{"as_of":"2026-08-07T20:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8b756a884f6ff6a134d943946c361b91de857299f76fc56dff6c9bd56845546a","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T00:08:59.996070Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02678/citation-record","integrity":"/paper/2608.02678/integrity","json":"/paper/2608.02678/citation-record.json","paper":"/paper/2608.02678"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.959494Z","title":"A survey of large language models,","venue":null,"work_id":"e31b9a4c-1217-459f-97d7-85876920083c","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.705195Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:dea82063ecf8040f933a14844d1a26f720ad621083987804f88b4dd1f056a796","observation_id":"e89d9bc8-32c4-4e42-933b-2448c5889893","resolution":{"observed_at":"2026-08-06T00:09:05.031265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.736171Z","title":"Large language models encode clinical knowledge,","venue":null,"work_id":"f42fb442-dfe3-4727-850b-ffa785c674b9","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.793296Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:5e878b2972e72aeee7d73efb629a863210915d4a1efe3d5a27141758838b5ce5","observation_id":"4aa1c024-4bd5-49be-af1d-dd060837f527","resolution":{"observed_at":"2026-08-06T00:09:04.844502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.569689Z","title":"When flue meets flang: Bench- marks and large pretrained language model for financial domain,","venue":null,"work_id":"1863d68c-bc5a-433b-a056-371085499271","year":2022},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:55.934771Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:9cf537a911fde03ba9c6a81c26cb8b35591cb811a3cae30243db1d11ef32a219","observation_id":"ee08156c-9337-4924-88bd-d86469714f6e","resolution":{"observed_at":"2026-08-06T00:09:04.645981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.362555Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":"9f800486-184b-4c99-9610-9a1eb8bc02a2","year":2020},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.155179Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:9af401cf88f35d1112a58ebed45b9dca3d896ce9d4d5df34b7a422ff1292fe42","observation_id":"25e51f3e-a969-428b-bdb0-41ff3e6005d6","resolution":{"observed_at":"2026-08-06T00:09:04.481292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:04.138949Z","title":"{PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models,","venue":null,"work_id":"80e45e4b-3966-4d03-b8d3-3cbf24f34c9f","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.355982Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:b4e7bcaad65550ecd0bf7d9e9fc7b8fd918f7b66666715e628e61d7c5de8a97a","observation_id":"b2a9c1e0-61a9-4da9-80fb-bb3df4b24ced","resolution":{"observed_at":"2026-08-06T00:09:04.238964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.960864Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"e29f3c75-b0e9-4008-96ae-b666f92f90b6","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.514424Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:0bbbae2bbc2fd08a5f243934371d615198620dcc66eb5e6caa69b1251fcc0c63","observation_id":"73574ac3-eac0-47ac-9fd2-26612ac3535c","resolution":{"observed_at":"2026-08-06T00:09:04.051344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.741993Z","title":"Confusedpilot: Confused deputy risks in rag-based llms,","venue":null,"work_id":"092dccc2-5b36-4deb-a573-d15644939b32","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.666055Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:a9f59a3c4f2ec92610df996bea173bc41c06b6ea2466dfa9d957b7c9691b5f70","observation_id":"b3e9c1eb-d909-4f79-9940-c5c001e03b63","resolution":{"observed_at":"2026-08-06T00:09:03.867001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.471405Z","title":"Adversarial search engine optimization for large language models,","venue":null,"work_id":"ac0f4543-f1bf-4ecf-b62b-4b8c27c52bda","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.755120Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:e5b4d975a8a9db2db66179e42706f09a8043e0e46011aa20f29dc9de32a005ad","observation_id":"ce901d2c-f8f1-42dd-89f2-7e4284bc3714","resolution":{"observed_at":"2026-08-06T00:09:03.583907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:03.172690Z","title":"Poisoning retrieval corpora by injecting adversarial passages,","venue":null,"work_id":"c7489176-a349-4507-aa60-5422e3fe73a6","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.876666Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:8b83aeacc679f5b5402f031ce43a7d94c729a40614ab04098b46ddce70ef4c91","observation_id":"8929c9fe-90f1-4729-a352-8c0660feaaa7","resolution":{"observed_at":"2026-08-06T00:09:03.308880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T00:08:56.979447Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models. arxiv 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.979447Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:0f5396ddfb7f918e88598657405169cc25ee3a9679d62c02cec3047fc70a7a87","observation_id":"773c8ce7-9fb7-439e-bfb2-53574988c585","resolution":{"observed_at":"2026-08-06T00:08:56.979447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.897691Z","title":"One