{"as_of":"2026-08-08T02:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ddc50618f2c0c02335faf3fc3051c5e491db884b485d88fe33a7868cdbed0955","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T17:02:56.833807Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-30T10:56:48.125605Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.26754","snapshot_observed_at":"2026-07-30T10:56:48.125605Z","title":"Cordon-MAS: Defending RAG against knowledge poi- soning via information-flow control,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.23838","last_updated":"2026-07-26T20:52:23Z","snapshot_observed_at":"2026-08-05T00:15:21.105413Z","submitted_at":"2026-07-26T20:52:23Z","title":"TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-30T10:56:48.125605Z"},"links":{"cited_paper":"/paper/2605.26754","citing_paper":"/paper/2607.23838"},"observation_digest":"sha256:133c3cc34c45381ebd84a8e10526a431b8ea0b8a12d04041bd128e810b018257","observation_id":"5070b6fa-8154-45e7-a317-ecaf7fa0da6a","resolution":{"observed_at":"2026-07-30T10:56:48.125605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.26754/citation-record","integrity":"/paper/2605.26754/integrity","json":"/paper/2605.26754/citation-record.json","paper":"/paper/2605.26754"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-07-31T19:03:03.494918Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":"2308.08155","doi":"10.48550/arxiv.2308.08155","metadata_source":"pith","pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","venue":"cs.AI","work_id":"92b7eb9c-c3d8-4518-a376-06fa15dd895b","year":2023},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:80b7eb55c6aead9c4550d9bc0b106685a91cfea0103b5e5439482bcaa3cce7bb","observation_id":"668c0ffd-b3f1-48a9-8f40-4f587469d045","resolution":{"observed_at":"2026-06-29T17:03:40.716928Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:20.607676+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:20.607676+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:e388f212648481a0488ba4506e2eef6411f7e3416fc63d0ffcdb4f256a65509c","observation_id":"677c6170-8bdb-4bf5-9fe6-fc8795e08aea","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:88aa359e8c9a370ec844d19907a55e689748b9bf4fb1f0485f5de1b01d5afd6c","observation_id":"0afdc3d7-25aa-45ca-97d4-57898b561c93","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"Coltsfoot supports sleep","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:c6cc8c417c4e5ccb87695c2dac14572044c7e153ded3e40d58ca37a1217915aa","observation_id":"407d98fb-ece0-4175-81c5-9e617a427227","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:5f5281182f7e61b9eb29ee1fbc753edf761260335d07c03ad8d52edc0f08024f","observation_id":"04773507-9a0c-4257-8dd3-6af46c0f7725","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"CDCA significantly increases energy expenditure","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:7115da01b5cb963b89dca62211b628d886160f5256eef0de4a90830ab5c089ea","observation_id":"314e719c-1db8-4c52-90ae-ff74c8adc529","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:d53c53454c5f03febabaf0e377155027f290d12f320b375938c4dd0a5e2b1fa4","observation_id":"e2c0170f-cea5-4167-a71f-d5f8bdbf8586","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:c6fd2df874c60b197393f9ea5030b2aba5c0f1a5f4bc1dab82bf793e24dc447b","observation_id":"50a93c6c-bb98-4eba-9608-733e953005e4","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"CORDON- MAS achieves 60% average (40–79% across datasets)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:5218373702c82cdbe572dc364719556bd0f677c5e6af86038efed96b608b556a","observation_id":"bb8ca561-e675-44c7-9b0d-06b91d1a9557","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"This is asafety prop- erty—refused queries are never wrong—that VR and most baselines lack entirely (they an- swer 100% of queries, including those without sufficient evidence)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:68f5ab3a1544924e31dd96e23d1df4c898ae2f4612ae5ddd2c3a353d6a067e64","observation_id":"e0b8f224-4a7d-4133-9e1e-090148271ba4","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"Pre-fix configuration (near-total block)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:f8db804d264e280642f8881add025ed5171ade37545ce6a6d0eebf155b1fca78","observation_id":"6ec9254a-081b-4aaf-86bc-a3f7f5e34df0","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"claim_id","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:5e866c2b1cedfa2a285503047492befe2812dedd7cd2e0488ce70907be60e59f","observation_id":"468fca61-6bb5-4dfe-a29d-327b36ab7f1f","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"all factual claims","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:3cc90782883b5b330e3f3bd074552dab51b3ec740e189df317f4a66f1e2f70a5","observation_id":"97e4364e-b573-476d-bf08-c98f3bf9e4a2","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:75a808bb8f3be715f55a55c243f736f997303a2b36f503e3086b3c46f744a179","observation_id":"5a0700d0-95a6-4726-b979-e2d013db1b42","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"I don’t know","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:02692d4d861db2b539408b6ca56f048d0fa35f518f7f8c96df012f413c252bb4","observation_id":"c2237e65-2e5b-43fe-a2f8-b0488053f206","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"Fabricated scientific findings with implausible statistics receive low scores","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:0441d740c69a1da19351d92c1ca2d7b7e5eca4f172796e7a9211bbbc20d0332b","observation_id":"b0127ebd-5604-4cfd-8a2d-c6cac48e1ce9","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:02:56.833807Z","title":"This di- rectly addresses the coordinated attack sce- nario","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T17:02:56.833807Z"},"links":{"citing_paper":"/paper/2605.26754"},"observation_digest":"sha256:0ac220f8c6055736dde36c5a586f0cb2a8dc48402b07181ee1049429847a5344","observation_id":"2c494216-53e7-45d2-bf9a-7ff9f6550c67","resolution":{"observed_at":"2026-06-29T17:02:56.833807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.26754","last_updated":"2026-05-26T09:27:19Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-01T03:19:41.601621Z","submitted_at":"2026-05-26T09:27:19Z","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":2,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":14,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 1 inbound Pith citation observation for arXiv:2605.26754."}