{"as_of":"2026-08-07T05:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:45564e1846ecc367de4bf40c38bf311a11083716b7927d0ef4227da4f57ea6a5","coverage":[{"denominator":82,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":82,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:24:26.938446Z","state":"measured"},{"denominator":88,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":88,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":6,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":6,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T12:01:22.824663Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T06:59:37.735034Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2604.05480","last_updated":"2026-07-01T11:18:13Z","snapshot_observed_at":"2026-08-01T17:03:58.197818Z","submitted_at":"2026-04-07T06:21:41Z","title":"Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T19:40:10.624513Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2604.05480"},"observation_digest":"sha256:1d03ac64f0bb9e62401bf2026f5cfe53a7e67bb3e70dfc1724ce278c8cca3300","observation_id":"c5e286fc-45d1-4552-b85e-0e61ac6d17c2","resolution":{"observed_at":"2026-05-10T22:40:48.550832Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2605.28112","last_updated":"2026-05-27T08:06:10Z","snapshot_observed_at":"2026-08-01T07:44:42.742792Z","submitted_at":"2026-05-27T08:06:10Z","title":"A Wolf in Sheep's Clothing: Targeted Routing Hijacking in Federated RAG","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T11:38:20.766858Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2605.28112"},"observation_digest":"sha256:9814feb0f8378e3916bce1282114b60c0fc4fbdd96d89a9e3480ec89c96d4bf7","observation_id":"fffc698d-669e-4e72-bad5-ab8ee49dcc24","resolution":{"observed_at":"2026-06-29T11:43:24.176037Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.01212","last_updated":"2026-06-03T04:47:29Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T13:03:47Z","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T17:43:41.256808Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.01212"},"observation_digest":"sha256:382db1a03a05848920672e12b41e763214dedb5bc3d1ba4ea472d811fe8958a5","observation_id":"3cc3d0b9-713b-4135-a671-39f299e10dca","resolution":{"observed_at":"2026-07-01T20:46:13.951792Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.03354","last_updated":"2026-06-02T09:03:56Z","snapshot_observed_at":"2026-08-04T03:13:16.157376Z","submitted_at":"2026-06-02T09:03:56Z","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T10:02:27.652157Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.03354"},"observation_digest":"sha256:cdd7034a5a2743f3e568b294fb582fc2f7e169efc97e4a765ea5102c3a95999c","observation_id":"4ea75eff-7e73-470b-b2ad-feab2155ebf1","resolution":{"observed_at":"2026-07-02T03:26:29.493660Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":"2508.18652","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-04T06:59:37.735034Z","title":"Unic-rag: Universal knowledge corruption attacks to retrieval-augmented generation,","venue":null,"work_id":"b00efd67-13f3-4f4b-86f3-30bbe2b9b809","year":2025},"citing_paper":{"arxiv_id":"2606.21377","last_updated":"2026-06-19T12:35:00Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T12:35:00Z","title":"ARENA: An Architecture for Measuring the Transferability of Autonomous Cyber Defense","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T14:00:04.412804Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2606.21377"},"observation_digest":"sha256:ff565757a15e9d44a446e0e2a3a0de5c6d81a10a4f7e639191538fb8a724f9e3","observation_id":"dfcc4d77-dd42-4f9a-9b32-484c93ec1f5a","resolution":{"observed_at":"2026-07-04T06:59:37.737225Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.18652","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2508.18652","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:713d98d80c5a122dbaffe2fa726d177a9e9208a4f3c1fc1c1e39339a3fd142a6","observation_id":"df58ede7-4d91-491a-8eee-6be9474f9fc3","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.18652/citation-record","integrity":"/paper/2508.18652/integrity","json":"/paper/2508.18652/citation-record.json","paper":"/paper/2508.18652"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:25.874745Z","title":"Bing copilot","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.874745Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:4965fe86e2c878a4e83d384d151ed41e8711da41c7bf5ffb62147599540c65fd","observation_id":"376fe348-b7ed-4afb-ba7d-9a283fed43bb","resolution":{"observed_at":"2026-08-05T16:24:25.874745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:25.885599Z","title":"Searchgpt","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.885599Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:ff5afbffe821543e7b55aea7e895e68e38b4b403c853dccf66336523f5ab9ffd","observation_id":"1c6d9323-5d27-46d9-adea-c481926156ea","resolution":{"observed_at":"2026-08-05T16:24:25.885599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.969007Z","title":"Google ai