{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:W2VEWW5SGC2LABKYCYDFAM5BDR","short_pith_number":"pith:W2VEWW5S","canonical_record":{"source":{"id":"2606.11265","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T04:45:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"abcc4e35c555695cb8b970e1f90d6bd6d4bf93fb1836135e12b4f69a15871982","abstract_canon_sha256":"cc2370bc0586d0197dca5643d89e9e878206b0c5f5166ec0dd1ee52536b695ae"},"schema_version":"1.0"},"canonical_sha256":"b6aa4b5bb230b4b0055816065033a11c511451afbb5c688c997834981eefc226","source":{"kind":"arxiv","id":"2606.11265","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.11265","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.11265v1","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.11265","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_12","alias_value":"W2VEWW5SGC2L","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_16","alias_value":"W2VEWW5SGC2LABKY","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_8","alias_value":"W2VEWW5S","created_at":"2026-06-11T00:08:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:W2VEWW5SGC2LABKYCYDFAM5BDR","target":"record","payload":{"canonical_record":{"source":{"id":"2606.11265","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T04:45:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"abcc4e35c555695cb8b970e1f90d6bd6d4bf93fb1836135e12b4f69a15871982","abstract_canon_sha256":"cc2370bc0586d0197dca5643d89e9e878206b0c5f5166ec0dd1ee52536b695ae"},"schema_version":"1.0"},"canonical_sha256":"b6aa4b5bb230b4b0055816065033a11c511451afbb5c688c997834981eefc226","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-11T00:08:15.593404Z","signature_b64":"EhhKS6OVFlp0hLbes/lMR9c1DGylxhGlGlCkUtNli7AyegzDv6dVGVMsFmb5r2C5RT35xtmiALJ8eoGn/2BXCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6aa4b5bb230b4b0055816065033a11c511451afbb5c688c997834981eefc226","last_reissued_at":"2026-06-11T00:08:15.592669Z","signature_status":"signed_v1","first_computed_at":"2026-06-11T00:08:15.592669Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.11265","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-11T00:08:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oYSnFdG4mEWQgqXM6aEa+DFVne4SxZipQ8B0NVJMh610Ec5GWJQM9EFtfZtxVT5cSoGzdNa8sEoQCrGF9tgNCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T16:10:39.604038Z"},"content_sha256":"7198a57579efc89ecb757ca8c7b78dce4802e1978763944750471c0e2d0f4929","schema_version":"1.0","event_id":"sha256:7198a57579efc89ecb757ca8c7b78dce4802e1978763944750471c0e2d0f4929"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:W2VEWW5SGC2LABKYCYDFAM5BDR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hongwei Li, Jiachen Li, Mingxuan Li, Shenghao Wu, Wenbo Jiang, Xi Nie","submitted_at":"2026-06-09T04:45:28Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate downstream model outputs through malicious knowledge injection. Existing studies mainly evaluate poisoning under simplified retrieval settings, overlooking practical RAG pipelines involving document chunking, dense retrieval, reranking, and grounded generation. In this paper, we revisit corpus poisoning under realistic multi-stage retrieval pipelines and show that many existing attacks substantially degrade after reranking despite achieving high retrieval-stage relevance. We identify retriev"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.11265","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.11265/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-11T00:08:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EFpX2XB1GCuC1MJW2YF6/Gehr52/lZ/kJqymYClxK2a52+cNWCkE4aZdMCj8IGYTNwHKUT3z2GCDpeqWGu1JAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T16:10:39.604576Z"},"content_sha256":"af28f8c72462c7998af28169ffc9784548361181215bab5360583f710446476f","schema_version":"1.0","event_id":"sha256:af28f8c72462c7998af28169ffc9784548361181215bab5360583f710446476f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/bundle.json","state_url":"https://pith.science/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T16:10:39Z","links":{"resolver":"https://pith.science/pith/W2VEWW5SGC2LABKYCYDFAM5BDR","bundle":"https://pith.science/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/bundle.json","state":"https://pith.science/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W2VEWW5SGC2LABKYCYDFAM5BDR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:W2VEWW5SGC2LABKYCYDFAM5BDR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cc2370bc0586d0197dca5643d89e9e878206b0c5f5166ec0dd1ee52536b695ae","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T04:45:28Z","title_canon_sha256":"abcc4e35c555695cb8b970e1f90d6bd6d4bf93fb1836135e12b4f69a15871982"},"schema_version":"1.0","source":{"id":"2606.11265","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.11265","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.11265v1","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.11265","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_12","alias_value":"W2VEWW5SGC2L","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_16","alias_value":"W2VEWW5SGC2LABKY","created_at":"2026-06-11T00:08:15Z"},{"alias_kind":"pith_short_8","alias_value":"W2VEWW5S","created_at":"2026-06-11T00:08:15Z"}],"graph_snapshots":[{"event_id":"sha256:af28f8c72462c7998af28169ffc9784548361181215bab5360583f710446476f","target":"graph","created_at":"2026-06-11T00:08:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.11265/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate downstream model outputs through malicious knowledge injection. Existing studies mainly evaluate poisoning under simplified retrieval settings, overlooking practical RAG pipelines involving document chunking, dense retrieval, reranking, and grounded generation. In this paper, we revisit corpus poisoning under realistic multi-stage retrieval pipelines and show that many existing attacks substantially degrade after reranking despite achieving high retrieval-stage relevance. We identify retriev","authors_text":"Hongwei Li, Jiachen Li, Mingxuan Li, Shenghao Wu, Wenbo Jiang, Xi Nie","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T04:45:28Z","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.11265","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7198a57579efc89ecb757ca8c7b78dce4802e1978763944750471c0e2d0f4929","target":"record","created_at":"2026-06-11T00:08:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cc2370bc0586d0197dca5643d89e9e878206b0c5f5166ec0dd1ee52536b695ae","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T04:45:28Z","title_canon_sha256":"abcc4e35c555695cb8b970e1f90d6bd6d4bf93fb1836135e12b4f69a15871982"},"schema_version":"1.0","source":{"id":"2606.11265","kind":"arxiv","version":1}},"canonical_sha256":"b6aa4b5bb230b4b0055816065033a11c511451afbb5c688c997834981eefc226","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6aa4b5bb230b4b0055816065033a11c511451afbb5c688c997834981eefc226","first_computed_at":"2026-06-11T00:08:15.592669Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-11T00:08:15.592669Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EhhKS6OVFlp0hLbes/lMR9c1DGylxhGlGlCkUtNli7AyegzDv6dVGVMsFmb5r2C5RT35xtmiALJ8eoGn/2BXCg==","signature_status":"signed_v1","signed_at":"2026-06-11T00:08:15.593404Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.11265","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7198a57579efc89ecb757ca8c7b78dce4802e1978763944750471c0e2d0f4929","sha256:af28f8c72462c7998af28169ffc9784548361181215bab5360583f710446476f"],"state_sha256":"9c9cb81a2450e9103f50ccf58cb4b3b9d3e90a7063d80cd97902343bd59a8942"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ltQcefMX1VOPUWPxfHMmpYm1CJcQa/sT9v80ElBNTzRo4wgpqXHnPfXIFjFeFi2firkJPPlPJ0PKeps7Pj7eAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T16:10:39.608256Z","bundle_sha256":"469a4ddd5471e96ee8603a28880b7f85e9940fe9c73e6023f9158e420787b7fc"}}