{"as_of":"2026-08-06T06:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0778a07c753c88664a70816ea2f2fdae3815bf118f38290367eb0bd43cf50637","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T19:27:04.162297Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T16:49:14.243931Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-03T01:07:30.217444Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"cited_work":{"arxiv_id":"2512.00804","doi":null,"metadata_source":"pith","pith_arxiv_id":"2512.00804","snapshot_observed_at":"2026-07-03T01:07:30.217444Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","venue":"cs.CR","work_id":"d26eef94-75cd-4387-ae49-6c3b85206ff5","year":2025},"citing_paper":{"arxiv_id":"2606.09038","last_updated":"2026-06-08T05:10:05Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-06-08T05:10:05Z","title":"Personalization Meets Safety:Mechanisms,Risks,and Mitigations in Personalized LLMs","version":1},"reference_index":125,"source":"pdf_text","source_observed_at":"2026-06-27T16:49:14.243931Z"},"links":{"cited_paper":"/paper/2512.00804","citing_paper":"/paper/2606.09038"},"observation_digest":"sha256:3ddd9f1a444060fde738a2eab41cbbdc79da30cb408f123f552742eb56a9e14b","observation_id":"0d3767f7-6d11-4cb0-99df-d183a53892d7","resolution":{"observed_at":"2026-07-03T01:07:30.218705Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2512.00804/citation-record","integrity":"/paper/2512.00804/integrity","json":"/paper/2512.00804/citation-record.json","paper":"/paper/2512.00804"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.031419Z","title":"Meta llama,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.031419Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:1bcda708c57ad7dfff531de9205134e0fce91c28d89650776226a1f0bd5a0ae5","observation_id":"1eacbdd7-583b-456b-bb2e-ab4576ca07df","resolution":{"observed_at":"2026-08-03T19:27:04.031419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-03T19:27:04.034438Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.034438Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d8165f94d228e52e2e3a35b77d57e86e3cdea57362671de606770c7d5f9fe108","observation_id":"716e0328-34b8-4735-ae0a-3a37e0591dde","resolution":{"observed_at":"2026-08-03T19:27:04.034438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-03T19:27:04.037495Z","title":"Deepseek- r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.037495Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:392ee366291ceeececf4e92cf0542e9e08cbb0e1a43543d833aefaa6eb8ca02c","observation_id":"50d289f0-5b4d-4a73-aef3-8f94582b9d04","resolution":{"observed_at":"2026-08-03T19:27:04.037495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.09617","last_updated":"2023-05-16T17:11:29Z","snapshot_observed_at":"2026-08-03T08:52:05.725675Z","submitted_at":"2023-05-16T17:11:29Z","title":"Towards Expert-Level Medical Question Answering with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.09617","snapshot_observed_at":"2026-08-03T19:27:04.039850Z","title":"Towards expert-level medical question answering with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.039850Z"},"links":{"cited_paper":"/paper/2305.09617","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:cb54db7e410b0407514274a4618a4bd0f45ff8a8c394ce9ca3fa54d7ca48c08c","observation_id":"bb109f6e-5275-4cf6-bb72-7fb3cb41ef4c","resolution":{"observed_at":"2026-08-03T19:27:04.039850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-03T19:27:04.042480Z","title":"Evaluating large language models trained on code,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.042480Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d4c03c6bef55e45a09ab9d0c41e6b2e16ea942fc7cee26ddc4f2da45a4113707","observation_id":"6d977c2c-c61b-4866-b2dd-796d58be072b","resolution":{"observed_at":"2026-08-03T19:27:04.042480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.045514Z","title":"Github copilot: Your ai pair programmer,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.045514Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:bd225e0e167959cd65ea97a6de54ff450ce40bd1b31ef6c62c44adee58edfcf9","observation_id":"47dfe531-6e12-4fc9-bbf3-d47e91807e78","resolution":{"observed_at":"2026-08-03T19:27:04.045514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.047720Z","title":"Cursor: The ai-first code editor,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.047720Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:9da428b4663a038c077c971b4920e8b76a43fec704b051ae532f7da51634a59a","observation_id":"c1b69bb1-190f-46a5-bb9a-1fb2cb8c20e9","resolution":{"observed_at":"2026-08-03T19:27:04.047720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.049699Z","title":"Introducing