← Back to all news
arXiv Computation and Language By Alexandr Goultiaev Tolstokorov, Kyriakos Mouratidis, Javad Dogani, Nikolaos Laoutaris

Rent-a-RAG: Embedding-Space Watermarks for Auditing Third-Party RAG

Read the original on arXiv Computation and Language →

The paper introduces DirBucket, a provider-side semantic watermarking system designed to audit document reuse in third‑party retrieval‑augmented generation (RAG) marketplaces. By embedding watermarks as meaning‑preserving paraphrases biased toward provider‑specific directions, DirBucket enables black‑box detection of unauthorized document reuse while maintaining retrieval quality. Experiments on mixed‑provider benchmarks show DirBucket consistently detects non‑compliance within 23 answers, resists adversarial laundering, and transfers effectively to real‑world corpora.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Computation and Language.

Related stories

Hugging Face Trending Papers
Sep 3

Rent-a-RAG: Embedding-Space Watermarks for Auditing Third-Party RAG

Rent‑a‑RAG introduces DirBucket, a provider‑side semantic watermarking system that embeds documents with meaning‑preserving paraphrases biased toward secret directions, allowing black‑box auditing of document reuse in multi‑provider retrieval‑augmented generation (RAG). The method consistently detects non‑compliance on a challenging benchmark, achieving strong target detection with no false positives and surviving adversarial post‑answer laundering. DirBucket’s detection transfers unchanged to real‑world corpora in clinical, cyber‑threat‑intelligence, and legal domains, demonstrating that embedding‑space watermarking can make third‑party RAG document reuse statistically auditable.

ragbenchmarkssafety
More like this →
arXiv AI
Aug 26

RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation

RAGSentinel is a training‑free, label‑free defense designed for black‑box retrieval‑augmented generation systems. It employs a surrogate encoder to detect hidden‑state shifts caused by retrieved documents, removes shared topic directions, and filters poisoned documents as geometric outliers from a robust majority consensus. The method is proven to recover a poison‑free majority context under honest‑majority and representation‑separation assumptions, and experiments show it keeps attack success rates low while maintaining accuracy across multiple datasets, LLM families, and adaptive attacks.

By Yueyang Quan, Anjun Gao, Yufei Xia, Minghong Fang, Zhuqing Liu
llmsragsafety
More like this →