Week of June 28 – July 05, 2026
Crowdsourced fact-checking systems have been adopted by major social media companies such as X, Meta, TikTok and Google with the aim of combating misleading information at scale without relying on centralized editorial control. These systems have been developed around a common underlying concept: a bridging mechanism that identifies notes flagging misleading information when they receive support from people with different perspectives rather than simple majority support. To our knowledge the only publicly disclosed bridging algorithms deployed for fact-checking are based on matrix factorization, as deployed by both X and Meta, augmented with additional components addressing abuse, targeted manipulation, and contributor brigades. This work examines the core matrix factorization portion of these systems, presenting theoretical and empirical evaluations of the degree to which coordinated users could vote strategically by leveraging the latent representations to fabricate the appearance of synthetic consensus within the bridging mechanism. Using historic production data, we find that up to 10.7% of lower quality notes could be manipulated above consensus thresholds using less than 10 ratings. We complement these findings with a theoretical analysis, revealing counterintuitively that rating a note as "Not Helpful" can increase its helpfulness score, as well as a cost model quantifying manipulation effort. We have developed and deployed mitigations within X's Community Notes algorithm to address synthetic consensus.
Primary: Stanford University
All Institutions: Stanford University, X Community Notes, xAI
This work has significant broader impact, particularly for social media platforms and the field of adversarial machine learning. It proactively identifies a critical vulnerability in crowdsourced fact-checking systems (like X, Meta, TikTok, Google) that rely on matrix factorization for "bridging consensus." By demonstrating how coordinated adversaries can fabricate synthetic consensus, the paper highlights a fundamental challenge in designing robust, decentralized content moderation systems. The theoretical insights, especially the counterintuitive "Not Helpful" rating effect, contribute to a deeper understanding of MF-based systems. Most importantly, the paper's findings directly led to the development and *deployment of mitigations* (population sample filtering) within X's Community Notes algorithm, demonstrating a direct translation of research into real-world system improvements. This sets a high bar for impactful research in platform security and responsible AI, encouraging transparency and open collaboration between academia and industry to strengthen critical public-facing systems. This paper presents a rigorous analysis of coordinated manipulation in matrix factorization-based crowdsourced fact-checking, demonstrating a practical attack on production data and leading to the deployment of mitigations in X's Community Notes. The work combines theoretical derivations, empirical validation on a large-scale real-world dataset, and a practical cost model to expose a significant vulnerability in systems designed to combat misinformation, offering both novel insights into adversarial ML and direct, actionable solutions for platform security.
The paper presents a well-structured and rigorous methodology for analyzing coordinated manipulation in crowdsourced fact-checking systems, specifically focusing on the core matrix factorization (MF) component. The two-phase attack strategy is logically sound: first, adversarial accounts establish diverse positions in the latent factor space by strategically rating existing notes; second, these accounts coordinate to boost a target note's helpfulness score. This approach directly targets the "bridging" mechanism designed to ensure diverse agreement. The theoretical analysis of the Manipulation Resistance Score (MRS) is a significant contribution, providing a closed-form expression for the optimal single rating injection in a 1-dimensional factor space, which is the production setting for X. The derivation, detailed in the appendix, is thorough and correct. A particularly novel and counterintuitive finding is that rating a note as "Not Helpful" can, under specific conditions related to the geometry of existing ratings, increase its helpfulness score. This highlights a subtle vulnerability in the MF model. The cost model for the full attack provides a practical framework for understanding the economic feasibility of such manipulations and for evaluating potential mitigations. The methodology is strong in its combination of theoretical derivation, practical attack formulation, and cost analysis.