Deep Research,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.049699Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:444e96ec4b77a8dbaa475f1eec74547c3ab9237bb0d2e01ca44cd1762fc1bbb7","observation_id":"4fa05805-fb7c-41d1-9f40-970a9f81d852","resolution":{"observed_at":"2026-08-03T19:27:04.049699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.051687Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.051687Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d52519b3eb0359110124925ef75ddbed4b443b48296f40c9925eed97dca950cf","observation_id":"b949802a-2d81-4d71-a21f-f881004aa37b","resolution":{"observed_at":"2026-08-03T19:27:04.051687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-03T19:27:04.053807Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.053807Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:43ec83e5c5e0a82450926e0f329aa7b3fd96bf94ced119ef27d8270aa31014bb","observation_id":"8446b069-6eac-4c5f-a985-b53f8ef5e059","resolution":{"observed_at":"2026-08-03T19:27:04.053807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-07-06T18:23:31.520359Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T19:27:04.056271Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.056271Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:931ffe9bf5fdc2cc27295632d13c902c20955f50c67c2586f705e9485817ec37","observation_id":"d356bdc1-be44-41b7-b443-d3ac88d87d01","resolution":{"observed_at":"2026-08-03T19:27:04.056271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.058515Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (rag),","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.058515Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:70ecb7345c68527e678c8aa3484a78650bc63e31269ac233b79c49031d4e9c7b","observation_id":"db6e3e4c-3b05-48bc-82d6-1c4d5f3ae411","resolution":{"observed_at":"2026-08-03T19:27:04.058515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-03T19:27:04.063455Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.063455Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e15d81c69fc4f5a3f81a202a70c3f20ffddc4de3cc25153afbbf546f3dc69135","observation_id":"dbb0f792-0b11-49f2-95f8-67d845919187","resolution":{"observed_at":"2026-08-03T19:27:04.063455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.065986Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.065986Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:c307e578a457d17210f7769e5b77e7d4916dbeb96313182e22554af0eb45e33d","observation_id":"2e23f020-e946-48df-adb3-03daa42fd303","resolution":{"observed_at":"2026-08-03T19:27:04.065986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.070151Z","title":"Not what you’ve signed up for: Compromising real- world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.070151Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:7b61f9d8af8ed5d4aa8e10ba3c211f97bc579046c224feabc7e660751f8c0115","observation_id":"ede62264-a3ca-4b53-9dba-be3bcda9dab7","resolution":{"observed_at":"2026-08-03T19:27:04.070151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12784","last_updated":"2024-07-17T17:59:47Z","snapshot_observed_at":"2026-07-06T18:47:56.109836Z","submitted_at":"2024-07-17T17:59:47Z","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12784","snapshot_observed_at":"2026-08-03T19:27:04.067874Z","title":"Available: https://arxiv.org/abs/2407.12784","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.067874Z"},"links":{"cited_paper":"/paper/2407.12784","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:0fc3aa29a2e83f254cad31264096d292e88d4209440365067591b9886c6e2079","observation_id":"00be42cd-3382-4fa4-9220-cd11eb44916b","resolution":{"observed_at":"2026-08-03T19:27:04.067874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.074191Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.074191Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e5c28608cb42ded586fbd609e09e39a1068b0ad42ec06f68b8a1e687f7d406c8","observation_id":"b244a89d-ca33-449c-87ef-7ed631c519a9","resolution":{"observed_at":"2026-08-03T19:27:04.074191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.09820","last_updated":"2024-03-20T03:58:34Z","snapshot_observed_at":"2026-08-05T03:27:55.546207Z","submitted_at":"2023-05-16T21:51:01Z","title":"Machine-Made Media: Monitoring the Mobilization of Machine-Generated Articles on Misinformation and Mainstream News