{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:QAO5KIFPDQUHEH56MTEKVZ63YN","short_pith_number":"pith:QAO5KIFP","canonical_record":{"source":{"id":"2412.16708","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-12-21T17:31:52Z","cross_cats_sorted":[],"title_canon_sha256":"6eb6a226bc7f20d729d719c1f6274f26ce29c4ce01da06cfa29670e764c91ec1","abstract_canon_sha256":"9a7c07a73d8e9302ee5086a0b22eeb1826bad3738c9f96a777a5d91c9eee8ea5"},"schema_version":"1.0"},"canonical_sha256":"801dd520af1c28721fbe64c8aae7dbc35cdfe2919a0c4cea124b7a542bb54bcf","source":{"kind":"arxiv","id":"2412.16708","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16708","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16708v2","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16708","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_12","alias_value":"QAO5KIFPDQUH","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_16","alias_value":"QAO5KIFPDQUHEH56","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_8","alias_value":"QAO5KIFP","created_at":"2026-07-05T11:43:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:QAO5KIFPDQUHEH56MTEKVZ63YN","target":"record","payload":{"canonical_record":{"source":{"id":"2412.16708","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-12-21T17:31:52Z","cross_cats_sorted":[],"title_canon_sha256":"6eb6a226bc7f20d729d719c1f6274f26ce29c4ce01da06cfa29670e764c91ec1","abstract_canon_sha256":"9a7c07a73d8e9302ee5086a0b22eeb1826bad3738c9f96a777a5d91c9eee8ea5"},"schema_version":"1.0"},"canonical_sha256":"801dd520af1c28721fbe64c8aae7dbc35cdfe2919a0c4cea124b7a542bb54bcf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:43:30.244594Z","signature_b64":"8VPKN5yP40hYT8kH8A3S4YOlCwSwhC0TDMlxP9pSvFfFOOTra8oue78wlbhbU/mTdII2Ek1Y6bd6/y6uU0ugAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"801dd520af1c28721fbe64c8aae7dbc35cdfe2919a0c4cea124b7a542bb54bcf","last_reissued_at":"2026-07-05T11:43:30.244064Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:43:30.244064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.16708","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t+BWPLBlObuvIA8DuyfLqL7+DqtyUW+z5MUtZWTlXrubMiNiwuPaCcZ8CyH7BkIhcHSJOT3u4O7Cq9OhRrAlDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:03:39.539253Z"},"content_sha256":"e6db99382e8a3f4c58085bf93e0b127104b1d314fd335296f4a7d7ce43cd6cf4","schema_version":"1.0","event_id":"sha256:e6db99382e8a3f4c58085bf93e0b127104b1d314fd335296f4a7d7ce43cd6cf4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:QAO5KIFPDQUHEH56MTEKVZ63YN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Claire Cardie, Jin Peng Zhou, Jinyan Su, Preslav Nakov, Zhengxin Zhang","submitted_at":"2024-12-21T17:31:52Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems have emerged as a promising solution to mitigate LLM hallucinations and enhance their performance in knowledge-intensive domains. However, these systems are vulnerable to adversarial poisoning attacks, where malicious passages injected into the retrieval corpus can mislead models into producing factually incorrect outputs. In this paper, we present a rigorously controlled empirical study of how RAG systems behave under such attacks and how their robustness can be improved. On the generation side, we introduce a structured taxonomy of context types-a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16708","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.16708/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:43:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Tjf2zRV7tH3xS4pxTIQqhaHJ47bVlX197vpyVzTqK5Ktcu6rvPBLbUKQjQCo/c8/n3JBRC/TK1t7njvZBhwFCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:03:39.539754Z"},"content_sha256":"8cc8fd9c7c14dd36186a1eca390562b64fa198e7ed793b97451ba15b7cd026c5","schema_version":"1.0","event_id":"sha256:8cc8fd9c7c14dd36186a1eca390562b64fa198e7ed793b97451ba15b7cd026c5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/bundle.json","state_url":"https://pith.science/