{"as_of":"2026-08-20T03:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:06d863a655c47fa3332575b1c3cbe7ecebdf5e7807b0ed7af8ddded960209c67","coverage":[{"denominator":132,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-25T20:56:20.603088Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.25533/citation-record","integrity":"/paper/2606.25533/integrity","json":"/paper/2606.25533/citation-record.json","paper":"/paper/2606.25533"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Comprehensive Overview of Large Language Models.ACM Transactions on Intelligent Systems and Technology, 16(5):1–72, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:a78bf174db297a5a724fbcf5edf79320d241d9e90d6b1318bde4311a4e821b23","observation_id":"1c75ed54-d4df-4b42-bd45-08416558fb11","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Large language models: a survey of their development, capabilities, and applications.Knowledge and Information Systems, 67(3):2967–3022, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:2fb33bdeca4ac641f00ca65afcbedf113a73a8a36e34e2b042b7663849963d37","observation_id":"1bd87113-252f-4ed5-accc-4e1647069291","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A review of prominent paradigms for LLM-based agents: Tool use, planning (including RAG), and feedback learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:6fa87e2fa928e8e3b4b078a20ae055d86bb3dd6693a1c6004756af894d5683e4","observation_id":"4b33e621-7f6e-4a9c-bc08-9f43f5a4949f","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Know your RAG: Dataset taxonomy and generation strategies for evaluating RAG systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e02397b831e3531024a192687af0b6ec83327392eda7e9230724dbbfedcf768f","observation_id":"cd6b46de-60c0-4f6f-97a0-54cda5461065","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"MeMemo: On-device Retrieval Augmentation for Private and Personalized Text Generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:47144a59dc5f4bf8e64ebf6ccade6365fc4840d0c152da55963b0e2e61a3ef85","observation_id":"8014b4c1-6e00-4763-a78c-1e13711ecac8","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.09200","last_updated":"2025-06-12T13:48:57Z","snapshot_observed_at":"2026-08-19T16:29:43.309155Z","submitted_at":"2025-06-10T19:42:07Z","title":"FedRAG: A Framework for Fine-Tuning Retrieval-Augmented Generation Systems","version":2},"cited_work":{"arxiv_id":"2506.09200","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.09200","snapshot_observed_at":"2026-07-04T20:00:07.852965Z","title":"Fedrag: A framework for fine-tuning retrieval-augmented generation systems.arXiv preprint arXiv:2506.09200, 2025","venue":null,"work_id":"6b98f2ac-bf32-4583-abe0-1dc46f9ce9d2","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2506.09200","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:afaa4b1a4c8f489c76d5d028dd9023567d815ff676b948fccb3219f02c0b9946","observation_id":"8d3150f6-d2ae-46d8-9818-bc62c3ab94fc","resolution":{"observed_at":"2026-07-04T20:00:07.856153Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:4d74bc176ff23ee1e8ba5744f05914ee2dd0b723f0997938e45314014af9a37b","observation_id":"a1ce9112-1d8f-4207-b800-c1bfefc63e8a","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:35ec70f4f8ee745ef96fcdba0b1e554cb4933b04d5b8ea1020118c83de41ba7b","observation_id":"8d587c28-bb0c-4b90-9bae-59224b260ed0","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:635036e6be800a69590808f4ca0145d8ed8da4d762a3d2b43da972f4353f8589","observation_id":"14672b61-ec18-4345-a395-34d8e71aa63e","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"CRAG - Comprehensive RAG Benchmark","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:689297f656abdbc160ac27c8408f5dce3f8870e31f7e0ec6325a975ff4acaf58","observation_id":"215a54d9-5916-47b0-8caf-e704cacaa01d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Communication- Efficient Learning of Deep Networks from Decentralized Data","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:883c6e4fdbe2aac19f8b91a295f4e815b7ed377f7a973dc4cd26117b7841415d","observation_id":"b9d2c231-d3a9-4039-a611-cbd55a4882ff","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Federated Learning: Challenges, Methods, and Future Directions.IEEE Signal Processing Magazine, 37(3):50–60, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:899849a06572f0ec94e87134ce0b1cc51fc8341f81cef1adecc148daf4c3e1b8","observation_id":"011604c7-c81e-4e4d-a548-20be9daaec0b","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Nguyen, Ming Ding, Pubudu