{"as_of":"2026-08-06T16:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:10f3ad1935a3177956715649e9dd5487e894503cbc34535c5cffc6ecd4aeb6de","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-25T20:22:21.182337Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.25721/citation-record","integrity":"/paper/2606.25721/integrity","json":"/paper/2606.25721/citation-record.json","paper":"/paper/2606.25721"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Aho and Jeffrey D","venue":null,"work_id":null,"year":1972},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:db918fa5590d306a1a265791855483a1a118b5e42a72836875c3a756ca8625e1","observation_id":"17a96ec6-8bd2-4adc-8718-19e535e67fa8","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":null,"venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:984e08716c75d848beb086517ed037c16c846ce50d1376aa1de1381fa1957727","observation_id":"b25bf7c4-6a71-4458-91f8-0ba178f56183","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2234.322243","doi":"10.1145/322234.322243","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Chandra and Dexter C","venue":"Journal of the ACM","work_id":"c3270592-bd69-4213-95e1-4aaf8312be9b","year":1981},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:5e6cc2f6bc9edcb4920d2ecc690a3490301fdeac919e2cd39a423542e07ed46c","observation_id":"f6c5b337-6513-4d7e-8662-1572a267e79e","resolution":{"observed_at":"2026-06-25T21:28:28.197135Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-18T08:21:12.175602+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-18T08:21:12.175602+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Scalable training of","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:d7a89d02f90ce2da7480863956d7dcf2d30e72a7892fa8952cc16885c05c765c","observation_id":"e22cfc2e-28a7-4d5b-a39d-ed2592a32c0e","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":null,"venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e52002cf32d0e878b1886fcf8d9ad981a16d83371fa9770674b2ee82c20331a4","observation_id":"fb68b57b-30fc-4d0e-a8e1-bd7a3404fb1e","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Tetreault , title =","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:72f6f430236039121f74bdf06c8784892c7a79416a98b39aaf4875e86711f3db","observation_id":"05739e12-187e-4a00-99a9-606cfe7106c1","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:5048eafece3ca7336bae47171f20ed8910c718a2802eec589967982059222130","observation_id":"b18b1b09-4a8b-4edb-b1de-bb8e47afe74a","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"and Tukey, John W","venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e87676600331f38811c2855de8982dea6f7f9a3b330df0f06629fe362302e2e4","observation_id":"92c47b77-03ef-455c-aed9-14fd04231d94","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"34th USENIX Security Symposium (USENIX Security 25) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:b75a41a4836abc0a532da3bea8174a811e81df0f0e34019e4fc6da03fb7774a6","observation_id":"f7eacd36-1164-4a18-bd13-1df6da3dffd8","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1609/aaai.v39i26.34943","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , author =","venue":"Proceedings of the AAAI Conference on Artificial Intelligence","work_id":"7882173d-7d3b-44db-9052-fc666200fcd5","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:f346caae8b5843d0a548187cdd71e77bf86b423bebe2892df8d978ce7aa1ebb0","observation_id":"9ed2a89b-f038-4eca-9229-67ef807e54ee","resolution":{"observed_at":"2026-06-25T21:28:28.177123Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.emnlp-main.849","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing , pages =","venue":null,"work_id":"822af42c-b415-4829-978d-0bdbbfa3a30b","year":2023},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:f9ee129815f62a2d93d7d870c06abe4f49fc2a735c99351eaaed8f0987b66a5b","observation_id":"51f1d085-6cad-4cb2-b9a1-4f525588451d","resolution":{"observed_at":"2026-06-25T21:28:28.188607Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:37.145668+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:37.145668+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3796729","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T07:13:15.830395Z","title":"Choquette-Choo, Milad Nasr, Cristina Nita-Rotaru, and Alina