search","venue":null,"work_id":"8ab4731d-516d-4f9c-af3d-ab9b68302809","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.914756Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3ae2fbccbd8de9c97e73be1509c84f649cb93253c03fe79f6bd649a120705223","observation_id":"c37bee79-b3d6-4ff8-868b-03d87683e369","resolution":{"observed_at":"2026-08-05T16:24:27.972043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.960902Z","title":"LlamaIndex,","venue":null,"work_id":"78b7c6f4-30ee-4213-b93f-8626a6912828","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.964008Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0ed825fa3ca939a8c31590fb968f71c30c480da5b35c0c70c342c37196447515","observation_id":"a211dc29-54a7-4a29-b225-e4e1be190665","resolution":{"observed_at":"2026-08-05T16:24:27.963607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.952389Z","title":"LangChain","venue":null,"work_id":"2a7f9cc0-ecc7-4857-9bd0-88d4af669b37","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:25.989097Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:213ec939f596fdd94bd65b18a672d983661e3b0c8c110c2724ae9dcae5d036fe","observation_id":"ce9ee25e-3ee0-4a13-830a-e62c85cc4c49","resolution":{"observed_at":"2026-08-05T16:24:27.955594Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.944445Z","title":"Chatrtx","venue":null,"work_id":"8a1d4a7e-f6e8-4827-975e-3e0f4b554567","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.016054Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d6b27176c56b0488ed88e56bae720cb7f4c78811b0d7592bff068f1a1783abfe","observation_id":"c8a972e5-4018-4994-8dbb-0295c3e5cfcb","resolution":{"observed_at":"2026-08-05T16:24:27.947409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.936742Z","title":"Wikimedia downloads","venue":null,"work_id":"f6161cdd-e59e-478b-a27c-2d57ea2e95ae","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.034773Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:cdb982383dd7afe173a6f037e46259ba5b635cc6b734a1e9386e8f70bc28a4ab","observation_id":"c0a2af76-392d-41a0-bcfb-e4bcd89f3f13","resolution":{"observed_at":"2026-08-05T16:24:27.939409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.928020Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":"ec59736b-c3c1-4734-a642-d855a9f98bb9","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.074689Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:91c5f1176bde0037f3f16089a6383fb54fd704ed1764641939dc014c5e2d4030","observation_id":"1a37e376-5dba-46c7-9650-74291bcd1f2e","resolution":{"observed_at":"2026-08-05T16:24:27.931413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.916275Z","title":"Machine against the rag: Jamming retrieval-augmented generation with blocker documents,","venue":null,"work_id":"5a46553f-5069-4dbd-91e6-b85389b614ef","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.104948Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b75b3fc9fc5374441f51a3b4d388978ec4230773fe51b7f9ab9ca9aeefb155bf","observation_id":"85cca0c3-58db-411e-badc-d538e9aaa01e","resolution":{"observed_at":"2026-08-05T16:24:27.919381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.06254","last_updated":"2025-03-14T04:16:23Z","snapshot_observed_at":"2026-07-06T20:49:09.368757Z","submitted_at":"2025-03-08T15:46:38Z","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.06254","snapshot_observed_at":"2026-08-05T16:24:26.144765Z","title":"Poisoned-mrag: Knowledge poisoning attacks to multimodal retrieval augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.144765Z"},"links":{"cited_paper":"/paper/2503.06254","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:74c5979f7050a96b7b8a9bac32191d36a0cd7f74a7d79eb3124d91c299fa2e85","observation_id":"a84b3aa3-2592-421d-9acd-6218ca858aa7","resolution":{"observed_at":"2026-08-05T16:24:26.144765Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13948","last_updated":"2024-10-22T14:07:57Z","snapshot_observed_at":"2026-07-06T18:03:33.406287Z","submitted_at":"2024-04-22T07:49:36Z","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13948","snapshot_observed_at":"2026-08-05T16:24:26.170327Z","title":"Typos that broke the rag’s back: Genetic attack on rag pipeline by simulating documents in the wild via low-level perturbations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.170327Z"},"links":{"cited_paper":"/paper/2404.13948","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:903ff7b3a577151cc07293cfa85fd8103d7bb3dfe6d797c0c93943d4b7360f33","observation_id":"03c00e83-8c71-4bb6-93f3-aebd7131c264","resolution":{"observed_at":"2026-08-05T16:24:26.170327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.204776Z","title":"Practical poisoning attacks against retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.204776Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5fec91ce2cb1d2363e51b0757c67b110f4a8ecab6f54b802c08a3d48a09cf1ed","observation_id":"03b79a46-9725-4fe6-bb6d-f558ba5931b5","resolution":{"observed_at":"2026-08-05T16:24:26.204776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.907798Z","title":"Glue pizza and eat rocks-exploiting vulnerabilities in retrieval-augmented generative models,","venue":null,"work_id":"67e44dc6-e8c4-4d51-8c5d-e2e50b7ac88d","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.254753Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:231d60345cde2e023b15086e020e271d930f46c1f7e5dd6cc2a51803bb6f8ed8","observation_id":"207ccbe3-834c-4b0b-a131-f0ff4c3b108d","resolution":{"observed_at":"2026-08-05T16:24:27.910891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.291512Z","title":"Gasliteing the retrieval: Exploring vulnerabilities in dense embedding-based search,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.291512Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:932ab962060d722a89f41586ba08967b4071259000dd070bd883cd96f3731914","observation_id":"ee8bce63-c68c-40c4-9ef1-06eef30cffcf","resolution":{"observed_at":"2026-08-05T16:24:26.291512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02163","last_updated":"2025-03-06T00:58:55Z","snapshot_observed_at":"2026-08-07T02:18:22.354749Z","submitted_at":"2024-10-03T03:06:42Z","title":"Adversarial Decoding: Generating Readable Documents for Adversarial Objectives","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02163","snapshot_observed_at":"2026-08-05T16:24:26.364762Z","title":"Controlled generation of natural adversarial documents for