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:03:39Z","links":{"resolver":"https://pith.science/pith/QAO5KIFPDQUHEH56MTEKVZ63YN","bundle":"https://pith.science/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/bundle.json","state":"https://pith.science/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QAO5KIFPDQUHEH56MTEKVZ63YN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QAO5KIFPDQUHEH56MTEKVZ63YN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9a7c07a73d8e9302ee5086a0b22eeb1826bad3738c9f96a777a5d91c9eee8ea5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-12-21T17:31:52Z","title_canon_sha256":"6eb6a226bc7f20d729d719c1f6274f26ce29c4ce01da06cfa29670e764c91ec1"},"schema_version":"1.0","source":{"id":"2412.16708","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.16708","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"arxiv_version","alias_value":"2412.16708v2","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.16708","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_12","alias_value":"QAO5KIFPDQUH","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_16","alias_value":"QAO5KIFPDQUHEH56","created_at":"2026-07-05T11:43:30Z"},{"alias_kind":"pith_short_8","alias_value":"QAO5KIFP","created_at":"2026-07-05T11:43:30Z"}],"graph_snapshots":[{"event_id":"sha256:8cc8fd9c7c14dd36186a1eca390562b64fa198e7ed793b97451ba15b7cd026c5","target":"graph","created_at":"2026-07-05T11:43:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.16708/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems have emerged as a promising solution to mitigate LLM hallucinations and enhance their performance in knowledge-intensive domains. However, these systems are vulnerable to adversarial poisoning attacks, where malicious passages injected into the retrieval corpus can mislead models into producing factually incorrect outputs. In this paper, we present a rigorously controlled empirical study of how RAG systems behave under such attacks and how their robustness can be improved. On the generation side, we introduce a structured taxonomy of context types-a","authors_text":"Claire Cardie, Jin Peng Zhou, Jinyan Su, Preslav Nakov, Zhengxin Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-12-21T17:31:52Z","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.16708","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e6db99382e8a3f4c58085bf93e0b127104b1d314fd335296f4a7d7ce43cd6cf4","target":"record","created_at":"2026-07-05T11:43:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9a7c07a73d8e9302ee5086a0b22eeb1826bad3738c9f96a777a5d91c9eee8ea5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.IR","submitted_at":"2024-12-21T17:31:52Z","title_canon_sha256":"6eb6a226bc7f20d729d719c1f6274f26ce29c4ce01da06cfa29670e764c91ec1"},"schema_version":"1.0","source":{"id":"2412.16708","kind":"arxiv","version":2}},"canonical_sha256":"801dd520af1c28721fbe64c8aae7dbc35cdfe2919a0c4cea124b7a542bb54bcf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"801dd520af1c28721fbe64c8aae7dbc35cdfe2919a0c4cea124b7a542bb54bcf","first_computed_at":"2026-07-05T11:43:30.244064Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:43:30.244064Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8VPKN5yP40hYT8kH8A3S4YOlCwSwhC0TDMlxP9pSvFfFOOTra8oue78wlbhbU/mTdII2Ek1Y6bd6/y6uU0ugAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:43:30.244594Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.16708","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e6db99382e8a3f4c58085bf93e0b127104b1d314fd335296f4a7d7ce43cd6cf4","sha256:8cc8fd9c7c14dd36186a1eca390562b64fa198e7ed793b97451ba15b7cd026c5"],"state_sha256":"53c3efb7b423d7ba4d29dc09f12056f683b1965f585771f2ea341f4a9e5f76b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5XCLGf5L55AYLaUGhp7TpJEsZEH8HZyEYOjpBTfwh6Q+C5unPu9d1OTsX1CSAyO64adUj9aitXqRrWUouHOKDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:03:39.544650Z","bundle_sha256":"cd4342fe52ba11cc127274f67f43608c7e0e446b10c9fe86b76ebdc3ef60a243"}}