{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XFTACO7BMFC46BMN5MG52OAZL6","short_pith_number":"pith:XFTACO7B","canonical_record":{"source":{"id":"2505.18543","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-24T06:17:59Z","cross_cats_sorted":["cs.IR","cs.LG"],"title_canon_sha256":"2fbf0e39a6cb2d2d501620cf94c00bc57959ad326c4a271e8c46d9f3b6bdf23c","abstract_canon_sha256":"2a4811471f70f06a225d49e14551b6c16f1b38f6fbdee5854562efe836a8e03e"},"schema_version":"1.0"},"canonical_sha256":"b966013be16145cf058deb0ddd38195f8adfdd88d8507e0cfcb1e4999f4e7788","source":{"kind":"arxiv","id":"2505.18543","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18543","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18543v1","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18543","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_12","alias_value":"XFTACO7BMFC4","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_16","alias_value":"XFTACO7BMFC46BMN","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_8","alias_value":"XFTACO7B","created_at":"2026-07-05T11:08:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XFTACO7BMFC46BMN5MG52OAZL6","target":"record","payload":{"canonical_record":{"source":{"id":"2505.18543","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-24T06:17:59Z","cross_cats_sorted":["cs.IR","cs.LG"],"title_canon_sha256":"2fbf0e39a6cb2d2d501620cf94c00bc57959ad326c4a271e8c46d9f3b6bdf23c","abstract_canon_sha256":"2a4811471f70f06a225d49e14551b6c16f1b38f6fbdee5854562efe836a8e03e"},"schema_version":"1.0"},"canonical_sha256":"b966013be16145cf058deb0ddd38195f8adfdd88d8507e0cfcb1e4999f4e7788","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:08:48.147362Z","signature_b64":"zA4SBXpjAkG0vmO0FQzPtElW4ST0TpJfls9Lgp0mWJ+LQUuNMoJZ4RSzODv8ebCC9ACvv/IWYWzaXQjL4tcKAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b966013be16145cf058deb0ddd38195f8adfdd88d8507e0cfcb1e4999f4e7788","last_reissued_at":"2026-07-05T11:08:48.146866Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:08:48.146866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.18543","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q+9sNiVY1K5oKhvOlOV7h2RCwiBfqnOObipMBN8D0acCyMz1v2tKIVz+3mZPfjoo7LEEdQIpYOHKmLfCk1A+Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:19:27.479150Z"},"content_sha256":"e486dbd1531c06425c9e4895f4ee88522f84d929d2da1c60224adcd9301a2feb","schema_version":"1.0","event_id":"sha256:e486dbd1531c06425c9e4895f4ee88522f84d929d2da1c60224adcd9301a2feb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XFTACO7BMFC46BMN5MG52OAZL6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Baolei Zhang, Dongzhe Zhang, Haoran Xin, Jiatong Li, Lihai Nie, Minghong Fang, Zheli Liu, Zhuqing Liu","submitted_at":"2025-05-24T06:17:59Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) has proven effective in mitigating hallucinations in large language models by incorporating external knowledge during inference. However, this integration introduces new security vulnerabilities, particularly to poisoning attacks. Although prior work has explored various poisoning strategies, a thorough assessment of their practical threat to RAG systems remains missing. To address this gap, we propose the first comprehensive benchmark framework for evaluating poisoning attacks on RAG. Our benchmark covers 5 standard question answering (QA) datasets and 10 "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18543","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.18543/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kiwZaXXqmh88xOd6FTnqKm8cUbgflriqj7N8uoD1HpoHdQH9zW2gXsKtnyvB16lgSer1zeu4Si2lvjUBHDUsBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:19:27.479660Z"},"content_sha256":"182c1d2612b3dd6d84e0bda0263e32641bcc99b9255d930ed94db4dc421a5e90","schema_version":"1.0","event_id":"sha256:182c1d2612b3dd6d84e0bda0263e32641bcc99b9255d930ed94db4dc421a5e90"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XFTACO7BMFC46BMN5MG52OAZL6/bundle.json","state_url":"https://pith.science/pith/XFTACO7BMFC46BMN5MG52OAZL6