N","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:a9241c7cc9dcc067e0668877cf78f2222982a908ceeed26c3031bb826f0648b4","observation_id":"668f743f-9aaa-4a53-9b4a-2b8a2349ee4d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Sybil-aware adaptive defence framework for robust federated learning.Pervasive and Mobile Computing, page 102157, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:23eed527e902e5b1ca5ef6c943ecb426e4a4be081233df1b84cf783b3e879f46","observation_id":"cc4a3190-3b9a-409e-ba91-1e3697ee2af7","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Efficient Federated Search for Retrieval-Augmented Generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:57392a290c90eee1dc9d3be9b09fa299c3b047c12967835b2365fe4a2d32bae4","observation_id":"8afdcb40-0ccc-4f82-998e-99619f9d56c3","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Adversarial Attacks on Large Language Models: A Survey","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:37833f688ec884cff76ad72cdfe67cdd6176b550e67e3e35fe09255342a7d67c","observation_id":"524101ad-5c8e-4fd7-8a7d-a50d446db8a2","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.15476","last_updated":"2026-07-04T04:20:15Z","snapshot_observed_at":"2026-08-14T22:20:04.981358Z","submitted_at":"2025-10-17T09:38:54Z","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","version":3},"cited_work":{"arxiv_id":"2510.15476","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2510.15476","snapshot_observed_at":"2026-07-07T03:17:13.442555Z","title":"SoK: Taxonomy and Evaluation of Prompt Security in Large Language Models.arXiv preprint arXiv:2510.15476, 2025","venue":null,"work_id":"a2d86ead-24b4-4a3d-a4ff-7ad7b09a8ed8","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2510.15476","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:04eb37d5d021186f879ca00604ec7737923a016618f771a2254b4db325a32be3","observation_id":"dcc69231-6c3f-4338-9e8e-94f2e02cdc18","resolution":{"observed_at":"2026-07-07T03:17:13.442555Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ce76525acfc073b40380da9cec2035b37aed7dfc33e115016c5c80e8bd821641","observation_id":"439d93c0-401c-41b4-ba9f-b716c2f38900","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Surveying the RAG Attack Surface and Defenses: Protecting Sensitive Company Data","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:18e92e306ddc5146193dee7bccc45b760818c96d84028a3217a76866864f5695","observation_id":"482cbb28-ef2e-4235-bd94-f6554a538b2d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"SafeRAG: Benchmarking security in retrieval-augmented generation of large language model","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:f65e8a6fe94fd22bfb41778e254e7cfa71ed902f28b2a76b18b4b6d3c951bfbe","observation_id":"479ead42-3456-426b-9425-934342fe0b1b","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Retrieval-Augmented Generation: A Survey of Security Challenges and Countermeasures","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:f9ba61e36c69093ea3519a46154076aac210a5f6110896b711ec8561efb7761b","observation_id":"d550eb12-5ed5-4004-a477-dbaf4ce8983a","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"{PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:3678e16e2df6b7a2473ad901277cbea2baff8833e41961b6e6e58313f371437e","observation_id":"21c45c51-949a-4106-866a-c7ad045aa771","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Traceback of Poisoning Attacks to Retrieval-Augmented Generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:c618f7ef28c61df37419326703214bafa659d8d23d8ac21d68c3c6c5cbf3804a","observation_id":"481e1c5c-9156-4eab-a4d3-bbb895d99da4","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-18T22:35:56.156622Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:2d40140d1355316e8121cf222de737590439aac3ccc74cb9d7bfab6c89e8b48f","observation_id":"213c305a-3481-42fa-b2a1-101e37b2b6b3","resolution":{"observed_at":"2026-07-04T20:00:07.859278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Luan, Siran Wang, and Yuntao Wang","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9b220186815ab02538472d2c9a9c7a616cb2d94794a83b419d5cdd0c7065125b","observation_id":"b79ce8ba-0b25-4eca-bc10-474df90b50a6","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Privacy-Aware RAG-Enabled LLMs for Collaborative AI in Organizations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:61fb8f11c9fb492551f9f4fb1c777f00232a3706a2b5b89468465fdc464daad0","observation_id":"7f7ad923-3b42-4d83-8cd4-edbd447b4d55","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Trusted Execution Environments: Properties, Applications, and