{"id":"W7138037567","doi":"10.18653/v1/2025.findings-ijcnlp.66","title":"Illusions of Relevance: Arbitrary Content Injection Attacks Deceive Retrievers, Rerankers, and LLM Judges","year":2025,"lang":"","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Illusion; Content (measure theory); Perception; Deception","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.000894148,0.0003947566,0.0006376785,0.0004362776,0.0005238361,0.0002152503,0.000829051,0.0003431081,0.0001935634],"category_scores_gemma":[0.000781284,0.0003996228,0.0001767123,0.001777174,0.0009359182,0.000900379,0.0009092225,0.0006035106,0.00001912657],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002250236,"about_ca_system_score_gemma":0.0005833163,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004133218,"about_ca_topic_score_gemma":0.0001940916,"domain_scores_codex":[0.9963419,0.0003101985,0.001146895,0.001170762,0.0005685242,0.0004617657],"domain_scores_gemma":[0.9959647,0.001241557,0.0003943704,0.001383899,0.0008205913,0.0001948736],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0002972367,0.0007622255,0.01250328,0.000654288,0.0002971094,0.0000056199,0.01084088,0.00009100557,0.005659112,0.8779398,0.03657918,0.0543703],"study_design_scores_gemma":[0.01096435,0.003871402,0.1685332,0.002649056,0.0006340987,0.0001657389,0.03235172,0.1114944,0.1392903,0.2428873,0.2833305,0.00382785],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5881877,0.01065188,0.3219189,0.03119839,0.002305928,0.002660389,0.0001331255,0.0004378678,0.04250585],"genre_scores_gemma":[0.9760789,0.002701546,0.01159526,0.002128631,0.000067609,0.00005519856,0.00001050038,0.00001700887,0.007345325],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.6350524,"threshold_uncertainty_score":0.9998456,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02542288503095858,"score_gpt":0.270656908554714,"score_spread":0.2452340235237554,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}