{"as_of":"2026-08-08T04:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4ff18a90456afa91ef74aeaa3fb3dd4356c29b96409bb7095ff51d5bb092c65e","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:49:00.970194Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T10:44:10.601057Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T20:00:07.849622Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-08-05T10:44:10.601057Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-07T22:51:24.319569Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.601057Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:87837b72a8b523418df4b41b3448d840a98fdc89dba9f61481e3697b7aacfb19","observation_id":"349d7963-e035-454b-a5f8-dcefb9cfe494","resolution":{"observed_at":"2026-08-05T10:44:10.601057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":"2507.15042","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-07-04T20:00:07.849622Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection.arXiv preprint arXiv:2507.15042, 2025","venue":null,"work_id":"61e52c88-e3e9-4b0e-a626-0de292a38c11","year":2025},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:0ffbf78b9a9fe347080ccd1e6021c1c5e223b620514a8d094ae70391950f9e7b","observation_id":"2a5047a3-ee61-4305-8648-5807f6b954a8","resolution":{"observed_at":"2026-07-03T21:28:59.112223Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":"2507.15042","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-07-04T20:00:07.849622Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection.arXiv preprint arXiv:2507.15042, 2025","venue":null,"work_id":"61e52c88-e3e9-4b0e-a626-0de292a38c11","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:52108a1bb2754cda053bb71b845106a3e58a2f7a65e088e7ac1717a0edaa4474","observation_id":"a06c6220-4bae-4214-864c-7ec085aefb4f","resolution":{"observed_at":"2026-07-04T20:00:07.851452Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.15042/citation-record","integrity":"/paper/2507.15042/integrity","json":"/paper/2507.15042/citation-record.json","paper":"/paper/2507.15042"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-08-06T15:48:56.106561Z","title":"MS MARCO: A Human Generated Machine Reading Comprehension Dataset","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.106561Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:b85720a541ef486f3b632937df0413cda3f11a71c9015e54832cd2dcecadb189","observation_id":"5d655d0d-c75d-4cc5-b2dd-dd1bc81bc65a","resolution":{"observed_at":"2026-08-06T15:48:56.106561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.990051Z","title":"WWW’18 open challenge: Financial opinion mining and question answering","venue":null,"work_id":"78fb50a5-b4b5-42d9-841a-bbd581685218","year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.187227Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:81269f9abdca3c139574176b41828373baf6b4d4a0fbad742163d453ceeddec5","observation_id":"3a9a8c58-d999-40b8-be0d-4ac180811128","resolution":{"observed_at":"2026-08-06T15:49:05.144970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.737556Z","title":"Fact or Fiction: Verifying Scientific Claims","venue":null,"work_id":"d0088707-dda7-4dd9-8022-42d7651033df","year":2020},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.277376Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:c93a4cda4456b568e92644011237a7c8538aa9f79c7927d7cfbdea82bcb06169","observation_id":"a91a3ef5-86b5-4d5b-9afe-b04dcb38cc9e","resolution":{"observed_at":"2026-08-06T15:49:04.846766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.456896Z","title":"FEVER: A large-scale dataset for fact extraction and VERification","venue":null,"work_id":"3d33637b-1b5d-4f3c-9464-f49b94ca56f4","year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.362806Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:eed5fb00666cf76f265104cc90103989eafd50f5e88a27b902ccddf8d9e9712c","observation_id":"8183669c-5363-4780-acc4-f8cdfcc1192f","resolution":{"observed_at":"2026-08-06T15:49:04.619938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:04.163859Z","title":"SQuAD: 100,000+ questions for machine comprehension of text","venue":null,"work_id":"989b940c-5d69-42e5-b1e8-32369d5f161c","year":2016},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.481652Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:e049b7b1bd6c8d25d41fef282ca82792c5c4c7aa312241dfaa10d3293d64fce9","observation_id":"3bdc3bb4-e328-447f-a096-83ebf39b5f17","resolution":{"observed_at":"2026-08-06T15:49:04.341382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08663","last_updated":"2021-10-21T01:18:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-04-17T23:29:55Z","title":"BEIR: A Heterogenous Benchmark for Zero-shot Evaluation of Information Retrieval Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08663","snapshot_observed_at":"2026-08-06T15:48:56.617124Z","title":"BEIR: A Heterogeneous Benchmark for Zero-shot Evaluation of Information Retrieval Models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.617124Z"},"links":{"cited_paper":"/paper/2104.08663","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:7ed740af3d135420515db64499f6485a25f1ec14b4b69f52fe4ee2e19c3264ed","observation_id":"32d60f6b-c450-4e6f-ae73-fa52e357ab80","resolution":{"observed_at":"2026-08-06T15:48:56.617124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.936092Z","title":"Dai, Jakob Uszkoreit, Quoc Le, and Slav Petrov","venue":null,"work_id":"52571d47-b90d-4941-b5aa-a3d48438c027","year":2019},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.746555Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:cf0a4d1897383a81066f930119a5c6b731dbcafcd86610d1b45f3b769f75b8eb","observation_id":"d9847514-dc4c-424c-a875-2971cb3b76eb","resolution":{"observed_at":"2026-08-06T15:49:04.046023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.713776Z","title":"Differential evolution – a simple and efficient heuristic for global optimization over continuous spaces","venue":null,"work_id":"53a91569-ffc6-4fb3-a1d7-96da7e7592d1","year":1997},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.864144Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:45e21c08ef793aee63d1a3333287e006687c36ef6625aee9a1fad8ee4e2809ea","observation_id":"92af87fd-150b-4984-8085-12ff84a97ae4","resolution":{"observed_at":"2026-08-06T15:49:03.810414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.450387Z","title":"Salem, and Ahmed E","venue":null,"work_id":"e6e400e6-73da-41cd-b463-16ef904938f9","year":2021},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:56.967589Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:34c8d5726dfb4e5d2e4d47b8dbab111e0a60b14fee2ccedf20d4594c81c221df","observation_id":"f6818379-ce7c-496d-b0e3-c8dd9fa3f5a5","resolution":{"observed_at":"2026-08-06T15:49:03.555565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.10446","last_updated":"2024-03-15T16:30:14Z","snapshot_observed_at":"2026-07-06T17:45:23.748539Z","submitted_at":"2024-03-15T16:30:14Z","title":"Enhancing LLM Factual Accuracy with RAG to Counter Hallucinations: A Case Study on Domain-Specific Queries in Private Knowledge-Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.10446","snapshot_observed_at":"2026-08-06T15:48:57.081874Z","title":"Enhancing LLM Factual Accuracy with RAG to Counter Hallucinations: A Case Study on Domain-Specific Queries in Private Knowledge-Bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.081874Z"},"links":{"cited_paper":"/paper/2403.10446","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:a1b06f0aa93eb37e749b5ebb528d2a556f55169190b19a17ed04d00870d6f1a8","observation_id":"a359d608-5344-4049-ac7d-a401460176e9","resolution":{"observed_at":"2026-08-06T15:48:57.081874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04415","last_updated":"2024-12-05T18:38:30Z","snapshot_observed_at":"2026-08-06T18:57:27.617184Z","submitted_at":"2024-12-05T18:38:30Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04415","snapshot_observed_at":"2026-08-06T15:48:57.225641Z","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.225641Z"},"links":{"cited_paper":"/paper/2412.04415","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:7a11e5f03acf38991a8de8ec108c55640171f981376b030cb818ba207a1da50e","observation_id":"630c11ab-c934-4e03-8fb2-5715dda31ee6","resolution":{"observed_at":"2026-08-06T15:48:57.225641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T15:48:57.340757Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.340757Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:e2f148a6db7ae2b59d7f7f743ae2c50aaf8e302a8dc0a7a7d174a3afddc5eca0","observation_id":"ea27f41a-2e62-4e1a-8a1a-c919c5fc8c86","resolution":{"observed_at":"2026-08-06T15:48:57.340757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-06T15:48:57.497059Z","title":"Detecting Language Model Attacks with