{"as_of":"2026-08-07T22:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:37526fbc7243021600e4bd1b8848598fe9b4d5413d5a347e285efbd2bac5d547","coverage":[{"denominator":33,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":33,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T13:00:35.111921Z","state":"measured"},{"denominator":33,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":33,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.11265/citation-record","integrity":"/paper/2606.11265/integrity","json":"/paper/2606.11265/citation-record.json","paper":"/paper/2606.11265"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:5b85b6b7dfb461a148ecd5d3e437503d18e848eb193ed2ba91378ef2911b499f","observation_id":"cb659db1-3f05-49a2-b6aa-7ab905ebdeda","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Dense passage retrieval for open-domain question answering,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:540c751cfb8ca52bdb85d974978067ca029b38a8707be29d2cc6e9b280042029","observation_id":"e2ebee4a-05be-41ed-a1e7-4d2b5b41be7c","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Improving language models by retrieving from trillions of tokens,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:1e7056db3e4533834608ec2eccc02ba76d1e274123bb0cbdaef9e8268ed65446","observation_id":"e394a317-6ba0-4608-821a-43ec7cc12285","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Wikichat: Stopping the hallucination of large language model chatbots by few-shot grounding on wikipedia,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:d2f563536d30f91806a7c331505ef4c7c91f667ecc7c91e1a0413fccd2b94f3b","observation_id":"5b0b24c4-91da-4c73-b069-2188cc6d0ca0","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Retrieval-based prompt selection for code-related few-shot learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:b9f288b7c6b0998f245195184170a15bbef0c63c9e9123a88152e885a7a443ce","observation_id":"e0841ea8-276e-450b-88ec-83279b5db7dd","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Docprompting: Generating code by retrieving the docs,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:4b299ba19fececbd5ddf354d1197471edc9568899db8708b100e3e7c2add0457","observation_id":"95191667-a2df-40bd-bda4-f0740eca8ca6","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Phantom: General backdoor attacks on retrieval augmented language generation,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:d2962a1130de732447b5daa1e4f4b7e29d0f61d949ce2cefc0212b070ae8e6e0","observation_id":"d95b5aa7-b27b-405f-adc0-4b4026d4a98d","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Typos that broke the rag’s back: Genetic attack on rag pipeline by simulating documents in the wild via low-level perturbations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:6f63ae34666326631292c1b286fa26f59f01fdc8bd309e5d0b5ceefc60761c77","observation_id":"e216d446-2793-43ca-8f7a-486cce8fa031","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:d84d230bb424002501ffae9d9cab21542c3af607f3375b14786e04f9250e4579","observation_id":"1bce4e3a-3568-4413-989a-23c4659401e0","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Ctrlrag: Black- box document poisoning attacks for retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:fa28d22afd26095bd407bfeaf12f3719a12d0e3e8f9a8005292acbf6b88836e5","observation_id":"e3e6cb12-d24e-4e9e-a3a5-c394725b640e","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Poisoning retrieval corpora by injecting adversarial passages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:41f5f23ae35ef2c0c0d2f8caa795e0ade82a40b0efa52a7f9a8b98ec0b494da8","observation_id":"f020b810-eac7-41da-9360-edc196f3a984","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"A survey on rag with llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:7758a3467c4e5b32df4136790b209199188853e7b9f42c76d6a5244a88cbfd9b","observation_id":"6b2353aa-516d-4a82-bd08-adb33f073c85","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"A survey on rag meeting llms: Towards retrieval-augmented large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:a792616d5888ff80807d1a7fe72b6d53a182ba3bea050c02ba5b91e7648c46e3","observation_id":"2e215e1f-431f-41fc-be63-2062c5dcf58b","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Re2g: Retrieve, rerank, generate,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:98d12ddd631461c5bef6211d1bbeaa2bdbc032fdb0ca63ba8c82e3b71d6aad0b","observation_id":"2875e1bd-b7f1-48ef-800a-ec314c01c71d","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Dynamicrag: Leveraging outputs of large language model as feedback for dynamic reranking in retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:f42de0fa57d29cd379c01a18162bcc842a2ef54a24a76622c5b23233c804e20f","observation_id":"71befb06-e1af-4a61-aa6a-10c1c36ce399","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Prorank: Progressive context refinement for reliable retrieval-augmented generation,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:9538f3a331e3b5200a32810c22d742428c44e5f6d47490ba63b6be7c133067ac","observation_id":"1d013d03-5153-4bac-a91f-0c39f23a3df3","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Maximizing rag efficiency: A comparative analysis of rag methods,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:b40d68f81d057a99e1ed58e85d21e1534b9528f0b5e232c47fb1a0e872b96fe1","observation_id":"c4784beb-9235-4f1d-8a46-1fab0086f782","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowl- edge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:ec7a5dd6de0f3a9f211096b775ffbebda49ee472d027c9e50c1d522b3dc109eb","observation_id":"c51fd418-b666-4e6a-80e8-5e03a6b802a4","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:14dfe2287d3c4a5c7c98fe88a7bc2fe71b83379ef55cf025e9adfbdff98fd0bd","observation_id":"b8b12cb4-14b8-4229-b14a-474dbf6a3687","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Glue pizza and eat rocks- exploiting vulnerabilities in retrieval-augmented generative