Mitigating Database Leakage in RAG Systems with Keyword-Grounded Fact Substitution
KFS-RAG is proposed, a defense that mitigates information leakage by reformulating the retrieved context by identifying a small set of influential keywords from the retrieved context via an attention rollout plus a causal perturbation mechanism.