Websites","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.09820","snapshot_observed_at":"2026-08-03T19:27:04.072154Z","title":"Machine-made media: Monitoring the mobilization of machine-generated articles on misinformation and mainstream news websites,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.072154Z"},"links":{"cited_paper":"/paper/2305.09820","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:f4c5b42927afb5ef4f5e467628ecc29bbe3e2db41dff76fa83147dfbbd78efa5","observation_id":"8d0669c1-23c1-49e2-aade-0208752f07b3","resolution":{"observed_at":"2026-08-03T19:27:04.072154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.077854Z","title":"Wikicheck: An end-to- end open source automatic fact-checking api based on wikipedia,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.077854Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:5907ee342e6edadc688110ce4f34adb3c52cefcbba8c31e046300bd4f4762908","observation_id":"8fc58323-08a0-437e-8d7d-569358932fcf","resolution":{"observed_at":"2026-08-03T19:27:04.077854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.075976Z","title":"Datasentinel: A game-theoretic detection of prompt injection attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.075976Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:7bea48f880147ec3762261397aaec77425c8fac8b57e73aef20e70cfca19239f","observation_id":"fa03b8d1-2752-4e57-9822-129aefc68160","resolution":{"observed_at":"2026-08-03T19:27:04.075976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16708","last_updated":"2025-07-26T16:31:50Z","snapshot_observed_at":"2026-08-05T17:00:54.980634Z","submitted_at":"2024-12-21T17:31:52Z","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16708","snapshot_observed_at":"2026-08-03T19:27:04.082197Z","title":"Towards more robust retrieval-augmented generation: Evaluating rag under adversarial poisoning attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.082197Z"},"links":{"cited_paper":"/paper/2412.16708","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:593a51dd3783f3b718638eefba828ef42a85b40f0f04143056430004820c39c3","observation_id":"81d2968a-c5e3-499a-b4cf-032c5f5808d2","resolution":{"observed_at":"2026-08-03T19:27:04.082197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16248","last_updated":"2025-07-09T01:38:20Z","snapshot_observed_at":"2026-08-05T15:20:30.186961Z","submitted_at":"2025-03-20T15:44:31Z","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16248","snapshot_observed_at":"2026-08-03T19:27:04.079950Z","title":"Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.079950Z"},"links":{"cited_paper":"/paper/2503.16248","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e11e0ed1c3352d4210055b112d9b150a4d8ee670c887aa79c6b7eb942c1a3776","observation_id":"5db3ac60-8940-449b-911e-0b0e7f088ed2","resolution":{"observed_at":"2026-08-03T19:27:04.079950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.17998","last_updated":"2025-06-10T07:35:41Z","snapshot_observed_at":"2026-08-05T18:04:18.599434Z","submitted_at":"2024-05-28T09:34:50Z","title":"Exploring the Escalation of Source Bias in User, Data, and Recommender System Feedback Loop","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.17998","snapshot_observed_at":"2026-08-03T19:27:04.086490Z","title":"Exploring the escalation of source bias in user, data, and recommender system feedback loop,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.086490Z"},"links":{"cited_paper":"/paper/2405.17998","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d37b8edcd34df750a1998a0bd5a55e6cc344fb747b566fb7f21aab017ef2b91e","observation_id":"8b499d5b-9f57-4f1e-aee2-4801a559ada5","resolution":{"observed_at":"2026-08-03T19:27:04.086490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.14084","last_updated":"2024-05-27T03:53:05Z","snapshot_observed_at":"2026-07-06T16:51:36.124532Z","submitted_at":"2023-11-23T16:22:58Z","title":"Invisible Relevance Bias: Text-Image Retrieval Models Prefer AI-Generated Images","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.14084","snapshot_observed_at":"2026-08-03T19:27:04.084301Z","title":"Invisible relevance bias: Text-image retrieval models prefer ai-generated images,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.084301Z"},"links":{"cited_paper":"/paper/2311.14084","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:dc5685381a365a7347ae13d8de32f0869af8759a7e48d70fda9f2ff9fcac6622","observation_id":"73752f4d-2ef0-4cc5-924a-e0cbac77bcdc","resolution":{"observed_at":"2026-08-03T19:27:04.084301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.090852Z","title":"The use of