{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2X5LMA24JSV52A4Y5CBWCJH4BO","short_pith_number":"pith:2X5LMA24","canonical_record":{"source":{"id":"2410.14479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da","abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1"},"schema_version":"1.0"},"canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","source":{"kind":"arxiv","id":"2410.14479","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.14479v1","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_12","alias_value":"2X5LMA24JSV5","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_16","alias_value":"2X5LMA24JSV52A4Y","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_8","alias_value":"2X5LMA24","created_at":"2026-07-05T09:22:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2X5LMA24JSV52A4Y5CBWCJH4BO","target":"record","payload":{"canonical_record":{"source":{"id":"2410.14479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da","abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1"},"schema_version":"1.0"},"canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:22:32.969819Z","signature_b64":"y2XE5SmDbpxvEwfZCxrSQuBXxpj0uQpUIbcGL6BlYqY2vNlZ+mHtAXgKNdwVbfbqfo16ozK9BUhYobxCH/v2Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","last_reissued_at":"2026-07-05T09:22:32.969410Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:22:32.969410Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.14479","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:22:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+HbX/+nP2DTiIEpSzmd/bW5xfWdENxj0wgxOe7LQ2dcirPN5CYmVaxxY2GXs7UK4X8QqpHdwYrJ3l+zMHwoXAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:38:50.613714Z"},"content_sha256":"c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299","schema_version":"1.0","event_id":"sha256:c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2X5LMA24JSV52A4Y5CBWCJH4BO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Cody Clop, Yannick Teglia","submitted_at":"2024-10-18T14:02:34Z","abstract_excerpt":"Large Language Models (LLMs) have demonstrated remarkable capabilities in generating coherent text but remain limited by the static nature of their training data. Retrieval Augmented Generation (RAG) addresses this issue by combining LLMs with up-to-date information retrieval, but also expand the attack surface of the system. This paper investigates prompt injection attacks on RAG, focusing on malicious objectives beyond misinformation, such as inserting harmful links, promoting unauthorized services, and initiating denial-of-service behaviors. We build upon existing corpus poisoning technique"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.14479","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.14479/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:22:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vfrQsqP9ZFtsu5q+3VBKQ6BxJsxd+boa+2ZQdMxMf/GjYwofoA8GdXUhBTX78YyHsc1XgoWMtc+0Bin2Kyx5CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T12:38:50.614228Z"},"content_sha256":"4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c","schema_version":"1.0","event_id":"sha256:4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/bundle.json","state_url":"https://pith.science/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T12:38:50Z","links":{"resolver":"https://pith.science/pith/2X5LMA24JSV52A4Y5CBWCJH4BO","bundle":"https://pith.science/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/bundle.json","state":"https://pith.science/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2X5LMA24JSV52A4Y5CBWCJH4BO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2X5LMA24JSV52A4Y5CBWCJH4BO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da"},"schema_version":"1.0","source":{"id":"2410.14479","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.14479v1","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_12","alias_value":"2X5LMA24JSV5","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_16","alias_value":"2X5LMA24JSV52A4Y","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_8","alias_value":"2X5LMA24","created_at":"2026-07-05T09:22:32Z"}],"graph_snapshots":[{"event_id":"sha256:4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c","target":"graph","created_at":"2026-07-05T09:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.14479/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have demonstrated remarkable capabilities in generating coherent text but remain limited by the static nature of their training data. Retrieval Augmented Generation (RAG) addresses this issue by combining LLMs with up-to-date information retrieval, but also expand the attack surface of the system. This paper investigates prompt injection attacks on RAG, focusing on malicious objectives beyond misinformation, such as inserting harmful links, promoting unauthorized services, and initiating denial-of-service behaviors. We build upon existing corpus poisoning technique","authors_text":"Cody Clop, Yannick Teglia","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.14479","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299","target":"record","created_at":"2026-07-05T09:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da"},"schema_version":"1.0","source":{"id":"2410.14479","kind":"arxiv","version":1}},"canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","first_computed_at":"2026-07-05T09:22:32.969410Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:22:32.969410Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"y2XE5SmDbpxvEwfZCxrSQuBXxpj0uQpUIbcGL6BlYqY2vNlZ+mHtAXgKNdwVbfbqfo16ozK9BUhYobxCH/v2Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:22:32.969819Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.14479","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299","sha256:4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c"],"state_sha256":"4f9a744f39f88ebca53ba9a6b5c01ce41a42617d2104845c2c137fb1c69ac9b1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pqIvDcD5KjYWgBh+3hHuUtnyBGeNvUzaKmAUfJc+SNeuFwfVQi972+we2VKJExlK7h5xCyeW0v4+DMcTz5jcDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T12:38:50.619461Z","bundle_sha256":"0c6113c9303c670a5d30386bda5e60e38700254cdcb7f3e83046436dce9a0cf5"}}