{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7HRFQQ22RN7DXFIWVJOF5NPNJE","short_pith_number":"pith:7HRFQQ22","canonical_record":{"source":{"id":"2406.19417","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-26T05:36:23Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f71e7cd0eaa0fe472dcab8c7d6c84c61ccd0e4dd5a4857d573745d62a13ac8b3","abstract_canon_sha256":"8ac23fc238ee818f0d52a40cba50ed5f345c062ef22ea8c9fd6fe8379aa98a45"},"schema_version":"1.0"},"canonical_sha256":"f9e258435a8b7e3b9516aa5c5eb5ed490a16c6ce78bb027ab24a100d94a1db29","source":{"kind":"arxiv","id":"2406.19417","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.19417","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"arxiv_version","alias_value":"2406.19417v1","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.19417","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_12","alias_value":"7HRFQQ22RN7D","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_16","alias_value":"7HRFQQ22RN7DXFIW","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_8","alias_value":"7HRFQQ22","created_at":"2026-07-05T08:37:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7HRFQQ22RN7DXFIWVJOF5NPNJE","target":"record","payload":{"canonical_record":{"source":{"id":"2406.19417","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-26T05:36:23Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f71e7cd0eaa0fe472dcab8c7d6c84c61ccd0e4dd5a4857d573745d62a13ac8b3","abstract_canon_sha256":"8ac23fc238ee818f0d52a40cba50ed5f345c062ef22ea8c9fd6fe8379aa98a45"},"schema_version":"1.0"},"canonical_sha256":"f9e258435a8b7e3b9516aa5c5eb5ed490a16c6ce78bb027ab24a100d94a1db29","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:37:39.484630Z","signature_b64":"iIj393aBPk6o3Tjq9VnNY6YilXd5un3t+KkAB86Of8GpT9YeEPe69iaA+YKpbVqPfNKpFGHHrMQsKloQSdJsDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9e258435a8b7e3b9516aa5c5eb5ed490a16c6ce78bb027ab24a100d94a1db29","last_reissued_at":"2026-07-05T08:37:39.484126Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:37:39.484126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.19417","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:37:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6emNGgyC+qAwjG0ZupHNXDNfvwt6H3unqIW3VysjBr53kbqkDbSxxaL4DCZcM93iRvhAfdY55tPQiygIshA8DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:57:08.592387Z"},"content_sha256":"3c8243145b2133015f4867fcc3096612403b95b7d6ca9ddb36340d700abcebbb","schema_version":"1.0","event_id":"sha256:3c8243145b2133015f4867fcc3096612403b95b7d6ca9ddb36340d700abcebbb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7HRFQQ22RN7DXFIWVJOF5NPNJE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chengshuai Zhao, Huan Liu, Jundong Li, Raha Moraffah, Song Wang, Tianlong Chen, Yifan Li, Zhen Tan","submitted_at":"2024-06-26T05:36:23Z","abstract_excerpt":"Retrieval-Augmented Generative (RAG) models enhance Large Language Models (LLMs) by integrating external knowledge bases, improving their performance in applications like fact-checking and information searching. In this paper, we demonstrate a security threat where adversaries can exploit the openness of these knowledge bases by injecting deceptive content into the retrieval database, intentionally changing the model's behavior. This threat is critical as it mirrors real-world usage scenarios where RAG systems interact with publicly accessible knowledge bases, such as web scrapings and user-co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.19417","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.19417/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:37:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IzqN5qqZmq2ns1Qweb3wc5zPwPOEKs4izfPW+JhoxiDoBvnGN2JvAE0G5lvcScqVIx9dUKNwccQkNm36Ji/GAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:57:08.592887Z"},"content_sha256":"d159636394a4b48a579d36fca05aae7ee7b0fc293652bfff960dc7aadd7609a2","schema_version":"1.0","event_id":"sha256:d159636394a4b48a579d36fca05aae7ee7b0fc293652bfff960dc7aadd7609a2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/bundle.json","