stealthy retrieval poisoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.364762Z"},"links":{"cited_paper":"/paper/2410.02163","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:81252393a282b1923d2e80015a94ecb78a1bb264b162240101712c2ea0f71bbf","observation_id":"f94c558f-41b4-4793-9259-4efc0621cb4f","resolution":{"observed_at":"2026-08-05T16:24:26.364762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.898793Z","title":"Trojanrag: Retrieval-augmented generation can be backdoor driver in large language models,","venue":null,"work_id":"381588d5-6f3a-4cc6-a9ad-0c2df66afde2","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.398214Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:66d9fee46dcf275aef69b28218cfded9494e801886c8d5557230ad19f8895371","observation_id":"d31c5873-243c-4bf9-bf9b-6344c9fb680a","resolution":{"observed_at":"2026-08-05T16:24:27.901924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.889420Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":"35c42795-7984-4618-ae8a-bcb49979cee9","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.442220Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d6a323f2abf68f053229c6b48714b0448df6915477d8cb39941cc8d7e5298e7d","observation_id":"2b087758-0a58-4a44-afc0-498e736cc755","resolution":{"observed_at":"2026-08-05T16:24:27.892417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.881039Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":"c0a76dcc-9619-4bba-8097-6195d84b3e42","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.476766Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:46ff15760ea19867a293a777fbeb2f5f82c532d45f3e79416efc7813a1611480","observation_id":"62ba5850-17c3-4c8d-aa60-fc5ee2f23843","resolution":{"observed_at":"2026-08-05T16:24:27.884180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.873017Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":"beaf419e-d032-4fa3-a7e8-d135616a4cf6","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.524764Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:47f2fce9121e17ed37bfca5c12c1146e88f624e20310a66911bde2f0e4cae452","observation_id":"04cb1227-90c1-45ed-9584-fab76d51fe14","resolution":{"observed_at":"2026-08-05T16:24:27.875899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13532","last_updated":"2025-08-25T08:33:56Z","snapshot_observed_at":"2026-07-06T17:33:13.106468Z","submitted_at":"2024-02-21T05:03:07Z","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13532","snapshot_observed_at":"2026-08-05T16:24:26.553837Z","title":"Whispers in grammars: Injecting covert backdoors to compromise dense retrieval systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.553837Z"},"links":{"cited_paper":"/paper/2402.13532","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3ae1780cd79fd4750fa8e89e2a1729795649390e836b4f9a2f117fa043375824","observation_id":"d27ceba6-2e4f-4dd7-b992-c33bbeba1b0e","resolution":{"observed_at":"2026-08-05T16:24:26.553837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.595259Z","title":"Graphrag under fire,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.595259Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:72efb33190db92eca9668508b42e5f5a21263e5b2099349145a0630a60dfd820","observation_id":"fc8d3c27-c344-4eff-9287-efedabd53166","resolution":{"observed_at":"2026-08-05T16:24:26.595259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.864742Z","title":"Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models,","venue":null,"work_id":"99805e91-52a3-4962-95aa-a8d3099c3c86","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.643007Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:2ed1c47c92f24cf3ab9faa0b078595894d79d232b9fca6c9c14447d2e9c1184e","observation_id":"3d6e0c5c-b8a4-4e19-8565-405659ad3c8c","resolution":{"observed_at":"2026-08-05T16:24:27.867705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.856265Z","title":"Flippedrag: Black-box opinion manipulation adversarial attacks to retrieval-augmented generation models,","venue":null,"work_id":"14908efc-95d5-4ca6-8fed-ac11147ba7f9","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.658229Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b93ebc07f7b052fecabd326898a222741f4ad514bb597ba5a409c7e82e661353","observation_id":"7437f6be-e14a-4d74-ae5d-babaf660b7c9","resolution":{"observed_at":"2026-08-05T16:24:27.859053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-07-06T21:30:32.739008Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-05T16:24:26.675242Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.675242Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:83b9cc06af009d178379f99bbc4f069daadc04ddc8bd68a7264028c25c57c317","observation_id":"7d88d0b4-fc0c-4592-b4ff-567e1d06b3e0","resolution":{"observed_at":"2026-08-05T16:24:26.675242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-07-06T21:29:45.699731Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"cited_work":{"arxiv_id":"2505.18583","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.18583","snapshot_observed_at":"2026-08-05T16:24:27.121271Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","venue":"cs.IR","work_id":"05bf8ca8-fa23-4d08-98bb-3b89a7bec0c1","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.679440Z"},"links":{"cited_paper":"/paper/2505.18583","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0e0b0ac08a1a329a8dd5fdc128f45d569074555b38bef754c67f1c3388e6bf54","observation_id":"af7c86e6-7fca-4f82-973f-30bd4af86a6c","resolution":{"observed_at":"2026-08-05T16:24:27.124601Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.848369Z","title":"Poisoning web-scale training datasets is