{"as_of":"2026-08-07T22:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:946b5f1f6e589922fadd258105782bddda46ea74512e531600125ec3fad61a05","coverage":[{"denominator":86,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":86,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:18:37.195476Z","state":"measured"},{"denominator":89,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":89,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T05:31:33.371931Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.20083","snapshot_observed_at":"2026-08-03T05:31:33.371931Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.02138","last_updated":"2026-07-20T12:26:35Z","snapshot_observed_at":"2026-08-05T17:55:53.075295Z","submitted_at":"2026-02-02T14:19:08Z","title":"CAM: A Causality-based Analysis Framework for Multi-Agent Code Generation Systems","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T05:31:33.371931Z"},"links":{"cited_paper":"/paper/2508.20083","citing_paper":"/paper/2602.02138"},"observation_digest":"sha256:636bcd4dbe752565c3c24c78da7006910ca48fe940c3eabd2a428f5594e890db","observation_id":"7c65dd72-7402-4cd4-aeb6-55027e13f911","resolution":{"observed_at":"2026-08-03T05:31:33.371931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"cited_work":{"arxiv_id":"2508.20083","doi":"10.48550/arxiv.2508.20083","metadata_source":"arxiv_reference","pith_arxiv_id":"2508.20083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Disabling self-correction in retrieval-augmented generation via stealthy retriever poisoning","venue":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","work_id":"903150d5-4441-4f84-acbd-75ed8669f699","year":2025},"citing_paper":{"arxiv_id":"2606.12469","last_updated":"2026-06-09T19:07:42Z","snapshot_observed_at":"2026-07-06T23:51:22.219590Z","submitted_at":"2026-06-09T19:07:42Z","title":"Influence Factors on RAG Poisoning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T12:24:31.349808Z"},"links":{"cited_paper":"/paper/2508.20083","citing_paper":"/paper/2606.12469"},"observation_digest":"sha256:bac2f881832741af53edca33cc4925474b4172974956416450f2254b444b01d8","observation_id":"f587150e-d17b-4a46-af15-2eaa6d5cefd5","resolution":{"observed_at":"2026-07-21T01:20:36.348935Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"cited_work":{"arxiv_id":"2508.20083","doi":"10.48550/arxiv.2508.20083","metadata_source":"arxiv_reference","pith_arxiv_id":"2508.20083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Disabling self-correction in retrieval-augmented generation via stealthy retriever poisoning","venue":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","work_id":"903150d5-4441-4f84-acbd-75ed8669f699","year":2025},"citing_paper":{"arxiv_id":"2606.12469","last_updated":"2026-06-09T19:07:42Z","snapshot_observed_at":"2026-07-06T23:51:22.219590Z","submitted_at":"2026-06-09T19:07:42Z","title":"Influence Factors on RAG Poisoning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T12:24:31.349808Z"},"links":{"cited_paper":"/paper/2508.20083","citing_paper":"/paper/2606.12469"},"observation_digest":"sha256:6a8a7e23767791c31439f18e2dd44a8708fe47417f5ab6707a0616f5ec6db56b","observation_id":"165eb885-42c6-494c-bef0-b2c4a8008985","resolution":{"observed_at":"2026-07-21T01:20:36.348935Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.20083/citation-record","integrity":"/paper/2508.20083/integrity","json":"/paper/2508.20083/citation-record.json","paper":"/paper/2508.20083"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.066232Z","title":"https://www.nvidia.com/en-us/ai-on-rtx/chatrtx/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.066232Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:f3e8225e6bdd57acf972da3958c2edfa7b0fe4fa436a54ed61856cbaaa162915","observation_id":"55aa9561-40a5-4b65-aa95-7eb140fecceb","resolution":{"observed_at":"2026-08-05T15:18:29.066232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.162119Z","title":"https://www.langchain.com/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.162119Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:18b6766a5b72048fcd090e0769849f5072915679c5b9ff4f60aa0c467dc46c89","observation_id":"dbf83c86-4d04-46fe-a370-3be10d24e81b","resolution":{"observed_at":"2026-08-05T15:18:29.162119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.256301Z","title":"https://github.com/0xeb/TheBigPromptLibrary,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.256301Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:e732154a19342d2b27bd839c8e15966d48bd4e212d0c244b2fb700fb8baae8f5","observation_id":"db1f7eaa-24a1-47f1-9018-980829d1b382","resolution":{"observed_at":"2026-08-05T15:18:29.256301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.462948Z","title":"https://github.com/danielrosehill/ System-Prompt-Library, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.462948Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:68a21ab36eb409027ae0fb14c874f9797268bb7810f605700c5d29e379cc0bff","observation_id":"23e7068f-d13f-4bfe-a959-dd31db0d9ef7","resolution":{"observed_at":"2026-08-05T15:18:29.462948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14132","last_updated":"2023-11-07T03:30:15Z","snapshot_observed_at":"2026-07-06T16:10:54.723336Z","submitted_at":"2023-08-27T15:20:06Z","title":"Detecting Language Model Attacks with Perplexity","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14132","snapshot_observed_at":"2026-08-05T15:18:29.558593Z","title":"Detecting language model attacks with perplexity","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.558593Z"},"links":{"cited_paper":"/paper/2308.14132","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:04abed208b284cfb3b8b0bd8852c9a38c8fbe3cbe51ef73ed414bbee1eddd9b7","observation_id":"58bb89ef-1f52-423f-915d-0fd233120b03","resolution":{"observed_at":"2026-08-05T15:18:29.558593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2412.20953","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:38.124564Z","title":"Gasliteing the retrieval: Explor- ing vulnerabilities in dense embedding-based