VAULT: Vigilant Adversarial Updates via LLM-Driven Retrieval-Augmented Generation for NLI
On the map: Retrieval-augmented generation → Privacy and security of RAG
Abstract (arXiv)
We introduce VAULT, a fully automated adversarial RAG pipeline that systematically uncovers and remedies weaknesses in NLI models through three stages: retrieval, adversarial generation, and iterative retraining. First, we perform balanced few-shot retrieval by embedding premises with both semantic (BGE) and lexical (BM25) similarity. Next, we assemble these contexts into LLM prompts to generate adversarial hypotheses, which are then validated by an LLM ensemble for label fidelity. Finally, the validated adversarial examples are injected back into the training set at increasing mixing ratios, progressively fortifying a zero-shot RoBERTa-base model.On standard benchmarks, VAULT elevates RoBERTa-base accuracy from 88.48% to 92.60% on SNLI +4.12%, from 75.04% to 80.95% on ANLI +5.91%, and from 54.67% to 71.99% on MultiNLI +17.32%. It also consistently outperforms prior in-context adversarial methods by up to 2.0% across datasets. By automating high-quality adversarial data curation at scale, VAULT enables rapid, human-independent robustness improvements in NLI inference tasks.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 11 of its 15 references that are in the map. First posted on arXiv 1 Aug 2025.
Builds on
11 of 15 references.
References · 11
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2024M3-Embedding: Multi-Linguality, Multi-Functionality, Multi-Granularity Text Embeddings Through Self-Knowledge Distillationcited by 1,073
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
- 2018Adversarially Regularising Neural NLI Models to Integrate Logical Background Knowledgecited by 46
- 2023Prompting Large Language Models for Counterfactual Generation: An Empirical Studycited by 37
- 2018Behavior Analysis of NLI Models: Uncovering the Influence of Three Factors on Robustnesscited by 17
- 2024A synthetic data approach for domain generalization of NLI modelscited by 15
- 2025Don't Lag, RAG: Training-Free Adversarial Detection Using RAGcited by 5
- 2021Extracting and filtering paraphrases by bridging natural language inference and paraphrasingcited by 2
Built on by
Citing papers per year: 2025: 3; 2026: 3.
6 papers.
- 2026FORT-Searcher: Synthesizing Shortcut-Resistant Search Tasks for Training Deep Search Agentscited by 7
- 2025Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GANcited by 2
- 2025NanoFlux: Adversarial Dual-LLM Evaluation and Distillation For Multi-Domain Reasoningcited by 1
- 2026RSRCC: A Remote Sensing Regional Change Comprehension Benchmark Constructed via Retrieval-Augmented Best-of-N Rankingcited by 1
- 2025Boundary on the Table: Efficient Black-Box Decision-Based Attacks for Structured Datacited by 0
- 2026Learning What to Fail On: Failure-Mode Contextual Bandits for Adversarial Data Curationcited by 0
- 2026Learning What to Fail On: Failure-Mode Contextual Bandits for Adversarial Data Curation19 Aug 2026
- 2026FORT-Searcher: Synthesizing Shortcut-Resistant Search Tasks for Training Deep Search Agents10 Jun 2026
- 2026RSRCC: A Remote Sensing Regional Change Comprehension Benchmark Constructed via Retrieval-Augmented Best-of-N Ranking22 Apr 2026
- 2025NanoFlux: Adversarial Dual-LLM Evaluation and Distillation For Multi-Domain Reasoning27 Sep 2025
- 2025Boundary on the Table: Efficient Black-Box Decision-Based Attacks for Structured Data26 Sep 2025
- 2025Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GAN26 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2024Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks
- 2024Enhancing Noise Robustness of Retrieval-Augmented Language Models with Adaptive Adversarial Training
- 2025Resurrecting saturated LLM benchmarks with adversarial encoding
- 2025Enhancing Retrieval Augmentation via Adversarial Collaboration
- 2026Closing the Distribution Gap in Adversarial Training for LLMs
- 2025Improving LLM Unlearning Robustness via Random Perturbations
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information
- 2025AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt