TL;DR of the paper, generated automatically.

Research paper on attacks on signed offline RAG knowledge packs. Its own author summary is a long one.

• Gap: signatures prove who published a pack, not that its vectors match its text.
• Attack: vector checks within a cosine tolerance leave some queries open to hijacking.
• Fix: verify quantisation codes with a calibrated guard band; the paper says it accepted every honest vector.