TY - RPRT TI - COMA: A Compositional Misleading Attack Class on Security-RAG, and a Causal Counterfactual Defense AU - Chinmay Gondhalekar AU - Urjitkumar Patel PY - 2026 UR - https://arxiv.org/abs/2608.17960 ID - 2608.17960 ER -