{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:7YRKTLOMYM6WKW53653NURH6LA","short_pith_number":"pith:7YRKTLOM","canonical_record":{"source":{"id":"2505.16367","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-22T08:22:46Z","cross_cats_sorted":[],"title_canon_sha256":"301de6496b84f408e7bd1f5c955f2195569dff026eb84e8ccc72ca4d3b02429b","abstract_canon_sha256":"47f914e2b6e5eee433ac89a9bd1679dcd188a006a77c2e6d4697ed3991adbe6e"},"schema_version":"1.0"},"canonical_sha256":"fe22a9adccc33d655bbbf776da44fe581b7c56e8697a16848c5efc4b10053588","source":{"kind":"arxiv","id":"2505.16367","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16367","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16367v1","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16367","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_12","alias_value":"7YRKTLOMYM6W","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_16","alias_value":"7YRKTLOMYM6WKW53","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_8","alias_value":"7YRKTLOM","created_at":"2026-07-05T11:07:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:7YRKTLOMYM6WKW53653NURH6LA","target":"record","payload":{"canonical_record":{"source":{"id":"2505.16367","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-22T08:22:46Z","cross_cats_sorted":[],"title_canon_sha256":"301de6496b84f408e7bd1f5c955f2195569dff026eb84e8ccc72ca4d3b02429b","abstract_canon_sha256":"47f914e2b6e5eee433ac89a9bd1679dcd188a006a77c2e6d4697ed3991adbe6e"},"schema_version":"1.0"},"canonical_sha256":"fe22a9adccc33d655bbbf776da44fe581b7c56e8697a16848c5efc4b10053588","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:07:34.277384Z","signature_b64":"EY0RR6nMhDGMgVhHTVKz7wyVeRyRjeNl9vYBCcAuq9DptxeVRsddutV4U+VjjOpmVJcpEHm7YH2sMnpEymqQDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fe22a9adccc33d655bbbf776da44fe581b7c56e8697a16848c5efc4b10053588","last_reissued_at":"2026-07-05T11:07:34.276876Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:07:34.276876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.16367","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ch0PUs6Bn2AJ0hjJYCiSPpYRMmGgAOqQ4Q6w0S3RmA1p8jyx54B4zCdX1t/ui+fVjjyxHwVKO6QDFpwft7coBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:53:50.449805Z"},"content_sha256":"a4f496d2b3ff9e23a3ea388547bcc9b83d6c27004767b525f77e155e49e8a89a","schema_version":"1.0","event_id":"sha256:a4f496d2b3ff9e23a3ea388547bcc9b83d6c27004767b525f77e155e49e8a89a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:7YRKTLOMYM6WKW53653NURH6LA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Hongru Song, Jiafeng Guo, Ruqing Zhang, Yixing Fan, Yu-An Liu","submitted_at":"2025-05-22T08:22:46Z","abstract_excerpt":"Retrieval-augmented generation (RAG) systems can effectively mitigate the hallucination problem of large language models (LLMs),but they also possess inherent vulnerabilities. Identifying these weaknesses before the large-scale real-world deployment of RAG systems is of great importance, as it lays the foundation for building more secure and robust RAG systems in the future. Existing adversarial attack methods typically exploit knowledge base poisoning to probe the vulnerabilities of RAG systems, which can effectively deceive standard RAG models. However, with the rapid advancement of deep rea"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16367","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.16367/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C8gKYcOaPXIBIM7rdtcHm6wHfeyVNbHxqR5vgaw8tUUhqeShjCJC/ddA9jW2cUrbdT5JLJcKi9aK8GMKyKaFDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T19:53:50.450357Z"},"content_sha256":"51c94f83649f393f3dc032de3d101de16360957071ade676eabfa3011f23059b","schema_version":"1.0","event_id":"sha256:51c94f83649f393f3dc032de3d101de16360957071ade676eabfa3011f23059b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7YRKTLOMYM6WKW53653NURH6LA/bundle.json","state_url":"https://pith.science/pith/7YRKTLOMYM6WKW53653NURH6LA