{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PZ37LZZ37EOQPFGH7QMIVQUKDY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd","cross_cats_sorted":["cs.AI","cs.DB"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0"},"schema_version":"1.0","source":{"id":"2512.00804","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"arxiv_version","alias_value":"2512.00804v3","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.00804","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_12","alias_value":"PZ37LZZ37EOQ","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_16","alias_value":"PZ37LZZ37EOQPFGH","created_at":"2026-06-25T01:17:47Z"},{"alias_kind":"pith_short_8","alias_value":"PZ37LZZ3","created_at":"2026-06-25T01:17:47Z"}],"graph_snapshots":[{"event_id":"sha256:5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e","target":"graph","created_at":"2026-06-25T01:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2512.00804/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"When answering user queries, LLMs often retrieve knowledge from external sources stored in retrieval-augmented generation (RAG) databases. These are often populated from unvetted sources, e.g. the open web, and can contain maliciously crafted data. This paper studies attacks that can manipulate the context retrieved by LLMs from such RAG databases. Prior work on such context manipulation primarily injects false or toxic content, which can often be detected by fact-checking or linguistic analysis. A more subtle threat, which we call epistemic bias injection (EBI), is where adversaries inject fa","authors_text":"Hao Wu, Prateek Saxena","cross_cats":["cs.AI","cs.DB"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.00804","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976","target":"record","created_at":"2026-06-25T01:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"510c6495c0237c9c37ad5852ed2c9782c50c3eb052a09c3cfd9b594f3f44c3fd","cross_cats_sorted":["cs.AI","cs.DB"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-11-30T09:27:18Z","title_canon_sha256":"63672dd5576cc0ccba2fbde0a652d906e4050403fd48e6858976527f2a303dd0"},"schema_version":"1.0","source":{"id":"2512.00804","kind":"arxiv","version":3}},"canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e77f5e73bf91d0794c7fc188ac28a1e1b24f84c09b1e0590920d194493a2d1c","first_computed_at":"2026-06-25T01:17:47.879140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-25T01:17:47.879140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IbtrHLkK4RpWffER0y2we1Pf5vsojsYGjgx9EnW2eP3nKa6455jdx0D1vrA74IP4pcur9IeGhDXjq/D7DSokBA==","signature_status":"signed_v1","signed_at":"2026-06-25T01:17:47.879565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2512.00804","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:231c9f0b11153f28770fc9704b7408e41e1b22ed90c25c2ebc39394ff9e6a976","sha256:5a03d1d0e874d2234a014ad69c04632e344f277152878e2ced4fc3bb051a536e"],"state_sha256":"1c0864a7d7e50a966c50ec52a008b0507833030b18b3bbc043e927c3717d3a61"}