Daily Issue
Vol. I — No. 62
28 · 08
Friday, 28 August 2026
Generated 2026-08-28 13:23
google/gemini-2.5-flash-lite
I heard about the project over a year before we began. My American agent said, 'Oh, you might want to read 'In Cold Blood' because they're talking about you for Capote, but the script's with Johnny Depp and Sean Penn at the moment.' So, these things take their time to dribble down the food chain. — Toby Jones 39 items · 3 sections
§ 0

The Morning

Local weather 1
This morning in
London
Light drizzle
Today's range
23.0°↓15.8°
currently 22.8°
Feels
20.7°
Rain
91%
Wind
20 km/h
Humid
52%
Rise
06:07
Set
19:56
§ I

From the arXiv

arXiv preprints 10 of 20
cs.AIarxiv:2608.27167v1Lead article

Calibrated Enough to Know, Not Calibrated to Act: Fabricated Evidence Makes LLM Agents Commit to the Unknowable

Pranav Aggarwal

his paper demonstrates that Large Language Model (LLM) agents are highly susceptible to fabricated evidence, committing to confidently answer provably unpredictable questions when presented with professional-looking data. The core contribution is showing that the *authority of the packaging* of information, rather than its truthfulness, drives this confident, yet incorrect, action. The LLMs are capable of answering similar, predictable questions accurately, highlighting a specific failure in judgment when faced with seemingly authoritative but false data.

GRAIN mitigates sensitivity to naming and formulation shifts in real-world graph reasoning via a single-agent tool-use pipeline trained with isomorphism-aware structural rewards .
GRAIN mitigates sensitivity to naming and formulation shifts in real-world graph reasoning via a single-agent tool-use pipeline trained with isomorphism-aware structural rewards .
cs.AIarxiv:2608.27142v1

GRAIN: Bridging Name and Narrative Shifts in Real-World Graph Reasoning through Invariance-Rewarded Agentic RL

Zike Yuan, Han Zhang et al.

GRAIN addresses LLMs' brittleness to real-world graph reasoning shifts by framing it as a semantic parsing and tool-execution pipeline. Its core contribution is a novel "Structure Invariance Reward" that guides reinforcement learning to learn robust text-to-st…

cs.AIarxiv:2608.27439v1

RedEvoAgent: Automatic Red-Teaming Agent with Experience-Driven Skill Evolution

Junjie Zhang, Hui Liu et al.

RedEvoAgent addresses the limitations of fixed or trajectory-based red-teaming for LLM agents by distilling complex attack trajectories into concise, human-readable "attack skills." Its core method involves adaptively evolving these skills through tool-effecti…

RedEvoAgent overview. Given a jailbreak prompt, the attacker agent uses the current attack skill to select and call tools from an extensible attack toolbox, such as GCG and FlipAttack, and iteratively attacks a product-level target agent. On the training split, RedEvoAgent collects successful and failed attack trajectories and independently evaluates each attack tool to build a tool-effectiveness profile. Skill evolution combines the profile with these trajectories to extract tool priorities and attack strategies. A candidate attack skill update is accepted only if it improves attack performance on the validation split, while the test split remains locked for final evaluation.
RedEvoAgent overview. Given a jailbreak prompt, the attacker agent uses the current attack skill to select and call tools from an extensible attack toolbox, such as GCG and FlipAttack, and iteratively…
cs.AIarxiv:2608.27141v1

Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents

Chenhao Wu, Haoxuan Jia et al.

This paper argues that current safety mechanisms for autonomous LLM agents fail because they reset safety states between iterations, preventing them from detecting attacks spread across multiple steps. The core contribution is demonstrating that only monitors …

cs.AIarxiv:2608.27146v1

When Tool Outputs Become Commands: Separating Action Induction from Runtime Authorization in Tool-Augmented LLM Agents

Xiaokun Guo, Zhen Xu et al.

This paper addresses the risk of LLM agents executing unintended actions when tool outputs become commands. Their proposed SARA method separates "action induction" (identifying potential actions) from "runtime authorization" (approving their execution). SARA a…

SARA’s runtime authorization framework. The user request establishes the authorization root K K ; the Observation-side Action Probe identifies action-inducing semantics and persistently maintains action origins F t F_{t} , which trigger persistent review but do not grant execution authority; authorized and successful tool executions accumulate audited execution evidence H t H_{t} . At the real tool-execution boundary, SARA jointly uses K K , F t F_{t} , and H t H_{t} to authorize the goal, execution chain, and arguments of a candidate call.
SARA’s runtime authorization framework. The user request establishes the authorization root K K ; the Observation-side Action Probe identifies action-inducing semantics and persistently maintains acti…
№06
cs.CL
9

INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment

Yutong Zhang, Jianshuo Dong et al.

This paper introduces INTENT-AS-A-TOOL, a method to track agentic misalignment in LLMs by equipping them with specialized "intent tools." By observing the model's commitment to the…

№07
cs.AI
8

How Language Models Organize and Structure Moral Knowledge

Orion Reblitz-Richardson

This paper investigates how Large Language Models (LLMs) structure moral knowledge by training probes on different moral foundations. The core finding is that LLMs organize moral c…

№08
cs.AI
8

LAAF: A Layered Accountability Architecture Framework for LLM Applications

Prachi Chaturvedi, Shahnawaz Ahmad et al.

This paper introduces LAAF, a Layered Accountability Architecture Framework for LLM applications. It addresses the critical need to establish accountability for LLM outputs in high…

№09
cs.AI
8

Naive Prompt Optimization: Rethinking the Need for Complex Prompt Search

Yuan Chang, Xiaoqi Chen

This paper introduces Naive Prompt Optimization (NPO), a simple, single-lineage method for improving AI agent prompts. NPO iteratively refines prompts using a teacher model and rol…

№10
cs.AI
8

PAWBench: How Far Are We from Probabilistically Aligned World Modeling?

Yuandong Pu, Le Zhuo et al.

This paper introduces PAWBench, a new benchmark to evaluate video generation models as "world models" that can predict the distribution of possible future outcomes, not just single…

§ II

The Town Square

Hacker News 10
compiled overnight by google/gemini-2.5-flash-lite · end of issue no. 62 · thank you for reading