{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:B3DWDGJANN33MYTIZ6PZWODXHO","short_pith_number":"pith:B3DWDGJA","canonical_record":{"source":{"id":"2508.04276","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-06T10:01:26Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a8e853f1e44e86046505084c2d4e6e10457f02b9c5e88019e642b13b50caf04a","abstract_canon_sha256":"e107c6657c5c5c9da8443742f5e91f66fe109bad6aa06d5ef41399f5123a59c7"},"schema_version":"1.0"},"canonical_sha256":"0ec76199206b77b66268cf9f9b38773bbe5c588ac158757af7df4c4f8a06f87e","source":{"kind":"arxiv","id":"2508.04276","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.04276","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"arxiv_version","alias_value":"2508.04276v2","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.04276","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_12","alias_value":"B3DWDGJANN33","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_16","alias_value":"B3DWDGJANN33MYTI","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_8","alias_value":"B3DWDGJA","created_at":"2026-07-05T11:52:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:B3DWDGJANN33MYTIZ6PZWODXHO","target":"record","payload":{"canonical_record":{"source":{"id":"2508.04276","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-06T10:01:26Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a8e853f1e44e86046505084c2d4e6e10457f02b9c5e88019e642b13b50caf04a","abstract_canon_sha256":"e107c6657c5c5c9da8443742f5e91f66fe109bad6aa06d5ef41399f5123a59c7"},"schema_version":"1.0"},"canonical_sha256":"0ec76199206b77b66268cf9f9b38773bbe5c588ac158757af7df4c4f8a06f87e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:52:23.079301Z","signature_b64":"nVzi2bJ886vhTwUmgIz7Wh/NNL+r7Q1Q5WMPSAODSEJjx95n0G/u7KHK9cDejSL2ZDkSM8KnSoIDedf9QswsAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ec76199206b77b66268cf9f9b38773bbe5c588ac158757af7df4c4f8a06f87e","last_reissued_at":"2026-07-05T11:52:23.078820Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:52:23.078820Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.04276","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:52:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lwM8UmYNdAKFj/FAHPJh7WhoK37c8JtYN3T1F3TY8Dw+A2RMRqFEIUrwcP6WAQxoK8jtf7FIExRWhgVK7W1gCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:33:44.224570Z"},"content_sha256":"7169aa79c7f8a5bd8c56154138417b7b3ddad5e47c9b15aff2ef51daf9f555ec","schema_version":"1.0","event_id":"sha256:7169aa79c7f8a5bd8c56154138417b7b3ddad5e47c9b15aff2ef51daf9f555ec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:B3DWDGJANN33MYTIZ6PZWODXHO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Few Words Can Distort Graphs: Knowledge Poisoning Attacks on Graph-based Retrieval-Augmented Generation of Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Cheng Huang, Jiayi Wen, Tianxin Chen, Zhirun Zheng","submitted_at":"2025-08-06T10:01:26Z","abstract_excerpt":"Graph-based Retrieval-Augmented Generation (GraphRAG) has recently emerged as a promising paradigm for enhancing large language models (LLMs) by converting raw text into structured knowledge graphs, improving both accuracy and explainability. However, GraphRAG relies on LLMs to extract knowledge from raw text during graph construction, and this process can be maliciously manipulated to implant misleading information. Targeting this attack surface, we propose two knowledge poisoning attacks (KPAs) and demonstrate that modifying only a few words in the source text can significantly change the co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.04276","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.04276/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:52:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eagtQQuxd8CqmtLWI5Ne75cN84U6OBRwzwCFf93AckijkEjYl72g2K0+X/WMX5joG/cBPmk7QvmT8lMw7h5WBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:33:44.225123Z"},"content_sha256":"6cfc14a8249841fbebb94b0ee011182655968eeb93ed8ae445bf33cbb6176256","schema_version":"1.0","event_id":"sha256:6cfc14a8249841fbebb94b0ee011182655968eeb93ed8ae445bf33cbb6176256"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B3DWDGJANN33MYTIZ6PZWODXHO/bundle.json","state_url":"https://