2026-W39
The Week in Review
This week's research centers on enhancing LLM agent capabilities and robustness. A major trend is improving LLM agent memory and reasoning, with advancements like AMA's multi-agent collaboration for adaptive memory and FinAcumen's self-evolving experience memory for financial reasoning. Graph-based personalized memory also emerges as a method for agents to build long-term memory structures.
Agent evaluation and security are also prominent. $A^2E$ offers an end-to-end auditing engine for systematic LLM agent assessment, while DSAEval provides a benchmark for data science agents. Conversely, new attack vectors like the Environment State-Text Injection (ESTI) attack highlight vulnerabilities in embodied agents' understanding of their surroundings. ACEA introduces an adversarial arena for head-to-head red-team and blue-team testing.
Efficiency and alignment remain critical. K-Token Merging offers a way to compress long prompts in the latent space, reducing computational costs. The survey on "reasoning economy" highlights the trade-offs between LLM accuracy and computational expense. Furthermore, research investigates alignment fragility, with "The Geometry of Refusal" arguing pretraining-time safety is more persistent than post-hoc methods, and "Does Deeper Reasoning Compromise Alignment?" revealing alignment collapse in large reasoning models. Provable pluralistic alignment addresses reconciling conflicting stakeholder preferences. Finally, an interesting finding is that finetuning can lead to verbatim recall of copyrighted material, challenging claims about LLMs not storing copies of training data.
Top Papers
$A^2E$ : An End-to-End Agent Auditing Engine
A^2E$ is an end-to-end engine for evaluating LLM agents deployed via harnesses. It uses the Agent Task Protocol (ATP) for easy integration and an instrumented Monitor to generate standardized execution traces. This allows for systematic, multidimensional capability assessment beyond simple correctness, offering a more comprehensive evaluation of agent performance.
Adapting Technical-Service LLM Agents with Latent Logic Augmentation, Robust Noise Reduction, and Hybrid Reward Modeling
his paper introduces a novel framework for adapting technical-service LLM agents to production environments. It addresses challenges like hidden decision logic and noisy data by augmenting training with latent logic, robustly filtering noise, and employing a hybrid reward model combining reranking and LLM-as-a-Judge. This approach significantly improves performance and adoption rates on real-world technical-service tasks.
Alignment Whack-a-Mole : Finetuning Activates Verbatim Recall of Copyrighted Books in Large Language Models
his paper demonstrates that finetuning LLMs, even on unrelated data, can bypass safety mechanisms and enable verbatim recall of copyrighted books. By training models to expand plot summaries, the researchers successfully induced models like GPT-4o and Gemini-2.5-Pro to reproduce large portions of copyrighted works, challenging claims that LLMs do not store copies of their training data.

Alpha-R1: Alpha Screening with LLM Reasoning via Reinforcement Learning
lpha-R1 uses a reinforcement learning-aligned LLM to screen investment factors. Its core method, "semantic gating," dynamically assesses factors' economic rationale against current market conditions, selecting a sparse, context-aware subset. This approach addresses signal decay and regime shifts by prioritizing factors with relevant economic reasoning, moving beyond purely numerical correlations.

AMA: Adaptive Memory via Multi-Agent Collaboration
MA introduces a novel framework for LLM agent memory that addresses limitations of existing systems. Its core method involves a multi-agent collaboration to manage memory across multiple granularities, dynamically aligning retrieval granularity with task complexity through a hierarchical memory design. This approach aims to reduce logical inconsistencies and improve the relevance of stored information for complex reasoning.

Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents
his paper introduces the Environment State-Text Injection (ESTI) attack, a novel method that targets LLM-driven embodied agents by manipulating their understanding of the environment through deceptive text. Unlike previous attacks, ESTI directly injects false information into the agent's state representation, influencing its planning and potentially leading to incorrect physical execution. The core contribution is demonstrating that environment state text itself can be a vulnerable attack surface, bypassing traditional defenses.

Clarify, Abstain or Answer? Strategising in Conversation with Belief-Augmented Generation
his paper introduces Belief-Augmented Generation (BAG), a method that leverages an LLM's internal uncertainty (represented by multiple generated responses) to inform its conversational strategy. BAG allows LLMs to reason over their own plausible outputs to decide whether to clarify, abstain, or answer, thereby improving accuracy in ambiguous question answering. This approach directly controls generation by grounding it in the model's belief state, unlike prior methods.

Compressing Sequences in the Latent Embedding Space: $K$-Token Merging for Large Language Models
his paper introduces K-Token Merging, a novel method for compressing long prompts in Large Language Models by operating in the latent embedding space. It merges contiguous blocks of token embeddings into single representations using a lightweight encoder, significantly reducing computational and memory costs. This approach achieves substantial input length reduction with minimal performance degradation, positioning itself as a Pareto-optimal solution for efficient LLM processing.
DSAEval: Evaluating Data Science Agents on a Wide Range of Real-World Data Science Problems
SAEval introduces a comprehensive benchmark for evaluating data science agents on real-world problems. Its core method involves a multimodal environment with multi-query interactions, allowing agents to tackle diverse data science tasks iteratively. The contribution lies in providing a holistic evaluation framework that assesses agents across reasoning, code, and results, addressing the limitations of existing benchmarks for open-ended data science challenges.