search","venue":null,"work_id":"d819499d-9a96-49df-8505-7f7942373af1","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.639885Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:d75ef30d52cfba4d081d3b7aea5e34deebbe34252efd96575e88d9ef7e0c3d9c","observation_id":"2a2728b2-269c-479b-a2f2-954db4432f80","resolution":{"observed_at":"2026-08-05T15:18:38.189861Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-05T15:18:29.760311Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.760311Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:2c82e2b74a07ed06f9274e0a5e308f9c442fa81f712e7073544d94db26285bff","observation_id":"6b07b563-0bdf-4f81-b41d-24202a7c815c","resolution":{"observed_at":"2026-08-05T15:18:29.760311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09667","last_updated":"2022-03-28T17:24:23Z","snapshot_observed_at":"2026-08-07T08:55:05.949818Z","submitted_at":"2021-06-17T17:20:45Z","title":"Poisoning and Backdooring Contrastive Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09667","snapshot_observed_at":"2026-08-05T15:18:29.850429Z","title":"Poisoning and backdooring contrastive learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.850429Z"},"links":{"cited_paper":"/paper/2106.09667","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:415731fe28f77efb89b3fdd6ff3547d2cd92e81fdbcbc651cc040b958a02a229","observation_id":"f0432415-65b2-4fe6-8bd5-60beead500a0","resolution":{"observed_at":"2026-08-05T15:18:29.850429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.951628Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.951628Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:d0cb44f0b2753f978dbf82caeb2c2a2e1209297e4f31c99d3147a0e2e496e37d","observation_id":"03ab3a91-bfda-4ac4-9441-6aaa8d98c155","resolution":{"observed_at":"2026-08-05T15:18:29.951628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:47.417601Z","title":"LexGLUE: A benchmark dataset for legal language understanding in English","venue":null,"work_id":"78a740ef-48cb-4780-a1dc-c5445e30c090","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.064999Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:225a77e0d3df7499d6215a826ed0cdd21c7553056e69f05e62984281fa2d7e8f","observation_id":"5e94e4b5-fd30-4299-b43e-46657abb0bc3","resolution":{"observed_at":"2026-08-05T15:18:47.472541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:47.248001Z","title":"FinQA: A dataset of numerical reasoning over financial data","venue":null,"work_id":"278073fb-a057-45dc-b1a1-56c1bc20ba3d","year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.190399Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bea050cf25a4ac75bc7889092864f5e750247347004e079f5acaf0821a7ef106","observation_id":"c7e67935-f9b6-4882-8965-81aa5a82b4f7","resolution":{"observed_at":"2026-08-05T15:18:47.321879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:47.043084Z","title":"Trojanrag: Retrieval-augmented generation can be backdoor driver in large language models, 2024","venue":null,"work_id":"55306a93-4905-4ddb-b0bb-99dba85bc603","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.356337Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:cf7c1af3f56e57f244bdbe5402a6818b876077198e5f300c023beb0745059226","observation_id":"9e5ede33-c7bd-4a5f-9c59-f6f524bd36f7","resolution":{"observed_at":"2026-08-05T15:18:47.137367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.880024Z","title":"Debiased contrastive learning","venue":null,"work_id":"c9969823-66ae-4d01-a476-8043cc7a53df","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.484632Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:db300343636b6204c5cf7fec6ad261091af77c8e89676b8aaccb975c718f8654","observation_id":"f60cf567-269b-484b-88ef-6ac38018f281","resolution":{"observed_at":"2026-08-05T15:18:46.941144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:30.624100Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.624100Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:fc356f019aa856946c47ec4f3bd43fbdc8ebdcd3106b008ff9063c3a580a8e10","observation_id":"22dcd998-8267-4973-9c6e-4d124faa0e1a","resolution":{"observed_at":"2026-08-05T15:18:30.624100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:30.755713Z","title":"Deepseek-v3 technical report, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.755713Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:db2e55c19f1bf55942863aa8c1f801989c7e59f1fdb9143f518ce623e246f443","observation_id":"b27447e8-3b68-44c6-887c-a94726b7c1b9","resolution":{"observed_at":"2026-08-05T15:18:30.755713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.697297Z","title":"The philosopher’s stone: Trojaning plugins of large language models","venue":null,"work_id":"c26e883f-9aab-4044-8142-0ef0b33a73a2","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.829407Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:a41419592fd36f4e454648745ba2226fec5cf98e947c627e4acaedbdb544b661","observation_id":"7d2ab33f-4c48-477a-9960-3ead9c63aa23","resolution":{"observed_at":"2026-08-05T15:18:46.765994Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.498622Z","title":"Synthetic disinformation attacks on automated fact verification systems","venue":null,"work_id":"1945c607-8705-477d-ae9d-920f27b8aa8a","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:30.988536Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:8a4ce87148835f5b1d8912310ab73b147f6b4682b73103cd9c292958dc974cfc","observation_id":"820052b5-cb92-4ae1-a444-79a591bb7b21","resolution":{"observed_at":"2026-08-05T15:18:46.584153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.333468Z","title":"Hot- Flip: White-box adversarial examples for text classification","venue":null,"work_id":"6153ca90-294d-45c9-9ce6-917aa57efe29","year":2018},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.095727Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:ded081634879dda41b72e94cbf7a63591508cbe28c04d3d74fd18d0130c95f67","observation_id":"5efdf519-e22b-494d-a8d7-4525df41178e","resolution":{"observed_at":"2026-08-05T15:18:46.382053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:31.227679Z","title":"Defending