{"as_of":"2026-08-09T20:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2eb0303b935900be9cbf62c75919394c9404ae585e008beb26e89598e222241d","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T03:57:26.064630Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2602.06495/citation-record","integrity":"/paper/2602.06495/integrity","json":"/paper/2602.06495/citation-record.json","paper":"/paper/2602.06495"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.052738Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.052738Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:3d8cbc0028fd797af3b7c76ce1b99c286a3445c7a51b63b78bb380e9fc8814ce","observation_id":"4ccfbc1e-016c-439b-95c6-c9ec8494fb86","resolution":{"observed_at":"2026-08-03T03:57:24.052738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.160462Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.160462Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:26e6c13537f23a3a6df814473a2f0fe759511bc110a8d57953883d83a8b2fd7b","observation_id":"ab5cba3d-40fd-4031-a668-550107d4279a","resolution":{"observed_at":"2026-08-03T03:57:24.160462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.290867Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.290867Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:c2239f596ae4b161c208cc1217d5b381b4d040495edd4f6e9c5af1f941948486","observation_id":"94b5d077-cba9-4001-8ca2-e1f81e8c60ab","resolution":{"observed_at":"2026-08-03T03:57:24.290867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.20324","last_updated":"2026-06-04T17:26:56Z","snapshot_observed_at":"2026-08-07T20:32:31.507281Z","submitted_at":"2025-09-24T17:11:35Z","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.20324","snapshot_observed_at":"2026-08-03T03:57:24.415065Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.415065Z"},"links":{"cited_paper":"/paper/2509.20324","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:488d2f43a03167441783afdcb27ea8dab06f27ce8878e851f42324feb427825b","observation_id":"25639a43-c1d5-4aaa-b972-a6c74d962522","resolution":{"observed_at":"2026-08-03T03:57:24.415065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.552458Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.552458Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:bff5732d2077a3ee8f18910e4c679fabe13a2022362e02466c815ada4a38296c","observation_id":"3f8a292a-a043-438f-a25b-5fe28e7c7e98","resolution":{"observed_at":"2026-08-03T03:57:24.552458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.08045","last_updated":"2024-09-12T13:50:22Z","snapshot_observed_at":"2026-08-05T17:51:57.166067Z","submitted_at":"2024-09-12T13:50:22Z","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.08045","snapshot_observed_at":"2026-08-03T03:57:24.715339Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.715339Z"},"links":{"cited_paper":"/paper/2409.08045","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:84737c0d02fdf22c942e2d9c7f5702ddfcfec452a04722e34b2c2cdc1d19f4e8","observation_id":"0c326583-7bcf-4b77-89f0-a62690908c72","resolution":{"observed_at":"2026-08-03T03:57:24.715339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.865184Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.865184Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:f7eedbba9942ec196cf00ede74f7a082c22e93c2defa63d884f6a880e60dd8bf","observation_id":"b9a9afba-5ca3-4026-9777-5e95cf3f1d70","resolution":{"observed_at":"2026-08-03T03:57:24.865184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:24.931604Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.931604Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:5818c8d7b99035c95fead06a3acc900b2dac267516dd78c58db241866b44c52f","observation_id":"0966fffc-4743-4411-9a9c-f0f6f49b30d8","resolution":{"observed_at":"2026-08-03T03:57:24.931604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16130","last_updated":"2025-02-19T10:49:41Z","snapshot_observed_at":"2026-07-06T18:05:11.700127Z","submitted_at":"2024-04-24T18:38:11Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.16130","snapshot_observed_at":"2026-08-03T03:57:24.975751Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:24.975751Z"},"links":{"cited_paper":"/paper/2404.16130","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:e8ed4a3d05751c6c19353c53f84ad4cf6f44b3dd5caef23497f3aaf6657304e4","observation_id":"f2163c40-c67e-4145-9ac8-b80db8d44535","resolution":{"observed_at":"2026-08-03T03:57:24.975751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.148085Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.148085Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:6ffa45af6f5e3a70019eeda4b875eeb1854cd6c8ed98fb43d3dd6ab0efe09531","observation_id":"2e7549b9-16b7-46dd-8ea3-f847897c3d95","resolution":{"observed_at":"2026-08-03T03:57:25.148085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.305600Z","title":null,"venue":null,"work_id":null,"year":1953},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.305600Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:c3731f895b037dd64e991bbbd7ea8a225600219c7018b88aac3267f015cd92c1","observation_id":"9c95ab7b-6e7c-48f8-96bc-51dac3403b78","resolution":{"observed_at":"2026-08-03T03:57:25.305600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.415448Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.415448Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:db89735f8b305f697d3c6b43d9055fdb16af58484141e4536e1abafff003435d","observation_id":"3274cd32-4d60-44c8-8b57-fff3abc58bc5","resolution":{"observed_at":"2026-08-03T03:57:25.415448