Paper Citation Record · LEDGER

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control

As of 8 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 1 inbound Pith citation observation for arXiv:2605.26754.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.26754 v1

Coverage vector

measured 17 of 17 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-29T17:02:56.833807Z

measured 18 of 18 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-30T10:56:48.125605Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

17 of 17 outbound references displayed

verified exact0
verified fuzzy0
unresolved14
parse uncertain0
malformed identifier2
metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 668c0ffd-b3f1-48a9-8f40-4f587469d045 · outbound

This paper cites AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation

Reference 1

Resolution: metadata mismatch; local_arxiv, observed 2026-06-29T17:03:40.716928Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 677c6170-8bdb-4bf5-9fe6-fc8795e08aea · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0afdc3d7-25aa-45ca-97d4-57898b561c93 · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 407d98fb-ece0-4175-81c5-9e617a427227 · outbound

This paper cites Coltsfoot supports sleep.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Coltsfoot supports sleep

Reference 4

Resolution: malformed identifier; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 04773507-9a0c-4257-8dd3-6af46c0f7725 · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 314e719c-1db8-4c52-90ae-ff74c8adc529 · outbound

This paper cites CDCA significantly increases energy expenditure.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control CDCA significantly increases energy expenditure

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e2c0170f-cea5-4167-a71f-d5f8bdbf8586 · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50a93c6c-bb98-4eba-9608-733e953005e4 · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bb8ca561-e675-44c7-9b0d-06b91d1a9557 · outbound

This paper cites CORDON- MAS achieves 60% average (40–79% across datasets).

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control CORDON- MAS achieves 60% average (40–79% across datasets)

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0b8f224-4a7d-4133-9e1e-090148271ba4 · outbound

This paper cites This is asafety prop- erty—refused queries are never wrong—that VR and most baselines lack entirely (they an- swer 100% of queries, including those without sufficient evidence).

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control This is asafety prop- erty—refused queries are never wrong—that VR and most baselines lack entirely (they an- swer 100% of queries, including those without sufficient evidence)

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ec9254a-081b-4aaf-86bc-a3f7f5e34df0 · outbound

This paper cites Pre-fix configuration (near-total block).

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Pre-fix configuration (near-total block)

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 468fca61-6bb5-4dfe-a29d-327b36ab7f1f · outbound

This paper cites claim_id.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control claim_id

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 97e4364e-b573-476d-bf08-c98f3bf9e4a2 · outbound

This paper cites all factual claims.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control all factual claims

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a0700d0-95a6-4726-b979-e2d013db1b42 · outbound

This paper cites an unresolved cited work.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Unresolved cited work

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c2237e65-2e5b-43fe-a2f8-b0488053f206 · outbound

This paper cites I don’t know.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control I don’t know

Reference 15

Resolution: malformed identifier; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b0127ebd-5604-4cfd-8a2d-c6cac48e1ce9 · outbound

This paper cites Fabricated scientific findings with implausible statistics receive low scores.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control Fabricated scientific findings with implausible statistics receive low scores

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2c494216-53e7-45d2-bf9a-7ff9f6550c67 · outbound

This paper cites This di- rectly addresses the coordinated attack sce- nario.

Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control This di- rectly addresses the coordinated attack sce- nario

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-29T17:02:56.833807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 5070b6fa-8154-45e7-a317-ecaf7fa0da6a · inbound

TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation cites this paper.

TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control

Reference 17

Resolution: unresolved; no resolver link, observed 2026-07-30T10:56:48.125605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.