{"id":"W7082279302","doi":"10.48448/sg6p-3t40","title":"Exploiting Instruction-Following Retrievers for Malicious Information Retrieval","year":2025,"lang":"en","type":"other","venue":"Underline Science Inc.","topic":"Geochemistry and Geologic Mapping","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"McGill University; Mila - Quebec Artificial Intelligence Institute","funders":"","keywords":"Work (physics); Information system; Information protection policy; Risk assessment","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0009606017,0.0002588018,0.0002713423,0.0006525671,0.0004629011,0.0004149037,0.001698693,0.0002634709,0.00005528165],"category_scores_gemma":[0.001518755,0.0002582207,0.000112899,0.00169652,0.000223192,0.001066398,0.0004599527,0.0002550574,0.00003458853],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001533679,"about_ca_system_score_gemma":0.0009296928,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006967223,"about_ca_topic_score_gemma":0.000006879831,"domain_scores_codex":[0.9978848,0.00001849331,0.0004025057,0.0005691918,0.0005984225,0.0005266044],"domain_scores_gemma":[0.9984548,0.0001028938,0.0003745882,0.0006668686,0.0002900495,0.0001107788],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00005317479,0.0001172301,0.0004101598,0.001240881,0.0002343024,0.00003098001,0.001793033,0.001312241,0.002743855,0.3820697,0.3694935,0.2405009],"study_design_scores_gemma":[0.0008362306,0.00006847037,0.00002127003,0.0003665666,0.00002666116,0.00001768326,0.0004008241,0.04870529,0.003475979,0.008783128,0.9366852,0.0006127032],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"other","genre_scores_codex":[0.00008574951,0.00005506934,0.5009375,0.001463258,0.002678458,0.0004607077,0.00002058974,0.0006123928,0.4936863],"genre_scores_gemma":[0.05801742,0.00006176509,0.3404829,0.002307473,0.0009986715,0.00006364646,0.0002217037,0.00006545529,0.597781],"genre_candidate":"other","genre_consensus":null,"teacher_disagreement_score":0.5671917,"threshold_uncertainty_score":0.999987,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0122172574850315,"score_gpt":0.2508977393615315,"score_spread":0.2386804818765,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}