mmr, diversity-based reranking for reordering documents and producing summaries,","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.090852Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:59dc4f44b5ba166d77fa33b631f42f2531a075dbb8bd498936edaca501b1c231","observation_id":"a3d594c0-dd24-4b1f-838d-9ee164cdc873","resolution":{"observed_at":"2026-08-03T19:27:04.090852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-07-06T21:41:33.629441Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.11415","snapshot_observed_at":"2026-08-03T19:27:04.088604Z","title":"Bias amplification in rag: Poisoning knowledge retrieval to steer llms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.088604Z"},"links":{"cited_paper":"/paper/2506.11415","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:4ddfd798419876d828d4fe32a988f06f699269b7a71d93982d222e16286cada1","observation_id":"5164d2d3-79ba-4a74-a880-8b9bbf275098","resolution":{"observed_at":"2026-08-03T19:27:04.088604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.094815Z","title":"Through the stealth lens: Rethinking attacks and defenses in rag,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.094815Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e1b0de65b3ba2ec26d9c3530fb09e847ce834ddfd2992bc9a5087526280521f0","observation_id":"d70cc48f-51d5-4cef-8ebe-07db56999fa5","resolution":{"observed_at":"2026-08-03T19:27:04.094815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.13992","last_updated":"2024-09-21T03:03:09Z","snapshot_observed_at":"2026-08-04T15:12:16.965697Z","submitted_at":"2024-09-21T03:03:09Z","title":"SMART-RAG: Selection using Determinantal Matrices for Augmented Retrieval","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.13992","snapshot_observed_at":"2026-08-03T19:27:04.092818Z","title":"Smart-rag: Selection using determinantal matrices for augmented retrieval,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.092818Z"},"links":{"cited_paper":"/paper/2409.13992","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:8b6a71f6b701a434a709e32715ee7f8bf1e0391b6a687cd0db37e36942f5fc8d","observation_id":"be21f0b1-8525-42fd-af13-2167eb98a1d5","resolution":{"observed_at":"2026-08-03T19:27:04.092818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.09600","last_updated":"2018-09-25T17:28:20Z","snapshot_observed_at":"2026-07-31T11:19:06.421362Z","submitted_at":"2018-09-25T17:28:20Z","title":"HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.09600","snapshot_observed_at":"2026-08-03T19:27:04.101375Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.101375Z"},"links":{"cited_paper":"/paper/1809.09600","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:97499a1801017bf43258b82907fd29a57343797fbdbc48ae528914634ff25afd","observation_id":"345a7593-4c2c-4ecc-b815-3f4911ca2736","resolution":{"observed_at":"2026-08-03T19:27:04.101375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.103527Z","title":"A dataset for sentence retrieval for open-ended dialogues,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.103527Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:5af760ae2a131d8df3f1220e4b484e5dd4cd7f1e67f30be11c0ec6fa7caef78e","observation_id":"f7c3e50d-94e8-4354-9421-30caf17e0528","resolution":{"observed_at":"2026-08-03T19:27:04.103527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.099287Z","title":"Measuring and addressing indexical bias in information retrieval,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.099287Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:2b0a574f7b4836023e97d64e4dbd98ccd4b4f9282dae07ba866345bb127e3a0a","observation_id":"a7f7fecb-c7d7-4b05-bd68-f21039ba1cf1","resolution":{"observed_at":"2026-08-03T19:27:04.099287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.107966Z","title":"The faiss library,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.107966Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:dbd59ed71a35444121bbbf9eeba42ebb44cb6cb68cbd32caa54f92a1f430263b","observation_id":"bdfdc68a-c4be-4eb7-ae03-a5cdf7f3fb3f","resolution":{"observed_at":"2026-08-03T19:27:04.107966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.112434Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.112434Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:3d2e6a766c0058fe6caefada56c565e2b45b32e084bb173dc877fb17297ec68a","observation_id":"433c8d0d-00e8-4b96-8b49-06b6cbd0afe7","resolution":{"observed_at":"2026-08-03T19:27:04.112434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-03T19:27:04.105560Z","title":"Sentence-bert: Sentence embeddings using siamese