Challenges.IEEE Security & Privacy, 18(2):56–60, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:a38a2cc022996e6d678ff9bccbf9871cf1134e6f9968b628b03d30a0073cfb14","observation_id":"c4df4104-6fe9-47ad-9969-d3b80bda09de","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Ai on the edge: a comprehensive review","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9cc1cab33d9985edd785b4b5167583db82c14c6e2ccf5802eeac1885e545b836","observation_id":"e2c6a38f-1e0d-4a48-b8de-ee17281ecc64","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Survey of AI Inference Technologies for On-Device Systems.IEEE Internet of Things Journal, 12(24):51927–51950, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:8893bf251ff1133efa6daf9027b97516b243f5da441bbdce982659550248d98b","observation_id":"3208d0cb-f37f-4aa5-ad51-f5eda7a14117","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Towards On-device Personalization: Cloud-device Collaborative Data Augmentation for Efficient On-device Language Model.ACM Transactions on Intelligent Systems and Technology, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:dffe240af5ac6775690aa310730b3dd8ddd6e0f86a4e1d50ca5427777b479a59","observation_id":"62d715e5-45a6-4493-b192-d66e990e4aca","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-16T08:10:55.902848Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":"2502.06872","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.06872","snapshot_observed_at":"2026-07-11T00:47:43.085343Z","title":"Towards trustworthy re- trieval augmented generation for large language models: A survey","venue":"cs.CL","work_id":"5ceafaa3-5f79-4c22-aa54-7d513b44ba8a","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2502.06872","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:bd918e120bec29b76cf1956f5b68afe3dd26da0fd7567c5d42bf1bff9360d654","observation_id":"c6f3ddcd-6a40-44bb-be1e-aefb0998557e","resolution":{"observed_at":"2026-07-04T20:00:07.845756Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Federated retrieval-augmented generation: A systematic mapping study","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:09022126988c45c97b1212b76e5f18bcc1c7da2d218bc5ee6ae624765347a12e","observation_id":"e891c16d-cf60-4299-b23a-252d85683878","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:1e359b9c6af3ff26a81c25242f4a7983c0a63b965040dac49e0176d7be7011c4","observation_id":"9f690a3b-dd2f-4ffc-b7d1-9eaba27e5f3e","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"The Language Model Revolution: LLM and SLM Analysis","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e8c3b363af9d611e6425494995eb74b3a316240f30f105ce3e87af017d055e9c","observation_id":"87cabc4e-35df-415c-b6c7-2d48ffe4476d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Edge ai: A comprehensive survey of technologies, applications, and challenges","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:54bbc265995bf8d2cfa6bf4fd50a6e32806ffbbe6fbe5b5bd5eab39dbf78537b","observation_id":"3819512c-0091-40dc-ac2d-503fa18ff250","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Federated Learning and RAG Integration: A Scalable Approach for Medical Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9bc2069cc24ece560ee33ecc60c9fa771b5d028ef2c31dadd9652cf2441cf5b6","observation_id":"03497505-2555-46a3-a875-30f748cc9b85","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Survey of Retrieval-Augmented Generation (RAG) for Large Language Models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fdfd64b66502fa1640a71ce4cbffbc6dbdabd694708b10ae3f2b977d961d7c32","observation_id":"1d873b58-56b8-4dfb-863e-53bfec21ca71","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Graph-Based Approaches and Functionalities in Retrieval-Augmented Generation: A Comprehensive Survey.ACM Computing Surveys, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:6de30ba3d027b39edc771bf1496c48767875d85235b60deab18f8e629f87187c","observation_id":"7a418234-5706-4fa2-b3d1-b21b177df72d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.06401","last_updated":"2025-09-09T16:35:32Z","snapshot_observed_at":"2026-08-14T21:06:20.079371Z","submitted_at":"2025-08-08T15:37:14Z","title":"A Systematic Literature Review of Retrieval-Augmented Generation: Techniques, Metrics, and Challenges","version":3},"cited_work":{"arxiv_id":"2508.06401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.06401","snapshot_observed_at":"2026-07-04T20:00:07.832945Z","title":"A systematic literature review of retrieval-augmented generation: Techniques, metrics, and challenges.arXiv preprint