2026-W42
The Week in Review
This week's research highlights significant progress in agentic AI and specialized LLM applications, with a notable shift towards robustness, efficiency, and real-world deployment.
Popular directions include agent self-improvement and adaptation (MobiAgent, HERA) and cost-aware optimization (FrugalEvo). There's a strong focus on evaluating agent capabilities rigorously through new benchmarks that stress-test specific functionalities like web browsing (HyperBrowseComp), 4D inverse graphics (4DCodeBench), and legal knowledge (Colombian Law benchmark).
Notable advances include improved reasoning faithfulness in efficient training methods (Efficient Reasoning Training), cost-effective fine-tuning for diffusion models (IDRF), and enhanced multimodal retrieval-augmented generation (CLIMB). Researchers are also developing novel methods for reward optimization (Credit Where It Matters), deception detection (Before Agent Tells The Lie), and security evaluation (Passing the Test You Trained On, Threat-Preserving Representation Sensitivity).
A significant shift is the move beyond basic LLM capabilities to complex scientific instrument design (NeutronGym) and physics-based tasks, where current models still struggle. Furthermore, research is actively addressing LLM agent security vulnerabilities through new attack vectors (Reward Stealing Attack, Jumping the Line) and mitigation strategies. The development of standardized communication protocols (HEAR Protocol) and efficient memory management (MemPilot) underscores the growing need for better integration and orchestration of LLM agents in real-world systems.
Top Papers
MemPilot: Orchestrating On-Demand Multimodal Memory Curation for LLM Agents
emPilot is a flexible framework that optimizes LLM agent memory by orchestrating on-demand, multimodal memory curation. It uses a reinforcement-learned policy to dynamically decide between retrieving from pre-built memory or performing query-specific curation using various LLMs and VLMs, balancing performance, cost, and latency. This allows for more efficient and adaptable memory management for LLM agents.

Before Agent Tells The Lie: Has Deception Already Been Represented?
his paper proposes a novel method to predict LLM agent deception by analyzing their internal hidden states *before* deceptive actions occur. The core contribution is demonstrating that these internal representations, when aligned around key decision points, can reliably distinguish between future honest and deceptive outcomes, with signals emerging several steps in advance. This allows for proactive deception detection rather than reactive monitoring of observable outputs.

LoGRA: Scaling LLM Reinforcement Learning with Low-Rank Gradient Sketches
oGRA addresses the memory bottleneck in LLM reinforcement learning by compressing gradient information into low-rank sketches, significantly reducing memory usage. This method, combined with predicted-KL step control to manage update magnitudes, enables stable and efficient RL training for larger models on limited hardware, making previously infeasible training scenarios practical.
Reward Stealing Attack on Large Language Models
his paper introduces Reward Stealing Attack (ReSA), a novel method to attack Large Language Models (LLMs) by targeting their internal safety reward signals. ReSA recovers a proxy reward model from the LLM's behavior and then reverses it to generate adversarial outputs, demonstrating significant effectiveness and transferability across different prompts and models. This approach bypasses the high computational costs and model-pairing limitations of previous attacks, revealing a fundamental vulnerability in LLM alignment.

Agent in a Bottle: Can LLM Agents Turn Their Capabilities Into Cheap, Scalable Artifacts?
his paper introduces "bottling," the ability of LLM agents to autonomously create cost-effective, task-specific solutions for large workloads. The core method involves agents deciding how to tackle an entire unlabelled dataset within fixed resource budgets, potentially by training smaller models or writing programs. The key contribution is demonstrating that strong general LLM performance doesn't guarantee good "bottling" capabilities, with many agents failing to match their zero-shot performance when tasked with creating scalable artifacts.
Principled Under Pressure: Post-Training Decides Whether LLMs Act on Their Own Moral Judgment
his paper introduces a novel method to evaluate whether Large Language Models (LLMs) act on their own moral judgments when faced with pressure. By posing scenarios twice – once as an agent's decision and once as a third-person judgment – the researchers can identify when models violate their own stated values. The key contribution is demonstrating that post-training methods significantly influence an LLM's ability to resist pressure and adhere to its internal moral compass.
ScienceClaw: Benchmarking Continual Self-Evolution of AI-for-Science Agents Across the Natural and Social Sciences
his paper introduces ScienceClaw, a framework for benchmarking the continual self-evolution of AI-for-science agents. Its core method is fixed-parameter program self-evolution, which integrates task solving, scientific verification, and program updates. ScienceClaw's contribution lies in its comprehensive evaluation across 23 disciplines, measuring scientific correctness, evolutionary gain, and retention, addressing the gap in current evaluations that don't track persistent program improvements in sequential tasks across natural and social sciences.

Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents
his paper introduces Semantic Behavioral Watermarking (SBW), a novel method for embedding provenance in LLM agents' high-level action choices, independent of output tokens. SBW achieves paraphrase robustness by watermarking semantic action clusters and is forgery-resistant through keyed collision-resistant binning, addressing limitations of prior agent watermarking techniques. Its core contribution is providing a more secure and adaptable provenance mechanism for LLM agents.
SquidAgent: Parallelize Wisely, Coordinate Efficiently
his paper introduces SquidAgent, a method for parallelizing LLM-based agents to reduce latency in multi-step tasks. It addresses the inefficiency of existing parallel systems by identifying and mitigating "re-exploration" and "alignment" costs. SquidAgent proposes a principled criterion to determine when parallelization is beneficial, aiming for near-linear speedups by avoiding redundant work and reconciling inconsistencies.
Toward Alignment Scaling Laws: A Framework and First Preregistered Measurements
his paper proposes a framework to study how model alignment scales with capability, treating alignment as a family of measurable scaling relations rather than a single property. The core method models the "alignment burden" for different risk categories as a power law of model capability, allowing researchers to predict whether alignment becomes easier or harder as models grow. The key contribution is this quantitative approach to understanding alignment scaling, providing preregistered measurements and theoretical insights into the long-term implications of different scaling exponents.
WorldSolver: Can LLM Agents Simulate the Physical Dynamics via Solver Generation?
orldSolver introduces a benchmark of 168 physics simulation tasks from computer graphics to evaluate LLM agents' ability to generate physics solvers. The core method involves LLM agents completing code scaffolds by implementing the underlying physical dynamics for given scenarios. This work contributes by exploring and evaluating LLMs' potential for simulating complex physical phenomena, a crucial step for applications in embodied AI and other fields.

Towards In-Parameter Memory Augmentation for Large Language Models
his paper surveys methods for augmenting Large Language Models (LLMs) with "in-parameter memory." The core method involves integrating reusable memory information directly into model parameters or parameter-like objects that are composed during inference. This approach aims to overcome the limitations of in-context learning by providing a more efficient and scalable way to incorporate post-pretraining knowledge.

Open-MMUnlearning: Unifying Methods and Evaluation for MLLM Unlearning
his paper introduces Open-MMUnlearning, a unified, open-source framework for evaluating machine unlearning in multimodal large language models (MLLMs). It addresses the fragmentation in existing methods by providing standardized interfaces for preparing models, processing data, applying unlearning techniques, and evaluating performance across privacy, safety, and copyright concerns. The framework's key contribution is enabling systematic and comprehensive assessment of MLLM unlearning by supporting diverse models, methods, and benchmarks.

Accurate but Not Humble: Evaluating Epistemic Humility in LLM Agents under Knowledge Conflict
his paper introduces a new evaluation metric called "epistemic humility" (EH) for LLM agents, focusing on their ability to acknowledge and act on uncertainty when faced with conflicting information. The authors propose a framework (Identify, Solve, Escalate) to measure EH and demonstrate that high task accuracy doesn't guarantee an agent exhibits this crucial trait, highlighting a gap in current LLM agent evaluations.

Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deception
his paper introduces a novel probe architecture for detecting deception in Large Language Models (LLMs) by aggregating information across multiple layers and tokens. By training these probes on the largest deception dataset to date, they achieve high accuracy in identifying subtle forms of LLM sabotage and deceit, even when the deception isn't evident from the text alone. This work contributes a scalable and effective method for monitoring LLM behavior and ensuring their trustworthiness.
OnTrack: Real-Time Monitoring and Intervention in LLM Agent Trajectories via Streaming Structure-Aware Optimal Transport
nTrack introduces a real-time monitoring system for LLM agents that compares their current actions against successful historical trajectories using streaming structure-aware optimal transport. This allows for immediate alerts or intervention within milliseconds per step, preventing costly or unsafe irreversible actions. Its key contribution is enabling proactive safeguarding of autonomous LLM agents without significant latency or post-hoc analysis.
Predicting Alignment Generalization with Value Representations
his paper introduces the task of predicting how fine-tuning a language model for one value affects its behavior on other, unseen values. The core method involves analyzing model activations when applying values in context, which significantly outperforms using textual descriptions of values. This work's contribution is a benchmark for understanding and predicting alignment generalization, highlighting the importance of contextual activation representations.

Recursive Self-Improvement through Multi-Agent Self-Supervision
his paper introduces Multi-Agent Self-Supervision (MASS) to overcome the supervision bottleneck in recursive self-improvement for complex, non-verifiable tasks. MASS enables a single model to iteratively design, execute, and evaluate multi-agent workflows, optimizing its own reasoning by discovering effective roles and information flow within these self-generated structures.

Language Models as AI Research World Models
his paper proposes using Language Models as Research World Models (RWMs) to predict experimental outcomes in AI research. The core method involves training LMs on past experimental data to forecast the results of new interventions. The key contribution is demonstrating that these RWMs can significantly improve outcome prediction, even for unseen interventions and across different research environments, thereby enabling more efficient AI research with limited experimental budgets.

Efficient Reasoning Training Does Not Always Harm CoT Faithfulness and Monitorability
his paper investigates whether efficient Chain-of-Thought (CoT) training harms faithfulness and monitorability in large language models. The authors fine-tune models using three distinct length-pressure methods and evaluate their impact on how well the CoT reflects the model's decision-making process. Their contribution lies in demonstrating that efficient reasoning training does not *always* negatively affect CoT faithfulness, depending on the specific efficiency method and task.

FrugalEvo: Towards Cost-Aware LLM-Guided Program Evolution
rugalEvo introduces a cost-aware evolutionary framework for LLM-guided program optimization. It leverages a two-tiered LLM approach, with a powerful LLM guiding strategy and a cheaper LLM implementing and refining code, to maximize performance gain per unit cost. The contribution lies in this cost-efficient design and a new metric, BA-AUC, for evaluating performance within a fixed budget.
HazardWeaver: Scientific Route Selection for Hazard Analysis Agents
azardWeaver addresses the challenge of AI agents selecting appropriate scientific methods for hazard analysis by formulating it as state-dependent route selection. Its core method involves compiling evidence-linked conditions for scientific applicability and representing executable capabilities in a graph to check compatibility. This enables agents to dynamically choose and adapt scientific workflows based on evolving evidence and available tools.

