Arxiv benchmark for polymorphic Sybil poisoning in RAG, with forced exposure and a 4-way failure taxonomy instead of yet another toy attack.

TRACE flags poisoned RAG corpora by finding repeated high-influence tokens and checking if they steer answers, sadly enough.

Poisoning can make LLMs cough up training records they never saw, with a loss-landscape attack that also pokes at DP defenses.