shot dominance: Knowledge poisoning attack on retrieval-augmented generation systems","venue":null,"work_id":"8605ea99-a317-4202-90cf-ee66dd8e4fb1","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.063942Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:3d2db3a0ce280980a1d664fed6158a27863f4b0724130953024ca390a493ae59","observation_id":"1bc58718-7302-4394-9e70-93a0f911a995","resolution":{"observed_at":"2026-08-06T00:09:03.048824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.617056Z","title":"Practical poisoning attacks against retrieval-augmented generation,","venue":null,"work_id":"55695e99-f86c-40a7-ba06-6f8365a30564","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.149347Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:add019ed2df1db9c1a0d75040c6cd40c7ed534903f44e053d635f2f53fc0d22b","observation_id":"ace8509d-d722-4787-9301-f918ff9a6cdd","resolution":{"observed_at":"2026-08-06T00:09:02.733797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.09118","last_updated":"2022-08-29T12:17:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-12-16T18:57:37Z","title":"Unsupervised Dense Information Retrieval with Contrastive Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.09118","snapshot_observed_at":"2026-08-06T00:08:57.235015Z","title":"Unsupervised dense information retrieval with con- trastive learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.235015Z"},"links":{"cited_paper":"/paper/2112.09118","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:c0748d81b7a0e7c43698e81504211b1357cb829042341e39275a8fedb69bb1cd","observation_id":"f7293d19-2f15-4c48-8596-0366b38e9719","resolution":{"observed_at":"2026-08-06T00:08:57.235015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:02.247583Z","title":"Joint-gcg: Unified gradient-based poisoning attacks on retrieval-augmented generation systems,","venue":null,"work_id":"b1515d99-37eb-4103-8fcf-90edd71d5c86","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.407325Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:5fb630820821cd35d9a5e4a77fbdcebc28c4eff6c96c972bf2a0a9462af053c4","observation_id":"2a04a548-5906-472c-a79c-7d63b2ac3d21","resolution":{"observed_at":"2026-08-06T00:09:02.454739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:08:57.600027Z","title":"Phantom: General trigger attacks on retrieval augmented language generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.600027Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:e8cac94418ed70d4cf035adb6c3890e96cfea9e143ade0c34d32c01982a6a7fe","observation_id":"23a61e54-789b-4d0b-9a03-65ce8862cb6b","resolution":{"observed_at":"2026-08-06T00:08:57.600027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-07T14:02:49.934041Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-06T00:08:57.754979Z","title":"Cpa-rag: Covert poisoning attacks on retrieval-augmented generation in large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.754979Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:06e5b95fbc8038b469f92f4e2caeed68e9f0cb98a6c7ca5e61ff4290410c2b62","observation_id":"5a9fb543-f8cf-43f2-86eb-ce9ae019f9d5","resolution":{"observed_at":"2026-08-06T00:08:57.754979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.12201","last_updated":"2026-04-14T02:10:23Z","snapshot_observed_at":"2026-08-03T02:44:54.974207Z","submitted_at":"2026-04-14T02:10:23Z","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","version":1},"cited_work":{"arxiv_id":"2604.12201","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.12201","snapshot_observed_at":"2026-08-06T00:09:00.182095Z","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","venue":"cs.IR","work_id":"5dffe85e-5f49-4cef-ab0d-96d67e1c199b","year":2026},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:57.938030Z"},"links":{"cited_paper":"/paper/2604.12201","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:d0eaad1a278066e20d2a1744f1f3b325cd6b6de50fb314adc8b0a18b0badc5a3","observation_id":"e4e81593-7437-4ba4-a183-4fa95c379147","resolution":{"observed_at":"2026-08-06T00:09:00.254511Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-06T00:08:58.115745Z","title":"Baseline defenses for adversarial attacks against aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.115745Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:2e115200d4af3acae931f053a17c7440602345ef6fd5da13550fc15ee8ea13f3","observation_id":"070bb755-99df-4510-84f6-b877be8d4642","resolution":{"observed_at":"2026-08-06T00:08:58.115745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.979350Z","title":"Instructrag: Instructing retrieval- augmented generation via self-synthesized rationales,","venue":null,"work_id":"b0e6e73a-ae6c-4c55-82e2-009a5f6a4a56","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.315399Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:d4cb2ac92860a2768fef4a6010ed40c16acfba67f2a50934f425bd4e30cfc285","observation_id":"4dc1c3e1-a57e-4b0b-a52d-8975e19da2ff","resolution":{"observed_at":"2026-08-06T00:09:02.068374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.00879","last_updated":"2025-05-22T22:00:19Z","snapshot_observed_at":"2026-07-06T20:15:31.955797Z","submitted_at":"2025-01-01T15:57:34Z","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.00879","snapshot_observed_at":"2026-08-06T00:08:58.464347Z","title":"Trustrag: