{"as_of":"2026-08-07T16:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3ee2eabbdbd2dc67309049360924d314208add90cb24d2cdd0565465feffde4b","coverage":[{"denominator":133,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T05:56:20.462380Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.01084/citation-record","integrity":"/paper/2508.01084/integrity","json":"/paper/2508.01084/citation-record.json","paper":"/paper/2508.01084"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.198469Z","title":"Fabbri, Ben Risher, Philippe Laban, Shafiq Joty, and Chien- Sheng Wu","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.198469Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:13fd78a80ffbb3249987a46dd6b3511ec33bb62d64d7f7adabbceda107f980e5","observation_id":"091a5a52-89d4-49e1-ac52-515bccd2156b","resolution":{"observed_at":"2026-08-06T05:56:20.198469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.202077Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.202077Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:599423279dd3dd5f03552b71a0239621c01a7db6bc16452e77991b1c8372726d","observation_id":"4c49ed30-7d48-40f6-a991-94a1a76d49ba","resolution":{"observed_at":"2026-08-06T05:56:20.202077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.205005Z","title":"Introducing Claude","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.205005Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6327388629bf887252cee32487e42682b8334c191ae99e6d25d255a39f184de0","observation_id":"912cdb52-3791-4afc-9b89-75fc40a5ac45","resolution":{"observed_at":"2026-08-06T05:56:20.205005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-06T05:56:20.207900Z","title":"Training a helpful and harmless assistant with reinforcement learning from human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.207900Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:4e943334d742d4572fc6d2c95e39941e7f1271351e79b8bd1433f2437bbe7298","observation_id":"6d9a9c96-531a-44a5-bd9c-3c5f98b5494d","resolution":{"observed_at":"2026-08-06T05:56:20.207900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.211117Z","title":"Keying hash functions for message authen- tication","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.211117Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:0dfd085b9999ae8d56a2a5602eb76c63ae9ea06c182bbf5080769065263ea197","observation_id":"8443b602-bd50-49e9-8ab6-78527fbfddcd","resolution":{"observed_at":"2026-08-06T05:56:20.211117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.214009Z","title":"Hash function balance and its impact on birthday attacks","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.214009Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:99c62daac6f55000a55a3549a5b07eba96f7234f11260fc9dc95bf0cf9f349a6","observation_id":"83fa7530-48ef-4cf2-98cf-570b65868676","resolution":{"observed_at":"2026-08-06T05:56:20.214009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.217144Z","title":"Hash function balance and its impact on birthday attacks","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.217144Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:7fd9c855b36dc0a13e2e6f837b27c88283ed07842804e6147f15bfa6a6bfdf69","observation_id":"2ac4f35e-502e-46e7-b66c-f8e54af4a443","resolution":{"observed_at":"2026-08-06T05:56:20.217144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.219706Z","title":"Quantifying memorization across neural language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.219706Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:590044fafc97d88ea755c18b98b059f6f74316b6535ae8ea07951087028eeb7e","observation_id":"f863edaa-f7f4-495d-9011-b0562aab0ae0","resolution":{"observed_at":"2026-08-06T05:56:20.219706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.222603Z","title":"Phantom: General trigger attacks on retrieval augmented language generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.222603Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d71bb66c31bb65e405e2063048be627bcf6444a7204caf65455d7e6ed513eaab","observation_id":"7cd35cc4-6a58-410b-ba97-a5158abe87df","resolution":{"observed_at":"2026-08-06T05:56:20.222603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.225412Z","title":"Trojanrag: Retrieval-augmented generation can be backdoor driver in large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.225412Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2c49b2fdc8ce604e8890b2bab34084068b8bc3657dfd038653c6e6b641ddf0b5","observation_id":"f7e2bd29-0a12-40b6-92e0-275157dc09a7","resolution":{"observed_at":"2026-08-06T05:56:20.225412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.227897Z","title":"xRAG: Extreme context compression for retrieval-augmented generation with one token","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.227897Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c6da378def5c5efbf93291640b1a2b2db280daa4381d8f6c834a4cb1aade2cff","observation_id":"0ef22ada-c67a-4ad5-b5f4-954008b2a6b1","resolution":{"observed_at":"2026-08-06T05:56:20.227897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-05T17:51:57.166067Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-06T05:56:20.230391Z","title":"Unleashing worms and extracting data: Escalating the outcome of attacks against rag-based inference in scale and severity using jailbreaking","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.230391Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ee2a71055c479786b552de91a43bff6c4158a1a6c6fe603ecb9542698c334998","observation_id":"f00606c0-a63f-4c5e-814e-3f0024de8c16","resolution":{"observed_at":"2026-08-06T05:56:20.230391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.233265Z","title":"Intel SGX