state_url":"https://pith.science/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:57:08Z","links":{"resolver":"https://pith.science/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE","bundle":"https://pith.science/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/bundle.json","state":"https://pith.science/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7HRFQQ22RN7DXFIWVJOF5NPNJE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7HRFQQ22RN7DXFIWVJOF5NPNJE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ac23fc238ee818f0d52a40cba50ed5f345c062ef22ea8c9fd6fe8379aa98a45","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-26T05:36:23Z","title_canon_sha256":"f71e7cd0eaa0fe472dcab8c7d6c84c61ccd0e4dd5a4857d573745d62a13ac8b3"},"schema_version":"1.0","source":{"id":"2406.19417","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.19417","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"arxiv_version","alias_value":"2406.19417v1","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.19417","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_12","alias_value":"7HRFQQ22RN7D","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_16","alias_value":"7HRFQQ22RN7DXFIW","created_at":"2026-07-05T08:37:39Z"},{"alias_kind":"pith_short_8","alias_value":"7HRFQQ22","created_at":"2026-07-05T08:37:39Z"}],"graph_snapshots":[{"event_id":"sha256:d159636394a4b48a579d36fca05aae7ee7b0fc293652bfff960dc7aadd7609a2","target":"graph","created_at":"2026-07-05T08:37:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.19417/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generative (RAG) models enhance Large Language Models (LLMs) by integrating external knowledge bases, improving their performance in applications like fact-checking and information searching. In this paper, we demonstrate a security threat where adversaries can exploit the openness of these knowledge bases by injecting deceptive content into the retrieval database, intentionally changing the model's behavior. This threat is critical as it mirrors real-world usage scenarios where RAG systems interact with publicly accessible knowledge bases, such as web scrapings and user-co","authors_text":"Chengshuai Zhao, Huan Liu, Jundong Li, Raha Moraffah, Song Wang, Tianlong Chen, Yifan Li, Zhen Tan","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-26T05:36:23Z","title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.19417","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c8243145b2133015f4867fcc3096612403b95b7d6ca9ddb36340d700abcebbb","target":"record","created_at":"2026-07-05T08:37:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ac23fc238ee818f0d52a40cba50ed5f345c062ef22ea8c9fd6fe8379aa98a45","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-26T05:36:23Z","title_canon_sha256":"f71e7cd0eaa0fe472dcab8c7d6c84c61ccd0e4dd5a4857d573745d62a13ac8b3"},"schema_version":"1.0","source":{"id":"2406.19417","kind":"arxiv","version":1}},"canonical_sha256":"f9e258435a8b7e3b9516aa5c5eb5ed490a16c6ce78bb027ab24a100d94a1db29","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9e258435a8b7e3b9516aa5c5eb5ed490a16c6ce78bb027ab24a100d94a1db29","first_computed_at":"2026-07-05T08:37:39.484126Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:37:39.484126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iIj393aBPk6o3Tjq9VnNY6YilXd5un3t+KkAB86Of8GpT9YeEPe69iaA+YKpbVqPfNKpFGHHrMQsKloQSdJsDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:37:39.484630Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.19417","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c8243145b2133015f4867fcc3096612403b95b7d6ca9ddb36340d700abcebbb","sha256:d159636394a4b48a579d36fca05aae7ee7b0fc293652bfff960dc7aadd7609a2"],"state_sha256":"0e2e36d294a3531e3bfae0813028467545a5714ffb92a336a86d6c768f849d8a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vRkSJ8FvnKAbuRcBYoWjyLGdG/Bw9XW33LFf8MTPSky0ypk+1g8JXk8YVfTD7N+YjQs8MOR11vp7NdJFZaxgDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:57:08.597770Z","bundle_sha256":"bfb10f8245c837db256ce4e5ff1cc8d54d033cff90d6bc277c9c2a30e3b1ac2e"}}