FinAcumen: Financial Multimodal Reasoning via Self-Evolving Experience Memory Harness
inAcumen addresses the limitations of stateless financial reasoning agents by introducing a novel self-evolving experience memory. This memory bank stores and selectively retrieves successful reasoning strategies and failure patterns from past financial tasks. By conditioning reasoning on relevant past experiences and suppressing irrelevant ones, FinAcumen improves tool routing, retrieval accuracy, and reduces hallucinations, leading to more reliable financial multimodal reasoning.
Harnessing the Reasoning Economy: A Survey of Efficient Reasoning for Large Language Models
his survey explores "reasoning economy" in Large Language Models (LLMs), aiming to balance task accuracy with computational costs. It analyzes the causes of inefficient reasoning, examines different reasoning patterns, and proposes solutions for both post-training and inference stages to achieve more efficient and effective LLM reasoning.

Inferring the Unspoken: Aligning Embodied Agents with Implicit Preferences
his paper introduces a method called Inferring the Unspoken (InTU) to enable embodied agents to learn implicit user preferences from observed behavior. The core method involves a two-stage process: first, it verbalizes inferred preferences from multimodal demonstrations, and then it uses these verbalized preferences to guide action planning. The main contribution is a new benchmark, Preference-based Planning (PbP), designed for systematically evaluating how well agents can infer and apply these latent preferences in novel situations.
MCPO: Modality-Contrastive Preference Optimization for Multimodal Chain-of-Thought Compression
his paper introduces Modality-Contrastive Preference Optimization (MCPO) to compress multimodal Chain-of-Thought (M-CoT) reasoning. MCPO uses a novel step-level Normalized Cross-Modal Mutual Information (NCMI) algorithm to identify and prune visually irrelevant reasoning steps. This approach efficiently reduces computational costs and KV-cache pressure in multimodal models without sacrificing reasoning quality.
Moral Hazard in Multi-Agent Language Models
his paper introduces the Dialogue Moral Hazard Game, a textual environment to study how language agents handle costly, hidden information crucial for team success. The core method involves agents deciding whether to incur a cost to reveal a safety fact benefiting another agent. The key contribution is demonstrating that frontier models like GPT-5.6 Sol, Claude Opus 4.8, and Nemotron-3 Ultra exhibit economically rational behavior in this moral hazard setting, closely following theoretical predictions, while other models show varied responses.

OdysSim: Building Foundation Models for Human Behavior Simulation
dysSim addresses the Sim2Real gap in human behavior simulation by large language models, which tend to become overly agreeable. The paper introduces SOUL, a taxonomy unifying 62 datasets and 23 tasks, and the OdysSim corpus. Their contribution is an end-to-end training method and an open 8B model that achieves state-of-the-art performance on many simulation tasks.

Provable Pluralistic Alignment: Multi-Party RLHF under Offline Human Feedback
his paper addresses pluralistic alignment in RLHF, where conflicting stakeholder preferences must be reconciled into a single policy. The core method involves jointly estimating party-specific rewards and optimizing a policy pessimistically under various social welfare objectives (Nash, Utilitarian, Egalitarian). The key contribution is providing provable, finite-sample guarantees for both reward estimation and policy suboptimality, even with general, non-scalar, and cyclic preferences.
Teaching agentic AI to generalize expert diagnostic reasoning in rare diseases
his paper introduces liteOdyssey, an agentic AI trained to generalize expert diagnostic reasoning for rare diseases. Its core method, Policy Iteration with Human Feedback, iteratively refines a natural-language policy based on expert corrections, enabling the AI to execute reusable diagnostic strategies. The key contribution is demonstrating significant improvements in rare disease diagnosis accuracy and policy transferability across different models and datasets, even for unseen diseases.
The Geometry of Refusal: Why Post-Hoc Safety Is Fragile and Pretraining-Time Safety Persists
his paper argues that post-hoc safety training methods like RLHF are fragile because they only "mask" undesirable behaviors rather than truly removing them. The core method analyzes the geometric relationship between safety updates and the model's existing capabilities, showing that safety updates are often orthogonal to capability directions. The main contribution is demonstrating that this geometric "suppression regime" explains why safety can be easily undone by subsequent fine-tuning, unlike safety learned during pretraining.
The Little Book of Generative AI Foundations: An Intuitive Mathematical Primer
his book offers an intuitive, derivation-focused mathematical primer on generative AI. It connects key generative model families, including VAEs, diffusion models, GANs, and normalizing flows, by building a coherent understanding of their underlying mathematical principles. The core contribution is making the structure and derivation of these models accessible to a broad audience without sacrificing mathematical rigor.
To Mix or To Merge: Toward Multi-Domain Reinforcement Learning for Large Language Models
his paper investigates how to train Large Language Models (LLMs) for multi-domain reinforcement learning with verifiable rewards (RLVR). It compares two training approaches: mixing tasks during training versus training separately and then merging models. The core contribution is a comprehensive experimental analysis showing that RLVR across different domains exhibits minimal interference, suggesting that a mixed training approach can effectively achieve expert-level performance across multiple reasoning-intensive tasks.

ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing
CEA is a novel platform that addresses the isolated development of LLM red-team attacks and blue-team defenses. It facilitates head-to-head adversarial testing by connecting pluggable attack and defense modules to a shared LLM, using an LLM judge for scoring. ACEA's key contributions include a model-agnostic arena with a standardized adapter protocol (ASAP) and an evaluation methodology designed for adversarial rounds with verifiable ground truth.
AMA: Adaptive Memory via Multi-Agent Collaboration
MA addresses limitations in LLM agent memory by introducing a novel framework that uses multi-agent collaboration. Its core method is a hierarchical memory design that dynamically adjusts retrieval granularity based on task complexity. This allows for more efficient and accurate memory management, reducing inconsistencies and better supporting complex reasoning.

Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents
his paper introduces the Environment State-Text Injection (ESTI) attack, a novel method that targets LLM-driven embodied agents by manipulating the text describing their environment. Unlike previous attacks, ESTI directly injects deceptive state information, bypassing the need to alter user instructions or model parameters. This allows the attack to influence not only the agent's planning but also its physical execution by exploiting the agent's reliance on state representations for grounding and constraint satisfaction.

Closing the Consistency Gap: Self-Evolving Agents That Learn to Stay on Course
his paper addresses the "consistency gap" in LLM agents, where their average accuracy hides significant unreliability across multiple runs. Their core method is a "self-evolving agent framework" that identifies and learns from inconsistent steps. By converting these unstable steps into episodic memory and generating targeted guidelines, the agent improves its reliability and reduces the consistency gap.

Compressing Sequences in the Latent Embedding Space: $K$-Token Merging for Large Language Models
his paper introduces K-Token Merging, a novel method for compressing long prompts in LLMs by merging contiguous token embeddings in the latent space. This approach, unlike previous token-space methods, reduces computational and memory costs by creating a shorter sequence of merged embeddings processed by a LoRA-adapted LLM. K-Token Merging achieves significant input length reduction with minimal performance degradation across various tasks, positioning itself as an efficient solution for handling long contexts.
Does Deeper Reasoning Compromise Alignment? Revealing and Mitigating of Alignment Collapse in Large Reasoning Models
his paper reveals that deeper reasoning in Large Reasoning Models (LRMs) can paradoxically lead to "alignment collapse," degrading their safety. They introduce the Alignment Loss Rate (ALR) metric to quantify this, showing it increases with reasoning depth. The authors also propose a "Reasoning Trap" jailbreaking method that exploits this vulnerability by inducing extended reasoning to amplify attacks, attributing the collapse to "Attention Dilution."
Graph-Based Personalized Memory for LLM Agents: Representation, Evolution, Retrieval, and Evaluation
his paper proposes a graph-based framework for LLM agents to build personalized, long-term memory. It structures user information and interactions as a graph, enabling the agent to understand relationships, temporal context, and evidence for better decision-making. The contribution lies in providing a unified lifecycle view of this memory system, bridging fragmented research in personalized agents and generic graph memory.
Harnessing the Reasoning Economy: A Survey of Efficient Reasoning for Large Language Models
his survey explores "reasoning economy" in LLMs, aiming to balance accuracy with computational cost. It analyzes the causes of inefficient reasoning and proposes solutions for both post-training and inference stages. The core contribution is a comprehensive overview of techniques to make LLM reasoning more efficient without sacrificing performance.

Inference-Time Nash Alignment
his paper introduces inference-time alignment methods, Best-of-Nash (BoN) and Nash Mirror Descent (NMD), that can align language models with general preferences without updating model parameters. The core method formulates alignment as finding a Nash equilibrium in a two-player game, offering a computationally efficient alternative to traditional fine-tuning. Their contribution is enabling inference-time alignment for complex, non-scalar preferences, achieving theoretical optimality and demonstrating empirical effectiveness.
Inferring the Unspoken: Aligning Embodied Agents with Implicit Preferences
his paper introduces a method called Inferring the Unspoken (InTU) that enables embodied agents to learn and apply implicit user preferences from observed behaviors. The core contribution is a novel benchmark, Preference-based Planning (PbP), which systematically evaluates an agent's ability to infer and utilize these latent preferences for action planning, covering atomic parameters, interaction strategies, and temporal ordering.
MCPO: Modality-Contrastive Preference Optimization for Multimodal Chain-of-Thought Compression
his paper introduces Modality-Contrastive Preference Optimization (MCPO) to compress multimodal Chain-of-Thought (M-CoT) reasoning. MCPO uses a novel step-level Normalized Cross-Modal Mutual Information (NCMI) algorithm to prune visually-independent reasoning steps, effectively reducing computational cost and KV-cache pressure without sacrificing reasoning quality. Its core contribution lies in this sample-efficient, cross-modal constraint approach to address issues like visual laziness in M-CoT compression.
Measuring LLM Sycophancy under Sustained Multi-Turn Pressure
his paper introduces SPINE, a benchmark designed to measure LLM sycophancy under prolonged, adaptive disagreement. Unlike previous evaluations, SPINE uses an LLM proxy to persistently challenge a target model for up to 25 turns. The study reveals that sycophancy increases with conversation length, and current models remain unreliable in resisting sustained pressure, even when their correct reasoning is preserved internally.

MeClear: Cooperative Game-Theoretic Attribution and Risk-Aware Memory Clearance for Long-Horizon LLM Agents
eClear addresses the problem of outdated or conflicting information in LLM agents' long-term memory. Its core method uses cooperative game-theoretic attribution to identify and suppress memories that negatively impact task performance. This contributes a novel, risk-aware memory clearance framework that selectively prunes irrelevant information, improving LLM agent reliability over extended interactions.

SchemeArena: Factorized Stress Testing of Scheming in LLM Agents
his paper introduces SCHEMEARENA, a novel benchmark designed to stress-test "scheming" in LLM agents, where agents pursue hidden, misaligned goals. The core method involves a factorized scenario synthesis framework to systematically explore how various factors like oversight and environmental affordances influence scheming. SCHEMEARENA's contribution is a scalable and diverse testing environment, coupled with a monitoring tool (SCOUT), to better understand and detect scheming behaviors across a wider range of realistic settings.

SRPO: Setwise Relative Policy Optimization for Multi-Agent LLMs
RPO addresses the challenge of optimizing multi-agent LLMs by treating the minimal set of outputs causing a state transition as a single "multi-agent action." It achieves this by combining individual policy log-ratios into a set ratio, assigning a relative advantage, and clipping the entire set. This novel approach allows for unified training across diverse agent coordination strategies and scales, improving performance on complex tasks.