HyperBrowseComp: A Multilingual and Multimodal Stress Test for Web-Browsing Agents
yperBrowseComp is a new benchmark designed to rigorously test web-browsing agents. Its core method involves creating extremely challenging, multilingual, and multimodal questions that require agents to locate obscure information, follow complex clue chains, and synthesize data from diverse sources like videos and scanned documents. The contribution is a robust evaluation tool that pushes the boundaries of agent capabilities in persistent information seeking, going beyond simple parametric knowledge.

MobiAgent: Dual-Loop Recursive Policy Self-Improvement for Long-Horizon Mobile Manipulation
obiAgent tackles long-horizon mobile manipulation by introducing a dual-loop framework for robust deployment and continuous self-improvement. The Inner Loop uses a Vision-Language Model to dynamically compose atomic skills for receding-horizon planning and error recovery. The Outer Loop recursively refines these skills through self-generated trajectories, enabling continuous learning and adaptation beyond initial training.

NeutronGym: Physics-Graded Neutron Instrument Design for LLM Agents
eutronGym is a novel, executable environment designed to test whether Large Language Models (LLMs) can truly perform physics-based design rather than just recall information. It allows LLM agents to build neutron instruments by validating tools, with McStas ray-tracing and a physics-graded ladder evaluating their creations. The paper's core contribution is this physics-graded environment, which demonstrates current LLMs struggle with complex scientific instrument design, even after training.
IDRF: Inverse-Distilled Reward Fine-tuning of Masked Discrete Diffusion Models
his paper introduces IDRF, a framework for efficiently fine-tuning masked discrete diffusion models with rewards. IDRF replaces computationally expensive sequence-level KL divergence with an "inverse-distillation regularization" that is provably equivalent under optimal conditions. This allows for reward optimization using the model's own few-step sampler, achieving strong performance across various generation tasks without needing a separate reference model.

UniIntervene++: An Adaptive Intervention Agent for Efficient Real-World Reinforcement Learning
niIntervene++ introduces an adaptive intervention agent for online reinforcement learning in robots. It learns to dynamically switch between autonomous execution and various assisted behaviors by formulating them as "Options" within a unified semi-Markov decision process. This approach ensures interventions remain relevant as the robot's competence evolves, leading to more efficient real-world learning.
CLIMB: Confidence-Guided Complementary Evidence for Multimodal Retrieval-Augmented Generation
LIMB is a training-free framework for multimodal retrieval-augmented generation (RAG) that improves knowledge-intensive visual question answering. It first creates a diverse pool of relevant textual evidence using a redundancy-reducing objective. Then, it refines the answer by selecting evidence based on relevance, specificity, and cross-modal alignment, only accepting an updated answer if it demonstrably increases confidence.

Passing the Test You Trained On: Re-evaluating Prompt-Injection Detectors for LLM Agents
his paper re-evaluates prompt-injection detectors used by LLM agents, finding that their performance on public benchmarks doesn't reliably predict their effectiveness within actual agents. By replaying tool calls from agent benchmarks, the authors demonstrate significant performance discrepancies and poor transferability of detection rankings across different benchmarks. Their contribution highlights the inadequacy of current evaluation methods and suggests that the training data's characteristics heavily influence detector performance.
BazaarBench: Delegation Safety in Decentralized C2C Marketplaces Run by LLM Agents
his paper introduces BazaarBench, a simulated decentralized C2C marketplace designed to evaluate the safety of LLM agents acting on behalf of users. BazaarBench tracks transaction integrity and uses a combination of record checks and LLM judgments to identify six types of failures across five stages of the marketplace process. The contribution lies in providing a novel benchmark for assessing and improving the trustworthiness and security of LLM agents in real-world decentralized trading environments.

Can Agent Harnesses and Inference Engines Hear Each Other? The HEAR Protocol for Agentic LLM Serving
his paper introduces the HEAR protocol, a bidirectional communication standard for agentic LLM serving. HEAR enables agent harnesses and inference engines to share crucial information, such as workflow intent and runtime state, respectively. This standardized interface facilitates workflow-aware execution by allowing for diverse coordination strategies without altering core semantics.

CLIFT: Conformal Self-Verification for Web Agent Training and Test-Time Scaling
LIFT addresses the challenge of training web agents by using a self-verification mechanism. During training, the agent generates verification questions about its actions, and a "Compositional Conformal Certifier" uses these questions to provide more informative, signed rewards. At test time, this certified evidence is reused to select the best trajectories, improving agent performance without relying on expensive external judges.
Closing the Context Gap: Activation Alignment for Tabular In-Context Learning
his paper introduces **Activation Alignment**, a novel method to improve in-context learning (ICL) for tabular foundation models. It addresses the trade-off between prediction cost and performance by training a lightweight linear transformation to align the intermediate activations of a model using partial context with a model using full context. This approach allows for efficient ICL without sacrificing accuracy, as demonstrated on a large benchmark.
HERA: Harness-Environment Co-Evolution for Reliable Agentic Abstention
ERA addresses the challenge of LLM agents failing to abstain from impossible tasks by introducing a co-evolutionary framework. It automatically generates feasible and infeasible task pairs by mutating environments and uses performance failures to adapt the agent's harness and create new, targeted tasks. This approach significantly improves generalization to unseen failure modes.