arXiv:2508.06401, 2025","venue":null,"work_id":"ddfd31d1-a4d9-4cf9-bc63-86d3fbaeeec8","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2508.06401","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ef2bd9cdc62dc97a3d5fbca3cb76bb6c394e4330322d6587dbecf4716fc0e372","observation_id":"d2a8f56c-44ac-41a8-b07b-ee4314fdbc25","resolution":{"observed_at":"2026-07-04T20:00:07.834726Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-16T13:08:01.606238Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":"2410.14479","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-07-04T20:00:07.866116Z","title":"and Teglia, Y","venue":null,"work_id":"ee51e02a-38d2-4c1e-85fe-d5c5a58a971b","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:a91155c12cfd7a49d35eb79ff2ef5205497fddc14e7dabb9a567f3a2c55948e0","observation_id":"1804f93f-2278-44c8-976e-d1911ae725ff","resolution":{"observed_at":"2026-07-04T20:00:07.867849Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:640c39de01cb28d190ccfd133a590003fa97ae1d948f671129fc8b03cf68e126","observation_id":"da5e31f0-acb3-4b33-bf6c-58267b6f59f9","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:35d01d916be15f3dd8f63a4cba0b1e2af2a77e7bc4d193f73d8c83486295bb55","observation_id":"85031e4d-82c7-4dde-86bb-7339a9a3aa99","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"RAG LLMs are not safer: A safety analysis of retrieval-augmented generation for large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e5a84c5cec4b7b6ee1481f94bd9464ac8185dc4cc06bd14aaaefeb761fe75ca6","observation_id":"d9d2a26a-0f18-4343-99a2-a7620142985d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14093","last_updated":"2024-12-20T02:22:19Z","snapshot_observed_at":"2026-08-13T11:12:58.507759Z","submitted_at":"2024-12-18T17:41:24Z","title":"Alignment faking in large language models","version":2},"cited_work":{"arxiv_id":"2412.14093","doi":"10.48550/arxiv.2412.14093","metadata_source":"pith","pith_arxiv_id":"2412.14093","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Alignment faking in large language models","venue":"cs.AI","work_id":"cc253a89-cda1-4889-9631-bf3ce8147650","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2412.14093","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:501f6586829c2c773fbbafa78644875585e10b3d2cbc01bf7b548438d357828d","observation_id":"6d797377-20ed-4f80-be1c-24753f451c37","resolution":{"observed_at":"2026-07-04T20:00:07.864886Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:13.802289+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:13.802289+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Visual contextual attack: Jailbreaking MLLMs with image-driven context injection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:7ef8e2c0de0eee5ef650c124e130486311e0d7c5822d5d9148282b6843e287c7","observation_id":"9cc66567-8604-4d06-a99b-abc36cf21569","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Shaping the safety boundaries: Understanding and defending against jailbreaks in large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ea5cde5d39d987b8372bd5330fbf3b3ad22f95e629edfcd42a0622dae72ce996","observation_id":"3c47c3d0-d627-4072-93b5-693265dbe1c3","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:aa111b0b7308e69bd472d024a03d1adabd2f37b19083d3750288a61fa44da826","observation_id":"63f3dbb1-ff7c-4ccb-9924-f5eab35a979b","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Retrieval Poisoning Attacks Based on Prompt Injections into Retrieval-Augmented Generation Systems that Store Generated Responses","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:6860c8e559ebebd2a9db1ecc7eea78c21b88235c82df4441af64edd3c7689bc7","observation_id":"ffba6d3b-d4fd-4d82-83ae-3241fc9e8f9e","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.16406","last_updated":"2026-08-08T17:46:39Z","snapshot_observed_at":"2026-08-18T14:31:39.920949Z","submitted_at":"2025-08-22T14:13:16Z","title":"Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models","version":3},"cited_work":{"arxiv_id":"2508.16406","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.16406","snapshot_observed_at":"2026-08-11T02:15:44.267586Z","title":"Retrieval-augmented defense: Adaptive and controllable jailbreak prevention for large language models.arXiv preprint arXiv:2508.16406, 