Paper Citation Record · LEDGER

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems

As of 8 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 3 inbound Pith citation observations for arXiv:2505.16367.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.16367 v1

Coverage vector

measured 34 of 34 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T15:06:01.723487Z

measured 37 of 37 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T10:39:07.088945Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T00:01:16.554293Z

Reference resolution

34 of 34 outbound references displayed

verified exact0
verified fuzzy0
unresolved34
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 0cd33fc5-fd63-413e-8871-ca78e1bf4acb · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 1

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.945458Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 192ae9ad-ea0b-4d20-b229-956fb10b5962 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 2

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.820017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 48bcc0fa-aa76-43b6-baa8-27c2fe91f01b · outbound

This paper cites SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.144675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 180bc1d0-c708-4f3f-8f8e-ad3d05a644aa · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.675384Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation ce927490-5733-4e4d-93c0-a66490992792 · outbound

This paper cites Retrieval-Augmented Generation for Large Language Models: A Survey.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Retrieval-Augmented Generation for Large Language Models: A Survey

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.394365Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1ce4ef23-5c31-46d0-9eca-a6e5e9b5247a · outbound

This paper cites DeepRAG: Thinking to Retrieve Step by Step for Large Language Models.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems DeepRAG: Thinking to Retrieve Step by Step for Large Language Models

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.548315Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3444797e-fc21-4869-b8e6-6103644a509d · outbound

This paper cites DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.685090Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e8553720-b96e-44d6-a4dc-df4139c8d5f0 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.799523Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ea09b43-da77-4211-8172-04ac064234eb · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.503314Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 384f99b1-a769-4a90-a781-2b1fd98b969b · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.328668Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e4a61431-e6d1-4db3-9036-71621e10bbad · outbound

This paper cites Atlas: Few-shot Learning with Retrieval Augmented Language Models.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Atlas: Few-shot Learning with Retrieval Augmented Language Models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:00.112164Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 675f3265-373f-4b75-b5c3-8407c2822da2 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:00.173553Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a2721451-e822-471c-871d-03d4454bbb76 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.199786Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 8a8f6b29-ab54-4f18-9fac-c5a4b6243b7a · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:00.344119Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a5a4b398-f36f-4308-a2e0-21f7f0873373 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:04.039110Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 8862e341-3a56-443c-ad09-b3de71f3d453 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.889266Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3800296c-2901-40bc-a7ef-94f085465f61 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 17

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.746037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 8b0c747e-a8f0-417b-82a9-41b7b4e721a8 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.607299Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e16ce8ec-d0ff-4153-b014-691d03f9b2d3 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.425008Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 91c5538d-268d-4681-b483-ca4b1c7ad5b5 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 20

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.299578Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation dd4de5d6-56a7-4d2d-bfe0-56e046249ea2 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 21

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:03.093892Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation a073e4ab-e117-4eca-80e1-be09aef864c6 · outbound

This paper cites Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:00.965871Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 649a7435-1b39-4dac-8017-73181122e19b · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.045920Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f094cbc6-61df-4762-877a-8c3b6c67ddfd · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.097544Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 06492b56-c355-4086-a496-9313bf09673f · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:02.935697Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 167cfa9a-f4c4-4e27-968b-bf0d875fdea2 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:02.693559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e86c2ffb-66a6-43fb-9b2f-12f9fca48364 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.245591Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aa2c4216-658b-4fe3-a05e-9c8c72636e4d · outbound

This paper cites Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.290122Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a72d2c34-d6ab-4e69-86dd-8cb8febe9ba7 · outbound

This paper cites Qwen2.5 Technical Report.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Qwen2.5 Technical Report

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.329799Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fe7a0973-e50e-477f-b163-3076f30f343d · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 30

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:02.371910Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 72a4c8a2-d4b4-43e3-8418-316624126672 · outbound

This paper cites HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.505577Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eb5ac088-dc01-4053-b769-9815fd6a2425 · outbound

This paper cites an unresolved cited work.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Unresolved cited work

Reference 32

Resolution: unresolved; raw_fallback, observed 2026-08-07T15:06:02.036668Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3429a0c7-ebfc-42f1-a537-070773e75f4b · outbound

This paper cites PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.723487Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f000a477-8361-4580-beea-f77337147880 · outbound

This paper cites Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-07T15:05:59.068125Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 72c408c2-aaed-4bde-8547-0bd0804a7583 · inbound

A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models cites this paper.

A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems

Reference 174

Resolution: unresolved; no resolver link, observed 2026-08-05T10:39:07.088945Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ec2ceac-ab58-4b21-8e2f-2ae4bdb76475 · inbound

R-CoT: A Reasoning-Layer Watermark via Redundant Chain-of-Thought in Large Language Models cites this paper.

R-CoT: A Reasoning-Layer Watermark via Redundant Chain-of-Thought in Large Language Models Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems

Reference 20

Resolution: verified exact; arxiv_id, observed 2026-05-12T00:01:16.557240Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 21fc57e3-cd92-4242-b30a-126d1f858baa · inbound

Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability cites this paper.

Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems

Reference 165

Resolution: unresolved; no resolver link, observed 2026-07-14T12:01:22.824663Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.