Retrieval-augmented generation (RAG) systems pull in external documents to ground answers in both facts and rules. A new arXiv paper, "Right Facts, Wrong Rule: Scope-Transfer Poisoning of Retrieval-Augmented Generation" (arXiv:2609.35155v2), examines a failure mode where a rule is correct within its stated scope but is applied to a question that falls outside that scope.
The authors call this rule-scope misapplication and describe it as a form of poisoning: the retrieved text is, on its face, factual, but the rule attached to it is transferred to the wrong situation. This is distinct from attacks that simply inject false information, because the document itself may be accurate.
This digest entry draws on a single source, the arXiv abstract. The details of the attack method, datasets, and measured impact are not available from this source alone; the v2 replacement notice indicates the paper has been revised.