{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AXP3J7RDTD3WZ4PGQNNUHKH77P","short_pith_number":"pith:AXP3J7RD","canonical_record":{"source":{"id":"2506.11415","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-13T02:28:46Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"136f38f09ebc9bde4bbd2d2a3d41f2ea9c2d0c32bfa72aa383962073669b49af","abstract_canon_sha256":"0ea9189ad2228f39a411a588db71802af0b6d2ddf95370637d5d5213937ce139"},"schema_version":"1.0"},"canonical_sha256":"05dfb4fe2398f76cf1e6835b43a8fffbfb1414c34ae49eb22b272da6739dca90","source":{"kind":"arxiv","id":"2506.11415","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.11415","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"arxiv_version","alias_value":"2506.11415v1","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.11415","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_12","alias_value":"AXP3J7RDTD3W","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_16","alias_value":"AXP3J7RDTD3WZ4PG","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_8","alias_value":"AXP3J7RD","created_at":"2026-07-05T11:21:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AXP3J7RDTD3WZ4PGQNNUHKH77P","target":"record","payload":{"canonical_record":{"source":{"id":"2506.11415","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-13T02:28:46Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"136f38f09ebc9bde4bbd2d2a3d41f2ea9c2d0c32bfa72aa383962073669b49af","abstract_canon_sha256":"0ea9189ad2228f39a411a588db71802af0b6d2ddf95370637d5d5213937ce139"},"schema_version":"1.0"},"canonical_sha256":"05dfb4fe2398f76cf1e6835b43a8fffbfb1414c34ae49eb22b272da6739dca90","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:21:04.017334Z","signature_b64":"PUfKAUJWTazrguysL/JTd9NZwT7WWwkZdtcX1ZCVdyWMiG91g9eGfCajgWbwREQ9WwWoBfHuPhfjQ+pilbLrBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"05dfb4fe2398f76cf1e6835b43a8fffbfb1414c34ae49eb22b272da6739dca90","last_reissued_at":"2026-07-05T11:21:04.016913Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:21:04.016913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.11415","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FUNXA7S8qRmUKf793sl8ntRDNGBgrzElw14G5P1kN0HYzUzXHry+g6mBVMPrzbIZKDZNSHKziJq8sFjFJrQ7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T01:16:58.894590Z"},"content_sha256":"ebf3c041cac118c541e768aa8b659b8081a692184215a965eea4a54c8f8302ea","schema_version":"1.0","event_id":"sha256:ebf3c041cac118c541e768aa8b659b8081a692184215a965eea4a54c8f8302ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AXP3J7RDTD3WZ4PGQNNUHKH77P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.LG","authors_text":"Laiqiao Qin, Linlin Wang, Longxiang Gao, Tianqing Zhu, Wanlei Zhou","submitted_at":"2025-06-13T02:28:46Z","abstract_excerpt":"In Large Language Models, Retrieval-Augmented Generation (RAG) systems can significantly enhance the performance of large language models by integrating external knowledge. However, RAG also introduces new security risks. Existing research focuses mainly on how poisoning attacks in RAG systems affect model output quality, overlooking their potential to amplify model biases. For example, when querying about domestic violence victims, a compromised RAG system might preferentially retrieve documents depicting women as victims, causing the model to generate outputs that perpetuate gender stereotyp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.11415","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.11415/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:21:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7Z2LwVQE/IswfAO740pBGRUUrcAUYziaEsuGHN7y0K7tNvioVgiyYlP+8ubZdULMahuycxVEyQnSUIiJnA6xBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T01:16:58.895124Z"},"content_sha256":"5dcaf4650c9d3564ab2e68b723598a1bf93ff13b20a899960edbb10db6c09067","schema_version":"1.0","event_id":"sha256:5dcaf4650c9d3564ab2e68b723598a1bf93ff13b20a899960edbb10db6c09067"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/bundle.json","state_url":"https://pith.science/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T01:16:58Z","links":{"resolver":"https://pith.science/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P","bundle":"https://pith.science/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/bundle.json","state":"https://pith.science/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AXP3J7RDTD3WZ4PGQNNUHKH77P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AXP3J7RDTD3WZ4PGQNNUHKH77P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0ea9189ad2228f39a411a588db71802af0b6d2ddf95370637d5d5213937ce139","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-13T02:28:46Z","title_canon_sha256":"136f38f09ebc9bde4bbd2d2a3d41f2ea9c2d0c32bfa72aa383962073669b49af"},"schema_version":"1.0","source":{"id":"2506.11415","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.11415","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"arxiv_version","alias_value":"2506.11415v1","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.11415","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_12","alias_value":"AXP3J7RDTD3W","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_16","alias_value":"AXP3J7RDTD3WZ4PG","created_at":"2026-07-05T11:21:04Z"},{"alias_kind":"pith_short_8","alias_value":"AXP3J7RD","created_at":"2026-07-05T11:21:04Z"}],"graph_snapshots":[{"event_id":"sha256:5dcaf4650c9d3564ab2e68b723598a1bf93ff13b20a899960edbb10db6c09067","target":"graph","created_at":"2026-07-05T11:21:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.11415/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Large Language Models, Retrieval-Augmented Generation (RAG) systems can significantly enhance the performance of large language models by integrating external knowledge. However, RAG also introduces new security risks. Existing research focuses mainly on how poisoning attacks in RAG systems affect model output quality, overlooking their potential to amplify model biases. For example, when querying about domestic violence victims, a compromised RAG system might preferentially retrieve documents depicting women as victims, causing the model to generate outputs that perpetuate gender stereotyp","authors_text":"Laiqiao Qin, Linlin Wang, Longxiang Gao, Tianqing Zhu, Wanlei Zhou","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.11415","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ebf3c041cac118c541e768aa8b659b8081a692184215a965eea4a54c8f8302ea","target":"record","created_at":"2026-07-05T11:21:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0ea9189ad2228f39a411a588db71802af0b6d2ddf95370637d5d5213937ce139","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-06-13T02:28:46Z","title_canon_sha256":"136f38f09ebc9bde4bbd2d2a3d41f2ea9c2d0c32bfa72aa383962073669b49af"},"schema_version":"1.0","source":{"id":"2506.11415","kind":"arxiv","version":1}},"canonical_sha256":"05dfb4fe2398f76cf1e6835b43a8fffbfb1414c34ae49eb22b272da6739dca90","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"05dfb4fe2398f76cf1e6835b43a8fffbfb1414c34ae49eb22b272da6739dca90","first_computed_at":"2026-07-05T11:21:04.016913Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:21:04.016913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PUfKAUJWTazrguysL/JTd9NZwT7WWwkZdtcX1ZCVdyWMiG91g9eGfCajgWbwREQ9WwWoBfHuPhfjQ+pilbLrBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:21:04.017334Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.11415","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ebf3c041cac118c541e768aa8b659b8081a692184215a965eea4a54c8f8302ea","sha256:5dcaf4650c9d3564ab2e68b723598a1bf93ff13b20a899960edbb10db6c09067"],"state_sha256":"051cc38fb0941e97eb3aa2fd6db9f691663247d9e23f7f5ecebe55b7794c1c6a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0MOHS9t0DMMfXHUPAumQIYPs6kqU4ewP+f2vCD7Z7QFxZUCCmOCq4HM+oYRUjTLzCBmtm31YmIFZhBRKg/8fDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T01:16:58.899197Z","bundle_sha256":"0b52c937444756bf5dd4d86e0e56167ba42689f55b3c74d36151e0882fc2b9fe"}}