Research questionHow can retrieval-augmented code generation resist targeted vulnerabilities from one task-matched poisoned artifact?Retrieved artifacts can influence generated code, allowing a malicious artifact to carry an attacker-selected weakness into the output without changing the underlying language model. The difficulty is preventing or detecting that influence when the attacker cannot access the deployed retrieval and generation components.