Does RAG Know When Retrieval Is Wrong? Diagnosing Context Compliance under Knowledge Conflict
On the map: Retrieval-augmented generation → RAG robustness and adaptive retrieval
Abstract (arXiv)
Retrieval-Augmented Generation (RAG) is usually evaluated by whether the final answer is correct. Under knowledge conflict, this hides a key question: did the model follow retrieved evidence, rely on its parametric prior, or produce a post-hoc rationale? We study this as context compliance, the regime in which retrieved context controls the answer even when it conflicts with the model's prior knowledge. We introduce Context-Driven Decomposition (CDD), an inference-time diagnostic intervention that elicits contextual and prior answers, isolates the conflicting premise, and records a resolution trace that can be perturbed. Across Epi-Scale stress tests, TruthfulQA misconception injection, and cross-model reruns, CDD makes three behaviors visible. First, misleading retrieval can severely degrade accuracy: under a worst-case TruthfulQA misconception-injection probe, Standard RAG reaches only 15.0%. Second, better answers need not share the same mechanism: CDD improves adversarial accuracy on Gemini-2.5-Flash and shows directional gains across Claude variants, yet trace-perturbation sensitivity is high only on Gemini. Third, explicit decomposition improves controlled-conflict robustness over a conflict-aware instruction baseline on localized factual conflicts, with the clearest margins on Entity Swap (88.0% vs 79.3%) and Logical Contradiction (83.2% vs 75.4%). We frame RAG conflict handling as an observability problem.
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Placed in RAG robustness and adaptive retrieval, one of 15 directions in Retrieval-augmented generation. Builds on 25 of its 42 references that are in the map. First posted on arXiv 14 May 2026.
Builds on
25 of 42 references.
Closest ancestors · 3
Same direction, newest first
- 2024Astute RAG: Overcoming Imperfect Retrieval Augmentation and Knowledge Conflicts for Large Language Models9 Oct
- 2024ClashEval: Quantifying the tug-of-war between an LLM's internal prior and external evidence16 Apr
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflection17 Oct
Other references · 22
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,362
- 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memoriescited by 1,103
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2023Large Language Modelscited by 774
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 668
- 2024From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judgecited by 480
- 2023Making Retrieval-Augmented Language Models Robust to Irrelevant Contextcited by 364
10 more
- 2021Entity-Based Knowledge Conflicts in Question Answeringcited by 349
- 2023Adaptive Chameleon or Stubborn Sloth: Revealing the Behavior of Large Language Models in Knowledge Conflictscited by 333
- 2023Trusting Your Evidence: Hallucinate Less with Context-aware Decodingcited by 319
- 2024Knowledge Conflicts for LLMs: A Surveycited by 274
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 251
- 2024Corrective Retrieval Augmented Generationcited by 187
- 2022Rich Knowledge Sources Bring Complex Knowledge Conflicts: Recalibrating Models to Reflect Conflicting Evidencecited by 142
- 2026Enhancing Financial Report Question-Answering: A Retrieval-Augmented Generation System with Reranking Analysiscited by 20
- 2026Sustainable Hybrid Document-Routed Retrieval for Financial RAG: Resolving the Robustness-Precision Trade-offcited by 13
- 2025DSPC: Dual-Stage Progressive Compression Framework for Efficient Long-Context Reasoningcited by 9
Built on by
Citing papers per year: 2026: 15.
15 papers.
Sort:
By area:
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidancecited by 12
- 2026Beyond Accuracy: Measuring Bias Acknowledgment in Chain-of-Thought Reasoning for Responsible AI Evaluationcited by 8
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderationcited by 4
- 2026When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agentscited by 3
- 2026Same Question, Different Answer? Measuring and Mitigating Prompt Privilege for Equitable AI Accesscited by 2
- 2026Energy-Efficient On-Device RAG on a Mobile NPU: System Design and Benchmark on Snapdragon X Elitecited by 1
- 2026Chains That See, Answers That Don't: A Multi-Aspect Evaluation Recipe for Forced Chain-of-Thought on Video-MMEcited by 1
- 2026Auditing the Audit: Five Failure Modes in Benchmark-Validity Auditscited by 1
- 2026Agentic-SQL Revisited: Autonomy-Based Taxonomy and Empirical Benchmark Analysis for LLM Text-to-SQLcited by 1
- 2026MOSAIC: Orchestrating Collaborative Knowledge Tracing with Hierarchical Semantic Alignmentcited by 0
- 2026Probe Choice Changes Canary-Memorization Verdicts: Three Post-Hoc Disagreement Case Studies in a Text-Dominant LoRA-Tuned Autoregressive Testbedcited by 0
- 2026Governing Generative AI Across Financial Institutions: A Framework for Generative AI Risk Controlcited by 0
3 more
- 2026Exploratory As-Analyzed No-Detection of Culturally-Marked Predicate-Triggered PII Amplification in a Synthetic-English RAG Probe: A Predicate-Resource-Confounded Auditcited by 0
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systemscited by 0
- 2026Stale-Document Poisoning: When Outdated Retrieval Overrides Correct Model Answerscited by 0