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XFTACO7BMFC46BMN5MG52OAZL6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T21:19:27Z","links":{"resolver":"https://pith.science/pith/XFTACO7BMFC46BMN5MG52OAZL6","bundle":"https://pith.science/pith/XFTACO7BMFC46BMN5MG52OAZL6/bundle.json","state":"https://pith.science/pith/XFTACO7BMFC46BMN5MG52OAZL6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XFTACO7BMFC46BMN5MG52OAZL6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XFTACO7BMFC46BMN5MG52OAZL6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2a4811471f70f06a225d49e14551b6c16f1b38f6fbdee5854562efe836a8e03e","cross_cats_sorted":["cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-24T06:17:59Z","title_canon_sha256":"2fbf0e39a6cb2d2d501620cf94c00bc57959ad326c4a271e8c46d9f3b6bdf23c"},"schema_version":"1.0","source":{"id":"2505.18543","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18543","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18543v1","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18543","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_12","alias_value":"XFTACO7BMFC4","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_16","alias_value":"XFTACO7BMFC46BMN","created_at":"2026-07-05T11:08:48Z"},{"alias_kind":"pith_short_8","alias_value":"XFTACO7B","created_at":"2026-07-05T11:08:48Z"}],"graph_snapshots":[{"event_id":"sha256:182c1d2612b3dd6d84e0bda0263e32641bcc99b9255d930ed94db4dc421a5e90","target":"graph","created_at":"2026-07-05T11:08:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.18543/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) has proven effective in mitigating hallucinations in large language models by incorporating external knowledge during inference. However, this integration introduces new security vulnerabilities, particularly to poisoning attacks. Although prior work has explored various poisoning strategies, a thorough assessment of their practical threat to RAG systems remains missing. To address this gap, we propose the first comprehensive benchmark framework for evaluating poisoning attacks on RAG. Our benchmark covers 5 standard question answering (QA) datasets and 10 ","authors_text":"Baolei Zhang, Dongzhe Zhang, Haoran Xin, Jiatong Li, Lihai Nie, Minghong Fang, Zheli Liu, Zhuqing Liu","cross_cats":["cs.IR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18543","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e486dbd1531c06425c9e4895f4ee88522f84d929d2da1c60224adcd9301a2feb","target":"record","created_at":"2026-07-05T11:08:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2a4811471f70f06a225d49e14551b6c16f1b38f6fbdee5854562efe836a8e03e","cross_cats_sorted":["cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-24T06:17:59Z","title_canon_sha256":"2fbf0e39a6cb2d2d501620cf94c00bc57959ad326c4a271e8c46d9f3b6bdf23c"},"schema_version":"1.0","source":{"id":"2505.18543","kind":"arxiv","version":1}},"canonical_sha256":"b966013be16145cf058deb0ddd38195f8adfdd88d8507e0cfcb1e4999f4e7788","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b966013be16145cf058deb0ddd38195f8adfdd88d8507e0cfcb1e4999f4e7788","first_computed_at":"2026-07-05T11:08:48.146866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:08:48.146866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zA4SBXpjAkG0vmO0FQzPtElW4ST0TpJfls9Lgp0mWJ+LQUuNMoJZ4RSzODv8ebCC9ACvv/IWYWzaXQjL4tcKAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:08:48.147362Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.18543","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e486dbd1531c06425c9e4895f4ee88522f84d929d2da1c60224adcd9301a2feb","sha256:182c1d2612b3dd6d84e0bda0263e32641bcc99b9255d930ed94db4dc421a5e90"],"state_sha256":"fa18f1fe04d1e8248a523de71ca24842ce48b1d2def92e9d71a684317907ba95"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wcBjDn7Vb4N2OENjlvOzj4WTvBLlO1wqa+hQNZGnh3NL6hSHQ1lSuNjTRB+qlmkdGQC1UAzW2KG7RcSZ5dbkBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T21:19:27.484742Z","bundle_sha256":"bcacda5e81efd9c15b1ba645877ee9027e53cfc08c36fe073b054858136aa131"}}