{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:JV45DKN6JZMAKAD4TSKJTPJJ2S","short_pith_number":"pith:JV45DKN6","canonical_record":{"source":{"id":"2607.04379","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","cross_cats_sorted":[],"title_canon_sha256":"435ba51f6dc34d0d140af16d7142bd7378627dbd0f7e57df5611dc9ea287938b","abstract_canon_sha256":"bf25678a867720c0285976bdaff1941f5f864da84177f70b83dbaa50842f413f"},"schema_version":"1.0"},"canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","source":{"kind":"arxiv","id":"2607.04379","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04379","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04379v1","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04379","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_12","alias_value":"JV45DKN6JZMA","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_16","alias_value":"JV45DKN6JZMAKAD4","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_8","alias_value":"JV45DKN6","created_at":"2026-07-07T02:19:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:JV45DKN6JZMAKAD4TSKJTPJJ2S","target":"record","payload":{"canonical_record":{"source":{"id":"2607.04379","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","cross_cats_sorted":[],"title_canon_sha256":"435ba51f6dc34d0d140af16d7142bd7378627dbd0f7e57df5611dc9ea287938b","abstract_canon_sha256":"bf25678a867720c0285976bdaff1941f5f864da84177f70b83dbaa50842f413f"},"schema_version":"1.0"},"canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T02:19:15.560053Z","signature_b64":"oqmVz6DUJUCDQdXVAYkQO9Sz0Ju/S6q5+JW/wMD1zdE/Iq4ez4FIr5d5niWIQ3+JH6NH5GZZyAq9KQ1nB6FaCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","last_reissued_at":"2026-07-07T02:19:15.559345Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T02:19:15.559345Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.04379","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wct2KFK49rkOhmTkRU0qMO/aZcXT0MW8wZadpO1wEeh/Feqc1C4AM+qRwQN1yqFrRIvTnaq5+hFf56W8laZXCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:58:28.164382Z"},"content_sha256":"e43fe9fc10e7b4dc537c690bb606ed85ae2f14fd007b3df20e84d0a5ce829536","schema_version":"1.0","event_id":"sha256:e43fe9fc10e7b4dc537c690bb606ed85ae2f14fd007b3df20e84d0a5ce829536"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:JV45DKN6JZMAKAD4TSKJTPJJ2S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Deepti Gupta, Lopamudra Praharaj, Maanak Gupta, Om Solanki","submitted_at":"2026-07-05T16:12:16Z","abstract_excerpt":"This paper presents an adversarial security study of the Policy-Aware LLM Retrieval-Augmented Generation (PA-LLM-RAG) framework for Internet of Battlefield Things (IoBT) mission control. We propose Query-Agnostic Semantic Retrieval Poisoning, a novel attack that injects semantically crafted rules into the IoBT knowledge base achieving high retrieval ranking across all operator query types without requiring knowledge of runtime prompts. The attack achieves 85% LLM context corruption from a single injected rule (1.6% poisoning rate) and saturates at 7.7% poisoning, demonstrating that even minima"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04379","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.04379/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T02:19:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1g4451uyEhGdzsL//WrnP7niJpRGjdgAfTvPVWnQgq6mQ9UTiHRBgCrmPGg7lz7jg+doQsC6a6U/4y6HTiqWDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:58:28.164921Z"},"content_sha256":"3aef924e213375a146ef4a99c63243167e85d3422f402fe53c755ad64aa24791","schema_version":"1.0","event_id":"sha256:3aef924e213375a146ef4a99c63243167e85d3422f402fe53c755ad64aa24791"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/bundle.json","state_url":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T09:58:28Z","links":{"resolver":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S","bundle":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/bundle.json","state":"https://pith.science/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JV45DKN6JZMAKAD4TSKJTPJJ2S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:JV45DKN6JZMAKAD4TSKJTPJJ2S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bf25678a867720c0285976bdaff1941f5f864da84177f70b83dbaa50842f413f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","title_canon_sha256":"435ba51f6dc34d0d140af16d7142bd7378627dbd0f7e57df5611dc9ea287938b"},"schema_version":"1.0","source":{"id":"2607.04379","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.04379","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"arxiv_version","alias_value":"2607.04379v1","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.04379","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_12","alias_value":"JV45DKN6JZMA","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_16","alias_value":"JV45DKN6JZMAKAD4","created_at":"2026-07-07T02:19:15Z"},{"alias_kind":"pith_short_8","alias_value":"JV45DKN6","created_at":"2026-07-07T02:19:15Z"}],"graph_snapshots":[{"event_id":"sha256:3aef924e213375a146ef4a99c63243167e85d3422f402fe53c755ad64aa24791","target":"graph","created_at":"2026-07-07T02:19:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.04379/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper presents an adversarial security study of the Policy-Aware LLM Retrieval-Augmented Generation (PA-LLM-RAG) framework for Internet of Battlefield Things (IoBT) mission control. We propose Query-Agnostic Semantic Retrieval Poisoning, a novel attack that injects semantically crafted rules into the IoBT knowledge base achieving high retrieval ranking across all operator query types without requiring knowledge of runtime prompts. The attack achieves 85% LLM context corruption from a single injected rule (1.6% poisoning rate) and saturates at 7.7% poisoning, demonstrating that even minima","authors_text":"Deepti Gupta, Lopamudra Praharaj, Maanak Gupta, Om Solanki","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.04379","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e43fe9fc10e7b4dc537c690bb606ed85ae2f14fd007b3df20e84d0a5ce829536","target":"record","created_at":"2026-07-07T02:19:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bf25678a867720c0285976bdaff1941f5f864da84177f70b83dbaa50842f413f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-05T16:12:16Z","title_canon_sha256":"435ba51f6dc34d0d140af16d7142bd7378627dbd0f7e57df5611dc9ea287938b"},"schema_version":"1.0","source":{"id":"2607.04379","kind":"arxiv","version":1}},"canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4d79d1a9be4e5805007c9c9499bd29d497d5116d946c5bc725deb7d8147f3ed3","first_computed_at":"2026-07-07T02:19:15.559345Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T02:19:15.559345Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oqmVz6DUJUCDQdXVAYkQO9Sz0Ju/S6q5+JW/wMD1zdE/Iq4ez4FIr5d5niWIQ3+JH6NH5GZZyAq9KQ1nB6FaCg==","signature_status":"signed_v1","signed_at":"2026-07-07T02:19:15.560053Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.04379","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e43fe9fc10e7b4dc537c690bb606ed85ae2f14fd007b3df20e84d0a5ce829536","sha256:3aef924e213375a146ef4a99c63243167e85d3422f402fe53c755ad64aa24791"],"state_sha256":"67dbba1f4089951b55bcc4ed7bf35850b047eade738e3172e0ef108d92a293a7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vs3UoKQtRhU3x1yBw/0NCBydlmyDGHwhYTRtyCK/R0hLso1k/+86Yu3KJXa68SdpFZG/qOjJ/a1v8eqba+3xDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T09:58:28.169437Z","bundle_sha256":"e3849288a3e5b8f226d50ed9bcc95e76b48242fd23a0bbf01786bc9a2a7020ff"}}