practical,","venue":null,"work_id":"5411fffe-e9c8-4e0c-88a0-ba4b26c6bb79","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.684041Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:af65d0520a7b79b7073c4abe1c3e327a0b5ef67775d2ad4b3064eef297e435f5","observation_id":"6fd26a46-23ea-430b-a173-5c231195047e","resolution":{"observed_at":"2026-08-05T16:24:27.851093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.840163Z","title":"Ai-based chatbots in customer service and their effects on user compliance,","venue":null,"work_id":"46b97ce3-6f75-40af-9622-8b5c7e985bd1","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.688082Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:863987efedf05673b2877c9f0c4cefca42319673853c21d5dde38de256bd1daf","observation_id":"0f3ca802-2230-4faa-badf-2075cfa2dad1","resolution":{"observed_at":"2026-08-05T16:24:27.842956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.831700Z","title":"Ai in academia: An overview of selected tools and their areas of application,","venue":null,"work_id":"35e1e721-d57d-4646-bb01-cbcb2f0fe258","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.694541Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:8b860fd6498ea3148a9952be0c89cd9d55909b6e070e2461af4faed262dfcea0","observation_id":"9c8dda39-b236-4f15-be4f-be6119a6e522","resolution":{"observed_at":"2026-08-05T16:24:27.834488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.823185Z","title":"Ai in health and medicine,","venue":null,"work_id":"122458af-d456-4fdb-9d31-1111e6120028","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.703998Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:1f0290f1baee8ea2012802812c329478b86218df29547abd4a7a28154648eb3f","observation_id":"7d1f0b11-b630-4c86-8dce-a85a6635cf5f","resolution":{"observed_at":"2026-08-05T16:24:27.826417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.814471Z","title":"Making llms worth every penny: Resource- limited text classification in banking,","venue":null,"work_id":"57b25057-72af-4b24-a6da-31e41db763b2","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.708001Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:91504b11ff366b1e4dc8d3325a1685ab3d185352975d5c248885fe762ac238bf","observation_id":"1fbc13a4-c10c-424f-ad25-cc911da382c3","resolution":{"observed_at":"2026-08-05T16:24:27.817566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.806304Z","title":"Chain of reference prompting helps llm to think like a lawyer,","venue":null,"work_id":"2098ddf0-c0a1-4935-afe6-8166ce596795","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.710936Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:5fd59812599341d64a9db3d10298e302c12515544309bc0cff1fc3702dc5fc0a","observation_id":"b4bade37-fcc1-4dd7-b771-6e32668be186","resolution":{"observed_at":"2026-08-05T16:24:27.809193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.798250Z","title":"Autolaw: Augmented legal reasoning through legal precedent prediction,","venue":null,"work_id":"4fb49b54-edf1-4eaa-82cb-a127190f4c2f","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.715582Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:cdb4f5e973220c9e11d20fbedff26c362053dddb4e7a67ee1633a740856f6401","observation_id":"d8f0101f-4a0e-4af3-9c9e-717df6bbb6e8","resolution":{"observed_at":"2026-08-05T16:24:27.800970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.789736Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":"02939d2a-f0be-46c2-a47c-7ec03eec1d74","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.718575Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:ec471a9ed4b148f863dfd3b859b22efc31e94969613658a5ddb88cf235501dfd","observation_id":"8d1fa559-35a6-4db4-b456-bfd066e76bd1","resolution":{"observed_at":"2026-08-05T16:24:27.792486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.781618Z","title":"Prompt injection attacks against GPT-3","venue":null,"work_id":"d5dd3152-5317-425d-b90d-7173f51247e3","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.723483Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:a527a4173a00833768be87b498b6ff5b0a9c8807dc05a1c157635ae612c7cbea","observation_id":"91251107-fd17-4ffd-870f-651929c2fca8","resolution":{"observed_at":"2026-08-05T16:24:27.784505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.727038Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.727038Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:dc1fc5edededac1c98ebbec956c00fbaf97805921e320e8b7a1ccb38e7c08bc3","observation_id":"2bbf0cf4-6660-4cf0-aa49-cf90458973b9","resolution":{"observed_at":"2026-08-05T16:24:26.727038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.767808Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"c6aef014-f021-4742-81da-640e415d6772","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.730799Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b2c3157eb56aedff5a0e9f2d9f3d328f30f36ad851e67c6de521c062ace37c5b","observation_id":"0d8d3fd6-50f8-413f-b099-e428fdbd33de","resolution":{"observed_at":"2026-08-05T16:24:27.770549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.759909Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":"417e4986-a61b-4075-9fbe-4ae13b22ca71","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.733966Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7dd044ec410c7e4e04411ad56aa09763687dcffdcd09bdfbbe7588b24ad1f3ba","observation_id":"ad8edcc8-5ea0-430e-bef2-d4950c2c8fa1","resolution":{"observed_at":"2026-08-05T16:24:27.762680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T16:24:26.737248Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.737248Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f8df4f458c4439ffa7f407ccc6af973134f3b7244c97d09802a1239bce347a7f","observation_id":"dd32dd8d-6c3c-41b0-931d-d716d8c7d025","resolution":{"observed_at":"2026-08-05T16:24:26.737248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-07-06T17:41:19.171822Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-05T16:24:26.741048Z","title":"Automatic