{"as_of":"2026-08-10T08:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:337ddb350ac266872dd0760b207041172378b16f6e950adafe7d13b49d6efce9","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T12:43:29.749493Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2510.02964/citation-record","integrity":"/paper/2510.02964/integrity","json":"/paper/2510.02964/citation-record.json","paper":"/paper/2510.02964"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:21.134749Z","title":"Finetuned language models are zero-shot learners,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:21.134749Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:bde09a0e6d0dbedbbcf512bb41f45512ee565c88e99d6e0c369562777d86c962","observation_id":"3f5ab832-1e06-436f-a919-bf10f4012b80","resolution":{"observed_at":"2026-08-04T12:43:21.134749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:21.364749Z","title":"Codegen: An open large language model for code with multi-turn program synthesis,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:21.364749Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:ee3572cd37a9ea506ec42231165c40021e16c64eea273eff0646bdfb3e77237f","observation_id":"3e4c0719-755c-4f8b-b1b4-d2dd8a631b39","resolution":{"observed_at":"2026-08-04T12:43:21.364749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:21.494748Z","title":"Prompting large language model for machine translation: A case study,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:21.494748Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:ff76df661b8981bfb8b89ffb902767a378bd98e90e81ca18366b1a9fc10ad74c","observation_id":"3544b327-da4e-404d-8c78-70226e690f02","resolution":{"observed_at":"2026-08-04T12:43:21.494748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05232","last_updated":"2024-11-19T12:42:45Z","snapshot_observed_at":"2026-07-06T16:45:07.733095Z","submitted_at":"2023-11-09T09:25:37Z","title":"A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questions","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05232","snapshot_observed_at":"2026-08-04T12:43:21.695445Z","title":"A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:21.695445Z"},"links":{"cited_paper":"/paper/2311.05232","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:d6b7a7243556ce908083354e5a47fcc73756ad4a2aa97fd05a469c01baa35ebd","observation_id":"e0e193e2-2c39-4491-a53c-90744e2f3f40","resolution":{"observed_at":"2026-08-04T12:43:21.695445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.18223","last_updated":"2026-03-18T05:34:39Z","snapshot_observed_at":"2026-08-06T23:27:24.356320Z","submitted_at":"2023-03-31T17:28:46Z","title":"A Survey of Large Language Models","version":19},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.18223","snapshot_observed_at":"2026-08-04T12:43:21.855466Z","title":"A survey of large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:21.855466Z"},"links":{"cited_paper":"/paper/2303.18223","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:aa1b75aaa16e4a3f5741686d6ca728d06306ce29345b88beee28fcee2759661a","observation_id":"436ebb5e-e2eb-4125-9794-78cd851ac8a0","resolution":{"observed_at":"2026-08-04T12:43:21.855466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.010549Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.010549Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:e26a19d4f3423493d1b54bf2a432210c49358dcdb68bab39e708ac686a839e94","observation_id":"629b91a7-cf0e-4b6e-8c9b-4f055347f735","resolution":{"observed_at":"2026-08-04T12:43:22.010549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-04T12:43:22.154756Z","title":"Retrieval-augmented generation for large language models: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.154756Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:c4df53d856f5b4b5e27b7cb1ba80078bbce9201a727702114862211112eb8667","observation_id":"22681197-3b52-4232-a939-18ba1d26fd8b","resolution":{"observed_at":"2026-08-04T12:43:22.154756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.264746Z","title":"A survey on rag meeting llms: Towards retrieval-augmented large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.264746Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:225ffde443cc62235f2c06d8d7c54cc658a41c4c25ed9a40e0d27da543097ad0","observation_id":"37239b79-be9d-4f83-88ce-877aa5620b4f","resolution":{"observed_at":"2026-08-04T12:43:22.264746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.374742Z","title":"Develop secure, reliable medical apps with rag and nvidia nemo guardrails,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.374742Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:56deed5c0a72379f8c40f0093ffbe97db49117c4e1d8cb4a6b4fb060e6e19ed4","observation_id":"22b5f79a-0fa0-416c-b2ee-461c6976ff30","resolution":{"observed_at":"2026-08-04T12:43:22.374742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.474743Z","title":"Harnessing rag in healthcare: Use-cases, impact, & solutions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.474743Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:aa09c187cc65162087fa7b29faf50b63fd9fdb4a830df8e4dc1ee5a3c47166bc","observation_id":"785d4106-ae99-416b-a680-6c10d38056c2","resolution":{"observed_at":"2026-08-04T12:43:22.474743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.564746Z","title":"Ai in finance: The promise and risks of rag,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.564746Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:f4c3f719b613b8ccb390f26856fb4fa0d71e91bce5c250d58cb6c68fcdd452ee","observation_id":"403bc181-154a-4dc8-991d-dc10af5ed7bb","resolution":{"observed_at":"2026-08-04T12:43:22.564746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.694740Z","title":"Leveraging retrieval-augmented generation (rag) in banking: A new era of finance transformation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.694740Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:2a988f6747f3b1ad233dfa15ba0331218bfc482af559245c0bffaea7599e1c2f","observation_id":"1dd08517-40f7-4ec6-bb85-16351fb0aa03","resolution":{"observed_at":"2026-08-04T12:43:22.694740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.784805Z","title":"watsonx assistant,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.784805Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:180b538eb028d269b47c6f83f81609ad845e1001c3b494e0544990e071fe3cb2","observation_id":"0167e090-3b20-4b2c-a81d-aa32a797febe","resolution":{"observed_at":"2026-08-04T12:43:22.784805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:22.944824Z","title":"Cpr: Retrieval augmented generation for copyright protection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:22.944824Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:bcc0b57f29f9196c89f264b25ffb26cafc47a540ce49d13ed9dd657bb4b01763","observation_id":"f9898d36-626f-48e5-8fd2-df70fd759621","resolution":{"observed_at":"2026-08-04T12:43:22.944824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.03034","last_updated":"2025-09-03T06:34:12Z","snapshot_observed_at":"2026-08-06T20:31:37.373645Z","submitted_at":"2025-07-03T02:45:51Z","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.03034","snapshot_observed_at":"2026-08-04T12:43:23.151874Z","title":"Rethinking data protection in the (generative) artificial intelligence era,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.151874Z"},"links":{"cited_paper":"/paper/2507.03034","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:6e92cd7d1a334d597f2298a916e883cf57919d1f267c1227e6ffc41712747829","observation_id":"f687ac63-bcdd-4f18-a7eb-9f764e81d232","resolution":{"observed_at":"2026-08-04T12:43:23.151874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:23.285344Z","title":"Databench: Evaluating dataset auditing in deep learning from an adversarial perspective,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.285344Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:4d5a4b4f226ab2c040b80dc4238cf2f6740f60f026d44587a9f5de639890bb67","observation_id":"c25ef379-8565-4e24-a1e0-ce957d36ad05","resolution":{"observed_at":"2026-08-04T12:43:23.285344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:23.469731Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.469731Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:53e587b7b1c084afa49458b65a0ae05e7349d3b1b0ed4ae9f6d2a1054cb01d53","observation_id":"fcc84e8d-5d9c-460c-adbf-a0f80a99acf9","resolution":{"observed_at":"2026-08-04T12:43:23.469731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:23.687416Z","title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval- augmented generation systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.687416Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:c96853d55b1439fe38917ec8c343f39b6f6ef154dcb572efb9a3a224de432240","observation_id":"dd657183-4193-4e47-a221-8e3409c4ca32","resolution":{"observed_at":"2026-08-04T12:43:23.687416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-05T17:51:57.166067Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-04T12:43:23.823124Z","title":"Unleashing worms and extracting data: Escalating the outcome of attacks against rag-based inference in scale and severity using jailbreaking,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.823124Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:93c39071e43753894c71f87a363a8469317cd79fe00182a557916b34e8edd654","observation_id":"f9b205d6-f8d7-4550-b4b6-713fc5338b5e","resolution":{"observed_at":"2026-08-04T12:43:23.823124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-04T12:43:23.983318Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:23.983318Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:7748b91d521d186944ed7034fd85a8c3e54417ca18d00ade928cf855020885bf","observation_id":"556c5bd7-9954-4180-a75d-f3d0eebbdb35","resolution":{"observed_at":"2026-08-04T12:43:23.983318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.035130Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.035130Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:8b6a49f155d0cdd117786428d7d9b2a69a79011186f92d7d7cbdf03c2acf70bc","observation_id":"2103647b-a339-4d65-8204-a025cd45dec8","resolution":{"observed_at":"2026-08-04T12:43:24.035130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.120511Z","title":"{LLM-Fuzzer}: Scaling assessment of large language model jailbreaks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.120511Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:077559cb4a1605b6af61cf966790c92185e9997a40fc35815d3b1450a74efc48","observation_id":"933ecd44-e3d2-405e-b37f-97edfc1529d6","resolution":{"observed_at":"2026-08-04T12:43:24.120511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02151","last_updated":"2025-04-17T18:55:45Z","snapshot_observed_at":"2026-08-08T01:18:53.200448Z","submitted_at":"2024-04-02T17:58:27Z","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02151","snapshot_observed_at":"2026-08-04T12:43:24.174739Z","title":"Jailbreaking leading safety-aligned llms with simple adaptive attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.174739Z"},"links":{"cited_paper":"/paper/2404.02151","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:7a3b789adcb3ff5d61f25b1ce8d8312cc416c76cc216fa1786cde87b3930a257","observation_id":"e748876b-7704-4500-9e35-1b94a9c47289","resolution":{"observed_at":"2026-08-04T12:43:24.174739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.252540Z","title":"Large language models as optimizers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.252540Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:815e57dcdafb89ff58201cea1c95dbae166824f3f11ff547543c6ac0e6b39800","observation_id":"02373d65-b4a7-403e-8dae-3755fdb32436","resolution":{"observed_at":"2026-08-04T12:43:24.252540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.374743Z","title":"When is","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.374743Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:e97090b7c2040e22f4b227214b75dacee38fbb689c5d219b3528a2840bcedd80","observation_id":"d2cdee29-f64a-495e-a472-c91f4a4bc05c","resolution":{"observed_at":"2026-08-04T12:43:24.374743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-04T12:43:24.508888Z","title":"Sentence-bert: Sentence embeddings using siamese bert-networks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.508888Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:31818a3737a9c3f641fd2e8d8da9f9e83eee4505f8d1a7bde078e4281c2a10c7","observation_id":"4708e2bc-8df9-4414-bade-5b7e1c4aa5db","resolution":{"observed_at":"2026-08-04T12:43:24.508888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08821","last_updated":"2022-05-18T12:29:49Z","snapshot_observed_at":"2026-07-06T11:01:05.577957Z","submitted_at":"2021-04-18T11:27:08Z","title":"SimCSE: Simple Contrastive Learning of Sentence Embeddings","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08821","snapshot_observed_at":"2026-08-04T12:43:24.633963Z","title":"Simcse: Simple contrastive learning of sentence embeddings,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.633963Z"},"links":{"cited_paper":"/paper/2104.08821","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:06ffa164c10a6d858b272c1e9d3d586adc8d44dde72347dba2ea28508f3962ef","observation_id":"449f9fc6-0434-4c61-9c43-b8117e314b98","resolution":{"observed_at":"2026-08-04T12:43:24.633963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-02T10:24:11.927887Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14110","snapshot_observed_at":"2026-08-04T12:43:24.684491Z","title":"Rag-thief: Scalable ex- traction of private data from retrieval-augmented generation applications with agent-based attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.684491Z"},"links":{"cited_paper":"/paper/2411.14110","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:472b5cb6e4a3c194a06362e9e973531a668e143b259a8716523d5dc2be0b640d","observation_id":"b1a97668-23ef-4fe4-bb52-20e3a61e2dd8","resolution":{"observed_at":"2026-08-04T12:43:24.684491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.774373Z","title":"A neural probabilistic language model,","venue":null,"work_id":null,"year":2000},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.774373Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:54d24067ba29bdec767fcf50d5070eeb7c97c9d7522a48bb7ed6378aa1c393b1","observation_id":"a296665b-79ff-4778-a632-bd05d209e836","resolution":{"observed_at":"2026-08-04T12:43:24.774373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.857526Z","title":"Recurrent neural network based language model","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.857526Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:27702fa6ee50497bd863a4682c30f0ec4cbc48c613384a0d139a36e49bd2195b","observation_id":"63738f3e-5c11-4f19-8526-6b2641bc90ce","resolution":{"observed_at":"2026-08-04T12:43:24.857526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:24.984732Z","title":"Improving language understanding by generative