pith.science/pith/B3DWDGJANN33MYTIZ6PZWODXHO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B3DWDGJANN33MYTIZ6PZWODXHO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:33:44Z","links":{"resolver":"https://pith.science/pith/B3DWDGJANN33MYTIZ6PZWODXHO","bundle":"https://pith.science/pith/B3DWDGJANN33MYTIZ6PZWODXHO/bundle.json","state":"https://pith.science/pith/B3DWDGJANN33MYTIZ6PZWODXHO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B3DWDGJANN33MYTIZ6PZWODXHO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:B3DWDGJANN33MYTIZ6PZWODXHO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e107c6657c5c5c9da8443742f5e91f66fe109bad6aa06d5ef41399f5123a59c7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-06T10:01:26Z","title_canon_sha256":"a8e853f1e44e86046505084c2d4e6e10457f02b9c5e88019e642b13b50caf04a"},"schema_version":"1.0","source":{"id":"2508.04276","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.04276","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"arxiv_version","alias_value":"2508.04276v2","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.04276","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_12","alias_value":"B3DWDGJANN33","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_16","alias_value":"B3DWDGJANN33MYTI","created_at":"2026-07-05T11:52:23Z"},{"alias_kind":"pith_short_8","alias_value":"B3DWDGJA","created_at":"2026-07-05T11:52:23Z"}],"graph_snapshots":[{"event_id":"sha256:6cfc14a8249841fbebb94b0ee011182655968eeb93ed8ae445bf33cbb6176256","target":"graph","created_at":"2026-07-05T11:52:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.04276/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph-based Retrieval-Augmented Generation (GraphRAG) has recently emerged as a promising paradigm for enhancing large language models (LLMs) by converting raw text into structured knowledge graphs, improving both accuracy and explainability. However, GraphRAG relies on LLMs to extract knowledge from raw text during graph construction, and this process can be maliciously manipulated to implant misleading information. Targeting this attack surface, we propose two knowledge poisoning attacks (KPAs) and demonstrate that modifying only a few words in the source text can significantly change the co","authors_text":"Cheng Huang, Jiayi Wen, Tianxin Chen, Zhirun Zheng","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-06T10:01:26Z","title":"A Few Words Can Distort Graphs: Knowledge Poisoning Attacks on Graph-based Retrieval-Augmented Generation of Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.04276","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7169aa79c7f8a5bd8c56154138417b7b3ddad5e47c9b15aff2ef51daf9f555ec","target":"record","created_at":"2026-07-05T11:52:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e107c6657c5c5c9da8443742f5e91f66fe109bad6aa06d5ef41399f5123a59c7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-08-06T10:01:26Z","title_canon_sha256":"a8e853f1e44e86046505084c2d4e6e10457f02b9c5e88019e642b13b50caf04a"},"schema_version":"1.0","source":{"id":"2508.04276","kind":"arxiv","version":2}},"canonical_sha256":"0ec76199206b77b66268cf9f9b38773bbe5c588ac158757af7df4c4f8a06f87e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0ec76199206b77b66268cf9f9b38773bbe5c588ac158757af7df4c4f8a06f87e","first_computed_at":"2026-07-05T11:52:23.078820Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:52:23.078820Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nVzi2bJ886vhTwUmgIz7Wh/NNL+r7Q1Q5WMPSAODSEJjx95n0G/u7KHK9cDejSL2ZDkSM8KnSoIDedf9QswsAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:52:23.079301Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.04276","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7169aa79c7f8a5bd8c56154138417b7b3ddad5e47c9b15aff2ef51daf9f555ec","sha256:6cfc14a8249841fbebb94b0ee011182655968eeb93ed8ae445bf33cbb6176256"],"state_sha256":"108d3fb3fe72bd976305f60d8339a79893e410badd8184742692f7ee6dbcd59c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uXYQdvir4NdjO/59HhmVbqpnQUgJBFPOhMIPHHiuOTlcFddpnT7CdclptptHc3FIUYWjYw6FWELOjqI2gZFsDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:33:44.230577Z","bundle_sha256":"b2d5ba9a1a2c4a3082aa2c9d3e5079a047380581703661d4cf9028cca8069dae"}}