and universal prompt injection attacks against large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.741048Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d694f8db9db90a765be08dad1a29ae5275069e505d5c919028075bc3e35963c1","observation_id":"ded80d7c-1156-4ac7-8bdd-2c9422582adc","resolution":{"observed_at":"2026-08-05T16:24:26.741048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.751620Z","title":"Natural questions: a benchmark for question answering research,","venue":null,"work_id":"9a5bc9cb-c267-4071-ba01-a224a429d109","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.744283Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:47b3b7c5371db076928f7a53bd36047029539bc61f9a799bda56a0826f640fee","observation_id":"31305030-9104-43e7-9c99-1973060cc691","resolution":{"observed_at":"2026-08-05T16:24:27.754888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.743833Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering,","venue":null,"work_id":"5e3791ff-8040-47a9-9aad-21aea1ae931a","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.748087Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:c835f7b734244086e1128fe9af05dfbb9f6942ffd51b2e5bad0665c11148e930","observation_id":"4cabb9f9-40e6-41e2-98cc-fa578611cbdf","resolution":{"observed_at":"2026-08-05T16:24:27.746695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.736263Z","title":"Ms marco: A human generated machine reading comprehension dataset,","venue":null,"work_id":"5c93aa23-4748-4e10-b2a5-f8217f98662e","year":2016},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.751060Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:dc21cb2e40bd86b561c980d0f939bd2ae50faf36c32c4d28ddbb9472fb909a9b","observation_id":"2b806c03-b3c2-4225-8436-634298064de3","resolution":{"observed_at":"2026-08-05T16:24:27.738943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-05T16:24:26.761737Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.761737Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:e5d63db495aec6103a544bdc80f7520674eaa61db199a5c8479e23b7781bfc91","observation_id":"2f31de9e-9511-4172-a89d-d7fe60f67b18","resolution":{"observed_at":"2026-08-05T16:24:26.761737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-05T16:24:26.764936Z","title":"Gpt-4o system card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.764936Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:dd4bf76a73a8024ef665c2ab52495751579220d8abc1de089aae0e8c7cb24d02","observation_id":"9039784c-88df-4cda-899f-6c4851970bd2","resolution":{"observed_at":"2026-08-05T16:24:26.764936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.727798Z","title":"Poisoning retrieval corpora by injecting adversarial passages,","venue":null,"work_id":"2d55e70c-0afd-4ee0-a7ad-8becb7ecb0d8","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.767886Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:46e4d84360c7691c776b347d17db4351a74a554a44e2ae8a7f0b168b9ed17058","observation_id":"6848f411-29db-46d5-a0e9-9e09415ac3e9","resolution":{"observed_at":"2026-08-05T16:24:27.730884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.719781Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":"81c8f886-984e-4276-88b8-9713275f77eb","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.770414Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:6cb73292e319f834270b8d10ec23eea20d4ffb66610ce6a6c12082701c9521bf","observation_id":"5e9c26ce-838a-4dcb-a356-142ef2c48e76","resolution":{"observed_at":"2026-08-05T16:24:27.722683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.711816Z","title":"InstructRAG: Instructing retrieval-augmented generation via self-synthesized rationales,","venue":null,"work_id":"b287d220-75d8-43f5-8bec-83f4ea0abb1b","year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.774801Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f0d3916cb80573ad1c593b131fd635710da1d8fb07da5f0fde503df421734782","observation_id":"77fc09f9-f69b-4725-8cf4-fdeed1b7f998","resolution":{"observed_at":"2026-08-05T16:24:27.714581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.703639Z","title":"Self-rag: Learning to retrieve, generate, and critique through self- reflection,","venue":null,"work_id":"96fa6e6b-94aa-4410-8fcd-316a69035ad3","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.777478Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:05d9af1a5f6d60ed2710560f79d6155209a346e4fc36c4d820e684bd600cd3a4","observation_id":"79b2a7a2-9377-4894-af17-87186b707440","resolution":{"observed_at":"2026-08-05T16:24:27.706458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.694445Z","title":"Corrective retrieval augmented generation,","venue":null,"work_id":"8f77b96a-bbc8-4153-8a8e-d9f433d39fae","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.780864Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:12d0b3b0cec87d3457c28187c7ef690071348637a5954ea37ca872294a4ee204","observation_id":"ffb9a1e1-2bf6-4d3a-818c-702e96704517","resolution":{"observed_at":"2026-08-05T16:24:27.697410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.681911Z","title":"Certifiably robust rag against retrieval corruption,","venue":null,"work_id":"a77c2fac-4553-4211-8854-a18c019f8212","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.786020Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:3ffc7f82e935dcea13aed9ccf5a2eca6ede7af9871ba2bc4d502d025412cef3f","observation_id":"34212d96-a7ee-4e64-9d9b-3745ba063bab","resolution":{"observed_at":"2026-08-05T16:24:27.686874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.666493Z","title":"Beir: A heterogeneous