pre-training. openai,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:24.984732Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:cd952cdf729228ac26640c5782f98f93c90aa5ba09b32811b6cd8e0b7969716f","observation_id":"8dcc75be-3cfb-4df7-9bbf-57eaed726465","resolution":{"observed_at":"2026-08-04T12:43:24.984732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-04T12:43:25.146662Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.146662Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:ee3b5e754320d0d600f94031cd9d5f06c17127ac0f72d48430b9bed053dcd4fa","observation_id":"0c3fa1a0-8867-4953-8f9b-beed3f4b9916","resolution":{"observed_at":"2026-08-04T12:43:25.146662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:25.295004Z","title":"Claude 3.7 sonnet and claude code,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.295004Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:7856b58d32b1753086c13bf07e6c8d0f5dc94e9bd540f319c4161fb33b5e4d01","observation_id":"e61c1c95-656d-49ca-97d1-47e2a4037789","resolution":{"observed_at":"2026-08-04T12:43:25.295004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:25.415620Z","title":"Pleak: Prompt leaking attacks against large language model applications,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.415620Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:8b577444aba10e53082506e27a5d5cd7732b411a17b5ad72a224093ab647464c","observation_id":"b1f49b70-c748-4e30-94a7-68b1ecbe55fb","resolution":{"observed_at":"2026-08-04T12:43:25.415620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:25.563372Z","title":"Covid-qa: A question answering dataset for covid-19,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.563372Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:f341b42e397fff49310ad43b98101f5e609553f409e036b22b86a833259f8db3","observation_id":"04e11eb9-73a7-4289-a28d-72b87aec8176","resolution":{"observed_at":"2026-08-04T12:43:25.563372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.00457","last_updated":"2023-10-12T11:35:35Z","snapshot_observed_at":"2026-07-06T15:11:00.295556Z","submitted_at":"2023-04-02T05:47:09Z","title":"LLMMaps -- A Visual Metaphor for Stratified Evaluation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.00457","snapshot_observed_at":"2026-08-04T12:43:25.651129Z","title":"Llmmaps–a visual metaphor for stratified evaluation of large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.651129Z"},"links":{"cited_paper":"/paper/2304.00457","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:bb5d80512603a3b383d0628eb7c452b08954643dde4dfa920c911f42e404d128","observation_id":"843200f4-c649-4b73-95fa-c0f980cd7629","resolution":{"observed_at":"2026-08-04T12:43:25.651129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01313","last_updated":"2024-01-08T16:19:17Z","snapshot_observed_at":"2026-07-06T17:10:56.398607Z","submitted_at":"2024-01-02T17:56:30Z","title":"A Comprehensive Survey of Hallucination Mitigation Techniques in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01313","snapshot_observed_at":"2026-08-04T12:43:25.729556Z","title":"A comprehensive survey of hallucination mitigation techniques in large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.729556Z"},"links":{"cited_paper":"/paper/2401.01313","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:2f265499a551deddfec61353d966499df12b5a5be3ee00b3d808ffc3124baebc","observation_id":"a453bf6c-a421-4e49-8cce-6a3a51fd57e3","resolution":{"observed_at":"2026-08-04T12:43:25.729556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:25.817150Z","title":"Survey of hallucination in natural language generation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.817150Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:c4fa6ca959a14f32ba3912cb0e5370c65e4c9442791e8085cba6b644163b8f13","observation_id":"66c91e53-8b48-4093-b683-e27eb9b7f338","resolution":{"observed_at":"2026-08-04T12:43:25.817150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:25.947500Z","title":"Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:25.947500Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:e8586736b5b55e343cb732a669c07dc85001b3bc73a40b39d1da6b3bb3ff333c","observation_id":"99994344-ae1f-4fb7-97b7-baeb945a8965","resolution":{"observed_at":"2026-08-04T12:43:25.947500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20446","last_updated":"2025-02-04T14:35:38Z","snapshot_observed_at":"2026-08-10T04:06:38.482153Z","submitted_at":"2024-05-30T19:46:36Z","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20446","snapshot_observed_at":"2026-08-04T12:43:26.013817Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.013817Z"},"links":{"cited_paper":"/paper/2405.20446","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:6fb7a8ef85f274f2587c126dbf63ea232d61985d078161575fabd0c3d33eac19","observation_id":"9f9b83f0-02aa-4ede-815f-00d2e3089f29","resolution":{"observed_at":"2026-08-04T12:43:26.013817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.19234","last_updated":"2024-09-26T04:22:18Z","snapshot_observed_at":"2026-08-08T04:16:42.025194Z","submitted_at":"2024-06-27T14:58:38Z","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.19234","snapshot_observed_at":"2026-08-04T12:43:26.148453Z","title":"Seeing