models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:7447562f17285c01e12a38ec9a46fca72dff29baab97ce9c698ace848aa57772","observation_id":"be1d4604-2341-4a20-87bc-dfcdc5c5fb8b","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Joint-gcg: Unified gradient- based poisoning attacks on retrieval-augmented generation systems,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:d5a30ef9d9a68cb2ee59645f5b49465551678c324bbbffc44c916a77e81ccb71","observation_id":"6bbb3197-a88d-444d-ac14-003ec987b5d3","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"The RAG paradox: A black-box attack exploiting unintentional vulnerabilities in retrieval-augmented generation systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:84354efea356239bf893f5a20056bf83a85226dfb0d60b22864537b8e0550969","observation_id":"87eaaae8-5421-473f-ac69-11a0c2e997cb","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-07T14:02:49.934041Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.19864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-07-03T21:28:59.129123Z","title":"CPA-RAG: Covert poisoning attacks on retrieval- augmented generation in large language models","venue":null,"work_id":"79fd1e06-0cb1-4d17-be15-bf039427fdc2","year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:f75c87d89f3c19ee04273a967d847b283f3b85221dec94317918cdb169f9d75c","observation_id":"1aeb5030-59cc-48cb-a729-c3132108daee","resolution":{"observed_at":"2026-07-03T05:57:41.075926Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"RevPRAG: Revealing poisoning attacks in retrieval-augmented generation through LLM activation analysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:235cc8c155c102ed2eb659bc0af3bdbcf283561b03f5e5a1f2063fc84e803cb9","observation_id":"4a4b6d88-c462-49af-aa17-1ab4b491eaad","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Certifiably robust RAG against retrieval corruption,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:340a1632b8eec5879a379757e62c5b67e8dfa2260382afc3e8411d7547fc1bd1","observation_id":"ff4d9f2e-3fa6-4c4a-aa00-0094865a24c6","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Astute rag: Overcoming imperfect retrieval augmentation and knowledge conflicts for large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:63d946ca0e4324cb75502808adda21582ba7572819fd1a33e3ff387271fa85b7","observation_id":"981f0606-17b5-4248-b628-1f3bd6370cec","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Instructrag: Instructing retrieval-augmented generation via self-synthesized rationales,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:fecfe0cbd0e1d8f36768b3d466cabb126a5cac2389e612b32c0c44499b46a1c2","observation_id":"923cfe12-c58c-4558-ab92-f7b469ff32bf","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Trustrag: enhancing robustness and trustworthiness in retrieval-augmented gen- eration,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:4978b4d06875473eb87e06a00b2e3651e17dfbb5e82afd58b20d22eca418a80b","observation_id":"6962ce39-efa1-449d-ba52-068de9294277","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Secon-rag: A two-stage semantic filtering and conflict-free framework for trustworthy rag,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:468974c2f794667bcdf8fe3d37318f3e2dd2c5369e178affc24e221f7be2b1c9","observation_id":"6f7915d9-046b-4bc6-895d-31aa8b5c9573","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.09268","last_updated":"2018-10-31T14:46:47Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-11-28T18:14:11Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","version":3},"cited_work":{"arxiv_id":"1611.09268","doi":"10.48550/arxiv.1611.09268","metadata_source":"pith","pith_arxiv_id":"1611.09268","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"MS MARCO: A Human Generated MAchine Reading COmprehension Dataset","venue":"cs.CL","work_id":"78d498ce-11db-4f88-8eb0-40e0f86af615","year":2016},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"cited_paper":"/paper/1611.09268","citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:454ad81647587423d1843d056efd674b41fc1371fec893635984507f7dcdfe86","observation_id":"4ae5a9da-e529-40b7-9a9e-9f75baef7159","resolution":{"observed_at":"2026-07-03T05:57:41.078695Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-06-02T00:57:40.781479+00:00","source":"crossref_status_cache"},{"observed_at":"2026-06-02T00:57:40.781479+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Natural questions: a benchmark for question answering research,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:8bbba02ed56cc07246407faecb81501f40282c263f0d390643759d2d18da12b2","observation_id":"9a2a1975-87f1-4505-b862-74c20c05c098","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Hotpotqa: A dataset for diverse, explainable multi-hop question answering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:65c54a1ea9d163bab3b9c5f293f5a06eba5fd24f547dd6490aab82e918b08bf7","observation_id":"3959c7b5-77f4-41c1-ba6d-5e6908f7b0ee","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:00:35.111921Z","title":"Reconstructing context: Evaluating advanced chunking strategies for retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T13:00:35.111921Z"},"links":{"citing_paper":"/paper/2606.11265"},"observation_digest":"sha256:54529921836d13a1577aa5a97c46f461d26d12385501d75321016ab6936ea83c","observation_id":"bde67e19-f8c6-4089-bd41-5b37ee2dbeab","resolution":{"observed_at":"2026-06-27T13:00:35.111921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.11265","last_updated":"2026-06-09T04:45:28Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:50:20.698344Z","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines"},"reference_resolution":{"displayed":33,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":31,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":33},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 33 of 33 outbound references and 0 inbound Pith citation observations for arXiv:2606.11265."}