explained","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.233265Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:36b73c9747e8d493337049a2cd4d98c004830eef212182073dcf4d4e09819686","observation_id":"6b3fdf88-eb28-44b9-96bb-66f7c8966eeb","resolution":{"observed_at":"2026-08-06T05:56:20.233265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.235727Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.235727Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c8f2048284d46e1caaad4150616f523a9781f6df74f33458702699a3299f2940","observation_id":"534c9646-6e90-488f-b85e-294e150d93cc","resolution":{"observed_at":"2026-08-06T05:56:20.235727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.238284Z","title":"Aes proposal: Rijndael","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.238284Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:affa3b6ff836a7c0c8dfe89995382d99e7160a37811a6a375abc33d74b0a630a","observation_id":"c021c88a-fef8-4ba4-a376-3cc71cbb09b9","resolution":{"observed_at":"2026-08-06T05:56:20.238284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-07-06T20:12:40.901520Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.18295","snapshot_observed_at":"2026-08-06T05:56:20.240732Z","title":"Pirates of the rag: Adaptively attacking llms to leak knowledge bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.240732Z"},"links":{"cited_paper":"/paper/2412.18295","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:70a1d1e7ed9030041a2645f0d8674377c378939ed930fbad09e8483162b1375d","observation_id":"8fe632d5-e408-4752-ad1a-394b58330a0f","resolution":{"observed_at":"2026-08-06T05:56:20.240732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.243536Z","title":"Attacks, defenses and evaluations for llm conversation safety: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.243536Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:8755fa69e3227e9152b375bc6f4e6fe2436b80a7c0cf0c51c94dd3eb5f46f1b1","observation_id":"3a5af633-defa-4a0c-bb94-5718980dbda3","resolution":{"observed_at":"2026-08-06T05:56:20.243536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.246188Z","title":"A comprehensive survey of attack techniques, implementation, and mitigation strategies in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.246188Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f744b33aa0c7b6c7ea5890b86e3baf88f0d0b71865c18533bf2081ba194bd963","observation_id":"1d9d6e1e-e8ba-4244-9984-3ed50c350859","resolution":{"observed_at":"2026-08-06T05:56:20.246188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.248689Z","title":"A survey on rag meeting llms: Towards retrieval-augmented large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.248689Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a3a3d5eae797018030009cc49b6b6d438e4ab2b1a20c8baa2bda7ce2082f1744","observation_id":"c2f30071-92cc-4f4c-944c-e1be8abaac44","resolution":{"observed_at":"2026-08-06T05:56:20.248689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.251390Z","title":"How to construct random functions","venue":null,"work_id":null,"year":1986},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.251390Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:fb905e08b444af9014ed9ee014a1377c4f6dd759e8202e58d3c2ba4c2d06972b","observation_id":"752e4e07-dadf-4e26-b841-edc62c5780d1","resolution":{"observed_at":"2026-08-06T05:56:20.251390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.253716Z","title":"Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.253716Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:62055c5e109f5669955acf95645cbcbcf3906e43ba6a2f21ba61ac7f8b983799","observation_id":"0f16d05e-dfc7-43f6-b9e7-3bc7e7881fa1","resolution":{"observed_at":"2026-08-06T05:56:20.253716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.256332Z","title":"Detecting and preventing hallucinations in large vision language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.256332Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:86f5d0cb6599f8940b2aa557953a3ac28b561649a71f7b66ca4b848346841d8c","observation_id":"18111436-614b-415a-a13e-ee29429f24d2","resolution":{"observed_at":"2026-08-06T05:56:20.256332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T05:56:20.258748Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.258748Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:7f6105bf56305247a66e2c494020ecc2f3801264783bd6898dc8d35442b89a31","observation_id":"50f5ffb5-f86f-4221-8332-bfa0f190d2b1","resolution":{"observed_at":"2026-08-06T05:56:20.258748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.261571Z","title":"Realm: retrieval- augmented language model pre-training","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.261571Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c366a4743bd572fe03301a72fc717675dd780f8a849c32da7d2d60334e640f38","observation_id":"9060a5b3-72d8-4695-901b-1bf36d6be96e","resolution":{"observed_at":"2026-08-06T05:56:20.261571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T05:56:20.264246Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.264246Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:790d595c3f3738b52bcf98046d6294b4e8745782ae5809e843b698bb93696910","observation_id":"4d7dbf2d-5024-4188-9bf2-190d7779a207","resolution":{"observed_at":"2026-08-06T05:56:20.264246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.15361","last_updated":"2024-09-18T08:04:24Z","snapshot_observed_at":"2026-08-01T05:53:30.434736Z","submitted_at":"2024-09-18T08:04:24Z","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.15361","snapshot_observed_at":"2026-08-06T05:56:20.267268Z","title":"Mul- titask mayhem: Unveiling and mitigating safety gaps in llms fine-tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.267268Z"},"links":{"cited_paper":"/paper/2409.15361","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:09fcdc403c97a91a0d1500d38c2488e36c3e0c25949cd9049d923ddd388b6555","observation_id":"ee423bff-4488-45d3-bc88-149282b15fdd","resolution":{"observed_at":"2026-08-06T05:56:20.267268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.270013Z","title":"Rag-thief: Scalable extraction of private data from retrieval-augmented generation applications with agent-based