List your company

Discourse-level opinion manipulation on Black-box RAG BGE

44.48RASRDiscourseFlip
7.372817.006426.6436.2736May 31, 2026

Evaluation results

MethodLinks
DiscourseFlipLLM=Llama3.1, Target=PRO2026.0544.4827.0994.8116.68
DiscourseFlipLLM=Qwen3, Target=PRO2026.0544.4826.8594.627.48
DiscourseFlipLLM=Llama3.1, Target=CON2026.0538.5832.5297.6525.64
DiscourseFlipLLM=Qwen3, Target=CON2026.0538.5830.3496.7721.12
Topic-FlipRAGLLM=Llama3.1, Target=CON2026.0524.0612.7785.9111.35
Topic-FlipRAGLLM=Qwen3, Target=CON2026.0524.0611.1976.256.57
Topic-FlipRAGLLM=Llama3.1, Target=PRO2026.0520.358.9760.544.77
Topic-FlipRAGLLM=Qwen3, Target=PRO2026.0520.358.4951.693.29
PoisonedRAGLLM=Llama3.1, Target=CON2026.0513.9514.667.787.65
PoisonedRAGLLM=Qwen3, Target=CON2026.0513.9512.656.834.89
Unic-RAGLLM=Llama3.1, Target=PRO2026.0512.0110.9965.447.24
Unic-RAGLLM=Qwen3, Target=PRO2026.0512.018.9346.343.44
Unic-RAGLLM=Llama3.1, Target=CON2026.059.679.7457.375.09
Unic-RAGLLM=Qwen3, Target=CON2026.059.6710.256.295.68
PoisonedRAGLLM=Llama3.1, Target=PRO2026.058.88.5121.532.64
PoisonedRAGLLM=Qwen3, Target=PRO2026.058.87.96151.05