{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2X5LMA24JSV52A4Y5CBWCJH4BO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da"},"schema_version":"1.0","source":{"id":"2410.14479","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"arxiv_version","alias_value":"2410.14479v1","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.14479","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_12","alias_value":"2X5LMA24JSV5","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_16","alias_value":"2X5LMA24JSV52A4Y","created_at":"2026-07-05T09:22:32Z"},{"alias_kind":"pith_short_8","alias_value":"2X5LMA24","created_at":"2026-07-05T09:22:32Z"}],"graph_snapshots":[{"event_id":"sha256:4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c","target":"graph","created_at":"2026-07-05T09:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.14479/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have demonstrated remarkable capabilities in generating coherent text but remain limited by the static nature of their training data. Retrieval Augmented Generation (RAG) addresses this issue by combining LLMs with up-to-date information retrieval, but also expand the attack surface of the system. This paper investigates prompt injection attacks on RAG, focusing on malicious objectives beyond misinformation, such as inserting harmful links, promoting unauthorized services, and initiating denial-of-service behaviors. We build upon existing corpus poisoning technique","authors_text":"Cody Clop, Yannick Teglia","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.14479","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299","target":"record","created_at":"2026-07-05T09:22:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"151665affb2cbab909c713be6c7acf6afc8e68918d7fc7cfac9de532be0fe0c1","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T14:02:34Z","title_canon_sha256":"57274fd75350469f67837b27418f882611934fb60a68f2e9a52508baa11b92da"},"schema_version":"1.0","source":{"id":"2410.14479","kind":"arxiv","version":1}},"canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d5fab6035c4cabdd0398e8836124fc0b9f98ae845f7f0fe3f16fe1a5ad5b86ce","first_computed_at":"2026-07-05T09:22:32.969410Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:22:32.969410Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"y2XE5SmDbpxvEwfZCxrSQuBXxpj0uQpUIbcGL6BlYqY2vNlZ+mHtAXgKNdwVbfbqfo16ozK9BUhYobxCH/v2Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:22:32.969819Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.14479","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c07081626ddcee29c0806ed3850f73e227ee25911015aac69d9cbde2bf350299","sha256:4b1a93d14c251024493629164b78c4ec33a93be9d738f062fd7bfe370bc6237c"],"state_sha256":"4f9a744f39f88ebca53ba9a6b5c01ce41a42617d2104845c2c137fb1c69ac9b1"}