Oprea","venue":null,"work_id":"7fd48a5a-6c85-4aed-b489-f2e188d3996b","year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:3894ebddddc58b37bf2a1b80179fd351068cd61c78fa6f17e9e7801d3067d531","observation_id":"ea0d1d05-7dfe-4f4e-ac30-c61b3299436d","resolution":{"observed_at":"2026-06-25T21:28:28.193888Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e46bf780f199d0a58dabac4f064baf976051c0cd741d44b44e7a0ea523cbd673","observation_id":"9cc63e59-d759-427c-91b3-9ef9a99dfdad","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:cc4a4c820f0236f9f6fd241b64baa46836956461c054a27719d54cd1886349f8","observation_id":"8f8d1948-5443-423a-99c0-f21540ddda42","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c2228db4668e0de889917238a614bac3dfbabe907e9c8f18c0c488265dad42bb","observation_id":"43a29609-0768-4582-9b59-756f337ec94a","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.findings-emnlp.1023","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","venue":null,"work_id":"f7355365-b1c1-47e3-8647-256b1c836e28","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:f28de6a42870c8ab823705d273a6d67e5c3729f957daf6532a9c1f57817b30f6","observation_id":"d847dbe9-0da9-45e8-aeda-843e07ca54fc","resolution":{"observed_at":"2026-06-25T21:28:28.181645Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:28.881761+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:28.881761+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Proceedings of the 34th USENIX Conference on Security Symposium , articleno =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c5c6143ac7c26f316b543482e8791999acf8ed23d928d73396e722af032fdeea","observation_id":"19156467-4730-40e5-802e-ca03331fcdcb","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"AgentPoison: Red-teaming","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:349232cb817f4cb0ed98124ef9ed1decaad00e4cdf0bfc31b472eb59f1e7f06d","observation_id":"ff87070b-c385-44ac-bb5f-f96fb1094326","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"PANDORA: Jailbreak GPTs by Retrieval Augmented Generation Poisoning , doi =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:4764d9539e299181f805422761d893f8220e954aa9c00507a4ecc20845418eda","observation_id":"a69a0ed7-398d-4de7-9595-6e4278432349","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:d1fe3691791fbc59326aa442216b13519c0ed54e0733e25daf7dc3235b25c774","observation_id":"460ec490-2827-430c-be38-dfdd7700e676","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:51afc21a2c696f54896e6ce34681268cc724e428994a7eae94c738b55749e976","observation_id":"79365fdd-4809-469d-b4f2-90acb919cd53","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-emnlp.161","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Typos that Broke the RAG ' s Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","venue":null,"work_id":"090c3f56-6825-42a8-a75c-ca6d45af09d8","year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:93c2188b154c169270425d2f0e8902a2f81a1e4a17f728104958159f30aff787","observation_id":"bf8ffbd6-e112-4c38-b067-28f886c93c8a","resolution":{"observed_at":"2026-06-25T21:28:28.191542Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:0786bc3520822283fe71828b889671d84c718b36427e3e6054a6730d334f9e62","observation_id":"01901a7a-e98f-48d8-85f6-a09f75a81bcb","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9027.376502","doi":"10.1145/3719027.3765023","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security , pages =","venue":null,"work_id":"65e92a5f-a89d-4cdf-85e2-a0c4fc61efe3","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:17065261932ee9b3f31252d0043da7daee6c45d66563090005a707cc29f43400","observation_id":"296599d7-ecc0-45e5-bb17-ee25147bdf4d","resolution":{"observed_at":"2026-06-25T21:28:28.184968Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"34th USENIX Security Symposium (USENIX Security 25) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:aefe8656c88eeebedc1504c76274f14184cdb9a44e35f8b60574c17ddaac24a8","observation_id":"7758bd2d-7811-442b-8bf5-d74a2edfc34e","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:af963a79b4091df4e3098fd130fae98bb909778cd81fd177213fec9e985793a8","observation_id":"9b7a570b-39eb-400a-bd9b-093503bc9061","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:d6cb2a16d08b51d5b21b332eddf5a1244da5d3f3542876e4fe4e5547a83180e7","observation_id":"c7399028-fabd-49aa-b6be-4f19c1ba4379","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2026 , url=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:259e217cc4d84e1b5d7d47450a919c1e4e32239aee40a536889d774e825dcc4a","observation_id":"8e9992e3-8b8b-45bf-9a5e-5542f53be128","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.emnlp-main.96","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Glue pizza and eat rocks - Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","venue":null,"work_id":"7fc46689-7c68-4d3d-862f-acc05facfa39","year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:bc3582623821a7721b09256f09180910b9ac7f33a1dc6f3e6fe4f7b660d10a9f","observation_id":"f0815b76-e9f3-4bbc-a7d6-04dd85a63841","resolution":{"observed_at":"2026-06-25T21:28:28.187417Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Certifiably