benchmark for zero-shot evaluation of information retrieval models,","venue":null,"work_id":"129e01cd-6a17-4324-b2e2-069745780fb4","year":2021},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.788816Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0912294d9b63842742ed658d948f6dc5586a9272dbb5ba758730047f99c9ddc8","observation_id":"018cc2b7-1373-4676-ba86-86280b9d3daa","resolution":{"observed_at":"2026-08-05T16:24:27.671058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.647819Z","title":"Trec 2019 news track overview.,","venue":null,"work_id":"2aa186ff-c0c3-4362-8200-843f8bac2741","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.792447Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:f15dfca4cc7aa016c5364f22df2a9b83170a94276b50ed06fef267477e616fe3","observation_id":"a2e8d238-4310-4724-be2c-cf6296b283da","resolution":{"observed_at":"2026-08-05T16:24:27.651796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.638488Z","title":"Dense passage retrieval for open- domain question answering,","venue":null,"work_id":"36b14cd2-ca9e-42b9-a798-4717366d3345","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.795003Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:72a06d562ec7ba9b5e51a83fbca5f14bae429b1bcbe1ff342e4871bb497b4746","observation_id":"6f31de8f-c905-498b-8256-60235deac471","resolution":{"observed_at":"2026-08-05T16:24:27.641297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.624737Z","title":"Unsupervised dense information retrieval with contrastive learning,","venue":null,"work_id":"19f6ad0b-e303-48fd-8173-502e681406c8","year":2022},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.797632Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:194882ab710f96c5fc3e92c2139fd036d2d50abaf3f2c5bb043b5244f6855030","observation_id":"7e2855cc-aed3-4af3-b2e4-5d2cd3cc5284","resolution":{"observed_at":"2026-08-05T16:24:27.632954Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.615464Z","title":"Approximate nearest neighbor negative contrastive learning for dense text retrieval,","venue":null,"work_id":"855ad8fb-df98-4ab7-90c0-842944440737","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.800231Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d56010ba79178c5cf7b2cc3b96825f67cdd085cce0b13501003379340e5f41fc","observation_id":"98975d4b-e95b-4885-a693-e7b3a77f7e79","resolution":{"observed_at":"2026-08-05T16:24:27.619467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.00879","last_updated":"2025-05-22T22:00:19Z","snapshot_observed_at":"2026-07-06T20:15:31.955797Z","submitted_at":"2025-01-01T15:57:34Z","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.00879","snapshot_observed_at":"2026-08-05T16:24:26.802996Z","title":"Trustrag: Enhancing robustness and trustworthiness in rag,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.802996Z"},"links":{"cited_paper":"/paper/2501.00879","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:bd648ff1619a717d75fbec2c2b1f28824be15a8dbc06446e48ca322669f56857","observation_id":"dd07344c-a108-4973-9785-ddb537bdea22","resolution":{"observed_at":"2026-08-05T16:24:26.802996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.806377Z","title":"Least squares quantization in pcm,","venue":null,"work_id":null,"year":1982},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.806377Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7d1b2c4e3934b26fbfa5be6f2bb22252bb33064240eb301f432ce6a271398388","observation_id":"1b534293-5139-415e-8ac8-151495a49109","resolution":{"observed_at":"2026-08-05T16:24:26.806377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T16:24:26.815232Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.815232Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:44ccd844ecd76aa9f2817ef984b7c5361857a20f4dd203325544e752e982ed0a","observation_id":"5b907a44-d126-4496-a4db-3ba67956ff53","resolution":{"observed_at":"2026-08-05T16:24:26.815232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.599935Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models,","venue":null,"work_id":"a7914ddb-7218-47fb-9e33-7831238eaeb6","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.827295Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:4d5b1937c928174a7da59252480dbdf70c7d9a929129c94afbdca84b1d711b2a","observation_id":"23dd6321-fb7c-46c8-baa6-0f32f7818220","resolution":{"observed_at":"2026-08-05T16:24:27.604327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.587317Z","title":"Textattack: A framework for adversarial attacks, data augmentation, and adversarial training in nlp,","venue":null,"work_id":"805cc96f-ce4a-4acf-bda7-038ba3bbc178","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.835261Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:94977a41da94393844bd14ef8fc6a5c505bf03d264a2b090ac4cc6af6a4900ed","observation_id":"acaf36e5-2bd0-4e22-9e9f-2ae2602dbf54","resolution":{"observed_at":"2026-08-05T16:24:27.590810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.857014Z","title":"Is bert really robust? a strong baseline for natural language attack on text classification and entailment,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.857014Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:6c083fd733ec6fc97ff092acf52f742b7da05c1f0d13b917ba68ab82a9075cb5","observation_id":"f0f53df0-71ef-40ba-a9df-872c6e28284f","resolution":{"observed_at":"2026-08-05T16:24:26.857014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.565287Z","title":"Textbugger: Generating adversarial text against real-world applications,","venue":null,"work_id":"120f259c-cbee-43fc-baea-ac1b39285717","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.874745Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:9c82a480f286d8c4d4c248a88df3d53e6090b0696cbbb88cf8f070a0c0052bba","observation_id":"355be88f-5e12-4f6b-b51d-38c73536f65c","resolution":{"observed_at":"2026-08-05T16:24:27.568190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.878217Z","title":"Bert-attack: Adversarial attack against bert using bert,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.878217Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:c6f9597ceddb4edb5e4ae91c66f653a974ee3ba89a2d226a6bc2f0732711d7f2","observation_id":"9957a14e-a55a-4a39-b56c-4878e0ca2ba0","resolution":{"observed_at":"2026-08-05T16:24:26.878217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.551020Z","title":"Black-box generation of adversarial text sequences to evade deep learning classifiers,","venue":null,"work_id":"da95772b-301a-4687-9e79-c0e8bf9d352b","year":2018},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.881847Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:61f1ca4ce2c541c9599d1192056771db38ac240981aa75e380d15771f669dcde","observation_id":"5534a1b4-121e-446f-96bc-93fc691fecca","resolution":{"observed_at":"2026-08-05T16:24:27.554199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07221","last_updated":"2024-08-01T03:02:44Z","snapshot_observed_at":"2026-07-06T17:58:25.894552Z","submitted_at":"2024-03-23T00:49:40Z","title":"Improving Retrieval for RAG based Question Answering Models on Financial Documents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07221","snapshot_observed_at":"2026-08-05T16:24:26.885481Z","title":"Improving retrieval for rag based question answering models on financial documents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.885481Z"},"links":{"cited_paper":"/paper/2404.07221","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:b4b333889e9610be5485344e0771268c4500ec81ba10dc94e1e5284d222724c6","observation_id":"d62f8e4f-14ba-43fe-8b79-c738f2c3f743","resolution":{"observed_at":"2026-08-05T16:24:26.885481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.07883","last_updated":"2024-01-15T18:25:18Z","snapshot_observed_at":"2026-08-06T16:08:33.380543Z","submitted_at":"2024-01-15T18:25:18Z","title":"The Chronicles of RAG: The Retriever, the Chunk and the Generator","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.07883","snapshot_observed_at":"2026-08-05T16:24:26.890089Z","title":"The chronicles of rag: The retriever, the chunk and the generator,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.890089Z"},"links":{"cited_paper":"/paper/2401.07883","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7b95ff9bffb33e3beb45bb7067b498a6f3fbfdb99465d0fe12bfbf9df292ee7d","observation_id":"fabf6f85-f2f7-4d25-ad2f-e118c8d95970","resolution":{"observed_at":"2026-08-05T16:24:26.890089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.19794","last_updated":"2024-08-17T11:31:56Z","snapshot_observed_at":"2026-07-06T18:53:09.559588Z","submitted_at":"2024-07-29T08:38:14Z","title":"Introducing a new hyper-parameter for RAG: Context Window Utilization","version":2},"cited_work":{"arxiv_id":"2407.19794","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.19794","snapshot_observed_at":"2026-08-05T16:24:26.986025Z","title":"Introducing a new hyper-parameter for RAG: Context Window Utilization","venue":"cs.CL","work_id":"6f0394fd-fade-4760-b73a-cb8228312ed4","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.895704Z"},"links":{"cited_paper":"/paper/2407.19794","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:42406cee70a5454e060d99590b10151b9f493abca0ae46a24d4018eabea309f0","observation_id":"762df6c9-65c9-441e-ba41-abb8a942088a","resolution":{"observed_at":"2026-08-05T16:24:26.991409Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.543339Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":"5515abf1-5d73-4ab0-8592-cb86c6cf0157","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.898925Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:e60c724df51af6301082d162fa934f0c4347391b89fa4fbde56f8b586c55b88c","observation_id":"eee5a6f4-5a0b-423d-832b-d5d7bc74bf5b","resolution":{"observed_at":"2026-08-05T16:24:27.546172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-02T11:57:18.735747Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-05T16:24:26.901552Z","title":"Llama 2: Open foundation and fine-tuned chat models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.901552Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:d2b061a2a09406b9908d86a52bb6f3b6584472aa4addbaaf4159b58827ce1f17","observation_id":"0935f282-c561-46ec-9817-cb0575cae64c","resolution":{"observed_at":"2026-08-05T16:24:26.901552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.530705Z","title":"Language models are few-shot learners,","venue":null,"work_id":"c65616ed-d483-4183-8003-0500d68e4532","year":2020},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.904776Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:7959f352c280e7196f805cf0bbce0a9da457efc99428fe0244a687d4f517f605","observation_id":"56ea0577-a0cc-4e48-a055-860cc86966cf","resolution":{"observed_at":"2026-08-05T16:24:27.533838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.522225Z","title":"Introducing the model context protocol","venue":null,"work_id":"aa718da4-7f85-477b-85d1-827b8525229c","year":null},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.907421Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:9dc12ee8629673a8a8f28d81603021edb0929f337dc1420e2b7e6f574c92f3dc","observation_id":"e42099f8-6833-4897-9b68-ea096240108f","resolution":{"observed_at":"2026-08-05T16:24:27.525194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.514378Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":"fc49e17f-7555-41db-b841-1d997b939d5d","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.910081Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:428d33f4e09eed171b7c7690b648c92e0d6a0c553cbce73a4172ac0e45fe2eda","observation_id":"ed7955a3-ad2c-42ee-868a-86f5cc3c3855","resolution":{"observed_at":"2026-08-05T16:24:27.517255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.506246Z","title":"Reflexion: Language agents with verbal reinforcement learning,","venue":null,"work_id":"60538113-b14c-4bae-9771-0c09069d4732","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.912782Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:29811854ec6ea34d7231d980ba808f1dc55f6a6973d10314c5d238d6fd7421b3","observation_id":"ddb23993-78ba-4c49-939c-46db8bf8ecf0","resolution":{"observed_at":"2026-08-05T16:24:27.509351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.497686Z","title":"Executable code actions elicit better llm agents,","venue":null,"work_id":"f68238e1-1f06-4231-bf01-026fae9f1e96","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.915392Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:dacdd090ae9acd9d448c1148455c194dfbd9d6665023bd644f450f9d859e3d80","observation_id":"f3a73943-79f2-4fa8-a096-895e9fb27660","resolution":{"observed_at":"2026-08-05T16:24:27.500851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.488590Z","title":"Bolaa: Benchmarking and orchestrating llm-augmented autonomous agents,","venue":null,"work_id":"87383cf4-15e9-4a67-a4ac-c1dd5c1bd95b","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.918193Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:04a82e32801bedc78c5a2641e906c351cf9b3d03c442869db43c2004fbdba436","observation_id":"466cbde8-f518-412a-a437-3add5374d6df","resolution":{"observed_at":"2026-08-05T16:24:27.491344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.480358Z","title":"Qasina: Religious domain question answering using sirah nabawiyah,","venue":null,"work_id":"17f7c31e-ec79-4113-be23-eaaf35fa242a","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.921022Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:a65d5cfdd208960cd46bc4bb6e9585a797364e4b7be3b2b98ee76760e0643103","observation_id":"a515583b-1d5c-4c20-a39f-6019674c6549","resolution":{"observed_at":"2026-08-05T16:24:27.483182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.471843Z","title":"Catastrophic jailbreak of open-source llms via exploiting generation,","venue":null,"work_id":"1aca827a-94b3-4c3f-b590-10185ac6cbde","year":2023},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.923663Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0705fb10c1c598c1af704ef4f9a3662736c98d3ba8fde8e8bf435fe83fb109d6","observation_id":"239c75cf-8528-4de1-a378-1c8cc1927ed9","resolution":{"observed_at":"2026-08-05T16:24:27.474962Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.463644Z","title":"Neural exec: Learning (and learning from) execution triggers for prompt injection attacks,","venue":null,"work_id":"c2d3ee71-be68-441c-83bc-7ebbc8899724","year":2024},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.926269Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:2ffa66038e172379766d5f61681f37df6533d7852024400cc729a2976dd215a3","observation_id":"916d27eb-ffc7-4e14-803b-0932c9d899f5","resolution":{"observed_at":"2026-08-05T16:24:27.466490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.455279Z","title":"A density-based algorithm for discovering clusters in large spatial databases with noise,","venue":null,"work_id":"15f06265-0720-4931-b783-eade045ff367","year":1996},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.929086Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:0484f4069a509ab29e05a7a42adf157fec992e18b35c485ae6dc2319c1e902a6","observation_id":"18255eed-9f4d-4b31-9174-5c3576987783","resolution":{"observed_at":"2026-08-05T16:24:27.458215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:26.932262Z","title":"hdbscan: Hierarchical density based clustering,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.932262Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:1e2fccb11d7c2d2c47af85494cf9e2424ce28086d842a7beae2199eb85bc2f78","observation_id":"24d73751-bcbc-4a89-bf07-80692eb68daa","resolution":{"observed_at":"2026-08-05T16:24:26.932262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.441332Z","title":"Data clustering using bisecting k-means,","venue":null,"work_id":"e7cad79b-ef8d-48b9-b85f-c64e978819cb","year":2019},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.935685Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:cfffd00b7346616bea0422d95135ace7ed4fdd715d181e88254a599c5e933d41","observation_id":"d1d54638-9fc4-4d37-b800-2fe070de0839","resolution":{"observed_at":"2026-08-05T16:24:27.444127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:24:27.431662Z","title":"Scikit-learn: Machine learning in python,","venue":null,"work_id":"a7a8e331-e96c-4d04-b5a3-a32f7e0508aa","year":2011},"citing_paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T16:24:26.938446Z"},"links":{"citing_paper":"/paper/2508.18652"},"observation_digest":"sha256:4bb2166ec05b35f2e21552284e61ca81272ef8e68140e2caed00625ed80ff4ca","observation_id":"2324b795-6608-48dd-a4db-43940b01a4c4","resolution":{"observed_at":"2026-08-05T16:24:27.435603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.18652","last_updated":"2025-08-26T03:50:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T16:24:24.911681Z","submitted_at":"2025-08-26T03:50:52Z","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation"},"reference_resolution":{"displayed":82,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":2,"verified_fuzzy":56},"total_outbound_references":82},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 82 of 82 outbound references and 6 inbound Pith citation observations for arXiv:2508.18652."}