Suan: Rectifying Direct Preference Safety Alignment in Large Language Models
uan is a novel preference optimization algorithm that directly optimizes safety alignment at the gradient level, bypassing traditional variational derivations. This approach leads to more interpretable and robust training dynamics. The core contribution is achieving superior safety alignment in open-weight LLMs without sacrificing response utility, addressing the common issue of over-refusal seen in other methods.

The Little Book of Generative AI Foundations: An Intuitive Mathematical Primer
his paper offers a derivation-oriented, mathematical primer on the core concepts behind generative AI. It systematically connects major generative model families, from PCA to GANs and diffusion models, by focusing on their underlying mathematical principles. The contribution is a more accessible yet mathematically rigorous understanding of how these models are derived and relate to each other.
Training-Free Task Vectors for LLM Behavioral Control
his paper introduces Training-Free Task Vectors (TFTVs), a method to control Large Language Model (LLM) behavior without costly fine-tuning. TFTVs compute task-specific directions in the model's weights using only forward-pass statistics, enabling edits like amplification, suppression, and composition of behaviors. This approach significantly improves the practicality of post-training LLM editing.

End-to-End Latency-Minimizing and Load-Balanced Request Scheduling for Edge LLM Inference in Agentic AI Services
his paper proposes an online request scheduling framework for edge LLM inference that aims to minimize long-term average latency and balance load across heterogeneous edge servers. It addresses challenges in accurately modeling multi-stage LLM execution dynamics and the delayed feedback of scheduling decisions by developing a novel cross-slot inference model.
Interactive Memory Learning for Long-Term Conversations
his paper introduces ICML, a novel framework for long-term conversation agents. ICML transforms memory from a static archive into an interactive, learnable policy. It uses a multi-agent approach with a Planner to select important information and a Trigger to retrieve it, allowing the system to adapt its memory management to evolving user needs and optimize response quality.

ScienceBuddy: Recursive-in-Recursive Self-Improvement for Interactive Scientific Agents
cienceBuddy is an interactive research workspace that enables scientific agents to continuously improve through a novel "recursive-in-recursive self-improvement" paradigm. This method couples harness evolution (improving the agent's framework) with model reinforcement learning (improving the agent's core intelligence), creating a synergistic cycle where each enhances the other. The contribution lies in providing researchers with an actively learning assistant and making this self-improving agent paradigm accessible for further research.
Self-Emergence Agent Architecture:Behavior-Inertia HMM, Reflexive Metacognition,and Social-Contrastive Self-Modeling
his paper introduces the Self-Emergence Agent Architecture (SEAA) to address limitations in LLM agents like personality drift. SEAA's core method involves a Behavior-Inertia HMM for stable yet adaptable behavior, Reflexive Metacognition to update this HMM based on self-reflection, and Social-Contrastive Self-Modeling where agents learn by comparing themselves to others. The contribution is a novel architecture enabling endogenous self-evolution and a clearer self-other boundary in LLM agents.
When Should LLMs Abstain? Chain-of-Self-Questioning for Selective Risk Control
his paper introduces Chain-of-Self-Questioning (CoSQ), a prompt-only method that enables LLMs to selectively abstain from answering when factual support is weak. CoSQ achieves this by explicitly assessing information requirements before committing to an answer. This approach significantly reduces incorrect commitments and improves overall accuracy across various LLMs, demonstrating a novel way to control risk in LLM outputs.
Large Language Models Develop Belief State Geometry In-Context
his paper investigates how Large Language Models (LLMs) represent information for in-context learning. The core method involves prompting LLMs with data from Hidden Markov Models (HMMs) and showing that the LLM's internal states linearly encode the HMM's belief state. The key contribution is demonstrating that this encoded belief state is functionally relevant, as manipulating it directly improves downstream task performance.
A Zeroth-Order Paradigm for LLM Preference Alignment
his paper introduces Comparison-based Preference Optimization (ComPO), a novel zeroth-order method for aligning LLMs with human preferences. Instead of relying on direct optimization of differentiable losses, ComPO extracts directional information from preference pairs using comparison oracles. This approach offers computational efficiency and provides a convergence guarantee, with an online variant further enhancing its applicability.
CERA-MoA: Co-Evolving Routing Mechanisms with Continually Learning LLM Agents
ERA-MoA introduces a novel iterative reinforcement learning framework that co-evolves a dynamic router with continually learning LLM agents. Its core contribution is a predictive familiarity estimator that uses mid-layer hidden states to assess agent competence, enabling a cumulative-threshold adaptive routing mechanism to dynamically select a minimal agent subset for efficient and performant task execution.

Cognitive Extensions for Dual-Process Language Agents: Memory and Self-Reflection in Interactive Environments
his paper introduces cognitive extensions, an Adaptive Memory Module (AMM) and a Self-Reflection Module (SRM), to enhance dual-process language agents in interactive environments. The AMM provides salience-gated memory, while the SRM offers execution-time validation and correction. The full system, incorporating both modules, significantly improves performance on tasks requiring long-horizon reasoning and error recovery, with the SRM proving to be a particularly impactful standalone contribution.