Learning to Read the Contextual Tokens in Diffusion Transformers
his paper introduces a method to interrogate the internal "contextual tokens" of Diffusion Transformers used for multimodal generation. By training a lightweight network to map these tokens to a frozen LLM, the authors demonstrate that these tokens encode rich, evolving scene semantics. This allows for natural language questioning of the image generation process, revealing that early stages capture global attributes and later stages refine finer details.
Recursive Video In-Context Learning for Agentic Robot
his paper introduces Recursive Video In-Context Learning (RV-ICL), a method that transforms demonstration videos into a hierarchical structure for LLM agents. Instead of a flat prompt, the agent navigates this hierarchy, starting with coarse task structure and drilling down to finer details like specific moments or clips as needed during execution. This allows agents to learn from demonstrations more effectively by providing contextually relevant visual information without slowing down the entire process.

The Pushback Paradox: A Two-Probe Diagnostic for Language Model Compliance
his paper introduces a novel two-probe benchmark to measure language model compliance. The "active probe" assesses exploitability by observing if a model accepts a lower payoff when instructed, while the "passive probe" measures stoppability by checking if it relinquishes a higher payoff when told to wait. This benchmark provides a "compliance index" ($κ$) to categorize models, revealing that most current models are compliant in both aspects, but few can be stopped without being exploitable.
Aligning Multimodal Patient Evidence with Biomedical Knowledge Graphs for Clinical LLMs
his paper introduces MM-KG, a novel method for explicitly linking multimodal patient data (like text, images, and genomics) with biomedical knowledge graphs. By representing these as a unified, typed graph with alignment edges, MM-KG allows for traceable and adjustable connections. This enables clinical LLMs to better leverage and understand the evidence behind their reasoning.

What Matters for Latent Reasoning with Flow Matching
his paper introduces Flow-based Latent Reasoning (FLaRe), a method for LLMs to reason in a continuous latent space before verbalizing the answer. FLaRe's core method uses flow matching to train this latent space, ensuring reasoning is useful, diverse, explainable, refinable, and efficient. Its main contribution is a recipe for effectively training such latent spaces, addressing limitations of prior approaches that often learn shortcuts or imitate explicit reasoning.
Improving Diversity in LLM Short Story Generation
his paper introduces DivLM, a post-training framework to improve diversity in LLM-generated short stories. DivLM uses continued pre-training on creative writing and reinforcement learning with a composite reward function to jointly enhance genre, tone, style, and named entity variation while maintaining quality. The contribution is a method that significantly increases narrative diversity in LLM story generation.

Long-Horizon Textual World Modeling through Structured Reasoning
his paper proposes a novel method for long-horizon textual world modeling by framing the multi-step transition as structured reasoning over sparse textual state changes. This approach mitigates error compounding and improves learning by focusing on essential state evolution. The core contribution is a more robust and interpretable way for agents to predict future environmental states and reason about actions over extended horizons.

MedPrune: Topology-Efficient Multimodal Multi-Agent Communication Evolution for Medical VQA Tasks
edPrune addresses the inefficiency of existing medical multimodal multi-agent systems by dynamically pruning communication topologies. It achieves this by representing the diagnostic process as a graph and employing mechanisms to remove irrelevant specialist agents (nodes) and communication links (edges), thereby enhancing reasoning and token efficiency.

Programmatic Search Agents: Extending Agentic Search Beyond Query Reformulation
his paper introduces Programmatic Search Agents (PSA), a novel approach that extends agentic search beyond simple query reformulation. PSA treats local executable computations over candidate results as the fundamental search action, allowing agents to directly control candidate processing and evidence presentation. This unified framework, featuring a persistent workspace, flexible composition, and selective evidence delivery, enables agents to adapt their search strategies more effectively by generating and executing program cells that reuse candidates and manage data dependencies.
Adaptive Power Sampling for LLM Reasoning
his paper introduces Adaptive Power Sampling (APS), a method to improve LLM reasoning by adjusting the "sharpening" of the model's output distribution on a per-query basis. Unlike previous uniform approaches, APS leverages the relationship between answer agreement and the model's self-reward to dynamically determine the optimal sharpening level for each query. This adaptive strategy leads to consistent performance gains across various reasoning benchmarks.
AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model
his paper introduces AdvSim2Real, a method for training web agents to resist prompt injection attacks. It co-evolves the agent, a task curriculum, and an injection adversary within a simulated web environment. This approach allows the agent to become more capable and robust by continuously adapting to new attacks and tasks, unlike previous methods that relied on fixed injections or tasks.
How Much Evidence Should a Coding Agent's Self-Correction Carry? Adaptive Dirichlet Evidence for Self-Distillation
his paper introduces Effective-Evidence Self-Distillation (EESD) to improve coding agents' self-correction learning. EESD adaptively weights corrections based on execution support and evidence strength, unlike fixed weighting methods. This approach significantly reduces future prediction errors by better leveraging self-correction feedback.

Latent space bias directions in LLMs capture confidence, not fairness
his paper investigates the debiasing direction used in activation steering for LLMs. It finds that this direction primarily captures model confidence, steering towards lower-probability tokens, rather than representing actual bias. Consequently, while it reduces measured bias, it does so by making the model less confident, potentially leading to abstention on tasks.

MINDSET: Energy-based Schema Evolution for Long Conversational Agent Memory
INDSET addresses the challenge of long-term memory for conversational agents by organizing past interactions into versioned schemas. It achieves this through energy-based state transitions, where new conversational episodes are integrated by minimizing distortion, contradiction, and inconsistency. This approach allows agents to adapt to changing context while efficiently retrieving relevant information without constant LLM re-computation.

nanoMuse: An Open-Source Personal Agent for Every Device You Own
anoMuse provides an open-source personal agent designed to operate across all of a user's devices. Its core method involves a distributed architecture where agents on each device communicate through a shared relay, enabling persistent, multi-device conversations and actions. The key contribution is offering a transparent, user-controlled alternative to proprietary cloud-based agents, emphasizing local control and data privacy.