2025","venue":null,"work_id":"dbe65bb8-5cac-431f-baf6-4cf6b73e03c6","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2508.16406","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:14666ce0aea9baf9f5dcf725eefba0e4cad6ed83034111423f38118acdafed68","observation_id":"4da5e211-0bfe-48ab-b4ac-ff5c1bd28c8a","resolution":{"observed_at":"2026-08-11T02:15:44.267586Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.02879","last_updated":"2017-11-08T09:37:16Z","snapshot_observed_at":"2026-08-17T14:40:58.797807Z","submitted_at":"2017-11-08T09:37:16Z","title":"LatentPoison - Adversarial Attacks On The Latent Space","version":1},"cited_work":{"arxiv_id":"1711.02879","doi":null,"metadata_source":"pith","pith_arxiv_id":"1711.02879","snapshot_observed_at":"2026-07-04T20:00:07.847038Z","title":"LatentPoison - Adversarial Attacks On The Latent Space","venue":"cs.LG","work_id":"832ebc92-32b1-4a30-b707-0fdcfd22c7f0","year":2017},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/1711.02879","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:3a380e89ed43c355884f7e45863e56442cf239d899cc9ae3b1bb44a32b1b3f55","observation_id":"4b6dd1c7-12e8-4bba-b511-38c831824ba4","resolution":{"observed_at":"2026-07-04T20:00:07.848301Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Black-box Adversarial Attacks against Dense Retrieval Models: A Multi-view Contrastive Learning Method","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:df11cd16dc917bcaaabcac8c384193b347e03ee7073e6bfbe7912cbaf22bd78d","observation_id":"cc6a2e81-4e8e-4805-a58d-10047112b5dd","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Mask-based Membership Inference Attacks for Retrieval- Augmented Generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:c409430fbae62922ccbe1b7415d2e39fdbc27447a4ee6d47cdd4733008aab1b2","observation_id":"585a757a-cd6b-4159-ad37-84eed6bb2e24","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Flippedrag: Black-box opinion manipulation adversarial attacks to retrieval-augmented generation models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9db75b92b00d0ba00b2fb4a671bd9187490400c2bb60b42d995738a5b1cef4e6","observation_id":"fb9d8575-dbb7-4a7c-80f7-073328c62de8","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Membership Inference Attacks Against Machine Learning Models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fdafecf77fb86988cfcd118627390fb0e2a85cc4cf38d605bf5ec6255bca0eb1","observation_id":"68b6fda8-c42d-4430-bf94-aff1ec0a304a","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2504.03957","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T20:05:33.977869Z","title":"Practical poisoning attacks against retrieval-augmented generation","venue":null,"work_id":"6921d300-c1ab-47ef-b572-ac4f2fffbbb6","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:0e40726f0c674dd508696281bfcb41d5ada9560f1b53a6edc7be524cbd5ec86d","observation_id":"3be6ef3a-8a40-45ce-9c14-278b80f2a010","resolution":{"observed_at":"2026-07-04T20:00:07.836010Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Drift Detection in Text Data with Document Embeddings","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:3198784291146e908ea317ef2f30297a87f398d1ef135a3e261bbced6f71cae1","observation_id":"e3b3df22-4096-484f-98d3-21d8bfdd481f","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Enhancing adversarial resilience in semantic caching for secure retrieval augmented generation systems.Scientific Reports, 16(1):5936, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:d70ce3d2812b250e4b7c95369d864569390c91a03b6e8bbddb6f4cb100b55ca1","observation_id":"af95b4b7-12e1-4661-a0e1-23534de81fcc","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16708","last_updated":"2025-07-26T16:31:50Z","snapshot_observed_at":"2026-08-19T03:21:09.209606Z","submitted_at":"2024-12-21T17:31:52Z","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","version":2},"cited_work":{"arxiv_id":"2412.16708","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.16708","snapshot_observed_at":"2026-07-04T20:00:07.860476Z","title":"Towards More Robust Retrieval- Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks.arXiv preprint arXiv:2412.16708, 2024","venue":null,"work_id":"25b0547b-4279-4e07-811a-8dc426a8455e","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2412.16708","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e5a1c6b6a66a08ea6fd6ae9d6ba65738007a50e696dca2a6edea63281b22d31f","observation_id":"355194d4-8e8a-4395-8139-b33fb4a6009b","resolution":{"observed_at":"2026-07-04T20:00:07.862270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-10T09:15:17.824381Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"cited_work":{"arxiv_id":"2507.15042","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15042","snapshot_observed_at":"2026-07-04T20:00:07.849622Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection.arXiv