attacks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.270013Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:8f5ee223fd22b9b60db53eba7ede0f8f59eab897aad76b4be56549a4d4ee2d9a","observation_id":"ba783cfe-3a4d-495b-85f3-ffc22ac05bd2","resolution":{"observed_at":"2026-08-06T05:56:20.270013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01763","last_updated":"2025-06-23T04:05:15Z","snapshot_observed_at":"2026-07-06T17:24:33.169277Z","submitted_at":"2024-01-30T23:35:28Z","title":"When Large Language Models Meet Vector Databases: A Survey","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01763","snapshot_observed_at":"2026-08-06T05:56:20.272731Z","title":"When large language models meet vector databases: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.272731Z"},"links":{"cited_paper":"/paper/2402.01763","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:480848f5c91115c27748d204d3a59ff6199cf1a408b0a01b7353b03d9ee34b0b","observation_id":"d2731010-478a-4b2a-bdfe-d5ffe2ecbb45","resolution":{"observed_at":"2026-08-06T05:56:20.272731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.275450Z","title":"Deduplicating training data mitigates privacy risks in language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.275450Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:751c846f8f4f11926808d7bea40665929eff1cc67c26794f07d18e2f06573fb0","observation_id":"7c29597b-6481-466a-82ea-016c9bc315b2","resolution":{"observed_at":"2026-08-06T05:56:20.275450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.277938Z","title":"Introduction to modern cryptography: principles and protocols","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.277938Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:50eb6b6613055ebbd7b97f7e5d97e7774b0e3166404770886261ac7cb22a1825","observation_id":"d267c94d-b1ec-495b-8a35-be46e34ad999","resolution":{"observed_at":"2026-08-06T05:56:20.277938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.280404Z","title":"Colbert: Efficient and effective passage search via contextual- ized late interaction over bert","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.280404Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:52b775c6fa417c5e99021401a77df7520749beb583c4fba6250a721498d6384d","observation_id":"8bc6ae60-013d-4ea3-8dda-dbe0c61fd54b","resolution":{"observed_at":"2026-08-06T05:56:20.280404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.282848Z","title":"The enron corpus: A new dataset for email classification research","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.282848Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b9c46dd575781e7f4e7a47e682dcb77f622b5c56955f35ed2d08e73e6db5a4ba","observation_id":"82e9775d-0092-49c5-bc48-e3b3a0a3b809","resolution":{"observed_at":"2026-08-06T05:56:20.282848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.285370Z","title":"Billsum: A corpus for automatic summarization of us congressional bills","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.285370Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:c70a1feb9e5f7e86fa56c0e2b0e0937edaef07c8150f7a6e26298e297b290602","observation_id":"9e45f6cf-4504-4b89-8e01-720633e4ea3a","resolution":{"observed_at":"2026-08-06T05:56:20.285370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.288074Z","title":"Cryptographic extraction and key derivation: The hkdf scheme","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.288074Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:7d9f6b9f71e7b0a34fb2caf1b6a83f981fd4846d4c28060496c08b0c5590f1f6","observation_id":"53e4db9d-b8db-4e3b-96b7-1dc0609509b5","resolution":{"observed_at":"2026-08-06T05:56:20.288074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.290614Z","title":"Hmac: Keyed-hashing for message authenti- cation","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.290614Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:223e48a1256ffbfe575f25c82c277c3335091cb959ab93d2566620cf05f378e2","observation_id":"791a9f9b-17fd-42dc-8868-b1a1c97f8e43","resolution":{"observed_at":"2026-08-06T05:56:20.290614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.293229Z","title":"Watch your language: Inves- tigating content moderation with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.293229Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:7de513f0fef4ebc954412f989a3464ace785a7b74eb914b938f868733d13c4c8","observation_id":"218056fc-73ee-48f7-8c90-a3cb35a635eb","resolution":{"observed_at":"2026-08-06T05:56:20.293229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.06499","last_updated":"2022-03-24T19:29:45Z","snapshot_observed_at":"2026-08-05T18:30:13.997811Z","submitted_at":"2021-07-14T06:06:52Z","title":"Deduplicating Training Data Makes Language Models Better","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.06499","snapshot_observed_at":"2026-08-06T05:56:20.295734Z","title":"Deduplicating training data makes language models better","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.295734Z"},"links":{"cited_paper":"/paper/2107.06499","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6916a48cb22d9bc095d879fa16c432cce3af5c2cf1f4ce656ac74fe5dabb1a3f","observation_id":"3bebfdcc-bb9f-485e-a549-7ce9dae11fbf","resolution":{"observed_at":"2026-08-06T05:56:20.295734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.298478Z","title":"A new generation of perspective api: Efficient multilingual character-level