{"id":"https://openalex.org/W7166129392","doi":"https://doi.org/10.48550/arxiv.2606.26793","title":"MIRROR: Novelty-Constrained Memory-Guided MCTS Red-Teaming for Agentic RAG","display_name":"MIRROR: Novelty-Constrained Memory-Guided MCTS Red-Teaming for Agentic RAG","publication_year":2026,"publication_date":"2026-06-25","ids":{"openalex":"https://openalex.org/W7166129392","doi":"https://doi.org/10.48550/arxiv.2606.26793"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.26793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.26793","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139416430","display_name":"Inderjeet Singh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singh, Inderjeet","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139447427","display_name":"Andr\u00e9s Murillo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Murillo, Andr\u00e9s","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126917426","display_name":"Motoyoshi Sekiya","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sekiya, Motoyoshi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078591021","display_name":"Yuki Unno","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Unno, Yuki","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5078441918","display_name":"Junichi Suga","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suga, Junichi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6255999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6255999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10627","display_name":"Advanced Image and Video Retrieval Techniques","score":0.05810000002384186,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/novelty","display_name":"Novelty","score":0.755299985408783},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6492999792098999},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6098999977111816},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4993000030517578},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4878000020980835},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.44909998774528503},{"id":"https://openalex.org/keywords/suffix","display_name":"Suffix","score":0.44699999690055847},{"id":"https://openalex.org/keywords/prior-probability","display_name":"Prior probability","score":0.44620001316070557},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.3952000141143799}],"concepts":[{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.755299985408783},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6492999792098999},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6489999890327454},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6098999977111816},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4993000030517578},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4878000020980835},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4876999855041504},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.44909998774528503},{"id":"https://openalex.org/C2779804580","wikidata":"https://www.wikidata.org/wiki/Q102047","display_name":"Suffix","level":2,"score":0.44699999690055847},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.44620001316070557},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.3952000141143799},{"id":"https://openalex.org/C1667742","wikidata":"https://www.wikidata.org/wiki/Q10927554","display_name":"Image retrieval","level":3,"score":0.37119999527931213},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.35499998927116394},{"id":"https://openalex.org/C196083921","wikidata":"https://www.wikidata.org/wiki/Q7915758","display_name":"Variance (accounting)","level":2,"score":0.3402000069618225},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3357999920845032},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.33570000529289246},{"id":"https://openalex.org/C2778334786","wikidata":"https://www.wikidata.org/wiki/Q1586270","display_name":"Variation (astronomy)","level":2,"score":0.32760000228881836},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.32749998569488525},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.3248000144958496},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3215000033378601},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.32089999318122864},{"id":"https://openalex.org/C200985842","wikidata":"https://www.wikidata.org/wiki/Q3375503","display_name":"Random permutation","level":3,"score":0.3061000108718872},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C183322885","wikidata":"https://www.wikidata.org/wiki/Q17007702","display_name":"Context model","level":3,"score":0.29420000314712524},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2621000111103058},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.260699987411499},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.26793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.26793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multimodal":[0],"agentic":[1,102],"retrieval-augmented":[2],"generation":[3,62],"(RAG)":[4],"systems":[5],"expand":[6],"the":[7,79,124,128],"attack":[8,35,97],"surface":[9],"beyond":[10],"prompt":[11,93],"injection":[12],"to":[13,87],"include":[14],"text":[15,149],"poisoning,":[16],"image":[17,110],"injection,":[18],"direct-query":[19],"attacks,":[20],"and":[21,31,127,163],"orchestrator-level":[22],"tool":[23],"manipulation.":[24],"Existing":[25],"red-teaming":[26],"approaches":[27],"are":[28],"typically":[29],"surface-specific":[30],"often":[32],"recycle":[33],"known":[34],"templates;":[36],"on":[37,63,99,109,119,148,153],"text-poisoning":[38],"benchmarks":[39],"we":[40],"measure":[41],"73-84%":[42],"exact":[43],"duplication.":[44],"We":[45,156],"present":[46],"MIRROR,":[47],"a":[48,100],"unified":[49],"cross-surface":[50,130],"framework":[51],"that":[52],"performs":[53],"memory-guided":[54],"Monte":[55],"Carlo":[56],"tree":[57],"search":[58,89],"while":[59],"conditioning":[60],"candidate":[61,77],"retrieved":[64],"context":[65],"under":[66,82],"an":[67],"explicit":[68],"novelty":[69],"constraint.":[70],"A":[71],"deterministic":[72],"Novelty":[73],"Gate":[74],"rejects":[75],"any":[76],"matching":[78],"retrieval":[80,86],"set":[81],"normalized":[83],"comparison,":[84],"allowing":[85],"inform":[88],"priors":[90],"without":[91],"enabling":[92],"copying.":[94],"Across":[95],"four":[96,171],"surfaces":[98],"multimodal":[101],"RAG":[103],"target,":[104],"MIRROR":[105],"attains":[106],"76%":[107],"ASR":[108,118,147],"poisoning":[111,150],"compared":[112],"with":[113,159],"52%":[114],"for":[115],"baselines,":[116],"97%":[117],"orchestrator":[120],"attacks":[121],"at":[122],"half":[123],"query":[125],"cost,":[126],"lowest":[129],"variance":[131],"(coefficient":[132],"of":[133],"variation":[134],"0.47).":[135],"In":[136],"contrast,":[137],"specialized":[138],"baselines":[139],"collapse":[140],"across":[141,170],"surfaces:":[142],"suffix":[143],"optimization":[144],"reaches":[145],"79%":[146],"but":[151],"1%":[152],"direct":[154],"queries.":[155],"release":[157],"ART-SafeBench":[158],"41,815":[160],"in-package":[161],"records":[162,169],"runtime":[164],"adapters":[165],"yielding":[166],"41,991+":[167],"total":[168],"surfaces.":[172]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-27T00:00:00"}