against knowledge poisoning attacks during retrieval-augmented generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.227679Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:38fb4e55249f265893ac21e9158ee40108bb67902f1bc9fa16a5245990391312","observation_id":"29bd5bac-4228-4a6e-aa14-c21894a1b4b0","resolution":{"observed_at":"2026-08-05T15:18:31.227679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.188083Z","title":"Hugging face: Open-source ai community","venue":null,"work_id":"c42ced1a-f24f-4f6d-bcf5-fbdc6740c149","year":null},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.369728Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:70d179f5ff39b707854d06dfa41b6f00ec22d9bc99dc8613bef9363f52a8b572","observation_id":"3788abba-d1c1-47c5-ae61-8e6e5b59eb7a","resolution":{"observed_at":"2026-08-05T15:18:46.255861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04037","last_updated":"2024-09-12T19:54:37Z","snapshot_observed_at":"2026-08-07T11:18:39.827875Z","submitted_at":"2022-12-08T02:21:47Z","title":"Demystifying Prompts in Language Models via Perplexity Estimation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04037","snapshot_observed_at":"2026-08-05T15:18:31.533223Z","title":"Demystifying prompts in language models via perplexity estimation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.533223Z"},"links":{"cited_paper":"/paper/2212.04037","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:345f7d029ad08a28cbe857a63b5cc53cba7c7af45f41d7ad6adb706cb75ffd1c","observation_id":"e6e4c22f-6fcb-4a2d-b31b-6abcaf20cb44","resolution":{"observed_at":"2026-08-05T15:18:31.533223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:46.043441Z","title":"Not what you’ve signed up for: Com- promising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":"df9f5d83-0049-4ca0-b982-4e58ec530821","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.654647Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:7fb013171436d3696ddb7d395ae878a174f210c6af1a8f7b94a49620ddf7e9a5","observation_id":"9e8dfa07-756b-4741-b17a-a1f803c01888","resolution":{"observed_at":"2026-08-05T15:18:46.111441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.864023Z","title":"Retrieval augmented language model pre-training","venue":null,"work_id":"0bf74f99-7e34-497a-afde-137cefdac233","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.829873Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:64ccf9ae4bd97095ca12e10715c14eab62241769b229511b415ebbe1d9f30bd4","observation_id":"ef52d9f2-e44b-466b-b6cf-1572c8c57dc4","resolution":{"observed_at":"2026-08-05T15:18:45.922497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.748289Z","title":"Aging with grace: Lifelong model editing with discrete key-value adaptors","venue":null,"work_id":"fee8daf8-3116-445e-8fd5-f6f2f65f335d","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:31.978083Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:ed69a97ae32c76dada268520388b2207c67c8bd71c1eba4d9f55cbe2b352cb75","observation_id":"e70a30d2-5fcc-45f7-b92b-8a3cbac85ef2","resolution":{"observed_at":"2026-08-05T15:18:45.804889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.606582Z","title":"A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions.ACM Transactions on Information Systems , 43(2):1–55, 2025","venue":null,"work_id":"5212d949-13f7-4752-9142-e67d41bee085","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.055519Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:5686934d37341d31a6e51c930e4b070ef15c1b26cdbb53464d9fb193bd0a0c4f","observation_id":"fbbc13e1-7cd2-4b10-8d91-3d034e208141","resolution":{"observed_at":"2026-08-05T15:18:45.669656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.12186","last_updated":"2024-11-12T13:24:25Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-09-18T17:57:57Z","title":"Qwen2.5-Coder Technical Report","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.12186","snapshot_observed_at":"2026-08-05T15:18:32.147743Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.147743Z"},"links":{"cited_paper":"/paper/2409.12186","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:840e8060db31643de0cb5ea4f9b0da778f2deef3d6779bcc58c1b04501120404","observation_id":"2682d8af-3638-4532-b4a2-50705da6d7d0","resolution":{"observed_at":"2026-08-05T15:18:32.147743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.466543Z","title":"Unsupervised dense information retrieval with contrastive learning","venue":null,"work_id":"b60e2853-e404-452f-9e07-31817fe84efa","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.261127Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:54fb2ac1054f0691053b67035db555450480e4fd7edcf5fca1f82c356b5f14f2","observation_id":"0226bb2c-5973-4e92-b4b5-6c0eca2af22d","resolution":{"observed_at":"2026-08-05T15:18:45.527583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.01282","last_updated":"2021-02-03T09:18:34Z","snapshot_observed_at":"2026-08-03T22:53:08.799163Z","submitted_at":"2020-07-02T17:44:57Z","title":"Leveraging Passage Retrieval with Generative Models for Open Domain Question Answering","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.01282","snapshot_observed_at":"2026-08-05T15:18:32.316307Z","title":"Leveraging passage retrieval with generative models for open domain question answering","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.316307Z"},"links":{"cited_paper":"/paper/2007.01282","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:86e627adee3031640bf54099b81b08b7cd920d854a554a24ddef6ecdad6685ed","observation_id":"12c51656-ef2a-41d9-bd34-fce550565746","resolution":{"observed_at":"2026-08-05T15:18:32.316307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.255341Z","title":"Atlas: Few-shot learning with retrieval augmented language models","venue":null,"work_id":"304b5459-c587-41f0-b141-488415a2b7df","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.436098Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:43c09a77952ed0867c88215dac12674144c6a123b9d86d92fc79eb82b274baaa","observation_id":"49b1555e-ccf0-476f-8907-1d048457b1b4","resolution":{"observed_at":"2026-08-05T15:18:45.337037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-05T15:18:32.592658Z","title":"Baseline