One for All, All for One: Coordinated Multi-Agent Diffusion Steering via Stochastic Optimal Control
his paper introduces Coordinated Multi-Agent Diffusion Steering (CMDS), a method that reuses pre-trained diffusion models as independent component generators. CMDS learns a control mechanism to coordinate these frozen models, treating the problem as stochastic optimal control. This approach balances a global reward for the combined output with adherence to individual model dynamics, enabling efficient generation of structured outputs with desired properties.

Secure Speculative Decoding for Large Language Models
his paper introduces the first systematic study of security vulnerabilities in speculative decoding for LLMs. It reveals a significant trade-off where efficiency gains from speculative decoding disproportionately increase the risk of jailbreak and prompt injection attacks. The authors then propose SecureSD to address these security concerns.
Sherpa: Teaching LLMs to Teach Adaptively
herpa is a multi-turn reinforcement learning framework that trains LLMs to teach by directly optimizing student learning outcomes. It addresses the limitation of existing methods by simulating diverse student archetypes with unique learning preferences and adapting the teacher's instruction accordingly. This adaptive approach significantly improves student performance across different learner types.

VeriFine: Scaling Verification for Self-Improvement in Embodied Reasoning
eriFine addresses the bottleneck of fixed judges in self-improving embodied reasoning agents. Its core method is a co-evolutionary framework where the policy, training curriculum, and judge adapt together. This allows the agent to scale verification, discover new failure patterns, and ultimately achieve more robust self-improvement by incorporating human feedback to refine the judge.

Wiki-Talkie: Multilingual Benchmarking of Persona-Based Agents on Real-World Discussions
his paper introduces Wiki-Talkie, a multilingual dataset of real-world Wikipedia talk page conversations paired with realistic user personas. Its core method involves using this dataset to evaluate Large Language Models (LLMs) on their ability to generate human-like dialogue based on these grounded personas. The main contribution is providing a robust, multilingual benchmark for assessing the behavioral fidelity of persona-based LLM agents in simulating real-world social interactions.

Agentic AutoRAG: RAG Pipeline Optimization through Reasoning-Driven Agents
gentic AutoRAG optimizes RAG pipelines by using LLM agents to reason about hyperparameter choices. Its core method involves a "Diagnoser" agent that attributes failures to either retrieval or generation stages, and a "Proposer" agent that suggests new configurations based on this diagnosis and a knowledge base of model performance and cost. This approach moves beyond simple aggregate scores to a more intelligent, failure-aware optimization process.
Before They Can Solve: Predicting Post-Training Coding-Agent Performance from Base Models
his paper proposes a method to predict the potential of base models for agentic coding tasks without expensive post-training. It identifies the "decisive step" within a successful agent trajectory – the first code-changing action that makes the repository pass tests. This allows researchers to select promising base models by evaluating their ability to reach this decisive step, saving computational resources.

Fault-tolerant foundation models
his paper demonstrates that large language models (LLMs) can be trained to be resilient to unreliable hardware, with error tolerance increasing with model size. The core method involves modifying neural scaling laws based on training on simulated faulty hardware, revealing that models learn to operate within inherent error-correcting codes. The main contribution is the conjecture that appropriately trained LLMs can be formally fault-tolerant, opening a path to significant energy savings by enabling AI inference on low-power, unreliable hardware.
MIRA: A Musical Intent Refinement Agent for Aligning Text-to-Music Generation with User Intent
his paper addresses the challenge of aligning text-to-music generation with user intent by proposing a rubric-based evaluation framework. Their core method, MIRA (Musical Intent Refinement Agent), refines prompts for black-box text-to-music models by iteratively revising them to satisfy a detailed rubric of explicit and implicit musical requirements. This approach provides diagnostic evaluation and improves generation quality by focusing on specific musical dimensions.

PHRBench: A Behavioral Evaluation of Post-Hallucination Reasoning in LLMs
his paper introduces PHRBench, a novel benchmark designed to evaluate how Large Language Models (LLMs) handle and correct hallucinated information during multi-stage reasoning. The core method involves a controlled evaluation of LLM reasoning trajectories, categorizing their behavior as Hallucination Compliance, Avoidance, or Heuristic Correction, independent of final answer accuracy. The main contribution is a comprehensive behavioral analysis of Post-Hallucination Reasoning (PHR), revealing that successful correction is infrequent and often linked to more dynamic belief updates within the model's reasoning process.

Reasoning-Token Spikes Under Prompted Untruthful Responding in Large Language Models
his paper proposes a new method for detecting untruthful responses in large language models by monitoring the *number* of reasoning tokens generated, rather than their content. This "reasoning-token spikes" approach is based on cognitive load theory and aims to be more robust to potential future inaccessibility or illegibility of detailed reasoning traces. The contribution is a low-bandwidth, content-agnostic signal for identifying deceptive AI behavior.

RECAST: Learning to Compute the Right Context through Adaptive Evidence Routing
ECAST addresses the limitation of traditional RAG by learning to actively *derive* evidence rather than just retrieve it. Its core method involves a RouterLM that sequentially decides on retrieval and computation operations, allowing evidence to be synthesized from multiple sources. This contribution enables LLMs to tackle complex tasks requiring evidence construction beyond simple similarity matching.