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.17832","last_updated":"2026-05-27T05:45:34Z","snapshot_observed_at":"2026-08-07T23:44:19.880010Z","submitted_at":"2025-02-25T04:23:59Z","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.17832","snapshot_observed_at":"2026-08-03T03:57:25.566079Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.566079Z"},"links":{"cited_paper":"/paper/2502.17832","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:0ecebba94dd7ca7736214006ae8d455cbc3abf039dcaaf171408047ebe03bf52","observation_id":"23a25cfe-7c80-4f63-9859-fa9bbc851e61","resolution":{"observed_at":"2026-08-03T03:57:25.566079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.680397Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.680397Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:0e530a653062e9c2a7469b0b30fd8b01513270140fe9a4dbccc19d4861438892","observation_id":"e953314e-1f01-4e6f-9bf0-3bfe064fbb67","resolution":{"observed_at":"2026-08-03T03:57:25.680397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.844361Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.844361Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:7cb04b193610a9a42dd8dbdaa46683c49ea50b6e50e222311278cfe153943ca1","observation_id":"ce04d306-e55e-4c6e-8237-ea485fdf3326","resolution":{"observed_at":"2026-08-03T03:57:25.844361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.957932Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.957932Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:12eaee84309572799437dd78c111ffde1164a604e7d32187831a569e1f40b0b4","observation_id":"c0aba60b-68ec-4330-b21f-8086fe0ca07a","resolution":{"observed_at":"2026-08-03T03:57:25.957932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.960797Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.960797Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:b78a3bdb1abe59233df5c3ec1f2a8abcd407e9097e523d66fabb07b1de6a707b","observation_id":"23cc0752-9aef-4226-95c8-6ff28abeccba","resolution":{"observed_at":"2026-08-03T03:57:25.960797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.964023Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.964023Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:51270d8a63ed624f499ef5cbd4f10ff1015fdc1d52113433b5300459a17e7859","observation_id":"4e52ae83-ed33-4002-a906-9bffa5d9aa1c","resolution":{"observed_at":"2026-08-03T03:57:25.964023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-02T10:24:11.927887Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14110","snapshot_observed_at":"2026-08-03T03:57:25.970105Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.970105Z"},"links":{"cited_paper":"/paper/2411.14110","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:99a6bc44586b045655721a9d86a9be6618895f9a703d8ba215d31a3180a344e2","observation_id":"48f68ae5-1b3b-4265-99ed-235828e82f77","resolution":{"observed_at":"2026-08-03T03:57:25.970105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.973183Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.973183Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:ad43aa34dcc532ccce5a370474e6023724affff0ae923ae1d6891a2893ddc569","observation_id":"80698e78-978d-45e0-ba36-4be1523c7ed1","resolution":{"observed_at":"2026-08-03T03:57:25.973183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.979364Z","title":null,"venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.979364Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:fbde6b41c7134176229edac3d022dfea94ac6a1bcb43f201e6e287955de80d15","observation_id":"3279e6bb-7555-44f9-8249-21ccd6344fa2","resolution":{"observed_at":"2026-08-03T03:57:25.979364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.981960Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.981960Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:2d648b06c109c0298d79b400c24d95a392d9baab746ba09169c04ad55efdc237","observation_id":"8bec20a0-7d1d-44d9-b059-e4b143db07d3","resolution":{"observed_at":"2026-08-03T03:57:25.981960Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.984752Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.984752Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:876386911d994bbc432e5ac7f2706dabd16b192c30d8d878cebee7efaf2523ed","observation_id":"652659f7-dca4-4172-a447-a73f8644f01a","resolution":{"observed_at":"2026-08-03T03:57:25.984752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.987431Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.987431Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:5e266ed45dd1940c5aaee15d27494483ba2294380a68cd43f15842306135fe69","observation_id":"a5a07990-e37b-4dd4-bb62-7dec4e66ac3c","resolution":{"observed_at":"2026-08-03T03:57:25.987431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.990051Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.990051Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:fb51f72be11f786a94217a7be55a153c334fba846525f882b7b8d0bad82e1b3b","observation_id":"b9da17de-9aac-482a-ae92-409b48947937","resolution":{"observed_at":"2026-08-03T03:57:25.990051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03281","last_updated":"2023-08-07T03:52:59Z","snapshot_observed_at":"2026-08-04T23:10:23.964516Z","submitted_at":"2023-08-07T03:52:59Z","title":"Towards General Text Embeddings with Multi-stage