{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:JV45DKN6JZMAKAD4TSKJTPJJ2S","short_pith_number":"pith:JV45DKN6","schema_version":"1.0","canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","source":{"kind":"arxiv","id":"2607.04379","version":1},"attestation_state":"computed","paper":{"title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Deepti Gupta, Lopamudra Praharaj, Maanak Gupta, Om Solanki","submitted_at":"2026-07-05T16:12:16Z","abstract_excerpt":"This paper presents an adversarial security study of the Policy-Aware LLM Retrieval-Augmented Generation (PA-LLM-RAG) framework for Internet of Battlefield Things (IoBT) mission control. We propose Query-Agnostic Semantic Retrieval Poisoning, a novel attack that injects semantically crafted rules into the IoBT knowledge base achieving high retrieval ranking across all operator query types without requiring knowledge of runtime prompts. The attack achieves 85% LLM context corruption from a single injected rule (1.6% poisoning rate) and saturates at 7.7% poisoning, demonstrating that even minima"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2607.04379","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","cross_cats_sorted":[],"title_canon_sha256":"435ba51f6dc34d0d140af16d7142bd7378627dbd0f7e57df5611dc9ea287938b","abstract_canon_sha256":"bf25678a867720c0285976bdaff1941f5f864da84177f70b83dbaa50842f413f"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:19:15.560053Z","signature_b64":"oqmVz6DUJUCDQdXVAYkQO9Sz0Ju/S6q5+JW/wMD1zdE/Iq4ez4FIr5d5niWIQ3+JH6NH5GZZyAq9KQ1nB6FaCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","last_reissued_at":"2026-07-07T02:19:15.559345Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:19:15.559345Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Deepti Gupta, Lopamudra Praharaj, Maanak Gupta, Om Solanki","submitted_at":"2026-07-05T16:12:16Z","abstract_excerpt":"This paper presents an adversarial security study of the Policy-Aware LLM Retrieval-Augmented Generation (PA-LLM-RAG) framework for Internet of Battlefield Things (IoBT) mission control. We propose Query-Agnostic Semantic Retrieval Poisoning, a novel attack that injects semantically crafted rules into the IoBT knowledge base achieving high retrieval ranking across all operator query types without requiring knowledge of runtime prompts. The attack achieves 85% LLM context corruption from a single injected rule (1.6% poisoning rate) and saturates at 7.7% poisoning, demonstrating that even minima"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04379","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.04379/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2607.04379","created_at":"2026-07-07T02:19:15.559458+00:00"},{"alias_kind":"arxiv_version","alias_value":"2607.04379v1","created_at":"2026-07-07T02:19:15.559458+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04379","created_at":"2026-07-07T02:19:15.559458+00:00"},{"alias_kind":"pith_short_12","alias_value":"JV45DKN6JZMA","created_at":"2026-07-07T02:19:15.559458+00:00"},{"alias_kind":"pith_short_16","alias_value":"JV45DKN6JZMAKAD4","created_at":"2026-07-07T02:19:15.559458+00:00"},{"alias_kind":"pith_short_8","alias_value":"JV45DKN6","created_at":"2026-07-07T02:19:15.559458+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S","json":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S.json","graph_json":"https://pith.science/api/pith-number/JV45DKN6JZMAKAD4TSKJTPJJ2S/graph.json","events_json":"https://pith.science/api/pith-number/JV45DKN6JZMAKAD4TSKJTPJJ2S/events.json","paper":"https://pith.science/paper/JV45DKN6"},"agent_actions":{"view_html":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S","download_json":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S.json","view_paper":"https://pith.science/paper/JV45DKN6","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2607.04379&json=true","fetch_graph":"https://pith.science/api/pith-number/JV45DKN6JZMAKAD4TSKJTPJJ2S/graph.json","fetch_events":"https://pith.science/api/pith-number/JV45DKN6JZMAKAD4TSKJTPJJ2S/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/action/timestamp_anchor","attest_storage":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/action/storage_attestation","attest_author":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/action/author_attestation","sign_citation":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/action/citation_signature","submit_replication":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/action/replication_record"}},"created_at":"2026-07-07T02:19:15.559458+00:00","updated_at":"2026-07-07T02:19:15.559458+00:00"}