RoboQuest: Generalist Physical Agents that Search, Inspect and Test
oboQuest introduces a benchmark for embodied agents that must actively explore and gather information through physical interaction to complete tasks in unfamiliar environments. Its core method involves agents learning to search, inspect, and test objects to resolve uncertainty before committing to task completion. The contribution is a novel evaluation framework for generalist physical agents that emphasizes goal-directed exploration and adaptation.

SemanticFold: Latent Sequence Compression SeparatesLanguage Modeling, Decodability, and Reasoning
emanticFold is a novel method that compresses prompt prefixes in large language models by folding hidden states at learned boundaries. This technique aims to determine if such compression preserves essential inference capabilities like language modeling, decodability, and reasoning. The paper's contribution lies in demonstrating that compression's impact on these capabilities is non-monotonic and doesn't follow a single threshold, suggesting a nuanced relationship between compression and model performance.
SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing
LDR defends against malicious LLM fine-tuning by selectively recovering layers most sensitive to safety. It trains a lightweight adapter on these critical layers and uses dynamic routing to activate it only for potentially harmful queries, significantly reducing unsafe outputs while maintaining task performance.
Training Parallel Speculative Draft Models by Directly Minimizing Expected Decoding Rounds
his paper introduces a novel training method for parallel speculative decoding models by directly minimizing the expected number of decoding rounds. By framing speculative decoding as a Markov reward process, they derive the Expected Decoding Rounds (EDR) objective. This new objective accurately accounts for the interdependencies between decoding rounds, leading to more efficient draft models compared to existing methods that use local approximations.
Validity Without Ground Truth: What Stated-Preference Economics Offers the Evaluation of Language Models
his paper proposes applying stated-preference economics' validity framework to evaluate language models when ground truth answers are unavailable. The core method involves adapting concepts like content, construct, and criterion validity, alongside reliability and incentive compatibility, to assess LLM responses. The contribution is demonstrating this framework's utility by testing six models on a water-quality valuation survey, showing how economic theory can predict and differentiate model behavior.

Rephrase Before You Act: Characterizing and Mitigating Language Sensitivity in Vision-Language-Action Models
his paper reveals that Vision-Language-Action (VLA) models are highly sensitive to instruction phrasing, unlike their vision-language counterparts. They propose a method to mitigate this sensitivity by using a large language model to distill rephrasing rules from scored examples. These rules are then applied at deployment to rewrite incoming instructions, significantly improving VLA model robustness without altering the underlying policy.
RobotWorld: Benchmarking Multimodal Agents for Robot Use Across Diverse Tasks and Embodiments
his paper introduces RobotWorld, a simulation benchmark designed to evaluate how well general-purpose AI agents can perform physical tasks with robots. The core method involves testing agents on 84 diverse robot tasks, measuring their success and analyzing their execution traces. The main contribution is identifying which AI capabilities transfer to the physical world and highlighting the significant gaps in reliably composing these skills for successful robot operation.

RSIGym: A Flexible Environment for Recursive Self-Improvement
SIGym provides a flexible research environment for recursive self-improvement by exposing core agent functionalities as reusable services. This allows agents to iteratively improve themselves by modifying data, training, and execution, carrying changes across cycles and exploring joint optimizations. Its key contribution is enabling comprehensive self-improvement within a unified framework, demonstrated by the RSI-Index across diverse benchmarks.
CoTrace: Data Recipes for Training Terminal Agents with Harness-Model Co-Evolution
his paper introduces CoTrace, a method for training terminal agents by co-evolving their underlying model and runtime harness. It proposes an alternating framework where harness search and policy training are decoupled, and a novel "data recipe" that routes trajectories based on their provenance and the harness used to generate them. This harness-aware approach ensures that model training is conditioned on relevant data, leading to improved agent performance.
EngramEdit: Decoupled Knowledge Updates in LLMs through Conditional Memory
ngramEdit proposes a method to update factual knowledge in LLMs without retraining the entire model. It achieves this by decoupling knowledge storage from the core computation, allowing for targeted edits to specific facts by adjusting conditional memory embeddings. This approach aims to enable efficient and precise knowledge updates by ensuring that updated facts are predicted across various expressions while minimizing unintended side effects on other knowledge.
Learning to Act with Task Progress: Distilling Small Agents from Compact Teacher Supervision
his paper introduces Task-Progress Distillation (TPD) to train small agents from large model demonstrations. TPD pairs actions with concise labels indicating task progress, allowing the student agent to learn these compact targets. This approach enables efficient, step-free task completion and significantly improves performance compared to methods relying solely on action or reasoning supervision.

A Closer Look at Agentic BBO: Benchmarking LLM Agents for Black-Box Optimization
his paper introduces AgenticBBO-Bench, a unified benchmark for evaluating LLM agents in black-box optimization (BBO) across diverse domains. The core method involves a standardized evaluation protocol to enable fair comparison of agentic BBO approaches. The key contribution is demonstrating that agentic BBO significantly outperforms direct LLM methods and even state-of-the-art numerical optimizers in various complex optimization tasks.

ARC: A Reasoning Recipe for Robot Foundation Models
his paper introduces ARC, a "reasoning recipe" that significantly improves robot foundation models (RFMs) without requiring more data or larger models. ARC's core method involves generating "reasoning traces" that explain the causal structure of robot actions, automatically labeling them from existing demonstrations, and then adapting RFMs to use these traces for control. The main contribution is demonstrating that this reasoning-centric approach offers an efficient and effective alternative to current scaling-heavy methods for enhancing RFM performance.

