SOURCE-LINKED INTELLIGENCE

TRIS: A Tri-Layer Retrieval Integrity Sieve Against Knowledge Poisoning

arXiv · AI, language, vision and robotics · article · Aug 31, 2026 · UTC

Retrieval-Augmented Generation (RAG) grounds large language models in external corpora, but implicit trust in retrieved documents creates a critical attack surface: PoisonedRAG shows that a handful of crafted passages can dominate dense retrieval and steer generation toward attacker-chosen answers. We present the Tri-Layer Sieve, a middleware defense that sanitizes retrieved evidence through cross-embedding-space clustering with an independent judge model, structural filtering of trigger-payload artifacts, and LLM consistency verification. The design exploits a key weakness of retrieval-stage

Read original source ↗ Open in workspace

recordType

paper

region

Global