preprint arXiv:2507.15042, 2025","venue":null,"work_id":"61e52c88-e3e9-4b0e-a626-0de292a38c11","year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2507.15042","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e0fd83e9ea044cb87ab2555412c0fb7eaaf5df181cbd1a510cb78f00574bf3f6","observation_id":"a06c6220-4bae-4214-864c-7ec085aefb4f","resolution":{"observed_at":"2026-07-04T20:00:07.851452Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:d31ac6da0ad62caebaf0fef99040f06fd7d185de89a466cc2a49e509a91be27b","observation_id":"ec2a03fa-c170-43ba-bae6-27b26389a02e","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Out-of-context and out-of-scope: Manip- ulating large language models through minimal instruction set modifications.PLoS One, 21(2):e0341558, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:6da34ec8659cdb885d2e5262969e1f669bd1cc1f16b57561a07a2412d462e17d","observation_id":"86138362-59e5-4608-8386-89b09d002b53","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Chi, Nathanael Schärli, and Denny Zhou","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e360db90df32b0871c8da34082a3627de59f25d866dea677f71b6497334ce0c7","observation_id":"376817ae-9b55-476d-9bf3-ca9310a75f7b","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Knowledge conflicts for LLMs: A survey","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fa2ec427152b635635546e4cf28d6f5b2f8ac950a857a135ba61ebdef8893427","observation_id":"dc89838f-8cf8-41cc-ad7e-419b6f08918f","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"When not to trust language models: Investigating effectiveness of parametric and non-parametric memories","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:d70245d9e159d2b8b587b7040a231a1d1339971632b41c83f263b05b02147fca","observation_id":"086bd0f9-bd2e-4703-ae2c-e5f7904eaa13","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Adversarial and Multilingual Threats in Retrieval-Augmented Generation: From Prompt Injection to Model Exploitation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9e3f52b684616b97b4acddc64e5bfea00e66cd68563eb779f084915f2ad146a7","observation_id":"adf6f34d-2b8d-40d2-b028-a2092c4d3b8a","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Enhancing noise robustness of retrieval-augmented language models with adaptive adversarial training","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:75a65dae7c049e2223a3d6dc7718b609b7b5427ed109adad8a10a128f6044978","observation_id":"6daa5d35-cead-46eb-a7c9-f0a198ed971b","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Information Leakage in Embedding Models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:883bae15b69ff179f619e8b261c0f70c044c8a8463aa9a3b42cc1efa8db4e329","observation_id":"f15c43b9-9a76-4c31-9627-a244fd6f5568","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Reverse engineering convolutional neural networks through side-channel information leaks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:0819eaefc835b064c802b0dea321d5229c5aee084393956001be131e1ffb0b43","observation_id":"39d223bf-d006-4f49-ba1e-dec48029f763","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Deep learning model inversion attacks and defenses: a comprehensive survey.Artificial Intelligence Review, 58(8):242, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:93d94171e3dbbf7a5f2d52166de0a83acda1d9150c4da5211e0c7cfda41f475b","observation_id":"62ef88c7-87b6-419f-99c5-d0c6b443e0b2","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Federated retrieval augmented generation for multi-product question answering","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:311479c95320034664ceff06d1329b1fabbbf601fa8ffd2e09010af92c141f3d","observation_id":"67a38e22-ebd3-4b1a-86f3-8fb7a7a992ab","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"The Limitations of Federated Learning in Sybil Settings","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9792e89288e63fd0e29e68425079f2ffdae45574fa17f55202686eac32c01818","observation_id":"4d61a30e-162c-4187-bc1f-a753189f3aa9","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Federated Retrieval- Augmented Generation-Based LLM for Enhanced Cyber Threat Detection in the Internet-of-Energy.IEEE Network, 40(1):13–19, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:6a7cac13d9bcc5e6f82673f361aa3e45827566ee997f8607ae2d362636ed5c6b","observation_id":"04c3a62e-eaa8-4e70-a22c-0111d02e41fa","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Sybil Attacks and Defense on Differential Privacy based Federated Learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fd6094febc8c8e4bc87b8f0208590bb17a7e531abbb8fa5430611ad4392ab8fa","observation_id":"ebdff9c0-c501-4670-b8f2-9a42ab3574eb","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Survey of Federated Learning: Advances in Architecture, Synchronization, and Security Threats.Computers, Materials & Continua, 86(3), 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:d52e6d13b8ad4ac3435aa9a16039ffb815d170f4e4c56c6d8b94245e832b2364","observation_id":"3a37850d-a705-408f-b07b-93901c8d4377","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Privacy protection in RAG: A novel method and evaluation framework.Information Processing & Management, 63(3):104505, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:390e48fb87ce2e7673645cf1725f190d5f2df70ceaf52d9f447ca2ceefb17b61","observation_id":"911e040c-5648-4958-961b-590f20e254b5","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Efficient Byzantine-Robust and Privacy-Preserving Federated Learning on Compressive Domain.IEEE Internet of Things Journal, 11(4):7116–7127, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fa4a939e0107156e075fda1e093858b7f5033b73ac37931c19f50a5dabef9722","observation_id":"f5060461-1729-42da-a485-d15084c85d2c","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:2ab6fa41983db81f52104b0bcf3de8261c89726be3a31d1e41244987d1ba7146","observation_id":"35ee7830-eb26-4f30-9b02-6641b09e8f17","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"RAG-Guardrails Integration for AI Content Control","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ac37936c0aa0253e464f09ce6cf850060c4fdb1da82fc9199cd83b704eb02f17","observation_id":"2d8124c1-f7a2-4c01-97fc-6fc682f74aa2","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Innovative Guardrails for Generative AI: Designing an Intelligent Filter for Safe and Responsible LLM Deployment.Applied Sciences, 15(13):7298, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:3cea8e8db157d22a2c4484340be04caee9b4f76652a71b87e66fb74342d77d23","observation_id":"7e140847-505c-45aa-9473-eb0f3696b34d","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Guardrails for Large Language Models: A Review of Techniques and Challenges.J Artif Intell Mach Learn & Data Sci, 3(1):2504–2512, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:22ba113aceee49adcd8d81c278b98c3c86951550a52fa88943cc0be56c9b1340","observation_id":"936a4e58-2548-4fef-81c2-1d78aef106ac","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Anonymization Techniques for Privacy Preserving Data Publishing: A Comprehensive Survey.IEEE Access, 9:8512–8545, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:9ceb9898f3bab03e7d36a642afaf4083a2b772dbfa55f1f4388b2cbd10c69274","observation_id":"6e6b1cf9-b267-4e30-9835-18a2d8935cbe","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"BAG-RAG: Bidirectional Retrieval-Augmented Generation Based on Multi-Layer Semantic Graphs for Budget Auditing QA","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:31af8d4a7ba50ef4a46b44fd9cb72cbf33f0f708d0f9b4afd59bc2d61d434224","observation_id":"587d2a3f-4076-4ac4-b2e6-ceda7d51888e","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"LAIR: A Language For Automated Semantics- aware Text Sanitization based on Frame Semantics","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:53bc8b108d07e6558f2645c9766ecd08263c91e90d1846ed264019f475a0c839","observation_id":"05989de4-7654-493a-aea0-09f7e11afebc","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Making pre-trained language models better few-shot learners","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:b0a9826cbe6045cc5861494a07fc486424a5974b6bbc6e719de84e6f650ec274","observation_id":"89b7c3e6-5721-47b1-9866-c62767f82d43","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"A Survey on Differential Privacy for Unstructured Data Content.ACM Computing Surveys (CSUR), 54(10s):1–28, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:170934fc002250f4f8909978dc5625dab9a92311163e70c395842a3f0d7cc5af","observation_id":"6d0aaac1-9e53-47e0-a7b8-9029663ee3d8","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"RAG with Differential Privacy","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:744adbf9877f46cc24c1aaba35ff65cd5cd171d4d322b98e3bdce71497a2cecc","observation_id":"7901cbec-c012-4c23-9255-3a2a15511ded","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Textual Differential Privacy for Context-Aware Reasoning with Large Language Model","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:fcb4f755a28bc03cadf3c8230e435b3fb105131e6eca962d9a20ba0142c9efc1","observation_id":"6220f9b8-0a56-4d31-801b-5b1ea3940926","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"DF-RAG: A Dual Federated Retrieval-Augmented Generation Framework for Collaborative Medical AI","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ac8e0cbec478f9c79ebac5dda9307caaaaf43dae4aecf275f874e4981d924847","observation_id":"b60f5832-9d93-4283-98b3-8d8297dc799c","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Software Architecture for Federated Retrieval-Augmented Clinical QA System Using IoT for Continuous Monitoring","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:b5175a1f4cedc0a4a862c147f0d670cfb2c3189eb18794a8701d07d1d9447afb","observation_id":"94fd3288-1151-48e1-837c-7249eaedda72","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Optimizing Legal Information Access: Federated Search and RAG for Secure AI-Powered Legal Solutions","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:d70d9cef831926a9a1b313b289cc2beccc3f3ab2bb060631d703c1baae6b3112","observation_id":"80d85b26-aaf9-4a84-8b8a-734c5d43569f","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Privacy-Preserving Data Sharing with Personalized Encrypted Retrieval.Applied Sciences, 16(6):2771, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:b9a43a8545e720b214b8a358d09d317730512740a2f77b79ffba42e4764bf2f9","observation_id":"9782ad95-61d0-4ee1-9e92-157c0ef790ac","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Leveraging Searchable Encryption through Homomorphic Encryption: A Comprehensive Analysis.Mathematics, 11(13):2948, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:ea428cb6503eb894cbf76e6b05f5e274a54a1a674e6b0f39601a6c7d314ea484","observation_id":"894ecde6-8a6b-49e7-b879-f86e34a3c481","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"RemoteRAG: A privacy-preserving LLM cloud RAG service","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:01330308f4a32fdbe71f9fe754eb2487cc7fb60533d8c80857c717e232212fc1","observation_id":"4dab0e5c-9bbc-4bd6-8f18-498e809f27ca","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Confidential Computing Using Trusted Execution Environments.International Journal of AI, BigData, Computational and Management Studies, 4(2):97–110, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:a71bfe2749b390f66eb912b43005f091ca1770086a7feeaea6145cd912be0c9a","observation_id":"9d93f8cf-8575-4f7e-bf4a-99c09595537a","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Don’t forget private retrieval: distributed private similarity search for large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:f816a1506453bd1928824d395ac988336e27cdcaccb0941a1b14eafc398883a2","observation_id":"0f70f3e3-2b41-4f7f-924f-74d1ab504bd6","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:037612cb848fa8a75bc0fc99d7d22fd339a4a8a0b70c06a19804eee2e27917eb","observation_id":"a8e57981-c0c9-4a12-80a3-783e0bc8e562","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Secure Multi-Party Computation: Theory, practice and applications.Information Sciences, 476:357–372, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:beaed39111874117976fa766c56a5ca7f6f3428481426cfeef690d8f340989d4","observation_id":"05bc49b6-7223-41dc-85fc-ad35978af714","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Privacy-preserving aggregation in federated learning: A survey.IEEE Transactions on Big Data, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:60d903fb783182ee12b7864f62180095863f878ee071b5082769902b3508cd78","observation_id":"288ad4b5-01b5-46ca-b8a4-0307efc955e8","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Secure multi-party computation (SMPC) protocols and privacy","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:df5a388299b64e5dd7b72c2b22a37adc52deb2df58ba6f54d62c871fb83a714a","observation_id":"8e11bb20-b71d-4cca-8bd1-dc206088f4e2","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:56:20.603088Z","title":"Secure Multi-Party Computation for Machine Learning: A Survey.IEEE Access, 12:53881–53899, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:e4c77f3bb3e68ab2c5e5065ed3b54ab6bc49f6b350dba71ea54dc3a8cab37477","observation_id":"534a9e37-9a30-46c9-8acc-6cb75b6d0095","resolution":{"observed_at":"2026-06-25T20:56:20.603088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T14:40:36.853261Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":88,"verified_exact":11,"verified_fuzzy":0},"total_outbound_references":132},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 100 of 132 outbound references and 0 inbound Pith citation observations for arXiv:2606.25533."}