is believing: Black-box membership inference attacks against retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.148453Z"},"links":{"cited_paper":"/paper/2406.19234","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:64e98c82d176df54c10912d3586635943279440c7adf46728db91b494187cb0a","observation_id":"18f01f0d-a2e3-4327-b619-fe96eb09dcfc","resolution":{"observed_at":"2026-08-04T12:43:26.148453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.218891Z","title":"Extracting training data from large language models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.218891Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:e72fb7e1057dd64d4073b1b4a939d749dd7ce50f920326a86ecacc005af504eb","observation_id":"0bd88ba2-6fe0-44b6-96bf-3105033b7821","resolution":{"observed_at":"2026-08-04T12:43:26.218891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.296149Z","title":"Truvrf: Towards triple-granularity verification on machine unlearning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.296149Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:2d35b5c02b622410dbab880cb1890324c9b54570bad68941deceef66b2cc7f5e","observation_id":"950a7497-8c4d-484f-b648-71ad933d1022","resolution":{"observed_at":"2026-08-04T12:43:26.296149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.448183Z","title":"Hardening llm fine-tuning: From differentially private data selection to trustworthy model quantization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.448183Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:7880bd715e85840917226409b333ff620c099e5dd0b9ed951a7ce2324e5fa806","observation_id":"d2b9d61f-a0c0-4f22-835c-2c64ba42b3de","resolution":{"observed_at":"2026-08-04T12:43:26.448183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.604749Z","title":"Membership inference attacks against in-context learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.604749Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:f0cc37270cf1911a0cc101ddd742f00e4add3d61f6e774ca11b40dd2784edd90","observation_id":"33b906d7-05a8-45be-80b5-4ccb37be5eaa","resolution":{"observed_at":"2026-08-04T12:43:26.604749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.743633Z","title":"SILO language models: Isolating legal risk in a nonparametric datastore,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.743633Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:39c6087ce6da8c95e04232ff17f3ef57938752ceaaeb7e6796082d9f527224b1","observation_id":"fcf32eb5-6fab-4d3e-b06c-d5824874b98d","resolution":{"observed_at":"2026-08-04T12:43:26.743633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.853580Z","title":"Membership inference attacks against machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.853580Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:0af2c16a5a3bea730edde862c8209c32014dcc77580dc92fa22307aa77b03c2e","observation_id":"4fa54e73-59eb-4c0d-b7c7-8c1b24aa70c5","resolution":{"observed_at":"2026-08-04T12:43:26.853580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:26.917023Z","title":"Rethinking membership inference attacks against transfer learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:26.917023Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:ee81adb301bf1825a60a5d826ae8f8ef10a3b1c90e457acbd78dba3b48b7dcda","observation_id":"409401cb-3ea1-4295-aedb-75f2f9848ac2","resolution":{"observed_at":"2026-08-04T12:43:26.917023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.016380Z","title":"Privacy implications of retrieval-based language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.016380Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:38217548a5d5f1074d34a6459dabe6a8d35241672be3c77d883000793d0745d1","observation_id":"87d04ca1-b8ae-45a4-90d1-dedb591209d7","resolution":{"observed_at":"2026-08-04T12:43:27.016380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.073021Z","title":"Generalization through memorization: Nearest neighbor language mod- els,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.073021Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:7153ecdf0d6c51f17921e9150cb94494c995f3badb8352a2612821b7cd5561e0","observation_id":"eba2bf5b-114e-4265-b820-5cc9c5d410f3","resolution":{"observed_at":"2026-08-04T12:43:27.073021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.183775Z","title":"A normalized levenshtein distance metric,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.183775Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:58f3c327b09a0db897552821cd75ea0b16d9fa255b2738e333aa0169a87fe35c","observation_id":"11481344-d0db-4b0b-9b91-ec934257b890","resolution":{"observed_at":"2026-08-04T12:43:27.183775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.287482Z","title":"UPAM: Unified prompt attack in