Contrastive Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03281","snapshot_observed_at":"2026-08-03T03:57:25.993201Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.993201Z"},"links":{"cited_paper":"/paper/2308.03281","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:1c1d04ea1cb606f0a28e72c0811768d26a4704b3d4f1bcd24801159079e67068","observation_id":"067830e3-25ae-4b0e-a1c0-2ce34986f41c","resolution":{"observed_at":"2026-08-03T03:57:25.993201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.996253Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.996253Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:e1181fc9f8a08e1599bf99a5901e7ae6689860c5229674f20bff8ee1b564b64e","observation_id":"0ae3e9a2-6b3a-4281-9a5c-065e7431e351","resolution":{"observed_at":"2026-08-03T03:57:25.996253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.17222","last_updated":"2025-08-24T06:19:44Z","snapshot_observed_at":"2026-08-05T17:00:05.350609Z","submitted_at":"2025-08-24T06:19:44Z","title":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.17222","snapshot_observed_at":"2026-08-03T03:57:25.998806Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.998806Z"},"links":{"cited_paper":"/paper/2508.17222","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:d2a537d447c8f61f9a5d4caea507342430265a9d442eb59db37d463adc12c45f","observation_id":"04753bdc-006d-4042-925e-72467b8d7ed5","resolution":{"observed_at":"2026-08-03T03:57:25.998806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.001905Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.001905Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:30a3e72b77ba4332438396a27a0dd36d8180b103bcdacd331ce4d883492f3b3d","observation_id":"e3efdc1c-3611-4a52-86e3-a63409632a5a","resolution":{"observed_at":"2026-08-03T03:57:26.001905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.007246Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.007246Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:0ee43b2beffc811b2fd4fc34a75b726bef17b708fd281cd1742c149dbd85e5f5","observation_id":"cacbda56-a693-404a-965a-1b250c7f0293","resolution":{"observed_at":"2026-08-03T03:57:26.007246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.009824Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.009824Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:7231fb472e1a9a722d959e82a410b149047efff90f73e7e7e868b08aaad68351","observation_id":"0c133639-385c-4aca-875a-af0e2eb675c7","resolution":{"observed_at":"2026-08-03T03:57:26.009824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.012500Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.012500Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:966f040a66eb3c605eaa497e5297145a78706d28ad8a47848ecdc006f5bfc461","observation_id":"d672a072-7454-41f6-8ebf-b386a05209b4","resolution":{"observed_at":"2026-08-03T03:57:26.012500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.015205Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.015205Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:b1bf1b596a11b77be18ee771e3b008cbed6cf111600ff955cf7f0240b638e061","observation_id":"40c9e32c-138e-4908-af06-6c38620f3f4b","resolution":{"observed_at":"2026-08-03T03:57:26.015205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.018262Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.018262Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:fbf0c4255ff56f0c5198d8b2cc0e089f0c863afee0a441c34b3e85bf8ec5a37d","observation_id":"aba6ab08-ef34-496d-8aa5-a50c2569a0f3","resolution":{"observed_at":"2026-08-03T03:57:26.018262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.021135Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.021135Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:b5304d23e982c78949d8c255bed758eed48b81e62c53f6dfd483ab2042bbe94b","observation_id":"258da6d3-7b72-45b6-a077-909a746a1a0b","resolution":{"observed_at":"2026-08-03T03:57:26.021135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.023955Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.023955Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:9a99b81af3a5a59a2364731274d848d8d313a30bf92c30462d8267faf4cebc2b","observation_id":"122e2006-a482-4b7c-a354-9853032f9a6d","resolution":{"observed_at":"2026-08-03T03:57:26.023955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-08-03T03:57:26.027014Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.027014Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:581894a2f11abe585071d49fd5957e6fb22341f62cfa6252e73a9f286d65f52b","observation_id":"ce2ef197-1504-4257-ad0a-1d9cb545dd22","resolution":{"observed_at":"2026-08-03T03:57:26.027014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.030186Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.030186Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:6583cb68cd3cb0496197f3bbe7aff4cfb0a8c2414702b15281337ad3b43c37c3","observation_id":"5238a65f-ef0c-4452-ab15-bf60d9b313ad","resolution":{"observed_at":"2026-08-03T03:57:26.030186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.033050Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.033050Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:f4d404452d222d9cd5c594661dde51f6b9d3a8f9d9ff9d2c09a8029f9b977469","observation_id":"f2012d58-6442-4011-88b9-e650374cfeb9","resolution":{"observed_at":"2026-08-03T03:57:26.033050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.035588Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.035588Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:ef5cef4c814296a4a92a59f0c22c41729adce35291bd90468a1466a8be518edb","observation_id":"d0987d5e-9017-4a36-9526-adad6bee57e6","resolution":{"observed_at":"2026-08-03T03:57:26.035588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.038746Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.038746Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:375ecea58a93d3d6b24112500ef35fa0c58643ee7168d8813ba06db20cd2bd65","observation_id":"d2e944ee-42b6-42c1-9afd-639798de0006","resolution":{"observed_at":"2026-08-03T03:57:26.038746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03098","last_updated":"2026-06-01T21:48:22Z","snapshot_observed_at":"2026-08-06T04:46:33.472486Z","submitted_at":"2025-08-05T05:22:13Z","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.03098","snapshot_observed_at":"2026-08-03T03:57:26.041319Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.041319Z"},"links":{"cited_paper":"/paper/2508.03098","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:fad3d31f7711f14d0e95706be7f4bbe552ec48f79b091431ec340b52c9f5d444","observation_id":"f801aebe-303c-44ba-ae65-f0c4b78c8718","resolution":{"observed_at":"2026-08-03T03:57:26.041319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.04276","last_updated":"2025-08-12T09:00:07Z","snapshot_observed_at":"2026-08-09T09:05:14.926347Z","submitted_at":"2025-08-06T10:01:26Z","title":"A Few Words Can Distort Graphs: Knowledge Poisoning Attacks on Graph-based Retrieval-Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.04276","snapshot_observed_at":"2026-08-03T03:57:26.044723Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.044723Z"},"links":{"cited_paper":"/paper/2508.04276","citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:0b41ba9ab005da867f640c63e7617bbfb1b610bfb59e9018d52545305af6ee8c","observation_id":"023760c7-a14f-4e21-98f1-d2fe7fea12c5","resolution":{"observed_at":"2026-08-03T03:57:26.044723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.047842Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.047842Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:1440bce5ca99bcf1eea83ec65fa9d8b1a4663a0fdd4cd3fba35427c9d49faa59","observation_id":"924659cf-d06a-47ea-ba1e-31f7e251ba61","resolution":{"observed_at":"2026-08-03T03:57:26.047842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.050741Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.050741Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:a8c4ded1a7d27565c911a1861661f3ad621e2db5d02f10b30bbe30b15fcf5aad","observation_id":"73a6fe08-df0a-458c-8497-f0f56c114511","resolution":{"observed_at":"2026-08-03T03:57:26.050741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.053687Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.053687Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:c89fc760703a6d94125f77e1a6eb4515a75359ee7887a6f1cb7cd520a401e60e","observation_id":"a5ff81b3-ab7b-47a6-af8e-6f9276d4d912","resolution":{"observed_at":"2026-08-03T03:57:26.053687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.056413Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.056413Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:6ea0883a6e34922fd13a53d3cc401a03a35b9f570fe0c11bc1010cb474566500","observation_id":"004b5087-acb7-46da-8d0d-6cdf96617a05","resolution":{"observed_at":"2026-08-03T03:57:26.056413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.059167Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.059167Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:d6ce466e52f3c548bcb40281223a318ee24a703c5d0d754d42dd026108828750","observation_id":"9384b930-83ec-4e2f-aa07-ca80808f8c84","resolution":{"observed_at":"2026-08-03T03:57:26.059167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.062133Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.062133Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:94cf3647b9a8667501a55c0d56fcce2b7891a0db683c47919f21bb88ceb40178","observation_id":"4b5c31c3-e7c1-45bd-b09e-760ffbed191a","resolution":{"observed_at":"2026-08-03T03:57:26.062133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.064630Z","title":"<SRC_ENTITY> <REL_TYPE> <DST_ENTITY>","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.064630Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:e3ffa2537bbd6c534bbff1c4737dd0e1e50c54dd22bd49b19ad4a5fbd9306ae4","observation_id":"1cf5b880-86dc-4d6e-8c5b-406cfdd3dcc8","resolution":{"observed_at":"2026-08-03T03:57:26.064630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.966994Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.966994Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:18010b875339774353c58cc45621569077cbbaab08b12e81c16901fdedc00ac5","observation_id":"10549f2c-133b-4f1c-9706-4a41cdea70aa","resolution":{"observed_at":"2026-08-03T03:57:25.966994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:25.976565Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:25.976565Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:85a42d9f319449ee81344e28b1920b03e70fd7489a6248d2b8263369ba120d86","observation_id":"90c114af-a7cf-44e6-97f3-15c4a0011554","resolution":{"observed_at":"2026-08-03T03:57:25.976565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T03:57:26.004775Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T03:57:26.004775Z"},"links":{"citing_paper":"/paper/2602.06495"},"observation_digest":"sha256:c099e3f595923d7bd9c405f0d2565a4d86e69e0d250f7b8f42e9152ab307eede","observation_id":"90115010-788b-49a9-b2c2-5822d39852b3","resolution":{"observed_at":"2026-08-03T03:57:26.004775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2602.06495","last_updated":"2026-06-17T09:21:43Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T20:33:14.891591Z","submitted_at":"2026-02-06T08:44:22Z","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":53,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2602.06495."}