Robust","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:a5f8313fa51ab2bdc4da2d420e5fdbee6626562d5a662b42d1b7d40c9bf2dbc4","observation_id":"9081760f-e916-449c-b783-ef9b8e8ffcbd","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Reliability","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:fcbf050f4a02ac79bbcd8ac42ab5bfbe6429c30cecb0c2f0551531f2203752d5","observation_id":"be90010b-4043-49f9-8ce6-56c570a9cee6","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:1c95a2e109b1e7e8cdbc980eefe93eb3dbcca8c88c340f6d5b96133ccc0b4bb2","observation_id":"0337f7a5-34dd-472f-9a26-4827e38d31d1","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e7de3d55c762febfaa25f21310536013677fc2e5b8a9b7ed3f1bb030b5fb9b65","observation_id":"c61b8289-ba64-49c1-b7f3-27a1eab76f46","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.1132","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GRADA : Graph-based Reranking against Adversarial Documents Attack","venue":null,"work_id":"94448e83-cc30-4e3f-8325-a5977819107a","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:28bcda4c12225e4ee28f3c2b21c39a07be2622240ca27f248cd95445cce904fb","observation_id":"992b7f28-3ead-4f76-8e3b-ef1470cd1024","resolution":{"observed_at":"2026-06-25T21:28:28.189462Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:ee9fb49c86b07f3fc770f185df3b331922ad3efadcb8ed6d557b31c08ec3b517","observation_id":"1feb9ece-1346-4552-867b-a4eaf4af0aee","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c948a3ed2392672f0c80a1f5f4cb0310a31fdcc28603ce86b9ed774e3248ec04","observation_id":"efe40e36-b613-4487-8cfe-da066ec7928d","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Instruct","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:775c3a96d07a4496d88a47e21a2c287ea439dbbeb833b005b2a5372f6a070942","observation_id":"5b5b4c7f-0d9f-4241-9ca5-c8d14d0c3f69","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.1476","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Astute RAG : Overcoming Imperfect Retrieval Augmentation and Knowledge Conflicts for Large Language Models","venue":null,"work_id":"49ee0cb8-0998-487f-8077-ccd7d3a37413","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c0f5f5a8620a98d88d188a03387d22e4a54ab9bec119f927f9eef1bca4c428d6","observation_id":"97441b18-9068-4dbf-8a56-e878bd1b2057","resolution":{"observed_at":"2026-06-25T21:28:28.200943Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-11T21:20:15.729019+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T21:20:15.729019+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2026 , eprint=","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:0d441dea8157c890938c13a8930e780869014b875fd363615eb9d14d2c71d97b","observation_id":"9dfa03bb-ec73-45d9-bfe0-75eb14e5cd21","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.230","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"SafeRAG: Benchmarking security in retrieval-augmented generation of large language model","venue":null,"work_id":"65542949-a78e-44cf-9507-77da0e629b65","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e9046ecf63b005fc746f84e914ee01fa7162ce26a979d0e3c249353c82e8ae8d","observation_id":"73da639d-d8bd-4bfa-b4bf-8914ae3c7a39","resolution":{"observed_at":"2026-06-25T21:28:28.179740Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:bd0a3deeb9664923d002b40b553b04671f18d6550ad00a283483d745e513821b","observation_id":"b81ed806-bb1e-461e-8332-3e6414d2334d","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c215b71d0f8d71dbe61536e9a0f7948092e128a23a2aad881d9fbb1c5048e06f","observation_id":"885a875b-a2c2-48b4-9457-af8da34fe061","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.findings-emnlp.698","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"R ev PRAG : Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","venue":null,"work_id":"e1112245-9035-4121-9ce1-5e9627b41fbb","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:a414d35576d20857b6c03ddb25a043ad9fc98d95326d1db53996a5b36246f45c","observation_id":"57b850e3-4424-4c3f-ab2f-7ef7c6c9914c","resolution":{"observed_at":"2026-06-25T21:28:28.181916Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6410.371475","doi":"10.1145/3696410.3714750","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Kim and Ashton Anderson","venue":null,"work_id":"5942872c-46e6-45dd-a5bf-9331e45937a0","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:b83337d575b35332aaf434befcdf18ebd96e22fe9e4e307275c08da7bc83f44a","observation_id":"d16ba211-383a-42cb-a28f-24312fce4a1e","resolution":{"observed_at":"2026-06-25T21:28:28.198919Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:89e35e7bb15e3095d3cf11ed654e1a5afa4e7aafd449aab59b50dcee6ec814bf","observation_id":"cc23f399-5411-4aa8-b4a5-c3a4fffd6eeb","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-032-05073-1_13","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Model-Based Safety and Assessment: 9th