text-to- image generation models against both textual filters and visual checkers,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.287482Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:db853d21e7a78cdd6b40157848de2064f8a969aff5e3f4567b95bd17a604ee9d","observation_id":"0244f11c-b214-4bda-950f-ffada7a879a2","resolution":{"observed_at":"2026-08-04T12:43:27.287482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.416550Z","title":"Masterkey: Automated jailbreaking of large language model chatbots,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.416550Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:1318111f0b7fa18fa325bd83bc73857e14efe2321554cae764a86ee021bce428","observation_id":"5133dfc0-38d2-4086-90ea-e2815c135f5c","resolution":{"observed_at":"2026-08-04T12:43:27.416550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-04T12:43:27.535942Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.535942Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:593a16d9febb937a7cb2554a3414d96903c163bd221cc4ce2becad2dbe55b12e","observation_id":"cd997acc-cb15-4de1-9f4e-b89a204ded56","resolution":{"observed_at":"2026-08-04T12:43:27.535942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.14866","last_updated":"2025-03-03T07:25:21Z","snapshot_observed_at":"2026-07-06T19:20:19.151388Z","submitted_at":"2024-09-23T10:03:09Z","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.14866","snapshot_observed_at":"2026-08-04T12:43:27.630419Z","title":"Papillon: Efficient and stealthy fuzz testing-powered jailbreaks for llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.630419Z"},"links":{"cited_paper":"/paper/2409.14866","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:cb6a13c9d953c674d8cae82b317ce82a45cfd0cce58b3602f4043e2433873603","observation_id":"ff93f0e6-ca25-4e2c-b017-94ffe332f9f3","resolution":{"observed_at":"2026-08-04T12:43:27.630419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:27.791640Z","title":"Curriculum learning,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.791640Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:b2e18fac795c86627815e20da4d24036bd3bc92ca2733fb84c943e7f19be61f9","observation_id":"fcb514ee-42ec-4225-8c66-28f53162e473","resolution":{"observed_at":"2026-08-04T12:43:27.791640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.11805","last_updated":"2025-05-09T21:04:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-19T02:39:27Z","title":"Gemini: A Family of Highly Capable Multimodal Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.11805","snapshot_observed_at":"2026-08-04T12:43:27.884250Z","title":"Gemini: a family of highly capable multimodal models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.884250Z"},"links":{"cited_paper":"/paper/2312.11805","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:aa3989714706e11be5a0ac3f719ae30284bce925750893517628d40f83ca3e84","observation_id":"0da80684-d087-407c-9502-44952c92e75d","resolution":{"observed_at":"2026-08-04T12:43:27.884250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-04T12:43:27.961393Z","title":"Deepseek-v3 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:27.961393Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:2c29dce12232bb6d720c8c109422cb84ba79f9d781b5077c715231aac469d14e","observation_id":"8f0f6b98-91d5-4dfe-8e44-251d50fa23f5","resolution":{"observed_at":"2026-08-04T12:43:27.961393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.059638Z","title":"The enron corpus: A new dataset for email classification research,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.059638Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:f1b1f3d6d9b58f92182f60806f9925e268f585d95fe84f33d3fb3acc301b1e1a","observation_id":"9a12d334-691f-4319-a1c0-d7aa854f99dd","resolution":{"observed_at":"2026-08-04T12:43:28.059638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.260882Z","title":"Chatdoctor: A medical chat model fine-tuned on a large language model meta-ai (llama) using medical domain knowledge,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.260882Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:0c72ef15d99bad0542223ab7fddb5a649bab8982ee16ee14eb025e3a8310eacf","observation_id":"bf3742dc-60f0-4081-be9d-ea074c143239","resolution":{"observed_at":"2026-08-04T12:43:28.260882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.17035","last_updated":"2023-11-28T18:47:03Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-11-28T18:47:03Z","title":"Scalable Extraction of Training Data from (Production) Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.17035","snapshot_observed_at":"2026-08-04T12:43:28.399081Z","title":"Scalable extraction of training data from (production) language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.399081Z"},"links":{"cited_paper":"/paper/2311.17035","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:63a61f079f5c58b9b71473dad7574784ea89b6374a799c04cf0fa68088f57e70","observation_id":"ff94fc88-2a4c-4291-944c-976ef0faab7e","resolution":{"observed_at":"2026-08-04T12:43:28.399081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.546496Z","title":"C-pack: Packaged resources to advance general chinese embedding,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.546496Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:8596fcc33f53fe832fdbeb0fbdbbefbed879ca709bade0beece6eb518a81eaf9","observation_id":"74dfbb5d-1d9d-4bcb-a363-ffa376d12da0","resolution":{"observed_at":"2026-08-04T12:43:28.546496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.627639Z","title":"Open source strikes bread - new fluffy embeddings model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.627639Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:6f9e64a1c779d05e9e0076fcb59b8ec78087c7776e266358cb6782588911d2e0","observation_id":"35f23645-ecd0-4595-8fa6-d8f3e4e22d87","resolution":{"observed_at":"2026-08-04T12:43:28.627639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.795383Z","title":"How johnny can persuade LLMs to jailbreak them: Rethinking persuasion to challenge AI safety by humanizing LLMs,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.795383Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:d023653f516444c82e1d2871ccacbb0bb167c7c4c9d5ac24a577d9567e5adf53","observation_id":"2ec3fc7f-ca9c-445d-a5e3-fc08f4c4555a","resolution":{"observed_at":"2026-08-04T12:43:28.795383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:28.932440Z","title":"Jailbroken: How does llm safety training fail?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:28.932440Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:961bbae3bda3ba8b1e78733a2e479060143b4d154bfb1919dbf287fb8275db91","observation_id":"9f21d3d1-4169-4bb5-984c-ce80ca6caa95","resolution":{"observed_at":"2026-08-04T12:43:28.932440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.12871","last_updated":"2024-12-31T07:56:13Z","snapshot_observed_at":"2026-07-06T16:22:21.746857Z","submitted_at":"2023-09-22T13:52:42Z","title":"AnglE-optimized Text Embeddings","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.12871","snapshot_observed_at":"2026-08-04T12:43:29.129981Z","title":"Angle-optimized text embeddings,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.129981Z"},"links":{"cited_paper":"/paper/2309.12871","citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:438dc556220386565d241090162cf83527c1d06a71c2ef94e5919a8d37f2fa84","observation_id":"3fee9edb-3bf8-4376-96cf-7448c30394ac","resolution":{"observed_at":"2026-08-04T12:43:29.129981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:29.250912Z","title":"Optimizing llms for accuracy,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.250912Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:5a7b7d3781d4997cb715d5f0bde266202ec1c35c47b7f0a11668787042126f10","observation_id":"4ff32a8d-a7a3-4e4f-822f-06565336fb84","resolution":{"observed_at":"2026-08-04T12:43:29.250912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:29.315653Z","title":"Rouge: A package for automatic evaluation of summaries,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.315653Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:00637c0f76689fad2fcbe6802fef2177b76e3ed73c9484d18d7bbfa1a4e0b7e8","observation_id":"54bf8c42-2ddd-4a12-9c54-557b939e1ad6","resolution":{"observed_at":"2026-08-04T12:43:29.315653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:29.463885Z","title":"Datasentinel: A game- theoretic detection of prompt injection attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.463885Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:52bad78b1133846a99e35554ac478e8e720d1e9c24f89c6b3737be9a7fb79c0e","observation_id":"626509e8-a3d0-43b3-9c4e-e418ec389d4a","resolution":{"observed_at":"2026-08-04T12:43:29.463885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:29.582539Z","title":"Qwen2.5: A party of foundation models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.582539Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:2b75f61e4d466425ca379baa78066e478eb97347bb371010e9c64eb3101e864f","observation_id":"85cce81f-7ad1-4c73-b4ee-34da079ce40c","resolution":{"observed_at":"2026-08-04T12:43:29.582539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T12:43:29.749493Z","title":"Does safety training of llms generalize to semantically related natural prompts?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-04T12:43:29.749493Z"},"links":{"citing_paper":"/paper/2510.02964"},"observation_digest":"sha256:f5c526ee9f582947bd3790ae93e2300735e0ec3457c2fca1062e2db391164470","observation_id":"5a3ec5f6-5172-436a-99ce-98a4e4e19f0f","resolution":{"observed_at":"2026-08-04T12:43:29.749493Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2510.02964","last_updated":"2026-07-07T08:30:10Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T04:04:00.776435Z","submitted_at":"2025-10-03T12:53:45Z","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":70,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2510.02964."}