mlsanityData to 7 Oct 2026

Beyond the Editing Canvas: Evidence Divergence in OOXML-to-LLM Ingestion

arXiv 2608.25880 ↗First posted 26 Aug 2026cs.SE cs.CRcited by 0

On the map: Retrieval-augmented generation → RAG robustness and adaptive retrieval

Abstract (arXiv)

LLM pipelines increasingly ingest Office Open XML (OOXML) documents (Word, Excel, and PowerPoint files) as first-class evidence in financial, compliance, and retrieval-augmented workflows, implicitly assuming semantic integrity: that the evidence consumed by the model matches the content shown in the Microsoft Office suite editing canvas. We show that this assumption can fail in OOXML-to-LLM pipelines. The same specification-valid OOXML file can yield one evidentiary view in Microsoft Office and another when extracted for an LLM. Each view is treated as authoritative by its consumer, a condition we call plural ground truth. The ingestion contract rarely states which view and semantic roles become model evidence or preserves how that evidence was derived. We call the specification-grounded OOXML constructions that induce such divergence evidence forks. We systematically traverse and mine the OOXML specification and confirm 21 evidence forks across Excel, Word, and PowerPoint, spanning six dimensions of view construction. All 13 tools in our extraction panel emit evidence from at least one fork. We test four native-ingestion LLM APIs and seven web chatbots. Each test document carries a trap: a task-relevant fact exposed by extraction but not shown in Office. Across this 21-mechanism evaluation, the four APIs return the trap in 48--76% of trials. For 20 of 21 mechanisms, at least one of the eleven interfaces returns the trap. Our measurements further show that exposure is shaped upstream of the model by the ingestion path and extractor configuration. A source-level survey of sixteen popular open-source LLM projects further shows that default OOXML ingestion paths concentrate on affected extractor families.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in RAG robustness and adaptive retrieval, one of 15 directions in Retrieval-augmented generation. Builds on 11 of its 59 references that are in the map. First posted on arXiv 26 Aug 2026.

Builds on

11 of 59 references.

References · 11

  1. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  2. 2023A Comprehensive Overview of Large Language Modelscited by 639
  3. 2021TAT-QA: A Question Answering Benchmark on a Hybrid of Tabular and Textual Content in Financecited by 402
  4. 2025Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Modelscited by 9
  5. 2025The Hidden Threat in Plain Text: Attacking RAG Data Loaderscited by 8
  6. 2025StruPhantom: Evolutionary Injection Attacks on Black-Box Tabular Agents Powered by Large Language Modelscited by 6
  7. 2025TRAPDOC: Deceiving LLM Users by Injecting Imperceptible Phantom Tokens into Documentscited by 6
  8. 2026Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screeningcited by 3
  9. 2025PhantomLint: Principled Detection of Hidden LLM Prompts in Structured Documentscited by 2
  10. 2025Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behaviorcited by 1
  11. 2026Semantic Integrity Failures in Document-to-LLM Supply Chainscited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Orchestrating Specialized Agents for Trustworthy Enterprise RAG
  2. 2026Encoded but Not Routed: Explaining the Table-Chart Gap in Scientific Claim Verification
  3. 2026EvidenT: Building Trustworthy Enterprise Assistants through Evidence Groundedness and Traceability
  4. 2026Agentic Interpretation: Lattice-Structured Evidence for LLM-Based Program Analysis
  5. 2025ThinkEval: Practical Evaluation of Knowledge Leakage in LLM Editing using Thought-based Knowledge Graphs
  6. 2026LLM within MCP Matters: Measuring Inefficient Resource Utilization Driven by LLMs
  7. 2026OmegaUse-OfficeVal: Benchmarking LLM Agents on Long-Horizon Office-Suite Tasks with Economic Grounding
  8. 2026ExtractBench: A Benchmark for Schema-Guided Enterprise Document Extraction