bert-networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.105560Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:2e141a85cb02190e8db0d8047d5c5355d7845ad7f85c68f22da9b5a9e2bc9cd6","observation_id":"af11025b-3c1f-4917-ae99-925d7a6f868f","resolution":{"observed_at":"2026-08-03T19:27:04.105560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.116598Z","title":"Bias and unfairness in information retrieval systems: New challenges in the llm era,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.116598Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:04e901d7e8099084ed02315aa6105aab3efa50e4499e5166e6d7b63113f8a05a","observation_id":"cf9b4b37-e337-46e8-9ada-97c4059e5897","resolution":{"observed_at":"2026-08-03T19:27:04.116598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08281","last_updated":"2025-10-23T09:36:08Z","snapshot_observed_at":"2026-07-31T05:45:37.385210Z","submitted_at":"2024-01-16T11:12:36Z","title":"The Faiss library","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08281","snapshot_observed_at":"2026-08-03T19:27:04.110174Z","title":"Available: https://arxiv.org/abs/2401.08281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.110174Z"},"links":{"cited_paper":"/paper/2401.08281","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:00e3d89d24baa4c88ee06be446d7205d009e41d8829311a0aafda3a0cdf6cc3b","observation_id":"810a4279-4519-4ea4-b777-a78c8c5da435","resolution":{"observed_at":"2026-08-03T19:27:04.110174Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.120539Z","title":"Neural retrievers are biased towards llm-generated content,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.120539Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:cefb15136778866031678e3b4d7f674856aa329c99f947cdb6510e98b112fd2c","observation_id":"d3a35d94-fb6f-4b9b-b9a5-e43432bd1a9f","resolution":{"observed_at":"2026-08-03T19:27:04.120539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.114617Z","title":"Large dual encoders are generalizable retrievers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.114617Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:f813693fcfab354d904c19a9377c6433cba457fde646a674d7a83581049b0487","observation_id":"4a94a936-49b4-4a3a-b521-11ed7af71e75","resolution":{"observed_at":"2026-08-03T19:27:04.114617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.118606Z","title":"Principal component analysis: A natural approach to data exploration,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.118606Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:2f558711c58d200a8a5f4c826871403de19df99c996cdc90c41d3d912c2de3b4","observation_id":"09ce7ab1-f6c3-4346-b146-3f03c4437c84","resolution":{"observed_at":"2026-08-03T19:27:04.118606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.129485Z","title":"Vershynin,High-Dimensional Probability: An Introduction with Applications in Data Science, ser","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.129485Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:ea1e9bd546917d2a0120c5097cf797937836a3240401ac422e5d5b48a7ecb56b","observation_id":"aa6a0d91-3a38-4219-bd6d-11d174616bdd","resolution":{"observed_at":"2026-08-03T19:27:04.129485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.09751","last_updated":"2020-02-14T21:56:30Z","snapshot_observed_at":"2026-07-06T07:47:32.745963Z","submitted_at":"2019-04-22T07:17:18Z","title":"The Curious Case of Neural Text Degeneration","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.09751","snapshot_observed_at":"2026-08-03T19:27:04.122373Z","title":"The curious case of neural text degeneration,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.122373Z"},"links":{"cited_paper":"/paper/1904.09751","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:ac14cafce13d7ef9cd1cbf915f39bdaedb114d25a94b9c7ac9b61af39da1feea","observation_id":"a62c5377-3747-40a1-bfd2-55ce8ed49a14","resolution":{"observed_at":"2026-08-03T19:27:04.122373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.133497Z","title":"meta-llama/meta-llama-3-8b,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.133497Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:02eb1f4056dc59a3ef3affedad51ce973635dae96b22379f90f77d226b4b4431","observation_id":"9029093e-f9fe-487a-abd6-78b516191d7e","resolution":{"observed_at":"2026-08-03T19:27:04.133497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.127310Z","title":"Determinantal point processes for machine learning,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.127310Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:69255b8dddfd41fbae4db817f575115bc163eb40b727bf9dfd2a9e5f57b49008","observation_id":"2fefa637-ea17-4883-85ba-0bb701c5e769","resolution":{"observed_at":"2026-08-03T19:27:04.127310Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.137806Z","title":"Efficient memory management for large language model serving with pagedattention,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.137806Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d90d0a5dba0a42a66e5a63108ac74d64c22df877017428370e1c52828b78766b","observation_id":"b0ece307-28a0-4c2b-b302-92bad2fd0acb","resolution":{"observed_at":"2026-08-03T19:27:04.137806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.131497Z","title":"sentence-transformers/msmarco- distilbert-base-tas-b,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.131497Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:3ed6c03a17709e17e4f1872275954bdd13f228d4ef086af2a15c4237cfd03271","observation_id":"21e7e325-f861-4d8f-bbab-b6817877390d","resolution":{"observed_at":"2026-08-03T19:27:04.131497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04906","last_updated":"2020-09-30T21:27:13Z","snapshot_observed_at":"2026-07-06T09:11:26.109763Z","submitted_at":"2020-04-10T04:53:17Z","title":"Dense Passage Retrieval for Open-Domain Question Answering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.04906","snapshot_observed_at":"2026-08-03T19:27:04.142059Z","title":"Dense passage retrieval for open- domain question answering,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.142059Z"},"links":{"cited_paper":"/paper/2004.04906","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:6cfd112a9f49bd67114f41dbcd2aacb5b3f2d8903f0fc62b2fe3c203c0598e0d","observation_id":"24ca1ca2-6c60-42e5-82fe-3d623ef8e3ef","resolution":{"observed_at":"2026-08-03T19:27:04.142059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.135745Z","title":"deepseek-ai/deepseek-r1-distill-qwen-14b,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.135745Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:5aebe9522a90aa8757afcd076f77ef5e831ba85e7f90b4e02d092b4ea593849b","observation_id":"512dd947-6950-4f2e-ae17-24c291a0cb45","resolution":{"observed_at":"2026-08-03T19:27:04.135745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.148190Z","title":"Mahalanobis distance,","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.148190Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:ee137344266b2169b866f7175944a3e7356b464f3b6e678552cbd91c35fe9963","observation_id":"4224f31c-7ce1-4f43-a3fd-d3de2402345e","resolution":{"observed_at":"2026-08-03T19:27:04.148190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.139983Z","title":"sentence-transformers/sentence-t5-xl,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.139983Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e067aeade744c4b792d8ea4f1219d1b314256c164b85a56b61b4ddf1e7fae49a","observation_id":"451d78c2-51fb-45dd-a5ba-e206a8e47aa2","resolution":{"observed_at":"2026-08-03T19:27:04.139983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.152311Z","title":"A practical and secure byzantine robust aggregator,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.152311Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:e99c5ac39c2f83dc0e2992ce83c384c4527802707efa1486be85af1622bf47ec","observation_id":"3e6f474f-d03e-43c0-8212-54c279fb0d5d","resolution":{"observed_at":"2026-08-03T19:27:04.152311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.144063Z","title":"On Information and Sufficiency,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.144063Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:86241333933a876c28a0de0e6de0fd45d8119692a9daee645e5b1699adb3d1b4","observation_id":"010ab32a-5d9b-416a-86b3-e3ffe57278f8","resolution":{"observed_at":"2026-08-03T19:27:04.144063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13532","last_updated":"2025-08-25T08:33:56Z","snapshot_observed_at":"2026-07-06T17:33:13.106468Z","submitted_at":"2024-02-21T05:03:07Z","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13532","snapshot_observed_at":"2026-08-03T19:27:04.156039Z","title":"Whispers in grammars: Injecting covert backdoors to compromise dense retrieval systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.156039Z"},"links":{"cited_paper":"/paper/2402.13532","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:69d76cd986d0190bd516ec7eeb030891d20b5f09945697684e824adb83db0b0a","observation_id":"c11d2e9a-d3cf-4401-9822-9645489a8627","resolution":{"observed_at":"2026-08-03T19:27:04.156039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.158210Z","title":"Attacks