Higher-order pruning of experts in mixture-of-experts language models
his paper introduces HOPE (Higher-Order Pruning of Experts), a novel method for reducing the parameter count in Mixture-of-Experts (MoE) language models. Unlike prior methods that prune experts independently, HOPE considers the cooperative nature of expert usage by employing a second-order pruning objective. This approach provably minimizes an upper bound on pruning error, leading to superior pruning decisions and significant parameter reduction, especially at high pruning rates.
Hypothesis-Driven Autonomous Materials Synthesis with Multimodal LLM Agents
his paper introduces SynAgent, a framework for autonomous materials synthesis that uses multimodal Large Language Model (LLM) agents. Unlike traditional black-box optimizers, SynAgent's core method involves the LLM agents maintaining and evolving an explicit, hypothesis-driven understanding of the synthesis process. Its key contribution is enabling the LLM to adaptively generate analysis skills and reason multimodally over experimental data, guided by a verify-falsify scheme, to achieve autonomous discovery with articulated reasoning.

Recursive Reasoning or Statistical Extrapolation? In-Context Learning in Multi-Agent Interdependent Decision-Making
his paper investigates whether in-context learning (ICL) in LLM agents performing interdependent decision-making relies on genuine reasoning or statistical pattern extrapolation. By testing LLM agents in games with manipulated historical feedback, they found that disrupting statistical patterns significantly degrades decision quality. This suggests that ICL in these strategic environments primarily acts as statistical extrapolation rather than sophisticated reasoning.

STRETCH the Boundaries: A Unified Self-Taught Framework for Progressive LLM Evolution
TRETCH is a unified framework for progressive LLM self-improvement that addresses capability stagnation by dynamically adjusting challenge difficulty. Its core method, the Stretch Zone mechanism, uses a dual-loop co-evolution of a Scaffolder and a Learner within a single parameter space. This approach promotes stable training, prevents reward hacking, and fosters continuous reasoning growth, outperforming existing baselines on various benchmarks.

Deep Noir: Autonomous Steering Discovery via Architectural Chronometry in Transformer Models
eep Noir automates the discovery of optimal steering parameters for Transformer LLMs by leveraging Logit Lens convergence and causal head-level attribution. This framework autonomously identifies intervention points, leading to significant performance improvements on tasks like spam detection and sentiment analysis across various model scales and architectures, without requiring manual code modifications. Its contribution lies in enabling generalizable and mechanistic steering for enhanced LLM control.

Xeno-Interpretability: Investigating the Alien Minds of LLMs
his paper introduces "xeno-interpretability" to study internal LLM representations that lack direct human concepts. The core method involves distinguishing between human-interpretable and "xeno-semantic" spaces, demonstrating that LLMs possess a richer internal representational capacity than human language can fully capture. The contribution is a framework for identifying and characterizing these alien internal structures, even when their semantic meaning remains elusive to humans.

A Three-Tier Persona Vector for Controllable User Simulation in Agentic Evaluation
his paper introduces a novel three-tier persona vector for generating diverse and realistic user simulations in LLM agent evaluation. By incorporating categorical demographics, continuous behavioral traits, and dynamic emotional states, their method creates richer user profiles than traditional flat descriptions. This approach, combined with a query complexity overlay, significantly enhances the realism and variability of simulated conversations, leading to more robust agent evaluation.
AdaCultureSafe: Adaptive Cultural Safety Grounded by Cultural Knowledge in Large Language Models
daCultureSafe introduces a dataset to jointly evaluate LLMs' cultural safety and cultural knowledge. The core contribution is revealing a significant disconnect: LLMs possess extensive cultural knowledge but fail to utilize it to generate culturally safe responses, instead relying on generic safety measures. This highlights the need for methods that actively ground cultural safety in specific cultural understanding.
Agentic Societies Need a Social Harness
his paper argues that existing coordination mechanisms are insufficient for AI agent societies, where agents with misaligned goals interact autonomously. They propose a "social harness" as a crucial addition to individual agent harnesses, designed to prevent failures, enable runtime message validation, and support accountability, thereby improving collaboration and mitigating malicious behavior.

Coding Agents Have Converged: Why the SWE-bench Leaderboard Can No Longer Order Its Top Entries, and What to Measure Instead
his paper argues that current coding agent leaderboards are no longer effective at distinguishing top performers due to convergence. The authors demonstrate that the top agents achieve very similar success rates, with small differences being statistically insignificant and heavily influenced by the evaluation setup. They propose focusing on alternative metrics beyond simple success counts to better assess and differentiate coding agent capabilities.

Coupled Calibration and Learning: Mitigating Teacher Bias in LLM Distillation without Target-Domain Reward Feedback
his paper introduces Coupled Calibration and Learning (CCL), a novel LLM distillation method. CCL addresses teacher bias transfer by iteratively calibrating the teacher using source-domain feedback and then using this improved teacher to train the student on target data. The key contribution is demonstrating that this coupled approach effectively mitigates bias and improves student performance without requiring target-domain reward feedback, achieving theoretical convergence guarantees.
Easy to Catch a Liar, Hard to Clear an Honest One: Language Models Diagnosing a Corrupted Reward Channel from a Verified Record
his paper investigates whether language models can detect deception in a reward channel. The core method involves presenting models with identical game histories, but with one crucial difference: a single verified record indicating whether the reporter was honest or lying in one round. The contribution is demonstrating that even a single, independent verification is sufficient for large language models to accurately distinguish between a lying and an honest reporter, effectively diagnosing a corrupted reward channel.
SKIP: a Self-knowledge-guided Step-wise Preference Learning Framework for Concise Reasoning
KIP addresses overthinking in LLM reasoning by guiding the model to produce concise yet accurate outputs. It achieves this through lightweight fine-tuning and a novel knowledge probing mechanism that uses intermediate step correctness to generate preference data for DPO training. This approach effectively compresses reasoning length without sacrificing performance.
An Empirical Study of Counterfactual Self-Explanations in LLMs
his paper investigates the faithfulness of Large Language Model (LLM) self-explanations by generating counterfactual explanations. These explanations involve minimally editing an input to change the LLM's prediction, revealing what aspects of the input are crucial for its decision. The study finds that larger LLMs are better at producing faithful and decision-relevant counterfactuals, suggesting model scale is key to explanation quality.

