Lemma Critical Brief · Category archive
Data Provenance
RAG poisoning, training-data contamination, tampered document chains.
6 Briefs
Stripe's Trusted API Infrastructure Repurposed to Deliver Card-Skimming Code and Store Stolen Data
Allowlists Trust the Domain's Identity, Not the Provenance of What It Carries
Invisible Unicode Instruction Injection
The Gap Between Human-Read and Model-Read Input
OnlyFake
AI-Generated IDs Bypass Exchange KYC
SynthID Watermark Reverse-Engineering
How a Statistical Attack Strips the Provenance Mark from AI-Generated Content
Noroboto Attack
AI Document Review Input-Integrity Forgery via Embedded Lying Fonts
Discord 2.05 Billion Message Scraping via Public API
How Public Channel Data Gets Redistributed as AI Training Datasets