Retrieval vs. poison — Fighting AI supply chain attacks