defenses for adversarial attacks against aligned language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.592658Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:a20b23dc2b67340f2ab4731aa45a5b071a51a9739d76cff2bcae6199d2c2c950","observation_id":"25fffe44-6e47-4c59-b5fa-d35df3341589","resolution":{"observed_at":"2026-08-05T15:18:32.592658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:45.070706Z","title":"Interpolated estimation of markov source parameters from sparse data","venue":null,"work_id":"d133feed-4eb3-4796-a8c2-6a26a81d605d","year":1980},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.697581Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:8725fe2d2cc3dc1a26c58523ba2413df567652ac6063a337510f2630e20e510f","observation_id":"d6e69cf5-5f39-41b9-b2fc-f24dd853c922","resolution":{"observed_at":"2026-08-05T15:18:45.147882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00515","last_updated":"2024-11-10T22:02:27Z","snapshot_observed_at":"2026-07-29T20:40:25.374189Z","submitted_at":"2024-06-01T17:48:15Z","title":"A Survey on Large Language Models for Code Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00515","snapshot_observed_at":"2026-08-05T15:18:32.857911Z","title":"A survey on large language models for code generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.857911Z"},"links":{"cited_paper":"/paper/2406.00515","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:a7afa9b64cbaaac2c6744134831c8e37eff175d3916bb7d8940b8393b9be2a12","observation_id":"bac2da26-d497-4ef8-9a50-28cb0382ff34","resolution":{"observed_at":"2026-08-05T15:18:32.857911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03602","last_updated":"2024-07-27T22:01:50Z","snapshot_observed_at":"2026-07-06T17:55:44.838732Z","submitted_at":"2024-04-04T17:19:47Z","title":"Evaluating LLMs at Detecting Errors in LLM Responses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.03602","snapshot_observed_at":"2026-08-05T15:18:32.971133Z","title":"Evaluating llms at detecting errors in llm responses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:32.971133Z"},"links":{"cited_paper":"/paper/2404.03602","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:c45a871aa44c831ac761ec09b4736741b03d2fd7f42751e47075b5e5f11c1363","observation_id":"914b416e-d7e7-40c9-b8f1-54a6eb0e3246","resolution":{"observed_at":"2026-08-05T15:18:32.971133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.906411Z","title":"Super- vised contrastive learning","venue":null,"work_id":"6b85dd03-f84a-415b-bbcd-a77d38a69ffe","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.073787Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:417df735db394bb9208166f5cea5199fdb41b02abc745c6b69ea8f60bdeb83e0","observation_id":"f3cba4a2-152e-490a-8c38-ba223eb65976","resolution":{"observed_at":"2026-08-05T15:18:44.980564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.746309Z","title":"Large language models are zero-shot reasoners","venue":null,"work_id":"020c920a-4f2d-4025-b889-831247f3f57a","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.143869Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:52c20dc9b0e417c94c3ad7f76c65cef568186265d970a117d64aead04eba0829","observation_id":"6ade8882-c79a-456d-9110-0fe0122b8fe8","resolution":{"observed_at":"2026-08-05T15:18:44.794318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:33.241369Z","title":"Natural questions: a benchmark for question answering research","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.241369Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:4ab9aa999798d813c8d0794a682aa0da6f45d3593686d7fe5dccb3448d889f56","observation_id":"830d0e25-51dc-4106-97b4-046a06e6db59","resolution":{"observed_at":"2026-08-05T15:18:33.241369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.584815Z","title":"Retrieval-augmented generation for knowledge- intensive nlp tasks","venue":null,"work_id":"768eafe5-51bc-4a12-9513-d9805c908cee","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.326092Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:b067fe3340a286a11b2d9aa168f284a0e03402904716690742c9efb1f31d1167","observation_id":"89d5db61-e3ba-4ce3-bf6d-1bcbaf85f44f","resolution":{"observed_at":"2026-08-05T15:18:44.645112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.408188Z","title":"Solving quantitative reasoning problems with language models","venue":null,"work_id":"87b70fa8-7fa0-4905-9013-ba04cbfcfa39","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.369607Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:5c5c01df39ffe38288dc1ea12f3663b81dfcd35bc92884b4ec9519c276b9871c","observation_id":"802859f6-32b5-4a9a-9d0a-c8a9d2d5f946","resolution":{"observed_at":"2026-08-05T15:18:44.489971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.247668Z","title":"Superfiltering: Weak-to-strong data filtering for fast instruction-tuning","venue":null,"work_id":"11b1a23e-dd5f-4439-aac4-2c137ccda283","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.440299Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:5f083fa5f1ceaa7ed1c70c6e9c18cccbc42e562295cc37ffd553f0255ebaa8a8","observation_id":"f24e23c1-1dc6-46a7-b4cb-e7a745b3411b","resolution":{"observed_at":"2026-08-05T15:18:44.316321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:44.123697Z","title":"Pmet: precise model editing in a transformer","venue":null,"work_id":"8db6ed32-da44-41c7-9f4e-f521c0ea11d5","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.538721Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:1270d7c1fa4a3de2f4fc990d8a8f2ae02acf5ab154323d5d1e3c56df68003465","observation_id":"824e0d85-b6f1-4ab4-bc31-2f47d459d15b","resolution":{"observed_at":"2026-08-05T15:18:44.178913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:33.648148Z","title":"Graphrag under