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7YRKTLOMYM6WKW53653NURH6LA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T19:53:50Z","links":{"resolver":"https://pith.science/pith/7YRKTLOMYM6WKW53653NURH6LA","bundle":"https://pith.science/pith/7YRKTLOMYM6WKW53653NURH6LA/bundle.json","state":"https://pith.science/pith/7YRKTLOMYM6WKW53653NURH6LA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7YRKTLOMYM6WKW53653NURH6LA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7YRKTLOMYM6WKW53653NURH6LA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"47f914e2b6e5eee433ac89a9bd1679dcd188a006a77c2e6d4697ed3991adbe6e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-22T08:22:46Z","title_canon_sha256":"301de6496b84f408e7bd1f5c955f2195569dff026eb84e8ccc72ca4d3b02429b"},"schema_version":"1.0","source":{"id":"2505.16367","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16367","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16367v1","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16367","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_12","alias_value":"7YRKTLOMYM6W","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_16","alias_value":"7YRKTLOMYM6WKW53","created_at":"2026-07-05T11:07:34Z"},{"alias_kind":"pith_short_8","alias_value":"7YRKTLOM","created_at":"2026-07-05T11:07:34Z"}],"graph_snapshots":[{"event_id":"sha256:51c94f83649f393f3dc032de3d101de16360957071ade676eabfa3011f23059b","target":"graph","created_at":"2026-07-05T11:07:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.16367/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-augmented generation (RAG) systems can effectively mitigate the hallucination problem of large language models (LLMs),but they also possess inherent vulnerabilities. Identifying these weaknesses before the large-scale real-world deployment of RAG systems is of great importance, as it lays the foundation for building more secure and robust RAG systems in the future. Existing adversarial attack methods typically exploit knowledge base poisoning to probe the vulnerabilities of RAG systems, which can effectively deceive standard RAG models. However, with the rapid advancement of deep rea","authors_text":"Hongru Song, Jiafeng Guo, Ruqing Zhang, Yixing Fan, Yu-An Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16367","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a4f496d2b3ff9e23a3ea388547bcc9b83d6c27004767b525f77e155e49e8a89a","target":"record","created_at":"2026-07-05T11:07:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"47f914e2b6e5eee433ac89a9bd1679dcd188a006a77c2e6d4697ed3991adbe6e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2025-05-22T08:22:46Z","title_canon_sha256":"301de6496b84f408e7bd1f5c955f2195569dff026eb84e8ccc72ca4d3b02429b"},"schema_version":"1.0","source":{"id":"2505.16367","kind":"arxiv","version":1}},"canonical_sha256":"fe22a9adccc33d655bbbf776da44fe581b7c56e8697a16848c5efc4b10053588","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fe22a9adccc33d655bbbf776da44fe581b7c56e8697a16848c5efc4b10053588","first_computed_at":"2026-07-05T11:07:34.276876Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:07:34.276876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EY0RR6nMhDGMgVhHTVKz7wyVeRyRjeNl9vYBCcAuq9DptxeVRsddutV4U+VjjOpmVJcpEHm7YH2sMnpEymqQDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:07:34.277384Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.16367","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a4f496d2b3ff9e23a3ea388547bcc9b83d6c27004767b525f77e155e49e8a89a","sha256:51c94f83649f393f3dc032de3d101de16360957071ade676eabfa3011f23059b"],"state_sha256":"e9447145a6878b7ae577430fc086e6da6e2a01923b26ac260c51311889e07a2c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v37KVyMASJgK34k5M/tgppeMZoQb0tsvXMrnYqJS4y9PBNMY82Vy5JPN8zPEyxaL0ovYq8TKhvTWKrVE0Gr6Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T19:53:50.456096Z","bundle_sha256":"2ee35efc7c9d20c5765eb3b28b4a760873fc66e08eac56f737cd9a8b6d1069cb"}}