{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RJNDDW7NZIIALFAH6XNZUAS3LZ","short_pith_number":"pith:RJNDDW7N","canonical_record":{"source":{"id":"2411.18948","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-28T06:29:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d3bf6cdc5c7a129467f160997452bc4b4ec6a66a64522b491cfa78a305dbca40","abstract_canon_sha256":"6025f9bccf3c21585ed3fea9a3808b1ca4233b6e80601c78c517ae7aab9e544c"},"schema_version":"1.0"},"canonical_sha256":"8a5a31dbedca10059407f5db9a025b5e4f29ab3e0d0f60db50dbeb1b2e6e6722","source":{"kind":"arxiv","id":"2411.18948","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.18948","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"arxiv_version","alias_value":"2411.18948v5","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.18948","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_12","alias_value":"RJNDDW7NZIIA","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_16","alias_value":"RJNDDW7NZIIALFAH","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_8","alias_value":"RJNDDW7N","created_at":"2026-07-05T12:01:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RJNDDW7NZIIALFAH6XNZUAS3LZ","target":"record","payload":{"canonical_record":{"source":{"id":"2411.18948","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-28T06:29:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d3bf6cdc5c7a129467f160997452bc4b4ec6a66a64522b491cfa78a305dbca40","abstract_canon_sha256":"6025f9bccf3c21585ed3fea9a3808b1ca4233b6e80601c78c517ae7aab9e544c"},"schema_version":"1.0"},"canonical_sha256":"8a5a31dbedca10059407f5db9a025b5e4f29ab3e0d0f60db50dbeb1b2e6e6722","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:20.045625Z","signature_b64":"l1AjZ9XQICQHkDYbEGsIW8GCg63b9iha79VStadGKNv5VFTmrbe5rK1HQkFYOoIzMfkjN/m7M/DDtmOjcouWAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8a5a31dbedca10059407f5db9a025b5e4f29ab3e0d0f60db50dbeb1b2e6e6722","last_reissued_at":"2026-07-05T12:01:20.045126Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:20.045126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.18948","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oOGg8S1lSflTLimhkzMK/ftQiUv/W95IIkdUITq3B3DOmmYBt+I3JqrFUyLyKxcRNUAwZ+sl6sBZEFfnxfzSBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T11:15:39.653720Z"},"content_sha256":"8a392f380ef7e51dbeb6e697db5e23487e177584310cb341bfabac28858c283d","schema_version":"1.0","event_id":"sha256:8a392f380ef7e51dbeb6e697db5e23487e177584310cb341bfabac28858c283d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RJNDDW7NZIIALFAH6XNZUAS3LZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hao Luan, Jun Dai, Mingyu Luo, Ping Chen, Xiaoyan Sun, Xue Tan","submitted_at":"2024-11-28T06:29:46Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) enriches the input to LLMs by retrieving information from the relevant knowledge database, enabling them to produce responses that are more accurate and contextually appropriate. It is worth noting that the knowledge database, being sourced from publicly available channels such as Wikipedia, inevitably introduces a new attack surface. RAG poisoning involves injecting malicious texts into the knowledge database, ultimately leading to the generation of the attacker's target response (also called poisoned response). However, there are currently limited methods"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.18948","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.18948/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3lBnCYQANaSCO3QMtHysapA/2SsigErOGhY4kaoMGj78P2wBNvs9sd3/p/vfUMkWKnX3cocOnuSParBA9DvaBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T11:15:39.654106Z"},"content_sha256":"3e67346030ab7021e99e6711b53a9b4bb3e2af3dcf0395ea50e5183c8bc79be1","schema_version":"1.0","event_id":"sha256:3e67346030ab7021e99e6711b53a9b4bb3e2af3dcf0395ea50e5183c8bc79be1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/bundle.json","state_url":"https://pith.science/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-27T11:15:39Z","links":{"resolver":"https://pith.science/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ","bundle":"https://pith.science/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/bundle.json","state":"https://pith.science/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RJNDDW7NZIIALFAH6XNZUAS3LZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RJNDDW7NZIIALFAH6XNZUAS3LZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6025f9bccf3c21585ed3fea9a3808b1ca4233b6e80601c78c517ae7aab9e544c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-28T06:29:46Z","title_canon_sha256":"d3bf6cdc5c7a129467f160997452bc4b4ec6a66a64522b491cfa78a305dbca40"},"schema_version":"1.0","source":{"id":"2411.18948","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.18948","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"arxiv_version","alias_value":"2411.18948v5","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.18948","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_12","alias_value":"RJNDDW7NZIIA","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_16","alias_value":"RJNDDW7NZIIALFAH","created_at":"2026-07-05T12:01:20Z"},{"alias_kind":"pith_short_8","alias_value":"RJNDDW7N","created_at":"2026-07-05T12:01:20Z"}],"graph_snapshots":[{"event_id":"sha256:3e67346030ab7021e99e6711b53a9b4bb3e2af3dcf0395ea50e5183c8bc79be1","target":"graph","created_at":"2026-07-05T12:01:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.18948/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) enriches the input to LLMs by retrieving information from the relevant knowledge database, enabling them to produce responses that are more accurate and contextually appropriate. It is worth noting that the knowledge database, being sourced from publicly available channels such as Wikipedia, inevitably introduces a new attack surface. RAG poisoning involves injecting malicious texts into the knowledge database, ultimately leading to the generation of the attacker's target response (also called poisoned response). However, there are currently limited methods","authors_text":"Hao Luan, Jun Dai, Mingyu Luo, Ping Chen, Xiaoyan Sun, Xue Tan","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.18948","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8a392f380ef7e51dbeb6e697db5e23487e177584310cb341bfabac28858c283d","target":"record","created_at":"2026-07-05T12:01:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6025f9bccf3c21585ed3fea9a3808b1ca4233b6e80601c78c517ae7aab9e544c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-28T06:29:46Z","title_canon_sha256":"d3bf6cdc5c7a129467f160997452bc4b4ec6a66a64522b491cfa78a305dbca40"},"schema_version":"1.0","source":{"id":"2411.18948","kind":"arxiv","version":5}},"canonical_sha256":"8a5a31dbedca10059407f5db9a025b5e4f29ab3e0d0f60db50dbeb1b2e6e6722","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8a5a31dbedca10059407f5db9a025b5e4f29ab3e0d0f60db50dbeb1b2e6e6722","first_computed_at":"2026-07-05T12:01:20.045126Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:01:20.045126Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l1AjZ9XQICQHkDYbEGsIW8GCg63b9iha79VStadGKNv5VFTmrbe5rK1HQkFYOoIzMfkjN/m7M/DDtmOjcouWAg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:01:20.045625Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.18948","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8a392f380ef7e51dbeb6e697db5e23487e177584310cb341bfabac28858c283d","sha256:3e67346030ab7021e99e6711b53a9b4bb3e2af3dcf0395ea50e5183c8bc79be1"],"state_sha256":"4e0d68f4e7f516e317135ad7808d4e7fc3fd359dfac0fc65154fa046bad19340"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XoNa09n+caP1D2Mcy0KX2EqRFSR/7teIKqf8VjOIK00C9IXmmE2p8uxgSjvUWCNPxeLpF2yrVdujAKQzBPa+AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-27T11:15:39.656711Z","bundle_sha256":"68e63847796f33d9c72ae324604b1908df4694f46d06fc628d79cf9ddf7a7868"}}