- 2026Stale-Document Poisoning: When Outdated Retrieval Overrides Correct Model Answers25 Sep 2026
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systems3 Sep 2026
- 2026Agentic-SQL Revisited: Autonomy-Based Taxonomy and Empirical Benchmark Analysis for LLM Text-to-SQL15 Aug 2026
- 2026Same Question, Different Answer? Measuring and Mitigating Prompt Privilege for Equitable AI Access9 Aug 2026
- 2026Governing Generative AI Across Financial Institutions: A Framework for Generative AI Risk Control5 Jul 2026
- 2026Auditing the Audit: Five Failure Modes in Benchmark-Validity Audits1 Jul 2026
- 2026Probe Choice Changes Canary-Memorization Verdicts: Three Post-Hoc Disagreement Case Studies in a Text-Dominant LoRA-Tuned Autoregressive Testbed30 Jun 2026
- 2026MOSAIC: Orchestrating Collaborative Knowledge Tracing with Hierarchical Semantic Alignment27 Jun 2026
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderation27 Jun 2026
- 2026When AUC 0.998 Is Not Enough: A Candidate Evaluation Protocol for Hidden-State Probes of Indirect Prompt Injection in Multimodal Computer-Use Agents22 Jun 2026
- 2026Chains That See, Answers That Don't: A Multi-Aspect Evaluation Recipe for Forced Chain-of-Thought on Video-MME22 Jun 2026
- 2026Exploratory As-Analyzed No-Detection of Culturally-Marked Predicate-Triggered PII Amplification in a Synthetic-English RAG Probe: A Predicate-Resource-Confounded Audit16 Jun 2026
3 more
- 2026Beyond Accuracy: Measuring Bias Acknowledgment in Chain-of-Thought Reasoning for Responsible AI Evaluation13 Jun 2026
- 2026Energy-Efficient On-Device RAG on a Mobile NPU: System Design and Benchmark on Snapdragon X Elite9 Jun 2026
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidance29 May 2026
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidancecited by 12
- 2026Beyond Accuracy: Measuring Bias Acknowledgment in Chain-of-Thought Reasoning for Responsible AI Evaluationcited by 8
- 2026Chains That See, Answers That Don't: A Multi-Aspect Evaluation Recipe for Forced Chain-of-Thought on Video-MMEcited by 1
- 2026Chains That See, Answers That Don't: A Multi-Aspect Evaluation Recipe for Forced Chain-of-Thought on Video-MME22 Jun 2026
- 2026Beyond Accuracy: Measuring Bias Acknowledgment in Chain-of-Thought Reasoning for Responsible AI Evaluation13 Jun 2026
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidance29 May 2026
- 2026Energy-Efficient On-Device RAG on a Mobile NPU: System Design and Benchmark on Snapdragon X Elitecited by 1
- 2026Exploratory As-Analyzed No-Detection of Culturally-Marked Predicate-Triggered PII Amplification in a Synthetic-English RAG Probe: A Predicate-Resource-Confounded Auditcited by 0
- 2026Stale-Document Poisoning: When Outdated Retrieval Overrides Correct Model Answerscited by 0
- 2026Stale-Document Poisoning: When Outdated Retrieval Overrides Correct Model Answers25 Sep 2026
- 2026Exploratory As-Analyzed No-Detection of Culturally-Marked Predicate-Triggered PII Amplification in a Synthetic-English RAG Probe: A Predicate-Resource-Confounded Audit16 Jun 2026
- 2026Energy-Efficient On-Device RAG on a Mobile NPU: System Design and Benchmark on Snapdragon X Elite9 Jun 2026
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderationcited by 4
- 2026Same Question, Different Answer? Measuring and Mitigating Prompt Privilege for Equitable AI Accesscited by 2
- 2026Auditing the Audit: Five Failure Modes in Benchmark-Validity Auditscited by 1
- 2026MOSAIC: Orchestrating Collaborative Knowledge Tracing with Hierarchical Semantic Alignmentcited by 0
- 2026Probe Choice Changes Canary-Memorization Verdicts: Three Post-Hoc Disagreement Case Studies in a Text-Dominant LoRA-Tuned Autoregressive Testbedcited by 0
- 2026Governing Generative AI Across Financial Institutions: A Framework for Generative AI Risk Controlcited by 0
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systemscited by 0
- 2026The Civilization Framework: Sovereign-Anchored Communication Between Personal Multi-Agent Systems3 Sep 2026
- 2026Same Question, Different Answer? Measuring and Mitigating Prompt Privilege for Equitable AI Access9 Aug 2026
- 2026Governing Generative AI Across Financial Institutions: A Framework for Generative AI Risk Control5 Jul 2026
- 2026Auditing the Audit: Five Failure Modes in Benchmark-Validity Audits1 Jul 2026
- 2026Probe Choice Changes Canary-Memorization Verdicts: Three Post-Hoc Disagreement Case Studies in a Text-Dominant LoRA-Tuned Autoregressive Testbed30 Jun 2026
- 2026MOSAIC: Orchestrating Collaborative Knowledge Tracing with Hierarchical Semantic Alignment27 Jun 2026
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderation27 Jun 2026
Similar, not cited
Close in wording, no citation either way
- 2026When Context Misleads: Intent-Guided Decoding for Robust Retrieval-Augmented Generation
- 2025Beyond Black-Box Interventions: Latent Probing for Faithful Retrieval-Augmented Generation
- 2026When Confidence Takes the Wrong Path: Diagnosing Retrieval-State Lock-In in RAG
- 2026Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval
- 2026Prompt-Based Abstention Fails Under Misleading Context: A Controlled Study of Small Frozen RAG Models
- 2025Worse than Zero-shot? A Fact-Checking Dataset for Evaluating the Robustness of RAG Against Misleading Retrievals
- 2025Rethinking All Evidence: Enhancing Trustworthy Retrieval-Augmented Generation via Conflict-Driven Summarization
- 2026Facet-Level Tracing of Evidence Uncertainty and Hallucination in RAG