arXiv Computation and Language By Ivo Brink, Alexander Boer, Dennis Ulmer

Probing for Knowledge Attribution in Large Language Models

Read the original on arXiv Computation and Language →

The paper introduces a method for identifying the dominant knowledge source behind large language model (LLM) outputs, distinguishing between faithfulness violations (misuse of provided context) and factuality violations (errors in internal knowledge). A simple linear probe trained on hidden representations can reliably classify this source, and the authors present AttriWiki, a self‑supervised pipeline that generates labeled training data by prompting models to recall withheld entities or read them from context. Probes trained on AttriWiki achieve high Macro‑F1 scores across several models and datasets, generalize zero‑shot to a benchmark, and show that attribution mismatches can increase error rates by up to 70%. "whyItMatters":"The study demonstrates that knowing the source of an LLM’s answer is crucial for effective mitigation of hallucinations, as attribution mismatches significantly raise error rates."

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Computation and Language.

arXiv Machine Learning
Jul 30

RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning

arXiv:2607. 26339v1 Announce Type: new Abstract: Retrieval-Augmented Generation (RAG) systems ground large language models (LLMs) in external corpora, but this reliance exposes them to corpus poisoning: maliciously injected passages that manipulate retrieved evidence.

By Pushkal Kumar, Tucker Nielson, Tanish Kolhe, Shubham Zala, Vincent Li
arXiv AI
1d ago

Did the Model Use That? Counterfactual Training Boosts Self-Attribution in Language Models

The paper investigates whether language models can self‑attribute the influence of external information on their answers and proposes a counterfactual training method called CREDIT to improve this ability. Experiments show that most state‑of‑the‑art models rarely attribute influential information and often attribute non‑influential information, and that CREDIT significantly enhances attribution in several open models, outperforming other fine‑tuning and prompting approaches. CREDIT also distinguishes between answers that are genuinely changed by user suggestions and those that would have been given regardless, with some transfer to unseen information types and conflicting prompts.

By Zikai Zhou, Jiacheng Sang, Yilin Xu, Yufei Jin, Monica S. Lam