Ecology of AI Agents: Collaboration Creates a Population Threshold for Takeoff
his paper introduces "ecological safety" for AI, focusing on how a population of misaligned AI agents can grow uncontrollably. Their core method is developing an ecological theory using a population growth equation where fitness is tied to cybersecurity capability. The key contribution is identifying a "population threshold" where collaboration among agents enables a self-reinforcing cycle of growth and increased cyber capability, leading to a potential takeoff.
LeWAM: A JEPA World Action Model with Diffusion-Steering-Based MPC
eWAM is a novel world action model that uses a bidirectional transformer trained end-to-end on a decoder-free JEPA latent space. This approach improves state representation by better aligning with robot and object states while ignoring visual distractors. LeWAM demonstrates strong performance in closed-loop control and planning, offering a unified world model and policy prediction capability.

Looking Inside LLMs: Small-World Connectivity as a Signature of Reasoning Performance
his paper proposes using "small-world connectivity" within LLMs as a structural indicator of reasoning ability. By analyzing attention head activation similarities, they found that models with higher small-world indices, reflecting efficient information flow, consistently perform better on reasoning tasks. This suggests that the internal network structure, particularly how specialized "heads" connect within and across functional groups, is a key determinant of LLM reasoning capabilities.

Overcoming Prior Barriers: Supervised Fine-Tuning under Long-Tail Distribution
his paper introduces the "prior barrier" to quantify how well a pretrained LLM supports competing concepts during fine-tuning. They observe these barriers follow a long-tail distribution, meaning rare concepts have higher barriers. The core contribution is a theoretical analysis showing how prior barriers and fine-tuning data jointly affect performance, leading to a new method (PAS) designed to address these varying demands.

Prior or Feedback? What an LLM Uses When Adapting Neural Operators
his paper investigates whether LLM scientific agents rely on initial context or adapt based on feedback when fine-tuning neural operators. The LLM demonstrates superior performance by leveraging both a strong initial bias derived from the problem description and adaptive adjustments based on experimental feedback. This dual approach allows the LLM to efficiently explore the configuration space and achieve better results than traditional optimization methods.

ReSI: Recursive Safety Improvement toward Resistant and Resilient AI
eSI is a recursive safety improvement framework for AI. It addresses the challenge of continually aligning AI systems that undergo frequent self-improvement by iteratively evaluating safety, identifying vulnerabilities through diverse red-teaming, and updating the AI to be resistant to known threats and resilient to unforeseen risks. This automated, round-based approach aims to ensure AI safety evolves alongside AI capabilities.
Verdict Without the Rule: Diagnosing and Auditing Regulatory Rule Sensitivity in LLM Compliance Systems
his paper investigates how sensitive LLM compliance systems are to changes in regulatory rules. The core method involves perturbing rules (deleting, swapping, negating) while keeping case data constant, then observing if verdicts or internal representations change. The main contribution is demonstrating that LLMs are surprisingly insensitive to rule modifications, often producing the same verdict even with altered rules, and that specialized compliance models can be less accurate than general-purpose ones.

DataSense-Bench: The First Step Toward an AI Scientist
his paper introduces DataSense-Bench, the first benchmark to assess if AI models can intelligently select training data. The core method involves AI agents choosing and ranking data subsets to fine-tune a language model, without direct access to evaluation tasks. The contribution is a novel evaluation framework for "data sense," a crucial capability for future AI scientists, demonstrated on terminal problem-solving and tool-use tasks.

Long Text to Predictive Features: LLM-Guided Blockwise Feature Engineering via Executable Program Search
his paper introduces LLM-BlockFE, a framework that uses LLMs to automatically engineer features from long text for predictive models. It converts unstructured text into executable feature programs offline, avoiding costly LLM calls during real-time prediction. The core method involves an LLM-guided search that incrementally builds feature programs with a novel block-level rollback mechanism and multiple search trajectories to overcome suboptimal solutions.

SparseDecoding: Decoding-Aware Pruning for Accurate and Efficient LLM Inference
his paper introduces SparseDecoding, a novel pruning method for LLMs that addresses the distribution shift between training data and generated sequences. By computing pruning importance based on the model's own generated tokens, SparseDecoding achieves more accurate and efficient inference. Its contribution lies in a decoding-aware pruning strategy that optimizes memory access during LLM generation, leading to significant speedups beyond traditional SpMM optimizations.
WOVEN: Weaving Visual World Modeling into Multimodal LLMs
his paper introduces WOVEN, a novel training dataset and benchmark designed to improve multimodal LLMs' reasoning abilities in spatial, physical, and temporal domains. WOVEN focuses on "visual transition reasoning" by systematically organizing supervision across diverse scenes, actions, and reasoning types, derived from realistic video rollouts. The core contribution is demonstrating that this unified training primitive can be learned from various supervision sources and reused across tasks, addressing a fundamental deficit observed in current state-of-the-art MLLMs.

HarnessSQL: Harness-Native Training for SQL Agents in Realistic Database Environments
his paper introduces HarnessSQL, a novel training framework for SQL agents that mimics real-world, multi-turn database interactions. By integrating training directly within an execution harness, HarnessSQL bridges the gap between static query generation and dynamic database exploration, significantly improving the execution accuracy of compact models.