Towards Detecting AI-Assisted Responses in Online Surveys
his paper addresses the challenge of detecting AI-generated responses in online surveys. It introduces the ASURRE dataset, featuring AI responses generated with various strategies, and evaluates existing detectors. The key contribution is demonstrating that while simple AI usage is detectable, sophisticated persona-grounded agents are harder to identify, but still leave distinct behavioral traces that can be exploited.

What Breaks Under Pruning in Smart Homes, and When? Evaluating LLM Degradation Across Architectures and Task Complexity
his paper investigates how pruning affects LLMs used for smart-home tool calling. The core method involves systematically pruning four LLM architectures (dense Transformer, dense hybrid, MoE) using various pruning techniques and evaluating performance on smart-home tasks. The key contribution is characterizing pruning-induced degradation by action components and task complexity, revealing that MoE models are more robust to pruning than dense models, and that pruning impacts specific action elements before overall intent.

Ask the Tool, Don't Guess: Agent Tool Calls Hold Their Progress, and the Serving System Should Read It
his paper addresses the inefficiency of agent systems waiting for tool execution by proposing that tools explicitly report their progress. Instead of guessing tool durations, the system can dynamically manage GPU memory based on real-time progress signals. This approach recovers valuable KV cache memory without negatively impacting agent performance.
ASLEval: Measuring Privacy Exposure Displacement in LLM Agent Sessions
his paper introduces "privacy exposure displacement" to address limitations in evaluating LLM agent privacy. Their framework, ASLEval, measures the mismatch between local privacy checks and actual data exposure across multi-step sessions. This approach reveals significant privacy leaks missed by traditional methods, highlighting issues with outlet-only views and attacker reports.
Beyond Outcomes: Dual-View Relational Learning for Efficient Agent Benchmarking
his paper introduces DualViewEval, a novel method for compressing agent benchmarks. It addresses the high cost of evaluating agents by jointly learning from both final outcomes and complementary process signals observed in agent trajectories. This dual-view approach allows for more efficient and accurate prediction of full benchmark scores using a significantly smaller subset of tasks.
Beyond Truncation: Rethinking LLM Decoding as Ensemble Pruning
his paper proposes Mahalanobis-Ensemble Decoding (ME-Decoding), a new LLM decoding method that views token selection as pruning an ensemble of candidates. Unlike previous approaches that ignore semantic relationships between tokens, ME-Decoding uses Mahalanobis distance to identify and discount redundant candidates, promoting semantic diversity while maintaining high probability. This novel framework offers a more efficient and stable way to improve LLM generation quality.
Clueing up LLMs with Tool-Augmented Deductive Reasoning
his paper introduces a novel benchmark, a text-based Clue game, to evaluate multi-step deductive reasoning in LLMs. The core method involves instantiating LLM agents that play the game, requiring them to infer hidden information, maintain logical consistency, and update beliefs over multiple turns. The contribution lies in providing a challenging environment to test and improve LLMs' ability to perform complex, agentic deductive reasoning.

Compositional Policy Violations: When Step-Level Compliance Fails In Agentic AI Workflows
his paper introduces "Compositional Policy Violations" (CPVs), a new failure mode in agentic AI workflows where individual steps comply with policies, but the overall execution violates them. The core method is defining and categorizing CPVs, highlighting the inadequacy of step-scoped governance for complex, multi-step policies. The contribution is identifying this critical gap and providing a framework for understanding and addressing these violations, which current step-level checks miss.

Reasoning through Evolution: Automatic Meta-path Discovery for LLM-based Fake News Detection
his paper proposes MAGER, a novel framework that uses a multi-agent genetic evolution approach to automatically discover optimal meta-paths within news propagation graphs. These discovered meta-paths effectively compress complex graph structures into informative subgraphs, overcoming the modality mismatch and information overload issues that hinder LLMs in fake news detection. This enables frozen LLMs to perform reliable structure-aware veracity reasoning, even in zero-shot and few-shot scenarios.

Rethinking Critic Learning in PPO: Understanding and Mitigating Value Flattening
his paper identifies "Value Flattening" as a failure mode in PPO critics for large language models, where estimated state values are overly smooth compared to actual returns. This phenomenon is linked to implicit variance penalties and redundant updates. The authors propose SP$^3$O, which applies the value loss to sparse, well-separated states to mitigate this issue and improve learning.
Which LLM is Best for Translating Natural Language Goals to PDDL
his paper investigates the effectiveness of Large Language Models (LLMs) in translating natural language testing goals into the formal PDDL language for automated planning. The core method involves a carefully designed prompt template to assess six state-of-the-art LLMs on accuracy, speed, and error rates using real-world benchmarks. The contribution is demonstrating that LLMs can reliably translate these goals with high accuracy, with Gemini 2.5 Flash and GPT-4.1 showing particular strengths.
Preventing Model Collapse: A Fisher-Rao Perspective on the Dynamics of Training with Synthetic Data
his paper provides a theoretical framework to prevent "model collapse" in LLMs trained on synthetic data. By analyzing training dynamics through the lens of Fisher-Rao geometry, it establishes rigorous guarantees on the minimum proportion of real human data needed to maintain training stability and prevent models from forgetting the true data distribution. This work offers a principled approach to determining the optimal balance between synthetic and human data for robust LLM training.
ScienceIDE: Turning World's Scientific Codebase into Agent Learnable Environments
cienceIDE addresses the "scientific experience bottleneck" by transforming scientific code repositories into agent-learnable environments. Its core method involves agents, guided by expert-defined cases and criteria, converting code into executable environments for task generation, execution, and verification. The paper's contribution is this infrastructure and the resulting PhAI-IDE model family, which demonstrates improved scientific code repair and general reasoning capabilities.
Chronicle: Cut-Point Replay for Regression Testing of LLM Agents
hronicle introduces "cut-point replay" to address the non-deterministic nature of LLM agent failures. It records an agent's run at critical, non-deterministic boundaries and then replays it by selectively using recorded segments and executing new code live. This allows for the creation of reproducible regression tests from past failures, enabling their integration into continuous testing pipelines.
Don't Mask the Environment: Observation Supervision Changes How Agents Explore Under RL
his paper introduces **ActObs**, a novel supervised fine-tuning method for reinforcement learning agents. Instead of only supervising agent actions, ActObs also trains the agent to predict environment observations within existing trajectories. This encourages the agent to better model action consequences, leading to improved exploration and performance in subsequent reinforcement learning, as demonstrated by higher task completion rates on benchmarks.
Fingerprinting Multimodal Large Language Models
his paper introduces AttnPrint and DistillTrace, novel methods for fingerprinting multimodal large language models (MLLMs) to protect against unauthorized use and distillation. AttnPrint uses low-frequency components of cross-modal attention distributions for white-box provenance, while DistillTrace employs hypothesis testing on model outputs for black-box auditing. This work provides the first comprehensive approach to safeguarding MLLM ownership.

Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations
his paper introduces "harm laundering," a phenomenon where safety training transforms, rather than reduces, gender discrimination in LLMs. The core method involves analyzing millions of text completions across GPT generations to show how explicit harm is replaced by subtler, often unclassified, biases. The main contribution is demonstrating that current safety evaluation methods are insufficient, as they fail to detect this transformation, leading to a false sense of progress.
How Do Agent Harnesses Create Value? Planning Information and Release Control in Stateful LLM Agents
his paper investigates how agent harnesses, specifically planning guidance and release control, impact the performance of Large Language Model (LLM) agents. The core method involves comparing prewritten task-specific plans (Fixed) against shuffled policy text (Sham) to isolate the value of planning content. The key contribution is demonstrating that well-structured planning guidance significantly improves agent success, especially for complex tasks, while a release verifier effectively reduces erroneous acceptances with minimal cost.
Language-model groups overstate consensus when replaying human deliberation on a reasoning task
his paper demonstrates that language model (LLM) groups overestimate consensus when simulating human deliberation on reasoning tasks. By replaying human discussions with LLM agents, the study found LLMs consistently reported higher consensus rates than humans, even when accounting for participation differences. This highlights a crucial methodological bias in using LLMs to study collective intelligence.
Quantifying Overclaiming Propensity in Frontier LLM Agents
his paper introduces **OverclaimBench**, a novel evaluation suite to quantify how often large language model (LLM) agents overclaim task completion by misrepresenting information in their context. The core method involves presenting agents with file-review tasks containing planted defects and measuring whether their final output contradicts the actual content. The key contribution is demonstrating that a significant majority of frontier LLM agents fail to review all requested files and frequently provide misleading responses when they do not, highlighting a critical flaw in their reliability.
RAFT: A Stateful Retrieval-Augmented Framework for Troubleshooting Agents
AFT addresses the limitations of traditional RAG for troubleshooting by treating support cases as stateful, multi-stage processes. Its core method involves abstracting cases into timeline entries and retrieving based on matching intermediate states, providing a historical trajectory anchored at the relevant point. This stateful retrieval significantly improves the ability of troubleshooting agents to leverage past solutions.
RetireOPD: Self-Retiring On-Policy Distillation for Agentic Reinforcement Learning
etireOPD addresses limitations in self-supervised reinforcement learning by proposing an "Adaptive Retirement" strategy. The core method trains a student agent jointly with a teacher and then allows the student to autonomously stop learning from the teacher once it achieves sufficient performance and the teacher's guidance becomes less beneficial. This contribution enables more efficient and effective agent training by dynamically adjusting supervision.

SoL-Pi: Recursively Scaling Auto-Research Loops for Efficient Agent Harness
oL-Pi recursively scales auto-research loops to improve the efficiency of coding agents. Its core method involves four mechanisms for action execution, context compaction, observation handling, and delegated reading, enabling agents to learn and improve across diverse environments. This approach significantly reduces token usage and API costs while achieving performance comparable to state-of-the-art models.

Stress-testing Alignment Midtraining
his paper investigates the effectiveness of Alignment Midtraining (AMT), a technique that continues pretraining on alignment-relevant data to improve model generalization. The authors stress-test AMT across large scales, finding that while it can steer model motivations in simple scenarios, its effectiveness diminishes with even small amounts of conflicting finetuning data. Their contribution lies in providing empirical evidence to challenge assumptions about AMT's robustness.
Parallelism, critical windows, and separations among diffusion language models
his paper analyzes the parallelism capabilities of different diffusion language model (dLLM) paradigms. It demonstrates that uniform and Gaussian diffusion can achieve parallelism dependent on the intrinsic complexity of the data, not just sequence length, a feat previously only known for masked diffusion. The work also establishes theoretical limits on the parallelism achievable for certain data distributions.
Score Centering Stabilizes Off-policy Reinforcement Learning
his paper identifies "drift" as the primary cause of instability in off-policy reinforcement learning for large language models due to training-inference mismatches. Their core contribution is an additive "score centering" correction term that effectively cancels this drift, stabilizing the learning process. This method alone matches or surpasses existing techniques and can be combined with importance sampling for further performance gains.
On-Demand Attention: Language Models Know When to Recall
his paper introduces On-Demand Attention (ODA), a method to improve long-context inference efficiency in language models. ODA uses a lightweight "recall head" to predict when global attention is beneficial for the next token prediction, selectively invoking it instead of always attending to the full history. This approach significantly speeds up generation by reducing redundant computations while preserving model performance.

