{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PZ37LZZ37EOQPFGH7QMIVQUKDY","short_pith_number":"pith:PZ37LZZ3","canonical_record":{"source":{"id":"2512.00804","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","cross_cats_sorted":["cs.AI","cs.DB"],"title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0","abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd"},"schema_version":"1.0"},"canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","source":{"kind":"arxiv","id":"2512.00804","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"arxiv_version","alias_value":"2512.00804v3","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_12","alias_value":"PZ37LZZ37EOQ","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_16","alias_value":"PZ37LZZ37EOQPFGH","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_8","alias_value":"PZ37LZZ3","created_at":"2026-06-25T01:17:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PZ37LZZ37EOQPFGH7QMIVQUKDY","target":"record","payload":{"canonical_record":{"source":{"id":"2512.00804","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","cross_cats_sorted":["cs.AI","cs.DB"],"title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0","abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd"},"schema_version":"1.0"},"canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-25T01:17:47.879565Z","signature_b64":"IbtrHLkK4RpWffER0y2we1Pf5vsojsYGjgx9EnW2eP3nKa6455jdx0D1vrA74IP4pcur9IeGhDXjq/D7DSokBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","last_reissued_at":"2026-06-25T01:17:47.879140Z","signature_status":"signed_v1","first_computed_at":"2026-06-25T01:17:47.879140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2512.00804","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:17:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pt+AE1wN8Ti0JwouWapZb0gi9qEXGSfMnhZNVd5+aIaxUA2cajvllrekQq3lJfr5ri34fqcg9R1qBXtHZGByCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:49:01.725343Z"},"content_sha256":"231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976","schema_version":"1.0","event_id":"sha256:231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PZ37LZZ37EOQPFGH7QMIVQUKDY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.DB"],"primary_cat":"cs.CR","authors_text":"Hao Wu, Prateek Saxena","submitted_at":"2025-11-30T09:27:18Z","abstract_excerpt":"When answering user queries, LLMs often retrieve knowledge from external sources stored in retrieval-augmented generation (RAG) databases. These are often populated from unvetted sources, e.g. the open web, and can contain maliciously crafted data. This paper studies attacks that can manipulate the context retrieved by LLMs from such RAG databases. Prior work on such context manipulation primarily injects false or toxic content, which can often be detected by fact-checking or linguistic analysis. A more subtle threat, which we call epistemic bias injection (EBI), is where adversaries inject fa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.00804","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2512.00804/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-25T01:17:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G9CrPzCE3SnyDuDzW7otSeMi8m0orXIUPHZL7E512Sp9IT36Tg5PIZWV7IlIZ2LoSewpyhLQ6GsvXybwYIfCBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:49:01.726053Z"},"content_sha256":"5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e","schema_version":"1.0","event_id":"sha256:5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/bundle.json","state_url":"https://pith.science/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:49:01Z","links":{"resolver":"https://pith.science/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY","bundle":"https://pith.science/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/bundle.json","state":"https://pith.science/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PZ37LZZ37EOQPFGH7QMIVQUKDY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PZ37LZZ37EOQPFGH7QMIVQUKDY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd","cross_cats_sorted":["cs.AI","cs.DB"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0"},"schema_version":"1.0","source":{"id":"2512.00804","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"arxiv_version","alias_value":"2512.00804v3","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_12","alias_value":"PZ37LZZ37EOQ","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_16","alias_value":"PZ37LZZ37EOQPFGH","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_8","alias_value":"PZ37LZZ3","created_at":"2026-06-25T01:17:47Z"}],"graph_snapshots":[{"event_id":"sha256:5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e","target":"graph","created_at":"2026-06-25T01:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2512.00804/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"When answering user queries, LLMs often retrieve knowledge from external sources stored in retrieval-augmented generation (RAG) databases. These are often populated from unvetted sources, e.g. the open web, and can contain maliciously crafted data. This paper studies attacks that can manipulate the context retrieved by LLMs from such RAG databases. Prior work on such context manipulation primarily injects false or toxic content, which can often be detected by fact-checking or linguistic analysis. A more subtle threat, which we call epistemic bias injection (EBI), is where adversaries inject fa","authors_text":"Hao Wu, Prateek Saxena","cross_cats":["cs.AI","cs.DB"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.00804","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976","target":"record","created_at":"2026-06-25T01:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd","cross_cats_sorted":["cs.AI","cs.DB"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0"},"schema_version":"1.0","source":{"id":"2512.00804","kind":"arxiv","version":3}},"canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","first_computed_at":"2026-06-25T01:17:47.879140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-25T01:17:47.879140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IbtrHLkK4RpWffER0y2we1Pf5vsojsYGjgx9EnW2eP3nKa6455jdx0D1vrA74IP4pcur9IeGhDXjq/D7DSokBA==","signature_status":"signed_v1","signed_at":"2026-06-25T01:17:47.879565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2512.00804","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976","sha256:5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e"],"state_sha256":"1c0864a7d7e50a966c50ec52a008b0507833030b18b3bbc043e927c3717d3a61"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m6J6gZqDD5YkIMvQkVAgt/eVQRTtNRNgGOz18QqgIXZdFsSMh+2C3EKcW6ccLCJoYlMpFWtRwgWI8gQyXHc9Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:49:01.731992Z","bundle_sha256":"a175fbf7f606f0cd2b5ce14dac39ba4f54d0cd93db4d010e1591752c198b70c2"}}