split-knowledge-attacks

Introduces TopoGuard, a graph theory-based defense against split-knowledge attacks in RAG systems, where multiple individually benign documents combine to produce harmful outputs. The method detects malicious contexts by building a semantic similarity graph, significantly outperforming existing per-document filters like LlamaGuard.