Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation

Multi-passage corpus poisoning often repeats one target claim across similar documents, creating correlated lexical and semantic patterns that similarity- and conflict-aware defenses can suppress jointly. We introduce DnD Divide and Doubt, a targeted attack based on two principles: distributing...