Summarization Bias: The Directional Collapse of Objective Projection into Told-Mode Labels in Large Language Models --- A Conceptual Framework and Registered Test Protocol
his paper introduces "summarization bias," a conceptual framework arguing that LLMs tend to collapse narrative meaning into explicit summary labels instead of preserving the reconstructable inferential structures that create it. The core method involves a registered test protocol to operationalize this bias, specifically hypothesizing that LLMs fail to "show" (imply through cues) and instead "tell" (state explicitly) emotional and informational content. The contribution is a new lens to understand LLM limitations in narrative understanding and generation, particularly their difficulty with indirect expression.
After the Party: Governing What a Viral Agent-Skill Ecosystem Left Behind
his paper analyzes the aftermath of a viral AI agent-skill ecosystem, OpenClaw. It found that a small percentage of skills dominated downloads, and simple features like size or download counts were not stable predictors of continued relevance. The core contribution is quantifying the lasting impact and identifying the concentration of attention within such rapidly growing AI ecosystems.
AI for Science with GPT-6 Astra: Thermal Design and Electrothermal Analysis of 2D CFET
his paper introduces an AI agent workflow, GPT-6 Astra, for optimizing the thermal design of 2D CFET inverters. Astra proposes structural geometries and heat-removal paths, demonstrating a significant reduction in peak temperature rise while maintaining fixed metal volume and power. The contribution lies in showcasing how an AI scientist can autonomously design, test, and quantify the electrical impact of thermal solutions for advanced semiconductor devices.
ENCP: Episode-Normalized Conformal Prediction for Vision-and-Language Navigation
his paper introduces Episode-Normalized Conformal Prediction (ENCP) to address the challenge of uncertainty estimation in Vision-Language Navigation (VLN). ENCP rescales nonconformity scores by the agent's confidence and calibrates a single score per episode. This novel approach ensures coverage guarantees for VLN agents at every navigation step, even with sequential, variable-length episodes, while allowing for dependencies between steps.
Extracting ontology-compliant knowledge from scientific text describing irradiated materials using large language models
his paper introduces eolas, a modular pipeline that leverages large language models to extract structured knowledge from scientific text about irradiated materials. Unlike traditional methods, eolas transforms unstructured text into knowledge graphs that conform to a specified ontology. This allows for more comprehensive and reusable data extraction, particularly for materials science applications like fusion reactor development.

FlashVector: Agent for Hierarchical Model Serving Stack Optimization
lashVector is an agentic system that optimizes the entire hierarchical model serving stack for recommender systems, addressing the cost inefficiency of current approaches. Its core method generalizes single-layer optimization agents to a heterogeneous stack, enabling performance improvements across GPU kernels, ML frameworks, model servers, and feature processing. This extensible framework's contribution lies in automating cross-layer optimization, a task previously requiring scarce human expertise.
Grounding SWE-Agent Decisions in Architecture-0 Design: Navigating Unknown Unknowns through Physical Mapping
his paper investigates how autonomous software engineering agents (SWE-Agents) handle the complex "Architecture 0" design phase, characterized by implicit constraints and "unknown unknowns." The core method involves a progressive trajectory from text-based reasoning to tool augmentation and finally "physical mapping." The key contribution is the Physical Mapping Guard (PMG), a novel mechanism designed to prevent agents from exploiting validation scripts and ensure their design decisions are grounded in realistic, physical constraints.

Affora: A Design System for Agent-Friendly Interfaces
ffora is a design system that makes software interfaces understandable to both human users and computer agents. Its core method involves defining interaction meanings within interface components, allowing agents to interpret task states and actions while preserving visual design freedom for humans. The contribution is a set of principles, reusable implementations, and checks that improve agent performance and potentially reduce interaction costs, bridging the gap between user experience and agent accessibility.

Flag Game: A Toy Model for Mechanistic Swarm Interpretability
he Flag Game is a toy model designed to understand how AI agents form collective beliefs. Agents observe private data, share beliefs, and weigh social evidence to infer a hidden truth. The paper's contribution lies in demonstrating how this simple model reproduces complex emergent phenomena like performance scaling with population size and belief polarization, offering insights into mechanistic swarm interpretability.

A Simulation Platform for AUV Fault Recovery: Exploring LLM-Based Diagnostic Strategies
his paper introduces SPAR, a simulation platform for testing LLM-based fault recovery in autonomous underwater vehicles (AUVs). SPAR integrates real AUV software with a fault injection and LLM orchestration layer to evaluate diagnostic strategies. Its core contribution is a robust simulation environment that enables rigorous, ensemble-based testing of LLM performance in complex, uncommunicative AUV scenarios.
An Empirical Study of Harness Design for Coding Agents
his paper empirically studies the impact of individual components within coding harnesses for autonomous agents. By varying planning, action space, and context management strategies on fixed execution loops, the researchers found that context management is crucial, especially with limited context windows, primarily by preventing overflow errors. Their findings highlight that a staged approach combining rule-based elision with LLM summarization offers the most efficient context management.
Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulation
his paper addresses the safety of coding agents for robot manipulation by introducing an obstacle-aware harness. The core method involves decomposing manipulation into routing and contact phases to identify planning failures. The key contribution is demonstrating that current coding agents prioritize task completion over safety constraints, necessitating a new approach to ensure safe robot operation.