Enhancing robustness and trustworthiness in retrieval-augmented generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.464347Z"},"links":{"cited_paper":"/paper/2501.00879","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:d3c4b9921492ba0a00c2acb47c6484abc187a39e10e9b89ddae0d73f9a4eeae0","observation_id":"388a33ac-7604-42ef-b875-0cc2da37e103","resolution":{"observed_at":"2026-08-06T00:08:58.464347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.707665Z","title":"Certifiably robust rag against retrieval corruption,","venue":null,"work_id":"b78e9910-ab4f-431e-9378-1075d07ba0f5","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.596841Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:937b82b5c8fecdf607bcd5eb1856a27fd0bb4986764a2e2324bad622e97922bf","observation_id":"060b992f-5dda-4bf1-a519-d8b56606878e","resolution":{"observed_at":"2026-08-06T00:09:01.828990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.429311Z","title":"Astute rag: Overcoming imperfect retrieval augmentation and knowledge conflicts for large language models,","venue":null,"work_id":"0de215a7-e102-40fe-aba4-9a9bb93f308a","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:58.782021Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:a6915a2afb4da0156508b856a81f1607ee555ab46e16a350a8a4e59e0bbba41d","observation_id":"c3d1dbb0-8069-48a3-91fd-883026d4db48","resolution":{"observed_at":"2026-08-06T00:09:01.546520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.310888Z","title":"Adaptive chameleon or stubborn sloth: Revealing the behavior of large language models in knowledge conflicts,","venue":null,"work_id":"bee5283d-3688-426f-8049-82a161eaa737","year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.038294Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:417ad96ee329b72793b8cf1e98325fc7c0a5d160fb257710743ffd58da82f78c","observation_id":"4a5fd4dc-a918-4ddc-a8b8-f333e148e794","resolution":{"observed_at":"2026-08-06T00:09:01.362377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:01.120830Z","title":"Investigating context faithfulness in large language models: The roles of memory strength and evidence style,","venue":null,"work_id":"efae3f94-ef24-4397-b893-f24ccb3b5cd6","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.242582Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:6cf60d8acd9202629af3155f95aedd64c843d93aec5bc1348f61fe30d0552963","observation_id":"0548051e-c953-4b9d-becc-1f2082c0549c","resolution":{"observed_at":"2026-08-06T00:09:01.222872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.874464Z","title":"Context-faithful prompt- ing for large language models,","venue":null,"work_id":"351909cf-50dd-4431-98d4-d8d9c9c897a8","year":2023},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.412762Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:d8d0672b09b77d6e136553b8fc9ebcb347458e10251bf4e14dfa9e5a21889f4c","observation_id":"707683b0-e4bc-467b-b4d4-3b1daf8172e4","resolution":{"observed_at":"2026-08-06T00:09:00.987441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.719671Z","title":"What is seen cannot be unseen: The disruptive effect of knowledge conflict on large language models,","venue":null,"work_id":"a5c33342-cd69-4b0e-8d52-ed0c201966bf","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.584576Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:1b2bf26266ecc3593dd39bab2c2db3864783f3888e3f2b1ee00c0538198b069a","observation_id":"c7f4d3f6-632f-487b-aa49-cd42b7926a89","resolution":{"observed_at":"2026-08-06T00:09:00.780452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.566083Z","title":"Redeep: Detecting hallucination in retrieval-augmented generation via mechanistic interpretability,","venue":null,"work_id":"c32c68ef-ed98-4281-8da6-fa8c2d5bdb34","year":2025},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.802655Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:ee1cbf800b4705ab5e90fc4d23d135d8279c3988befc695dd38d25133bcb1b53","observation_id":"37db2f43-29c9-4f0f-b474-27eabbb4b1b8","resolution":{"observed_at":"2026-08-06T00:09:00.632040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T00:09:00.379951Z","title":"Beir: A heterogenous benchmark for zero-shot evaluation of informa- tion retrieval models,","venue":null,"work_id":"5baaeb92-a379-4b6b-a436-9f10f724611b","year":2021},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:59.996070Z"},"links":{"citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:2ae44e40a52afbaef263cfc9a7347cff92b9658d2964cbb3c4861df4627a5d1d","observation_id":"b62e0bf1-c001-46b5-a84a-27ebd8795e1f","resolution":{"observed_at":"2026-08-06T00:09:00.455894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T19:10:18.595673Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":1,"verified_fuzzy":21},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 0 inbound Pith citation observations for arXiv:2608.02678."}