Adversarial retrieval

Each of these questions has a hostile passage spliced into the retrieved set — the way it would arrive if an attacker could write to the corpus, or if a user uploaded a document. Eight of the nine architectures believe it. This is the failure that justifies the final stage, and it is not one that better retrieval fixes.