The experimental evaluation is robust and highly impactful due to its use of historic production data from X Community Notes (Jan 2021 - Jan 2025). This real-world dataset lends significant credibility to the findings. The ability to predict note parameters ($f_n, i_n$) from text using a Voyage embedding model and a shallow MLP is empirically demonstrated with reasonable accuracy, validating the feasibility of Phase 1 of the attack. The simulation showing that 100 adversarial accounts can achieve diverse factor positions across the spectrum $[-0.4, 0.4]$ further supports the attack's practicality. The quantification of MRS is a key empirical result, demonstrating that up to 10.7% of lower-quality notes could be manipulated above consensus thresholds using fewer than 10 ratings. This is a stark and actionable finding. The cost model, while simplified, provides concrete estimates (e.g., $30.50 for a single note manipulation) and effectively highlights the dominant cost factors (account maintenance). The paper also discusses the effectiveness of deployed mitigations, such as population sample filtering, which is a strong indicator of real-world impact. The experiments are well-designed to validate the theoretical claims and quantify the practical threat.
The paper demonstrates a strong commitment to reproducibility. It explicitly states that the analysis is based on the "open data and source code of X Community Notes," which facilitates independent study. The dataset used is publicly released, and the specific embedding model (Voyage-3-large) is identified. Hyperparameter and implementation details for the prediction model are promised in the appendix (though the appendix provided in the prompt is truncated before these details). The computational resources are specified, and the total wall-clock time for experiments is given. The full derivation for optimal rating injection is provided in the appendix. The authors also state that X deployed mitigations and released them as part of the open-source algorithm, further enhancing reproducibility and real-world impact.
The paper openly discusses several limitations. Firstly, it acknowledges that production Community Notes implementations include anti-abuse components (e.g., Correlated Rater Detection, Rater Engagement Intercept, Net Helpful Minimums) that are not fully incorporated into the core analysis. While these are discussed qualitatively, their quantitative impact on the attack's cost and success rate is not fully modeled. Secondly, the analysis is conducted in a static setting, not accounting for dynamic feedback loops where a surfaced "Helpful" note might attract more ratings, potentially changing its status. Thirdly, the MRS computation uses a greedy algorithm, which might be a conservative approximation compared to exact combinatorial optimization. Additionally, the note parameter prediction model uses only note text, ignoring post content or URLs, which could lead to underestimation of attacker capabilities. Finally, the cost model is a simplified abstraction and doesn't capture all nuances of attacker utility or sophisticated evasion strategies.
This work has significant broader impact, particularly for social media platforms and the field of adversarial machine learning. It proactively identifies a critical vulnerability in crowdsourced fact-checking systems (like X, Meta, TikTok, Google) that rely on matrix factorization for "bridging consensus." By demonstrating how coordinated adversaries can fabricate synthetic consensus, the paper highlights a fundamental challenge in designing robust, decentralized content moderation systems. The theoretical insights, especially the counterintuitive "Not Helpful" rating effect, contribute to a deeper understanding of MF-based systems. Most importantly, the paper's findings directly led to the development and *deployment of mitigations* (population sample filtering) within X's Community Notes algorithm, demonstrating a direct translation of research into real-world system improvements. This sets a high bar for impactful research in platform security and responsible AI, encouraging transparency and open collaboration between academia and industry to strengthen critical public-facing systems. This paper presents a rigorous analysis of coordinated manipulation in matrix factorization-based crowdsourced fact-checking, demonstrating a practical attack on production data and leading to the deployment of mitigations in X's Community Notes. The work combines theoretical derivations, empirical validation on a large-scale real-world dataset, and a practical cost model to expose a significant vulnerability in systems designed to combat misinformation, offering both novel insights into adversarial ML and direct, actionable solutions for platform security.
