1b97","resolution":{"observed_at":"2026-07-03T21:28:59.131479Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:e706bcad7caed9c53a6f70625e7d01e1979b344d2c30ac8a737c25a32fd0f1c7","observation_id":"827af0f7-c975-4788-9ad7-0d6af76750d3","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-06T00:08:57.754979Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T12:26:27.529338Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.754979Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:87cbb67b0d6bdc6507a1a60f0a79f4ab2603faf4f9d2f281587e7773b22e2d60","observation_id":"5a9fb543-f8cf-43f2-86eb-ce9ae019f9d5","resolution":{"observed_at":"2026-08-06T00:08:57.754979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.19864/citation-record","integrity":"/paper/2505.19864/integrity","json":"/paper/2505.19864/citation-record.json","paper":"/paper/2505.19864"},"outbound":[],"paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 9 inbound Pith citation observations for arXiv:2505.19864."}