International Symposium, IMBSA 2025, Athens, Greece, September 24–26, 2025, Proceedings , pages =","venue":"Lecture notes in computer science","work_id":"371a9464-662b-4056-a771-c3da20c1cb3e","year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:8456aca536f7e5ee2e0c28471179edecafaef8ed279bfd5eaaf4ec40b19ae860","observation_id":"72ccb804-c873-4bb6-ad14-c5ddc391c0e2","resolution":{"observed_at":"2026-06-25T21:28:28.193654Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , url=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:1d00be297ff30ee9498a08aeb0bdd262b8df63b13b006afbe909603f5c827b96","observation_id":"e36bd9bc-5f91-4bc3-b53c-461ee8e9d912","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Forty-second International Conference on Machine Learning , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:2be16a222a6a45c806a3264e1b77ff9aaa4a31d5d563faf2e2dff2c08251fc38","observation_id":"5687b04e-3c2c-49ee-8e72-11cba2cac561","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2024 , eprint=","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:9aa90a33bbb4c7375336091f7466aef24a4ed945c9939109d6ecb5f3c26cc173","observation_id":"9bd1950b-1fee-491b-aa6b-db0f6b46518e","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:b643a3572b02be7f9740444ec5604a5ed77c608e4fe6ba8b96af4c6cae5d326e","observation_id":"f0f67766-0e7c-4625-8608-b4e83063d239","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Qwen3.5: Accelerating Productivity with Native Multimodal Agents , url =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:e2983cc80041c4884b0ff97b6132ec707ef35c259555ad7f6f47298853b660c4","observation_id":"bae9bd8d-935f-483b-8650-ee2907bb2954","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:c5b9bae9945554b5154b40ead2abfe4eeb34834c8d0396b2045c013b7aa82f0d","observation_id":"d00daf00-5775-485b-83bc-336ea879a463","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:ac2296239863da0242ac350f5887eb9e9a5cdf6f60ce95b015e47b37c75dacfd","observation_id":"303269d2-e7ee-4621-b11b-073020f609ac","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2025 , eprint=","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:21ffc895e5858a35b4b1c29ca51008856216c87c41654ec0ddeac40363a7e403","observation_id":"17938266-f1b6-493b-a3cf-5d125edc36fb","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1162/tacl_a_00276","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T12:46:14.494802Z","title":"Dai, Jakob Uszkoreit, Quoc Le, and Slav Petrov","venue":"Transactions of the Association for Computational Linguistics","work_id":"45551929-96dc-40f3-9f89-10e76731cc24","year":2019},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:9adbea06b3f1fcd110c18664ad8b6c3352819c4e8f949cbda6c38e67f1293132","observation_id":"5782315f-f32c-4849-928e-adf5ac566bf7","resolution":{"observed_at":"2026-06-25T21:28:28.195875Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-10T22:21:01.890529+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-10T22:21:01.890529+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/d18-1259","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T00:19:12.561642Z","title":"Cohen and Ruslan Salakhutdinov and Christopher D","venue":"Proceedings of the 2018 Conference on Empirical Methods in Natural Language Processing","work_id":"3c5a795a-85bd-45a1-8e65-06a9c5641111","year":2018},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:875dab068ad9337b3fa937854637996dddaf943bf6b0d747de6174c8066da7f9","observation_id":"de49f3b7-4057-4ab1-9e9f-81ffcbf0719a","resolution":{"observed_at":"2026-06-25T21:28:28.176776Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-13T13:50:33.333125+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T13:50:33.333125+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"2018 , eprint=","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:6e5a532dd7582ec03d9c891ce18b542eb0acfcf65dcdd62d7b2df8c809cd1ff9","observation_id":"24edaddb-4e8f-4e36-a25c-aa897d47822d","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-25T20:22:21.182337Z","title":"Transactions on Machine Learning Research , issn=","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-06-25T20:22:21.182337Z"},"links":{"citing_paper":"/paper/2606.25721"},"observation_digest":"sha256:9e1a6208b3964044273136db4fd593f31c2dd1378409233e0400dac12c4f9d4e","observation_id":"878dd5b0-1a8a-4bce-add9-b89304ba15f9","resolution":{"observed_at":"2026-06-25T20:22:21.182337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.25721","last_updated":"2026-06-24T11:39:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-07T00:00:07.201776Z","submitted_at":"2026-06-24T11:39:26Z","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":42,"verified_exact":13,"verified_fuzzy":0},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2606.25721."}