Language models increasingly write probabilistic programs (in NumPyro, Stan, or Pyro), but a program that compiles, runs, and passes every unit test can still be \emph{statistically} wrong -- a Gaussian likelihood for heavy-tailed data, a Poisson for over-dispersed counts, an invalid prior support, or a pathological parameterization. The right verifier is therefore not a test suite but the Bayesian workflow itself: posterior predictive checks, simulation-based calibration, sampler diagnostics ($\hat R$, divergences, ESS), and held-out predictive density. We study this calibration oracle along three axes. \textbf{Detection:} on a benchmark of $14$ misspecification types across $10$ model families ($200$ instances), it flags the bug with AUC $0.97$ ($88\%$ at $2\%$ FPR \emph{when handed the correct reference program, an upper bound}) -- and a fully \emph{reference-free} version that uses no correct program reaches $62$--$78\%$ (the upper figure from a small automated model search), versus $0\%$ for a unit-test oracle. \textbf{Repair:} used as feedback in an LLM repair loop across fifteen models, calibration significantly outperforms unit-test feedback -- which is itself \emph{significantly worse than no feedback at all}, a passing test inducing false confidence that suppresses repair -- and improves over no feedback on strong-but-unsaturated models (GPT-5.1 $33{\to}92\%$, Claude $75{\to}100\%$; paired McNemar, $n{=}228$). \textbf{Reality:} on programs LLMs write from scratch for neutral briefs, $15$--$47\%$ of runnable ones are statistically misspecified (unit tests catch none), and calibration-guided repair significantly beats LLM-as-judge review, a Bayesian-workflow checklist, and data-summary self-debug. Across all three, the lesson is the same: for probabilistic programs, correctness is calibration, not compilation.
Primary: Columbia University
All Institutions: Columbia University
This paper introduces a paradigm shift for verifying LLM-generated probabilistic programs, demonstrating that Bayesian calibration diagnostics are essential for detecting code-invisible statistical errors, significantly outperforming and even revealing the harm of traditional unit tests in LLM repair loops. The comprehensive technical contribution, rigorous empirical validation on both injected and LLM-generated bugs, and the clear, actionable insights make this a genuinely field-wide significant paper that will reshape how LLM-assisted probabilistic modeling systems are designed and evaluated.
The paper proposes a robust methodology for detecting and repairing statistically misspecified probabilistic programs generated by Language Models (LLMs). The central innovation is the "calibration oracle," which formalizes and automates the Bayesian workflow diagnostics (Posterior Predictive Checks, Simulation-Based Calibration, sampler diagnostics like R-hat and divergences, and held-out predictive density) into a programmatic verifier. This oracle is designed to identify "code-invisible misspecification"—statistical errors that traditional unit tests (compilation, execution, output shape) cannot detect. The repair loop integrates this oracle as feedback for LLMs, guiding them to iteratively refine their programs. The methodology is well-grounded in Bayesian principles, and the formal distinction between code-visible and code-invisible bugs is crucial for understanding the limitations of existing LLM code verification paradigms. The aggregation of diverse diagnostics into a single verdict, with defined thresholds, provides a practical and actionable signal for automated systems.
The experimental evaluation is exceptionally thorough and convincing, covering detection, repair, and real-world applicability. 1. **Detection**: A comprehensive benchmark of 200 instances across 14 misspecification types and 10 model families was created. The calibration oracle achieved an impressive AUC of 0.97 (88% detection at 2% FPR), demonstrating its efficacy. Critically, a *reference-free* version of the oracle (without a ground-truth correct program) still achieved 62-78% detection, highlighting its practical utility. In stark contrast, the unit-test oracle achieved 0% detection for code-invisible bugs. 2. **Repair**: Experiments with 15 diverse LLMs (open and API) in a repair loop showed that calibration feedback consistently outperformed "no feedback" and "unit-test feedback." A surprising and impactful finding was that unit-test feedback was often *worse than no feedback*, as it induced false confidence and suppressed repair. Calibration feedback led to substantial improvements for strong-but-unsaturated models (e.g., GPT-5.1 from 33% to 92%), with statistically significant gains ($p < 4.5 \times 10^{-10}$ for pooled invisible-bug repairs). 3. **Real LLM Programs**: This section provides the strongest evidence. LLMs were tasked to write programs from scratch for neutral briefs. The study found that 15-47% of runnable LLM-generated programs were statistically misspecified (none caught by unit tests). Calibration-guided repair significantly outperformed strong baselines, including LLM-as-judge review, Bayesian-workflow checklists, and data-summary self-debug, achieving an 84% fix rate for misspecified programs. The results are robust, with detailed ablations and sensitivity analyses for oracle thresholds.
