Consistency Is the Attack Surface: Detecting Coordinated Retrieval Poisoning with Embedding Geometry↗ (원문, 새 창)

본문 미리보기

arXiv:2610.24834v1 Announce Type: new Abstract: Consistency-based defenses for retrieval-augmented generation (RAG) rest on an assumption that a sparse adversary breaks: a poisoning campaign may modify a negligible fraction of the corpus, yet retrieval concentrates its passages into the reader's context. Across four Natural Questions retrieval seeds, at least one injection reaches the top-5 in 94.1% of targeted query--seed rows, and all three form a retrieved majority in 52.9%. Under our short-