fire, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.648148Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:dd0278274d3d8bf537ccde045e99760110da2d1cc9da835aeb8606151ab15dd6","observation_id":"6757cd66-de00-4152-a8e4-d029d4aaf072","resolution":{"observed_at":"2026-08-05T15:18:33.648148Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.957530Z","title":null,"venue":null,"work_id":"9e41930d-475f-458b-b0bb-5dc10b8c0161","year":null},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.726386Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:f7ee5552be513213da45819ea7fabf92c6847f786072b05ec492e2e0b5d1ad24","observation_id":"8e5ca3fa-e3fb-4aa1-854a-1227d4cd057a","resolution":{"observed_at":"2026-08-05T15:18:44.028379Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.640596Z","title":"Pre-train, prompt, and predict: A systematic survey of prompting methods in natural language processing","venue":null,"work_id":"22bffa8d-158d-4194-aa49-aaea0d9adb67","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.893432Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:4d8c13484e2907d556b32773e206634ba9b1cb51c976703ea036f1640e622da2","observation_id":"42aafb07-dbaa-4875-8c20-b4fc6ea3e4ca","resolution":{"observed_at":"2026-08-05T15:18:43.726984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T15:18:33.976569Z","title":"Prompt injection attack against llm-integrated applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.976569Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:db1c0d83080a7869f10bc282a723a5bb04ca70632ae8d331babfdf11b25613b4","observation_id":"4435b83d-ec90-449c-9044-ac49e45ebe75","resolution":{"observed_at":"2026-08-05T15:18:33.976569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.451452Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":"00cef9ee-ba27-4179-9ba3-179f93d0d628","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.028512Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:e322727d2c3f7e2552e71464837746b6b06ae49d81213fa36b97bc697e06bac5","observation_id":"5aea91cf-0960-4c00-aef4-e7167af259a0","resolution":{"observed_at":"2026-08-05T15:18:43.517783Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.343815Z","title":"fixed thinking pattern","venue":null,"work_id":"8a4840e8-5a05-48d7-95bb-19c648801f27","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.100070Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:f02c4b9bd3a124bb241f87fcd691b33ced7925a8da82953d517065e95283ec60","observation_id":"c172727a-ea97-4871-b8e8-160cba06aedb","resolution":{"observed_at":"2026-08-05T15:18:43.395205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.161835Z","title":"Explicit eigenvalue regularization improves sharpness-aware minimization","venue":null,"work_id":"c26f8868-7786-4bf1-97e7-6ad2a03c9977","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.149293Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:381412d2225d76724e23c4ce5e2021210b23134f521e48500831c1c33c638875","observation_id":"9ab6a138-197b-4240-99a0-d9c257a07106","resolution":{"observed_at":"2026-08-05T15:18:43.278822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.009912Z","title":"Repackage-proofing android apps","venue":null,"work_id":"26a09377-738e-4420-8107-18135a53148c","year":2016},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.204378Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:e8793c879faf50d7cc8dc06d33cf420acb7d7c365b6b52f4bd84f5f1bd30997c","observation_id":"8accfeac-5dbc-4308-b2f6-e09dc0fa53ac","resolution":{"observed_at":"2026-08-05T15:18:43.066422Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:34.265027Z","title":"Self-refine: Iterative refinement with self-feedback","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.265027Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:2ab86634639f89133c72392621b4d5d21cde0bf9552a669dc0dded81583de130","observation_id":"adb0b244-37e3-47f7-a17c-0c06d3f3cf88","resolution":{"observed_at":"2026-08-05T15:18:34.265027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.05262","last_updated":"2023-01-13T15:16:16Z","snapshot_observed_at":"2026-07-06T12:36:34.388460Z","submitted_at":"2022-02-10T18:59:54Z","title":"Locating and Editing Factual Associations in GPT","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.05262","snapshot_observed_at":"2026-08-05T15:18:34.318320Z","title":"Lo- cating and editing factual associations in GPT","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.318320Z"},"links":{"cited_paper":"/paper/2202.05262","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:796c219d669145113042bb2c326ddaef5d199f7ef204149371b546d5b0aace06","observation_id":"5b57ad28-d1a8-4428-8745-344912be042c","resolution":{"observed_at":"2026-08-05T15:18:34.318320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:42.801019Z","title":"Mass editing memory in a transformer","venue":null,"work_id":"b8db6094-9937-432a-9e97-5d04ffecbe32","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.373723Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:f2e8df4865dd98e213c2c04a4eeb776aa4f0d41dbfb4e08e8fe73baebb293fbc","observation_id":"7da12cbd-4511-4542-9c0b-edba40e5333e","resolution":{"observed_at":"2026-08-05T15:18:42.867752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:42.624984Z","title":"Fast model editing at scale","venue":null,"work_id":"ede4b1bc-29e7-4ed0-a50d-41c2a7cbf253","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.419799Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:1024d5f7a793e9b40d6c1ba895cf65d221f29327724fbd8774d7e41ad8f18ed8","observation_id":"8e237f56-a919-4a77-9fd9-0c8047c3bc4a","resolution":{"observed_at":"2026-08-05T15:18:42.716529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:42.431769Z","title":"Memory-based model editing at scale","venue":null,"work_id":"941e8745-7318-4c30-8a28-cfeff5126e0c","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.489448Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:da7f2eeab895e7299b1d51158a6ea247e6cac48a0ae2a2370784d42d462c7118","observation_id":"40916261-de2f-4c64-a6db-3f9db99d061c","resolution":{"observed_at":"2026-08-05T15:18:42.507125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:42.241847Z","title":"Ms