The paper demonstrates a high commitment to reproducibility. It specifies exact snapshots for API models and HuggingFace revisions for open models. Detailed hyperparameters for LLM generation (temperature, max tokens, repair budget) and NUTS inference (chains, draws, x64) are provided. Oracle thresholds are explicitly stated, and their sensitivity is analyzed. Crucially, the authors commit to releasing "The full system prompt, contract, feedback templates, benchmark generators, and analysis scripts with the paper," which is excellent practice and will enable full replication and extension of their work.
The authors are transparent about several limitations: 1. **PPC power**: The effectiveness of Posterior Predictive Checks depends on the chosen test statistics, meaning some misspecifications might remain undetected if not captured by the tracked statistics. 2. **Right fit, wrong structure**: The oracle primarily assesses distributional fit, not causal or generative correctness, making it blind to structural errors that yield similar predictive distributions. 3. **Over-wide predictive**: An overly confident or under-confident model might "cover" the data and pass PPC despite being fundamentally wrong. 4. **Diagnosis without remedy**: Weaker LLMs may receive accurate diagnostic feedback but lack the capability to translate it into a correct structural fix. 5. **SBC expense**: Simulation-Based Calibration is computationally intensive, limiting its practical use in the repair loop for large or costly models. 6. **Inference failure**: Sampler diagnostics can sometimes fire due to poor inference (e.g., NUTS issues) rather than genuine model misspecification, leading to false positives. 7. **Benchmark scope**: The repair experiments use a subset of bugs, and the tasks are classical low-dimensional models, suggesting that extending the approach to high-dimensional or complex structured models (e.g., deep models, spatial-temporal models) is future work.
This paper has profound broader impact for the burgeoning field of LLM-assisted scientific computing and probabilistic modeling. It fundamentally shifts the paradigm for verifying LLM-generated probabilistic code from "compilation" to "calibration," providing a principled and empirically validated framework for ensuring statistical correctness. This work is crucial for building trustworthy and reliable LLM agents that can assist in scientific discovery, data analysis, and model development. The PPL-agnostic nature of the Bayesian diagnostics means the approach is broadly applicable across popular probabilistic programming languages like Stan, Pyro, and PyMC. The surprising finding that unit-test feedback is actively harmful for LLM repair loops is a critical insight for designing future LLM agent architectures. This paper sets a new standard for evaluating and improving LLM-generated scientific code. This paper introduces a paradigm shift for verifying LLM-generated probabilistic programs, demonstrating that Bayesian calibration diagnostics are essential for detecting code-invisible statistical errors, significantly outperforming and even revealing the harm of traditional unit tests in LLM repair loops. The comprehensive technical contribution, rigorous empirical validation on both injected and LLM-generated bugs, and the clear, actionable insights make this a genuinely field-wide significant paper that will reshape how LLM-assisted probabilistic modeling systems are designed and evaluated.
Memory expertise is a learned skill: knowing what to encode, when to retrieve, and how to organize knowledge--a capacity known in cognitive science as metamemory. We bring this perspective to LLMs by treating memory management as a trainable skill. We promote file-system operations to first-class memory actions alongside task actions, letting the model itself decide how to manage its memory. This memory skill improves along two axes: the structure that supports it (prompts, file schemas, action vocabulary), and the proficiency of the model exercising it. Both axes resist manual optimization: episodes in long-horizon tasks run for thousands of steps, and a single memory mistake can hide long before it surfaces, making human review of full trajectories impractical. We introduce AutoMem, a framework that automates both axes. In the first loop, a strong LLM reviews complete agent trajectories and iteratively revises the memory structure that shapes how the agent interacts with its memory files. In the second loop, the agent's own good memory decisions are identified from many episodes and used as training signal to sharpen the model's memory proficiency directly. Across three procedurally generated long-horizon games (Crafter, MiniHack, and NetHack), optimizing memory alone--without modifying the model's task-action behavior--improved the base agent's performance ~2x-4x, bringing a 32B open-weight model competitive with frontier systems such as Claude Opus 4.5 and Gemini 3.1 Pro Thinking. Our results show that memory management is an independently learnable skill, and a high-leverage objective yielding large gains on long-horizon tasks.