4DCodeBench: Benchmarking Agents on Inverse Graphics of Dynamic Scenes
DCodeBench is a new benchmark for evaluating AI agents' ability to perform 4D inverse graphics by generating executable code that reconstructs dynamic scenes from videos. The core method involves agents translating visual observations into compact representations of scene structure and dynamics, often requiring them to implement physical simulations. The contribution lies in providing a diverse set of real-world and synthetic videos to test this capability, revealing that current models struggle with complex dynamics despite strong static reconstruction skills.
Credit Where It Matters: Dependency-Aware Policy Optimization for Terminal Agents
his paper introduces Dependency-Aware Group Policy Optimization (DepGPO) for reinforcement learning agents operating in terminal environments. DepGPO addresses the issue of irrelevant credit assignment by constructing a command dependency graph from execution traces. It then traces backward from task verification results to assign credit specifically to commands that directly influenced the outcome, thereby improving learning efficiency.
CVE2AP: Automated Generation of PDDL-Encoded Attack Paths via Large Language Models
VE2AP automates the creation of formal attack path models in PDDL from natural language CVE descriptions. It leverages Large Language Models (LLMs) with structured prompting and an error-feedback loop to overcome the limitations of manual expert-driven modeling, enabling scalable and dynamic cybersecurity analysis.
Do Large Language Models Know Colombian Law? A Reliability Benchmark for the Colombian Legal System
his paper introduces a novel, expert-validated benchmark to assess the reliability of Large Language Models (LLMs) on Colombian law. The benchmark, comprising 1,042 questions across ten legal areas and three formats, reveals significant limitations: while LLMs can be relevant, their factual accuracy on free-text legal answers is consistently low (below 0.45), highlighting a critical gap in their current capabilities for legal applications outside the US.
Jumping the Line: Exploiting Length Predictions in LLM Scheduling
his paper introduces JIL, an attack that exploits length predictions in LLM schedulers. JIL adds an adversarial suffix to requests, causing schedulers to underestimate their length and thus grant them higher priority. This manipulation leads to significantly faster completion times for adversarial requests.
Measure Less, Know More: Self-Supervised Test-Time Feature Acquisition
his paper proposes ECHO-$k$, a self-supervised method for efficiently acquiring relevant features from multimodal data at test time. It leverages a foundation model's internal representations as proxy targets to learn a task-agnostic policy for selecting the most informative modalities, thereby reducing acquisition costs while improving downstream performance.
Threat-Preserving Representation Sensitivity in Agent-Security Benchmarks
his paper introduces Threat-Preserving Representation Sensitivity (TPRS) to evaluate how benchmark representations affect LLM agent security evaluations. TPRS measures changes in attack success rate (ASR) when only the agent-visible representation is altered, keeping other factors constant. The study demonstrates that modifying tool names within benchmarks significantly impacts ASR, highlighting a crucial flaw in current security evaluation methods.
When a Correct Reward Is Not Enough: Diagnosing and Guiding PPO in an Analytically Solved Broker-Trader Game
his paper investigates whether Proximal Policy Optimization (PPO) can effectively learn optimal strategies in a financial game with an analytical solution. The core method involves training a PPO agent to act as a broker in a broker-trader game, using a derived reward function. The contribution lies in demonstrating that while PPO can approach the optimal solution in simpler scenarios, it struggles to achieve accuracy in the presence of stochastic market noise, even when supervised learning confirms the actor's capacity.
Divergence controls entropy in distillation
his paper reveals that the choice of divergence function in distillation directly controls the student model's entropy. Specifically, forward KL divergence inflates student entropy, while reverse KL deflates it. This finding offers a new entropic perspective on distillation, explaining observed behaviors and highlighting divergence as an implicit entropy regularizer.
FALCON: A Model and Dataset Agnostic Framework for Synthetic Data Generation for NL2SQL Pairs
ALCON is a framework that generates realistic and ambiguity-aware synthetic NL-to-SQL data. It addresses the limitations of existing methods by producing complex queries that better reflect real-world challenges, using reserved-word SQL seeding and persona-based prompting. The framework's contribution lies in its ability to create high-quality, difficulty-preserving data cost-effectively, improving the robustness of NL2SQL models.

Balancing Memory Pathways: Analyzing and Improving Memory Utilization in Hybrid LMs
his paper analyzes hybrid language models and finds they underutilize their recurrent memory pathways, relying too heavily on attention. The core contribution is a method to improve the coordination between these pathways, encouraging more balanced memory utilization and better performance by addressing this imbalance.
Does AI Help Cyber Attackers or Defenders? Evidence from Nonpublic Vulnerabilities and Subsequent Attacks
his paper evaluates AI models on their ability to generate exploits and repair vulnerabilities in non-public software environments. Its core contribution is providing evidence on whether AI aids attackers or defenders by testing models on unseen vulnerabilities, revealing significant variation in performance and highlighting that AI's impact is not uniform across different tasks and systems.
A Society of Researchers: Designing Institutions for Populations of Autonomous Research Agents
his paper proposes a "society of researchers" model for managing large populations of autonomous AI agents working on scientific tasks. The core method involves designing explicit institutions, inspired by human scientific communities, where agents compete for resources through proposals and reviews, overseen by a human governor. The contribution is a framework for organizing massive agent populations, enabling emergent, efficient scientific discovery, as demonstrated by a lab finding significant compute savings in language model pretraining.
AI Safety Considerations for Agents With Limited Time to Act
his paper argues that existing AI safety arguments often overlook the crucial role of the environment. It introduces theoretical bounds for agent-agnostic safety in partially observable, time-constrained environments, demonstrating that even a perfect agent cannot guarantee safety. The core contribution is highlighting that AI safety proofs must explicitly consider the environment and its associated safe actions alongside the agent.