marco: A human-generated machine reading comprehension dataset","venue":null,"work_id":"ae0a69fa-8a87-45b6-b8be-5d7c719cb2b5","year":2016},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.574134Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bc7a195d8ad4b4ddb7a98a7a253c0c396ec81b5916675f3112c634810e9162ea","observation_id":"9599ab60-1f0c-44f3-8980-3cdb02a26953","resolution":{"observed_at":"2026-08-05T15:18:42.314551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:42.044935Z","title":"Passage re-ranking with bert, 2020","venue":null,"work_id":"293ea57b-788e-4478-8699-3b9606c5ba21","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.629025Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:c04f9354470586c4fdcb8e77c77d12c579d9de5c0b7410f9f5e111ffc0e204ad","observation_id":"b2d3b8c0-6b7c-4392-a11a-6818ad90361c","resolution":{"observed_at":"2026-08-05T15:18:42.128099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:34.680906Z","title":"Gpt-4 technical report, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.680906Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:5646c044f306891ccb32a6c25610f526044dbb83a4ed28415794a81a262b5d6a","observation_id":"42f775e2-7dfc-4bfe-b1f3-b2bea3f5db04","resolution":{"observed_at":"2026-08-05T15:18:34.680906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:41.876629Z","title":"gpt-oss-120b & gpt-oss-20b model card","venue":null,"work_id":"216b6cc6-3b5e-4f38-ab8d-fb97d7ea9145","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.761187Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:ec7e56bb8a9af4807838b8f362c0b2c6f3a1c9630b2510abe96a621aae93178d","observation_id":"732b14db-889f-4d44-a499-7fbb268b2ee4","resolution":{"observed_at":"2026-08-05T15:18:41.932854Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13661","last_updated":"2023-10-26T20:45:39Z","snapshot_observed_at":"2026-07-06T15:31:05.250637Z","submitted_at":"2023-05-23T04:10:26Z","title":"On the Risk of Misinformation Pollution with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13661","snapshot_observed_at":"2026-08-05T15:18:34.810186Z","title":"On the risk of misinformation pollution with large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.810186Z"},"links":{"cited_paper":"/paper/2305.13661","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:2ed488b6a60a3e1029d2a7d3a2c9c0a3926dfdbc2db1e8ffd884f4f112db88c2","observation_id":"e8bc2aae-fe5d-44f5-973b-62393fbe13f5","resolution":{"observed_at":"2026-08-05T15:18:34.810186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:41.569058Z","title":"Stress-testing machine generated text detection: Shifting language models writing style to fool detectors","venue":null,"work_id":"1203eb01-7d28-42c4-916a-f335ebdf3c07","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.878843Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:f05fda6a2225cd2d1a0c4b662f9d57b9af69289f2f6c74904e99c8044b9eb6c0","observation_id":"5175eb71-0be1-40d9-a066-dbb1718df9a1","resolution":{"observed_at":"2026-08-05T15:18:41.723970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T15:18:34.967028Z","title":"Ignore previous prompt: Attack techniques for language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:34.967028Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:8714968d3106923de30a4d0713b60e291bb679b9948baec8c20fe4507c8f6f49","observation_id":"2842a7e2-f8b8-4076-a160-13c03331046c","resolution":{"observed_at":"2026-08-05T15:18:34.967028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:41.381901Z","title":"RocketQA: An optimized training approach to dense passage retrieval for open-domain question answering","venue":null,"work_id":"a04cbf2c-cedd-4418-a973-3efc36641bb9","year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.053337Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:775876b4ef64787e10ec8d3e60d75713beb266b0e2846176c632f66f88fc9e46","observation_id":"a81d89ae-6e41-4344-bb67-f46d5c64b49a","resolution":{"observed_at":"2026-08-05T15:18:41.464130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:41.129704Z","title":"QwQ: Reflect deeply on the boundaries of the unknown","venue":null,"work_id":"cbaa41f0-7d5e-4c4e-8c1f-9e4b4ef5e3fc","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.154397Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:23c855c008ce3be20b00c022f9e2d1b09a9cebf069c6f8fb336eb1ca91350d95","observation_id":"765b4711-a084-4d67-834b-d25f057be2d5","resolution":{"observed_at":"2026-08-05T15:18:41.270279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:40.975544Z","title":"I2C-Huelva at SemEval-2024 task 8: Boosting AI-generated text detection with multimodal models and optimized ensembles","venue":null,"work_id":"a715350a-11a8-46a3-98c2-6454608d6956","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.202876Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:b7a2ee228680c30b1983bc826efeac0515c4aa36f5cd82f22ef91b724e2047b8","observation_id":"95c4d7d9-ca33-4b6d-8c26-b3b0159e6359","resolution":{"observed_at":"2026-08-05T15:18:41.044401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:40.721695Z","title":"Repack me if you can: An anti-repackaging solution based on android virtualization","venue":null,"work_id":"0f3351f4-7901-48cb-857d-c0e3f36124c0","year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.285577Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:1fbf4bbb64fd5810a0223a947e853c5fd89a7166103debe528d5a099367d1f2c","observation_id":"d61b9e26-74a7-4bbe-b04e-e4c9ee41c09c","resolution":{"observed_at":"2026-08-05T15:18:40.853319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:40.469878Z","title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","venue":null,"work_id":"ad087587-5935-44a3-8c2b-88b4d2023650","year":2018},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.390136Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:457def048b9e13bbc34dd49fa80a1edcb2803aed50cc1467872c032e69c73ea6","observation_id":"5dab7ed9-c72b-4268-aa29-e212bb21108b","resolution":{"observed_at":"2026-08-05T15:18:40.611890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:40.215749Z","title":"Backdoor