RAGSieve Detects Knowledge Poisoning in RAG Systems with 95.2% AUROC

RAGSieve identifies injected malicious documents in RAG pipelines using self-referenced local contrast. It employs query-local scoring of top-5 candidates against ranks 6-20 to detect answer-anchor concentration, outperforming GMTP in detection rates.