Perplexity","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.497059Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:40130843d2ed90f3e26ec89ac38c85c527e95362addc5115d24a7cb34bffa696","observation_id":"bcc68161-d6d3-4a8e-9e44-af07f4c51e9f","resolution":{"observed_at":"2026-08-06T15:48:57.497059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:03.188751Z","title":"Robust Safety Classifier Against Jailbreaking Attacks: Adversarial Prompt Shield","venue":null,"work_id":"6d305bfb-b010-4e9a-863e-e877cf63b2a9","year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.685054Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:06bacc75ca1877437457c5147573fc0b6437ad1ed54596232dae20f1d9acd7c2","observation_id":"55540e38-55c3-47d6-af28-bcc07804aa99","resolution":{"observed_at":"2026-08-06T15:49:03.327394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:57.797958Z","title":"CtrlRAG: Black-box Adversarial Attacks Based on Masked Lan- guage Models in Retrieval-Augmented Language Generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.797958Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:490ef16670c81899aea08ad50069fdf5201f88c26126e0e21d9c18406c797f68","observation_id":"7e39d900-ffb7-4ff9-9304-3e2b534f6d06","resolution":{"observed_at":"2026-08-06T15:48:57.797958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:57.903143Z","title":"PRADA: Practical Black-box Adversarial Attacks against Neural Ranking Models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.903143Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:c4f976a2bc779102b46260d6c541badaf4cafcc6bf60ffa22dcb5799d1f96513","observation_id":"283a017a-c98d-43e1-a8de-d9ec0d9e2f31","resolution":{"observed_at":"2026-08-06T15:48:57.903143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:48:58.038712Z","title":"One Pixel Attack for Fooling Deep Neural Networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.038712Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:00ea71efcaeb88bcc338e504c21f78a74637955c0055f3b0d0915a12f387de37","observation_id":"5e2d89c9-d531-433b-b9e0-93a1b4e3b595","resolution":{"observed_at":"2026-08-06T15:48:58.038712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-06T15:48:58.165779Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.165779Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:651e01690f04e7516a33d98b8577d5fd1beffcd1db9ba89e1c3807110e74b0c1","observation_id":"75787886-0a10-4a7e-81a2-6873fad46b03","resolution":{"observed_at":"2026-08-06T15:48:58.165779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T15:48:58.294900Z","title":"Ignore Previous Prompt: Attack Techniques for Language Models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.294900Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:e09c65fa5b09bb0e1abee774b7f9268c1570bc146591213214e0c836de0ade1c","observation_id":"57954197-763d-49be-905e-01ddf0c74363","resolution":{"observed_at":"2026-08-06T15:48:58.294900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T15:48:58.472087Z","title":"Auto- matic and Universal Prompt Injection Attacks Against Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.472087Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:a721e535a775ed9de1175b79491305ef90c05e19207a464ce896431fd1695010","observation_id":"e7e68571-f96e-4f65-ada3-7426759e29b2","resolution":{"observed_at":"2026-08-06T15:48:58.472087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07234","last_updated":"2024-11-09T04:01:22Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-04-06T06:17:10Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07234","snapshot_observed_at":"2026-08-06T15:48:58.642580Z","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.642580Z"},"links":{"cited_paper":"/paper/2404.07234","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:3a96d44b73dbd342cbc8362bbe40fbcb861a02269564a6072b5a01648f70db24","observation_id":"91050d90-8900-4fe2-a68c-2446cd62a221","resolution":{"observed_at":"2026-08-06T15:48:58.642580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-06T15:48:58.758345Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.758345Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:0be9293803dfb8327e1ae8d4c77de8ddcae3a6c1341c929be3a8d1439017fe1c","observation_id":"bd98d08a-721e-473e-af78-e6286c03d56b","resolution":{"observed_at":"2026-08-06T15:48:58.758345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07179","last_updated":"2024-07-23T19:41:05Z","snapshot_observed_at":"2026-07-06T17:28:31.413289Z","submitted_at":"2024-02-11T12:25:41Z","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07179","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.07179","snapshot_observed_at":"2026-08-06T15:49:01.487958Z","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","venue":"cs.CL","work_id":"7a22519e-12b2-4a74-acdd-845e5eef0eea","year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:58.906697Z"},"links":{"cited_paper":"/paper/2402.07179","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:7a0b2fda34c5d771f88a7eea7ace6c39b5b2e75426c4a102c75bb91059b673fb","observation_id":"9014105d-ea42-4b63-9c8d-5165e2519b28","resolution":{"observed_at":"2026-08-06T15:49:01.623652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.900634Z","title":"TEMPEST: Multi-Turn Jailbreaking of Large Language Models with Tree Search","venue":null,"work_id":"33f92b7a-ac61-4aaa-98ed-d24a21c4a910","year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.050059Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:ea144936f2c7498c7452a41fa21e669539aa96d933d4b8d7925eaf2815d78e13","observation_id":"5176bed5-3ecb-4986-945d-bf5989dd8968","resolution":{"observed_at":"2026-08-06T15:49:03.044417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.11401","last_updated":"2021-04-12T15:42:18Z","snapshot_observed_at":"2026-08-07T05:44:30.677502Z","submitted_at":"2020-05-22T21:34:34Z","title":"Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.11401","snapshot_observed_at":"2026-08-06T15:48:59.178419Z","title":"Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.178419Z"},"links":{"cited_paper":"/paper/2005.11401","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:f4f6606e0dbe6b506305f92190c35adf4ad02ef41b2d607c98c5996b6bf66fce","observation_id":"1a961bf6-c059-4e95-a1b3-03cbde47ff4e","resolution":{"observed_at":"2026-08-06T15:48:59.178419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.09203","last_updated":"2019-11-13T03:54:12Z","snapshot_observed_at":"2026-08-03T18:37:05.537362Z","submitted_at":"2019-08-24T20:41:40Z","title":"Release Strategies and the Social Impacts of Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.09203","snapshot_observed_at":"2026-08-06T15:48:59.296515Z","title":"Release strategies and the social impacts of language models","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.296515Z"},"links":{"cited_paper":"/paper/1908.09203","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:8ca0fa31b0c0cfa3def8b99b03a8098bc61f67aade19b700ce9603fbf4cd4538","observation_id":"2dd1cd2d-204b-4f1a-858e-be4a3f7284bf","resolution":{"observed_at":"2026-08-06T15:48:59.296515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.15310","last_updated":"2020-07-30T08:43:45Z","snapshot_observed_at":"2026-07-06T09:43:05.234339Z","submitted_at":"2020-07-30T08:43:45Z","title":"Black-box Adversarial Sample Generation Based on Differential Evolution","version":1},"cited_work":{"arxiv_id":"2007.15310","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.15310","snapshot_observed_at":"2026-08-06T15:49:01.207083Z","title":"Black-box Adversarial Sample Generation Based on Differential Evolution","venue":"cs.LG","work_id":"57c6415a-ae01-48e8-b05b-9b3f33abc410","year":2020},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.697092Z"},"links":{"cited_paper":"/paper/2007.15310","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:6fa488b6095ca9c6bd12dd1a184e014a06c7ed446d67e37cee105cbec92ed71d","observation_id":"31d56b97-da33-4b56-9e70-1cad8fd199f8","resolution":{"observed_at":"2026-08-06T15:49:01.309111Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.620474Z","title":"Black-Box Prompt Learning for Pre-trained Language Models","venue":null,"work_id":"f68d30cc-a17c-4115-94bc-dbb03ccedbe7","year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.802354Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:c40d938885386004d8144fd1d80be8300b9a73dfef196c644139076a13f72d56","observation_id":"80dc2c97-6a6f-4fea-a748-0319b4caf0bc","resolution":{"observed_at":"2026-08-06T15:49:02.776909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09906","last_updated":"2025-03-03T04:28:49Z","snapshot_observed_at":"2026-07-06T17:30:34.153488Z","submitted_at":"2024-02-15T12:12:19Z","title":"Generative Representational Instruction Tuning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09906","snapshot_observed_at":"2026-08-06T15:48:59.910252Z","title":"Generative Representational Instruction Tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.910252Z"},"links":{"cited_paper":"/paper/2402.09906","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:8394401bccde9958ee91123a9b3502d43ef8956ec1487f7eda5ba121a495b215","observation_id":"7cd9529c-51c7-47a5-a0f0-311c75fa2bac","resolution":{"observed_at":"2026-08-06T15:48:59.910252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05374","last_updated":"2024-05-08T19:05:18Z","snapshot_observed_at":"2026-07-06T18:11:48.858911Z","submitted_at":"2024-05-08T19:05:18Z","title":"Arctic-Embed: Scalable, Efficient, and Accurate Text Embedding Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05374","snapshot_observed_at":"2026-08-06T15:49:00.035067Z","title":"Arctic-Embed: Scalable, Efficient, and Accurate Text Embedding Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.035067Z"},"links":{"cited_paper":"/paper/2405.05374","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:dc1679d2ab88ca89f691cbdb81773b950a5b21a487becaed81086c585bb99275","observation_id":"84bbaabe-9546-4bca-8463-bf6be57a6fd4","resolution":{"observed_at":"2026-08-06T15:49:00.035067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11509","last_updated":"2024-02-18T06:04:27Z","snapshot_observed_at":"2026-07-06T16:49:45.821983Z","submitted_at":"2023-11-20T03:17:21Z","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11509","snapshot_observed_at":"2026-08-06T15:49:00.202243Z","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.202243Z"},"links":{"cited_paper":"/paper/2311.11509","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:6fbb355a5e0982c83c1c3984c3584988b65856239f45c10925d49e0e53ef1e30","observation_id":"fbc1b277-a695-4a6e-8905-ad112feabcc2","resolution":{"observed_at":"2026-08-06T15:49:00.202243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:00.374240Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.374240Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:baf1630453acdce513f15321eae5232e57a04bca59c635043b2dc66705a5d221","observation_id":"ba24aec9-af6d-43cc-addf-a10ad5a86257","resolution":{"observed_at":"2026-08-06T15:49:00.374240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.421610Z","title":null,"venue":null,"work_id":"4ca6b316-3b24-4973-9d90-f858f4f71cad","year":2025},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.485686Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:d6d8337d78d33f222ec9207467087db8db7a97f4e8dc9f454c1061519e44d27d","observation_id":"2d87080b-84f7-4314-b8b6-392c0126f2ca","resolution":{"observed_at":"2026-08-06T15:49:02.507055Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:02.211484Z","title":"The Probabilistic Relevance Framework: BM25 and Beyond","venue":null,"work_id":"0d738260-6d89-421c-b590-c63d74268277","year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.641358Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:bd5cccc0ae1593634c7cd71bb88757352333d9e38b772f36f6340ea83bf156cc","observation_id":"08737cbd-b2c2-4bd1-89eb-03e6da87eac7","resolution":{"observed_at":"2026-08-06T15:49:02.322604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:01.987183Z","title":"Download to CSV","venue":null,"work_id":"25866a06-dbe0-4fa8-9919-e238fa95135f","year":1996},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.970194Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:6768052411696d2dbfdec2f64d446c627c0670fb1291ba9e0f9e51a92f91b8a5","observation_id":"fc70a480-734b-4b62-a382-fd83cec2d94f","resolution":{"observed_at":"2026-08-06T15:49:02.064640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:49:00.794927Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-06T15:49:00.794927Z"},"links":{"citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:3ca932f41990588b38810dffb091c6a917a07f37c8d1d7c32b8841ab3e174364","observation_id":"6d6ba860-845d-409d-b954-ada883c11048","resolution":{"observed_at":"2026-08-06T15:49:00.794927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.08532","last_updated":"2025-05-01T11:56:52Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-15T16:50:09Z","title":"EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.08532","snapshot_observed_at":"2026-08-06T15:48:59.538886Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:59.538886Z"},"links":{"cited_paper":"/paper/2309.08532","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:6e67a9f3e5cb3addc91d7e8471586776416333f281b39f1af7c6da0e1b517bc6","observation_id":"3fb4155e-17e1-42f1-a4aa-c79b8b5123de","resolution":{"observed_at":"2026-08-06T15:48:59.538886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":2,"verified_fuzzy":12},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 3 inbound Pith citation observations for arXiv:2507.15042."}