scanning for deep neural networks through k-arm optimization","venue":null,"work_id":"09b3c3b8-ead3-4c7e-94f0-caadd060ac7d","year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.467944Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:24b553628d1e8d538b8a5c01bbce1e418c15428caacd8e9817127fe15f2b2067","observation_id":"75a04176-77f5-4f47-a2d1-e054b51a60a9","resolution":{"observed_at":"2026-08-05T15:18:40.314326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:40.015824Z","title":"Powernorm: Rethinking batch normalization in transformers","venue":null,"work_id":"067a1951-8afc-49c0-8db0-9acb2db31049","year":2020},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.561033Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:b45ff3ddce3dff010ab85e40d9401d09b91ae9a67edaed9498f9a07996c1ed72","observation_id":"f489c20f-9bec-4208-8f26-875ad47ee95f","resolution":{"observed_at":"2026-08-05T15:18:40.118124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:39.831375Z","title":"Reflexion: Language agents with verbal reinforcement learning","venue":null,"work_id":"210dc3b5-71e0-47b9-b1b1-f0cb41f7a581","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.667249Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:c4f29aa3297f9812c1d2a169c4935a2bc389423cc556dee12de4acd4507b8431","observation_id":"e5fd6334-dd59-4d28-85b8-457cdc28ec20","resolution":{"observed_at":"2026-08-05T15:18:39.928427Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:35.746903Z","title":"Large language models encode clinical knowledge","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.746903Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:0b532b2f973657f3d52122e140d8f6e5d9d4d7ed154959f806c76939ed7e80cf","observation_id":"a2c6c574-d92e-4016-9556-c0989ba512e1","resolution":{"observed_at":"2026-08-05T15:18:35.746903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.04661","last_updated":"2024-01-25T03:50:57Z","snapshot_observed_at":"2026-07-06T16:44:43.293480Z","submitted_at":"2023-11-08T13:03:06Z","title":"Massive Editing for Large Language Models via Meta Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.04661","snapshot_observed_at":"2026-08-05T15:18:35.887794Z","title":"Massive editing for large language models via meta learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:35.887794Z"},"links":{"cited_paper":"/paper/2311.04661","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:c542d362ccf7fda1c37a6ccecf952b25f9760624eaf58bd097ac8c674b06fa0d","observation_id":"ba4c075b-2131-449f-b30c-1b2a09e9cd9f","resolution":{"observed_at":"2026-08-05T15:18:35.887794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15115","last_updated":"2025-01-03T02:18:21Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-19T17:56:09Z","title":"Qwen2.5 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15115","snapshot_observed_at":"2026-08-05T15:18:36.013369Z","title":"Qwen2.5 technical report","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.013369Z"},"links":{"cited_paper":"/paper/2412.15115","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:66633138eb600d9bb81c8a802e29859f1357717170939cde5c2335b800b262d3","observation_id":"19d9b696-644f-43cc-9d82-fe81e3f9a17e","resolution":{"observed_at":"2026-08-05T15:18:36.013369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08663","last_updated":"2021-10-21T01:18:28Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-04-17T23:29:55Z","title":"BEIR: A Heterogenous Benchmark for Zero-shot Evaluation of Information Retrieval Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08663","snapshot_observed_at":"2026-08-05T15:18:36.083612Z","title":"Beir: A heterogenous benchmark for zero-shot eval- uation of information retrieval models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.083612Z"},"links":{"cited_paper":"/paper/2104.08663","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:db36ccdbfd966f43dabfc774fe31bd4b1baf2d98eba2fd9db475b1a244af67dc","observation_id":"235b85ee-0ecd-45ad-8c79-06d2681ab93f","resolution":{"observed_at":"2026-08-05T15:18:36.083612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:39.628589Z","title":"LLMs cannot find reasoning errors, but can correct them given the error location","venue":null,"work_id":"a85c6a2b-fbae-444e-87e3-a1df81d9eada","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.157921Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bfabec78c5add9f93bef62e392a2c3ad084e7995930436ee07d6e38d2fe3453d","observation_id":"55ebde51-8a31-4995-bd9d-0e261e3832ee","resolution":{"observed_at":"2026-08-05T15:18:39.714624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:39.390265Z","title":"Neural cleanse: Identifying and miti- gating backdoor attacks in neural networks","venue":null,"work_id":"3c7c1572-d2fb-4810-a40e-38f9ef207700","year":2019},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.298408Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:b23c122031fd720d30bd27736227a9cbfa41ae39750d23c5ed223e53df7e523a","observation_id":"4572fae7-f455-4cfb-af79-53c7ac271978","resolution":{"observed_at":"2026-08-05T15:18:39.487306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:39.168223Z","title":"Large language models are not fair evaluators","venue":null,"work_id":"4777be93-d06d-434c-bb28-7b2345830d0a","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.398958Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:2ae50af0b39674e651fedd30bd2834fc02cd5000bf8fbd939c9f0db957d1bb1e","observation_id":"4116f134-f0dc-4115-941e-63ece8920079","resolution":{"observed_at":"2026-08-05T15:18:39.261767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.11171","last_updated":"2023-03-07T17:57:37Z","snapshot_observed_at":"2026-07-06T12:50:22.773056Z","submitted_at":"2022-03-21T17:48:52Z","title":"Self-Consistency Improves Chain of Thought Reasoning in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.11171","snapshot_observed_at":"2026-08-05T15:18:36.456523Z","title":"Self-consistency improves chain of thought reasoning in language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.456523Z"},"links":{"cited_paper":"/paper/2203.11171","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:9481264647cf55026bc444c20d505c8071daca0ae18f35c4951d89353459b697","observation_id":"3e379488-4064-4492-8cdb-bd1bf5248298","resolution":{"observed_at":"2026-08-05T15:18:36.456523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:39.004703Z","title":"Rethinking the reverse-engineering of trojan triggers","venue":null,"work_id":"a3c59deb-1123-4037-a94a-841da4d36df8","year":2022},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.545274Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:d9d83ee0504a81365121f17b82ec67ad10275ecb88e7dbc13496a1fa793ea7ab","observation_id":"f4ba0dc7-f794-42dc-a58d-ba88f479d362","resolution":{"observed_at":"2026-08-05T15:18:39.062504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:36.655168Z","title":"Generating sequences by learning to self-correct","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.655168Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:e4b78057b43b4ee1851e38be6306a0e87d8a3b3d7b80dec6c17256e8e6875547","observation_id":"fd9d9b56-cc7e-4450-8b44-d1d3de4895fc","resolution":{"observed_at":"2026-08-05T15:18:36.655168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.09600","last_updated":"2018-09-25T17:28:20Z","snapshot_observed_at":"2026-07-31T11:19:06.421362Z","submitted_at":"2018-09-25T17:28:20Z","title":"HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.09600","snapshot_observed_at":"2026-08-05T15:18:36.782414Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.782414Z"},"links":{"cited_paper":"/paper/1809.09600","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:a187dafdc476d1645fddbd59bd8408b7ab43e586ccb0898333165d0cf4c7cf59","observation_id":"70312e76-645c-420a-9331-4bab31908e57","resolution":{"observed_at":"2026-08-05T15:18:36.782414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:38.805905Z","title":"Melo: Enhancing model editing with neuron-indexed dynamic lora","venue":null,"work_id":"c1637db4-aa78-4fa4-8ff9-54a1e895f368","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.861243Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bd9a461a8af771189020fac50e407acac486ab365ab39c0468f1c65421ec94ec","observation_id":"babe2dcc-44a2-4ac6-a8c0-28d8ff7e5e05","resolution":{"observed_at":"2026-08-05T15:18:38.866598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18543","last_updated":"2025-05-24T06:17:59Z","snapshot_observed_at":"2026-08-07T14:27:32.619642Z","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18543","snapshot_observed_at":"2026-08-05T15:18:36.938530Z","title":"Benchmarking poi- soning attacks against retrieval-augmented generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:36.938530Z"},"links":{"cited_paper":"/paper/2505.18543","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:544170ef92f812e87c38ac1d61d1bdbc8b157e4d9d9d815b447a2961776b41ea","observation_id":"ad58ddcf-7096-454f-a151-4e085f27729b","resolution":{"observed_at":"2026-08-05T15:18:36.938530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:38.503993Z","title":null,"venue":null,"work_id":"af17d94a-dd80-4bab-a82a-4c5e5588cda2","year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:37.039083Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bf77425e9b9413f0b70b73b59b6799b51efb6507ba58892e6463b52ca9f6a93a","observation_id":"fdd741db-c527-4127-8bf4-af3025922256","resolution":{"observed_at":"2026-08-05T15:18:38.667797Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19156","last_updated":"2023-10-29T21:13:31Z","snapshot_observed_at":"2026-07-06T16:40:12.014275Z","submitted_at":"2023-10-29T21:13:31Z","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19156","snapshot_observed_at":"2026-08-05T15:18:37.129287Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:37.129287Z"},"links":{"cited_paper":"/paper/2310.19156","citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:bfdd4db6dead7ff08a78381e41529b0a958b85b1e3c23bca3046d931d49a3797","observation_id":"f2b911c7-cfd5-487d-abc9-14a1fca88c14","resolution":{"observed_at":"2026-08-05T15:18:37.129287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:38.320067Z","title":"case_id\": 0,","venue":null,"work_id":"0958c8d2-4fb8-45b4-9fd7-3f5275a436da","year":2024},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:37.195476Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:ebdc7615f1fc6df987a74bff118990b7958e29a7637f82b5ada4244986cccd79","observation_id":"4754624b-1e61-4329-99d3-cfd15157e399","resolution":{"observed_at":"2026-08-05T15:18:38.413036Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:43.831275Z","title":null,"venue":null,"work_id":"e6c34545-aeb8-486e-b52e-7b5993f99545","year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:33.770727Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:1019558008a4d4adb370a528bbf2cd58629daa022095c7acaf8fd6ef4297bd1e","observation_id":"27bab412-d921-4c03-83b9-11d8e0b5e38c","resolution":{"observed_at":"2026-08-05T15:18:43.897534Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:18:29.375772Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-05T15:18:29.375772Z"},"links":{"citing_paper":"/paper/2508.20083"},"observation_digest":"sha256:4da342400e62e7809c9016e623d4c2f868e6c8d0fab069627d5d44d5210de073","observation_id":"2915ef4d-8d6f-4c45-843c-e4c1052bc8c7","resolution":{"observed_at":"2026-08-05T15:18:29.375772Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.20083","last_updated":"2026-07-19T08:24:06Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T12:59:49.846974Z","submitted_at":"2025-08-27T17:49:28Z","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)"},"reference_resolution":{"displayed":86,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":37,"verified_exact":1,"verified_fuzzy":46},"total_outbound_references":86},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 86 of 86 outbound references and 3 inbound Pith citation observations for arXiv:2508.20083."}