trans- formers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.298478Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:328e725d509a5f16136da5bd08e723140bd650acd7c5e8c216defb7b60c79de9","observation_id":"7dacf7fd-f580-4145-a26b-45d8d3e65e49","resolution":{"observed_at":"2026-08-06T05:56:20.298478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.300987Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.300987Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:466751c3e23cc3879d201e92af3963327ddd624b487ce407dd894f9ffed295e5","observation_id":"797257d1-b324-44e6-8bf9-bb21caba542c","resolution":{"observed_at":"2026-08-06T05:56:20.300987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.303743Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.303743Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5a9f37f907e8e07ef29f2ffd9381898c6a833353d4692bba7b6b23bc8d3371fc","observation_id":"c6686953-acd0-47a5-89b1-39c504a5431b","resolution":{"observed_at":"2026-08-06T05:56:20.303743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.306191Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.306191Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:52b28cc69f10229df92ade869697587e6aed06318b65861e8449bf214fdd3adf","observation_id":"aec0da2a-3978-4639-b720-be0e6eabad28","resolution":{"observed_at":"2026-08-06T05:56:20.306191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T05:56:20.308848Z","title":"Prompt injection attack against llm-integrated applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.308848Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f0c43c5a5590d4aa3319957c71daf062e9a89efcf925442fbd7df90feec664cc","observation_id":"c51b96cf-9ccd-4c24-af97-286ba4bef4a9","resolution":{"observed_at":"2026-08-06T05:56:20.308848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.311494Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.311494Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:bcce6a2af5aca43eed0957b70b135a08bd262c64e231af4cc6d95cfd0b00f933","observation_id":"1c735267-17f1-4fc3-9a5e-2609a067ce01","resolution":{"observed_at":"2026-08-06T05:56:20.311494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.314060Z","title":"Financial document summarization with structure- aware pre-training","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.314060Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6669be0d9998e888fa33d891217546797a34c4b597f6b0924d0f4299d7574701","observation_id":"92366c12-f225-430d-8dd9-09b056703909","resolution":{"observed_at":"2026-08-06T05:56:20.314060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.316679Z","title":"A holistic approach to undesired content detection in the real world","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.316679Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e6937bf6278908161b70d01157e573378a56a854c7d2f843a311e1f0344736a8","observation_id":"9b8f7777-2960-4e3e-8844-3669fcdf91f0","resolution":{"observed_at":"2026-08-06T05:56:20.316679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.319097Z","title":"Llama Guard 2: Model cards and prompt formats","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.319097Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:45d3e0f8d2b44353d06d190b41815e03c37692746b5189c88bdcf625c7266c62","observation_id":"ad6b4507-aff0-4bf7-a7cf-0958e8d65fc6","resolution":{"observed_at":"2026-08-06T05:56:20.319097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.321742Z","title":"Text embeddings reveal (almost) as much as text","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.321742Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f1176ba5dae4de1ec4d4768cdc2c3b3cb6c7c4ef0bb4f55553fc1a0f0424f6ff","observation_id":"3d6a72b8-ba96-4866-ae56-1eaac121a0f8","resolution":{"observed_at":"2026-08-06T05:56:20.321742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.324143Z","title":"Poison-rag: Adversarial data poisoning attacks on retrieval-augmented generation in recommender systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.324143Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ec6c21cec72d7bde1d70b593da0c0bbb265c0fcfb80197cc24cf4a035ea5b595","observation_id":"64463b8a-7658-471b-985f-47703d884eef","resolution":{"observed_at":"2026-08-06T05:56:20.324143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.326730Z","title":"A survey of published attacks on intel sgx, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.326730Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:260d2176c14eee734240ec72743b3576a22012a327148ff5c4e1e933047e3015","observation_id":"ac128896-96ef-455b-bd5b-24e13f7f6aaf","resolution":{"observed_at":"2026-08-06T05:56:20.326730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.329423Z","title":"ChatGPT: Optimizing Language Models for Dialogue","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.329423Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:4e7e1744f200d410d3560f675e87e6677efbb18a0339935f0979a8ffe8552128","observation_id":"0b1cd6d4-5e29-4354-9841-344c66d5fe7b","resolution":{"observed_at":"2026-08-06T05:56:20.329423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.331990Z","title":"Openai text-embedding-ada-002","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.331990Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:98992ba94f44d6b78205a3369e2ced85503956d5727c09dc3d77bc60c17d2262","observation_id":"e60b298c-d69a-421c-8060-6a33b27b8689","resolution":{"observed_at":"2026-08-06T05:56:20.331990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.334379Z","title":"Gpt-4o mini","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.334379Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:cebc16b156b97e5820502f5eb60c7566f96e7fb8f50f25a9550140ad55a540ff","observation_id":"6525c947-db99-4685-9f4f-0c211425c1cd","resolution":{"observed_at":"2026-08-06T05:56:20.334379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.336967Z","title":"Training language models to follow instructions with human feedback","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.336967Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:18ebbf4d55084b1968499213d390c4eff3e2e4c534b97674e41da10189e5bb98","observation_id":"3d474fc8-3ac7-42cc-962b-ef66786aaa4a","resolution":{"observed_at":"2026-08-06T05:56:20.336967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.339520Z","title":"Development of dental consultation chatbot using retrieval augmented llm","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.339520Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:1b18d98747db783e616df5a8574dd6470b794fd1c17ca210c41adb35bbda1add","observation_id":"c4745978-bedb-4bda-a406-40651d66d33c","resolution":{"observed_at":"2026-08-06T05:56:20.339520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.342750Z","title":"197: Advanced encryption standard (aes)","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.342750Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a7840acb07f9b86cd40b1ecf9371b3f4cd272b3311ab7afdb33d46cbe3ea5e4a","observation_id":"fac1419c-ed57-4fcf-85c1-00f54df5821c","resolution":{"observed_at":"2026-08-06T05:56:20.342750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.17840","last_updated":"2024-10-06T21:25:41Z","snapshot_observed_at":"2026-08-06T11:51:24.278910Z","submitted_at":"2024-02-27T19:08:05Z","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.17840","snapshot_observed_at":"2026-08-06T05:56:20.345257Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.345257Z"},"links":{"cited_paper":"/paper/2402.17840","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ac7484c2ffecffbe3dfcbd4242cc3c0459568aea2338cce11cf49d7028bc7a69","observation_id":"17444477-7d41-4668-a3b1-4a5da87d1633","resolution":{"observed_at":"2026-08-06T05:56:20.345257Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.348137Z","title":"Scaling up llm reviews for google ads content moderation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.348137Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:552ec78ac63e68a6b805f4efbb92eae94d7f6e748cd3cbf0681187d6294d6a10","observation_id":"e0524313-5b63-4cac-8171-5c1c4b54cbe9","resolution":{"observed_at":"2026-08-06T05:56:20.348137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.350867Z","title":"RocketQA: An optimized training approach to dense passage retrieval for open-domain question answering","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.350867Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9b41419f84c44b1ab6f180cca94a67c79265e25cd7f828f8b5385f21915df5e1","observation_id":"bb9858d3-336d-4c63-afed-2f339ec49185","resolution":{"observed_at":"2026-08-06T05:56:20.350867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.353761Z","title":"A rag-based medical assistant especially for infectious diseases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.353761Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:1ce2e19d46d6b1842afd6e2415411872febba46686eb40f9dbf51d1bd9a860cd","observation_id":"dccd3910-801c-444a-acba-b44d70679ca3","resolution":{"observed_at":"2026-08-06T05:56:20.353761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.356416Z","title":"Nemo guardrails: A toolkit for controllable and safe llm applications with programmable rails","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.356416Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6be838f47087ae77e5eba39f244b906d49b77c2aad8f2adb826ac9a3acf6fc3a","observation_id":"efa47010-2e87-4f2e-999c-25993a279cc6","resolution":{"observed_at":"2026-08-06T05:56:20.356416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.358920Z","title":"Evaluation of some blockcipher modes of operation","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.358920Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:72f3faccd5fb8a5ba0c08fb13ca6e2188d65c92bce218cd5cdb0e9c6123fda36","observation_id":"f30d9ef4-ea58-4f38-a4a2-fa3c9267370d","resolution":{"observed_at":"2026-08-06T05:56:20.358920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.05870","last_updated":"2025-03-10T12:56:54Z","snapshot_observed_at":"2026-07-06T18:27:50.189771Z","submitted_at":"2024-06-09T17:55:55Z","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.05870","snapshot_observed_at":"2026-08-06T05:56:20.361393Z","title":"Machine against the rag: Jamming retrieval-augmented generation with blocker documents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.361393Z"},"links":{"cited_paper":"/paper/2406.05870","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5caccf4a374837c56cafbd23f369cac20c92b5e4244066ac89bf2d94906aa6ef","observation_id":"1feeb62c-2a26-422d-bcfd-f7332760e5e0","resolution":{"observed_at":"2026-08-06T05:56:20.361393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.364210Z","title":"Communication theory of secrecy systems","venue":null,"work_id":null,"year":1949},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.364210Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2fc9965997b245013a8dcfb04cef197d9a848490c4ca354e1736f5591b6a4af6","observation_id":"1185ab8e-d4d5-43fc-ae54-fcf28d274211","resolution":{"observed_at":"2026-08-06T05:56:20.364210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.366967Z","title":"Optimization-based prompt injection attack to llm-as-a-judge","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.366967Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:609c536d89f15bf344916a1bf72545c39f1218a96fe186d8287f4516a1088d2c","observation_id":"98e8c811-39c5-4638-93bc-a0fe156017a0","resolution":{"observed_at":"2026-08-06T05:56:20.366967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.369542Z","title":"Reflexion: Language agents with verbal reinforcement learning.Advances in Neural Information Processing Systems, 36:8634–8652, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.369542Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2298b192b4b27a14e9f3c78eae4c66baf4299f20436d6074222e6f38c4e35b80","observation_id":"edb82eb8-4fdd-4621-8103-9773386842bd","resolution":{"observed_at":"2026-08-06T05:56:20.369542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.372241Z","title":"Membership inference attacks against machine learning models, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.372241Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f23cf138d19551d6aa6f2ff77840bde273fbd4b72d182c31a521eb787e4e7a67","observation_id":"8af396e4-03b3-44a4-8334-9c6a32509d10","resolution":{"observed_at":"2026-08-06T05:56:20.372241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01011","last_updated":"2023-11-02T06:13:36Z","snapshot_observed_at":"2026-07-06T16:42:04.139453Z","submitted_at":"2023-11-02T06:13:36Z","title":"Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01011","snapshot_observed_at":"2026-08-06T05:56:20.374600Z","title":"Tensor