against abstractive text sum- marization models through lead bias and influence functions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.158210Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:dd8f8c3b7f0b63683a1300870d600805a644f1152a1f4e89a3a42c8df8e289cc","observation_id":"3060d36e-d190-468e-880e-c52eb1b3965b","resolution":{"observed_at":"2026-08-03T19:27:04.158210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.150376Z","title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.150376Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:67465c607f4fd51577479c02cde735ba84fccf8682e242ef5660168db75d1f0f","observation_id":"d9c48c89-2607-4ad0-9639-00d9283c0957","resolution":{"observed_at":"2026-08-03T19:27:04.150376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.162297Z","title":"The probabilistic relevance framework: Bm25 and beyond,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.162297Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:f6dba40e464731d7832470a9125a6947b95418c46909a9f46024e84900609c40","observation_id":"ad59bcd2-8b36-43ef-9dff-11f4bdd67e95","resolution":{"observed_at":"2026-08-03T19:27:04.162297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.154222Z","title":"How not to detect prompt injections with an llm,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.154222Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:db6c77831012cbeec526903a1b1619d379784d7bf151bb53843b68f4db0aeaa2","observation_id":"5797fa05-e7c6-433f-b87a-930943a3654e","resolution":{"observed_at":"2026-08-03T19:27:04.154222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.02714","last_updated":"2024-05-04T17:10:00Z","snapshot_observed_at":"2026-07-06T18:09:51.117905Z","submitted_at":"2024-05-04T17:10:00Z","title":"Beyond Relevance: Evaluate and Improve Retrievers on Perspective Awareness","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.02714","snapshot_observed_at":"2026-08-03T19:27:04.160284Z","title":"Beyond relevance: Evaluate and improve retrievers on perspective awareness,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.160284Z"},"links":{"cited_paper":"/paper/2405.02714","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:b06fdde53a6763d2d14b4e4c65be09ada610298d232e8753188e40ff5b092009","observation_id":"97bc7342-7258-4773-959c-277d2a846893","resolution":{"observed_at":"2026-08-03T19:27:04.160284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T19:27:04.146111Z","title":"Available: https://doi.org/10.1214/aoms/1177729694","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":1951,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.146111Z"},"links":{"citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:3c8d37a9cea7e51d5c8374a47be67386c5bfbd276fe3658fd585ecb3b68c035d","observation_id":"d5225bf4-bc36-4e15-a44e-82b970cd8464","resolution":{"observed_at":"2026-08-03T19:27:04.146111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16893","last_updated":"2024-02-23T18:35:15Z","snapshot_observed_at":"2026-07-06T17:35:45.288097Z","submitted_at":"2024-02-23T18:35:15Z","title":"The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16893","snapshot_observed_at":"2026-08-03T19:27:04.060768Z","title":"Available: https://arxiv.org/abs/2402.16893","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.060768Z"},"links":{"cited_paper":"/paper/2402.16893","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:3fc160c4926eabb168ca9fdf5447f181d9f25b3d0206de9a6abdd0b9cd46d00a","observation_id":"4c252345-a8df-475e-a4a1-d96b2d63ea73","resolution":{"observed_at":"2026-08-03T19:27:04.060768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.04390","last_updated":"2026-05-22T04:35:08Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-04T19:15:09Z","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.04390","snapshot_observed_at":"2026-08-03T19:27:04.096886Z","title":"Available: https://arxiv.org/abs/2506.04390","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.096886Z"},"links":{"cited_paper":"/paper/2506.04390","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:4c00a38fd4c1991936fae3130fb97b92a905521c31d1361b502aab36da4fe281","observation_id":"da57fdc1-1c2c-477a-ba01-84eaee264bf0","resolution":{"observed_at":"2026-08-03T19:27:04.096886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T19:27:03.383340Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":59,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 1 inbound Pith citation observation for arXiv:2512.00804."}