Coverage Is Not Containment: A Fundamental Limit of Admission-Time Defenses Against Coordinated Poisoning of Vector Retrieval

Factual evidence

What the source reports

Research demonstrates that admission-time vector defenses fail against coordinated, low-signature document poisoning in RAG systems.