trust: Interpretable prompt injection attacks from an online game","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.374600Z"},"links":{"cited_paper":"/paper/2311.01011","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9677984ce4c754ef1a78caadff994e77c17c9ecc2a2bd5b50d90f0974470aa51","observation_id":"b8553c24-fc90-4633-9db7-1c66e6a638ba","resolution":{"observed_at":"2026-08-06T05:56:20.374600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.528880Z","title":"A generalized birthday problem","venue":null,"work_id":"8fcdb833-3d93-4adb-9e22-2f540e131826","year":2002},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.377312Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e43ad5b405a20cc53e90ff98a478c609ecb7f692fd78850a4d61a79b9f6cb460","observation_id":"11cc9749-a13e-4da5-8748-e2832aced596","resolution":{"observed_at":"2026-08-06T05:56:21.531627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.520339Z","title":"HealthCareMagic-100k-en Dataset","venue":null,"work_id":"75818bd8-b029-4beb-929e-7770b8c35c7e","year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.379881Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:f423f034777a03b12810060a1e2b26d7a6e2f4cc67c9ab8a0c71e5d879ed6446","observation_id":"8551accf-d083-4315-9b9c-e0e940695129","resolution":{"observed_at":"2026-08-06T05:56:21.523185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19487","last_updated":"2025-02-25T09:06:14Z","snapshot_observed_at":"2026-07-06T19:23:58.763033Z","submitted_at":"2024-09-28T23:59:46Z","title":"HealthQ: Unveiling Questioning Capabilities of LLM Chains in Healthcare Conversations","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19487","snapshot_observed_at":"2026-08-06T05:56:20.382756Z","title":"Healthq: Unveiling questioning capabilities of llm chains in healthcare conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.382756Z"},"links":{"cited_paper":"/paper/2409.19487","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:29bedb301d69184bf12869362d755ae969aee43452c999280cb5c9c0dceb8e23","observation_id":"7b8b6403-f851-41e8-b2c2-70d1ed398e7e","resolution":{"observed_at":"2026-08-06T05:56:20.382756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.511446Z","title":"Clasheval: Quantifying the tug-of-war between an llm’s internal prior and external evidence","venue":null,"work_id":"fd981774-180c-474a-8e44-d2b160826f78","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.385601Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d268786c74ca36deca294a8baf1424c0833c396679ba51e0bd7a85fc7c2a5dcc","observation_id":"3f5cf24f-d3bb-4d27-bfd8-ee9498bad9de","resolution":{"observed_at":"2026-08-06T05:56:21.514525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.09164","last_updated":"2025-07-22T08:55:25Z","snapshot_observed_at":"2026-08-01T18:29:17.806027Z","submitted_at":"2024-07-12T10:59:32Z","title":"ShadowCode: Towards (Automatic) External Prompt Injection Attack against Code LLMs","version":6},"cited_work":{"arxiv_id":"2407.09164","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.09164","snapshot_observed_at":"2026-08-06T05:56:20.730517Z","title":"ShadowCode: Towards (Automatic) External Prompt Injection Attack against Code LLMs","venue":"cs.CR","work_id":"37cffe56-568a-4dbe-9193-f0f474960b7f","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.388204Z"},"links":{"cited_paper":"/paper/2407.09164","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:69caaec7e744700af40868911b50a8f7859c28a98eda408022497f8bf9eb1c7c","observation_id":"5b326037-181d-41e0-a69c-5e587320ee90","resolution":{"observed_at":"2026-08-06T05:56:20.735922Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.502771Z","title":"Poisonprompt: Backdoor attack on prompt-based large language models","venue":null,"work_id":"44c658f8-da7a-42c9-9690-05e4b364f0f3","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.391196Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:58f9d0410e6e69ed130db919e944d3b72dbe071c2a380c6835e54ae75196c1ba","observation_id":"722b493e-85f2-4d1e-9c04-19fc9d0e24a6","resolution":{"observed_at":"2026-08-06T05:56:21.505675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.09593","last_updated":"2025-04-17T03:50:19Z","snapshot_observed_at":"2026-08-07T16:06:09.244670Z","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.09593","snapshot_observed_at":"2026-08-06T05:56:20.394074Z","title":"Controlnet: A firewall for rag-based llm system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.394074Z"},"links":{"cited_paper":"/paper/2504.09593","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:2b4beb317f56037d392ce98cd8690f4bc3790e72336bcabc4e09cd6ef9ca15ad","observation_id":"1102c1bf-d5cc-42c0-b2e5-7844190859c8","resolution":{"observed_at":"2026-08-06T05:56:20.394074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.06794","last_updated":"2023-09-13T08:33:09Z","snapshot_observed_at":"2026-07-06T16:17:50.837748Z","submitted_at":"2023-09-13T08:33:09Z","title":"Cognitive Mirage: A Review of Hallucinations in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.06794","snapshot_observed_at":"2026-08-06T05:56:20.396846Z","title":"Cognitive mirage: A review of hallucinations in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.396846Z"},"links":{"cited_paper":"/paper/2309.06794","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a2d2b86904383501b0e5cc20c80a52b4ea4bedb8cfa294aff0116b519b0be002","observation_id":"9c59aafc-0e4e-4835-9ef4-6fbcb55dff4d","resolution":{"observed_at":"2026-08-06T05:56:20.396846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.493834Z","title":"Assessing prompt injection risks in 200+ custom gpts","venue":null,"work_id":"57c93dff-74dd-400a-b5c7-691cd218afe9","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.399598Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:865fca89ae83cf9f9d401dff0d2a19910d0373dab1896080d8230a23a7a923d0","observation_id":"ad7a90f3-d468-4cfb-a237-3404a836417f","resolution":{"observed_at":"2026-08-06T05:56:21.497016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.402245Z","title":"Rankrag: Unifying context ranking with retrieval-augmented generation in llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.402245Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:bd7c836879504d156a1ccd06064fa904fd21dbe95dd96c620795de1e8d2d6127","observation_id":"a90dc2e9-69e5-4981-9841-a668e08ec049","resolution":{"observed_at":"2026-08-06T05:56:20.402245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.479508Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG)","venue":null,"work_id":"c8e52364-19ce-4abf-83ff-8da26a17324b","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.404686Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9ad40967c76e3684dec91a6cfe6e0737161e64c179a833b769dd703c297616a8","observation_id":"af5484ae-76a2-4a4c-811b-4ed23ce3881a","resolution":{"observed_at":"2026-08-06T05:56:21.482914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.471012Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":"a7551d21-be07-4547-97a0-c3b03013136b","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.407216Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b2c764704e34405b797d319a832800d82848fc3338bf13e3b1fb296e36ff1b6e","observation_id":"90af08ff-428c-4c74-a635-16f488c2a0a5","resolution":{"observed_at":"2026-08-06T05:56:21.474307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:20.409736Z","title":"Prac- tical poisoning attacks against retrieval-augmented generation.arXiv preprint arXiv:2504.03957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.409736Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:e6761ffddbd602fcca5dccbef09c0ea619dfadfaaa0dec73e5f8885a48a73d41","observation_id":"1d6da652-5a0d-44e7-854b-8850c302a734","resolution":{"observed_at":"2026-08-06T05:56:20.409736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.463082Z","title":"Hijackrag: Hijacking attacks against retrieval-augmented large language models, 2024","venue":null,"work_id":"42718882-64e9-4b60-8e5f-7be92f2528c3","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.412267Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b234caac176f0dbcd63dc75e064e4bca6c031401056e77b5017256603870aa2b","observation_id":"bee57026-d43b-4ecd-870c-47e95853d300","resolution":{"observed_at":"2026-08-06T05:56:21.465927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19473","last_updated":"2024-06-21T08:26:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-02-29T18:59:01Z","title":"Retrieval-Augmented Generation for AI-Generated Content: A Survey","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19473","snapshot_observed_at":"2026-08-06T05:56:20.415308Z","title":"Retrieval-augmented generation for ai-generated content: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.415308Z"},"links":{"cited_paper":"/paper/2402.19473","citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:fdcd17980e255a09de57d26dc948d06d33c6d7ddfc5a9af84fc9fa9c98828ab1","observation_id":"b599b312-950e-466d-a92f-00bd7f1a42c5","resolution":{"observed_at":"2026-08-06T05:56:20.415308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.455054Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":"9042296f-f111-4994-9233-6a1965dc745a","year":2023},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.417992Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:ad4633b9677a4044867f7ae35d5b7ddcd1047bc02cc85982f41b6be9e29953e1","observation_id":"f129fd33-ea02-4249-aac6-9bceaeff3c75","resolution":{"observed_at":"2026-08-06T05:56:21.458082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.446445Z","title":"Promptbench: A unified library for evaluation of large language models","venue":null,"work_id":"40a65251-b710-4ce7-bc82-1b7745ad2e68","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.420618Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:51a6401db8a4aee0f529c26d94cee8506af992ca01fbea0e8ebd1d4ae4836822","observation_id":"a4b03626-5eff-42e6-bcc5-b38b79f9b9ff","resolution":{"observed_at":"2026-08-06T05:56:21.449323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.437907Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models, 2024","venue":null,"work_id":"098e7e5b-744a-4ce5-bc7d-241daa6f761a","year":2024},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.423208Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:01a92c7f933222076a011830436013c82002dd2ac2eabd829f358df03a0c6b4a","observation_id":"57956076-0f7a-4e38-b853-e0a9cea6b1be","resolution":{"observed_at":"2026-08-06T05:56:21.441004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.430190Z","title":null,"venue":null,"work_id":"725a565d-34b7-4297-9bb3-8cb91698b882","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.425964Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:638829a0efcab446937f49d813a99143f7d5571c2b8e2c13b18377f2ee80aca7","observation_id":"fa36c9d2-957c-4319-a6d3-9d646cbfab16","resolution":{"observed_at":"2026-08-06T05:56:21.432880Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.422237Z","title":null,"venue":null,"work_id":"7498e0bd-76ea-4f7a-b019-40427b98bf42","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.428572Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:1d17b5c1fda20109b8241b464450e66a1be46e4ef0294d6eb2d7d6f91be0274f","observation_id":"364a5013-0a41-4a04-9c88-c948492a9c3d","resolution":{"observed_at":"2026-08-06T05:56:21.424944Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.414193Z","title":"(b) Submit (m0, m1) to the AES-CBC challenger, receive cb ← AESCBC .EK,IV (mb) for random b $ ← − {0, 