Retrieval Map

When you ask an AI a question, a RAG system first grabs the most relevant documents from its library to answer with. Here, each dot is a document, the diamond is your question, and the lines show what gets pulled in. Switch to Poisoned to see an attacker's planted document — crafted to look relevant to everything — get retrieved no matter what you ask.