1}","venue":null,"work_id":"a07e8007-9139-4cad-adee-5c3432852e37","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.431235Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:9c5357bfa5e00408ba6ff3b877f3da48e9c3a8122d35d154ab3993de364331ec","observation_id":"8a377dda-7d6f-4e8c-ab65-a55d9a5a722a","resolution":{"observed_at":"2026-08-06T05:56:21.417246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.406275Z","title":null,"venue":null,"work_id":"45ed1257-dd8b-4bb2-a3b9-14bf1a7255c5","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.433964Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:65d533c747fe8a6bb583a74f83d31d1d7fd5ad6bee88383e6817397e4b3fed13","observation_id":"6f8bf0c1-6201-45de-8146-00b22766976e","resolution":{"observed_at":"2026-08-06T05:56:21.409044Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.397958Z","title":"16 B.2 Forward Security Game Game 2 captures the reduction for forward security of the key derivation mechanism","venue":null,"work_id":"ffc87fef-f580-43dd-b66a-73b84f9f1ea2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.436571Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:336f4aa544fc2dfad40fafbc8ecbca23452b7d74a516b2e992a95976982874d6","observation_id":"61223519-6de9-4db2-8057-e66cc4b74c1b","resolution":{"observed_at":"2026-08-06T05:56:21.401193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.389612Z","title":null,"venue":null,"work_id":"96f6feac-713c-4fef-84fa-0b4151eb1d40","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.439220Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5ce13a92ee98c22f6487bfe97073dbbc685943dbb9fda91ae7ff73a78cfa888a","observation_id":"3d9e375e-3c0f-4792-8586-5596f52a8bc4","resolution":{"observed_at":"2026-08-06T05:56:21.392234Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.381445Z","title":null,"venue":null,"work_id":"df701980-cc81-4c3a-9a28-03aaa01ae41f","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.442019Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b18c75f53e316259811dcc4101179b25652f2e9dc57dab5e8c169e2ead3bfc9c","observation_id":"2305cb96-1e84-4342-a39b-9a05326a5472","resolution":{"observed_at":"2026-08-06T05:56:21.384122Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.373042Z","title":null,"venue":null,"work_id":"bf6579a6-1136-42dd-ad83-909f7c6a27f1","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.444472Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:d49212d2636ce8d6f2bd8d82aa08eb21a75fa840225296d1f70b04f525e97e6c","observation_id":"58c6e099-7f99-4d69-9896-0aedb6cedefc","resolution":{"observed_at":"2026-08-06T05:56:21.375869Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.363891Z","title":null,"venue":null,"work_id":"d7c79260-45f7-4187-8bc8-2d094247e6e6","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.446970Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:6f02a4f5bccd4ce2345b089dcd1362aadb43b0b8bd1e2870118527a738660afc","observation_id":"2d3d5efc-74f5-4fe9-a3da-befea9282fde","resolution":{"observed_at":"2026-08-06T05:56:21.367335Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.355880Z","title":null,"venue":null,"work_id":"d5a2fd2a-47cc-4d67-bd0d-8f8c9cc44548","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.449470Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:5ebd5d06b91836d03191db08b5e2e8cbda3bec15af55bf5cf2dd546f7abd0aaf","observation_id":"05f4ac0f-5053-4b42-bfe9-aced9bc60fc5","resolution":{"observed_at":"2026-08-06T05:56:21.358539Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.347673Z","title":"B.3 Chain Integrity Game Game 3 describes the reduction for the chain integrity property based on hash collision resistance","venue":null,"work_id":"37d7561b-615b-4320-81d7-f432287ba58e","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.452080Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:86de71182b1e7598df7d7a0cb82b9f282b2277a56a4a4c6c5f1fc186649f6312","observation_id":"08f376c4-066c-49e9-afd8-e9d14e23d629","resolution":{"observed_at":"2026-08-06T05:56:21.350564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.339407Z","title":null,"venue":null,"work_id":"33427e67-a1b5-484d-bdd6-b2aa1c02cbe2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.454684Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a4ad8e4238186dbb9bc1150e84854d6d0682cff36bd4b4dfb68764be7949bf81","observation_id":"7d8978c0-248a-4aa3-82d4-b8ce5f05bdc3","resolution":{"observed_at":"2026-08-06T05:56:21.342299Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.331596Z","title":null,"venue":null,"work_id":"515ed06a-7fea-4f79-8592-b2cbb1c029d2","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.457356Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:b529e9098f9a712bdd7209c6d48a9fd6982dba57480082105382201a1165d740","observation_id":"98714414-9fef-4812-bdcf-853cb89e49d4","resolution":{"observed_at":"2026-08-06T05:56:21.334256Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.323617Z","title":null,"venue":null,"work_id":"1e992c56-d533-4616-bacd-4de5bb863b82","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.459947Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:a908ebcfee80e4e702ef93f2aa61d7f40e62060fa79d9b3bcb24b7a58cfa7e8a","observation_id":"0de92fb8-1d48-44ee-9cc2-0ab3bf10b2e3","resolution":{"observed_at":"2026-08-06T05:56:21.326365Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T05:56:21.315621Z","title":null,"venue":null,"work_id":"4face67b-ceba-40c4-bc58-155ed4c84287","year":null},"citing_paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T05:56:20.462380Z"},"links":{"citing_paper":"/paper/2508.01084"},"observation_digest":"sha256:4ecd073b9ee2b249e58c7252c8b0767939dafb46f5572dbc2381adf1cbc18d74","observation_id":"ee685d93-0336-4729-b6f4-fa8dc9892743","resolution":{"observed_at":"2026-08-06T05:56:21.318271Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.01084","last_updated":"2025-08-01T21:37:16Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T05:56:18.361364Z","submitted_at":"2025-08-01T21:37:16Z","title":"Provably Secure Retrieval-Augmented Generation"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":84,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":133},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 100 of 133 outbound references and 0 inbound Pith citation observations for arXiv:2508.01084."}