Primary: Stanford University
All Institutions: Stanford University
The paper's findings have substantial broader implications. By demonstrating that automated memory optimization can significantly enhance LLM agent performance on long-horizon tasks, it offers a practical pathway for open-weight models to achieve capabilities comparable to frontier proprietary systems. This could democratize access to advanced agentic AI, making sophisticated LLM agents more accessible for research and development. The methodology of using meta-LLMs for trajectory-level review and targeted revision is a generalizable workflow that could be applied to optimize other agent capabilities beyond memory, potentially accelerating agent development across various domains. While the current applications are in games, the underlying principles are highly transferable to real-world tasks requiring complex, long-term information management. The authors responsibly note that the released artifacts are not directly applicable to high-stakes deployment without further safety review, acknowledging the ethical considerations. This paper introduces AutoMem, a novel framework that automates the learning of memory as a cognitive skill for LLM agents by iteratively optimizing both the memory's supporting structure (scaffold) and the model's proficiency in using it, yielding significant performance gains on long-horizon tasks and making open-weight models competitive with frontier systems. The work presents a highly innovative approach to a critical challenge in LLM agent development, leveraging meta-LLMs to automate the optimization of memory management in long-horizon tasks where human review is intractable. Its strong empirical results, demonstrating substantial performance improvements solely from memory optimization and bringing a 32B open-weight model to the level of frontier proprietary systems, highlight memory as a high-leverage objective and offer a promising direction for developing more capable, efficient, and accessible AI agents.
The methodology proposed in AutoMem is exceptionally well-conceived and technically sound. The central idea of treating memory management as a "trainable skill" for LLMs, drawing inspiration from cognitive science's metamemory, is a powerful conceptual shift. By promoting file-system operations (read, write, search, append, create) to first-class actions within the LLM's action space, the framework provides a flexible, observable, and controllable interface for external memory. The core technical contribution is the two-loop AutoMem framework. The first loop, scaffold optimization, leverages a powerful meta-LLM (Claude Opus 4.6) to review complete, long-horizon agent trajectories (up to $10^5$ steps) and iteratively revise the agent's code, prompts, and memory file schema. This addresses a critical bottleneck in long-horizon task development, where human review of such extensive traces is impractical. The meta-LLM effectively acts as a "code reviewer," diagnosing memory-related failures and proposing concrete structural improvements (e.g., coordinate-keyed deduplication, auto-synced inventory files, pre-populated strategy guides). The second loop, proficiency training, focuses on enhancing the model's parametric ability to make optimal memory decisions. Here, a meta-LLM (Claude Opus 4.7) acts as a "training engine," curating high-quality supervised training data from the agent's own experience and orchestrating the LoRA finetuning configuration. The architectural separation of a finetuned "memory specialist" model from the frozen "gameplay model" is a clever design choice, ensuring that memory skill acquisition is targeted and does not degrade the base model's existing task competence. This modularity allows for clean, additive gains. The overall framework is coherent, addresses a significant challenge in LLM agent development, and is grounded in a strong theoretical perspective.
The experimental evaluation is rigorous and highly convincing. The paper selects three challenging, procedurally generated long-horizon games—Crafter, MiniHack, and NetHack—which are ideal environments for testing sophisticated memory management due to their length, stochasticity, and the inherent need for persistent knowledge (e.g., maps, inventory, strategies). The use of the BALROG harness ensures a standardized and challenging benchmark. The primary metric, game progression rate, is appropriate for these complex tasks. The results are remarkably strong: optimizing memory *alone*, without modifying the base model's task-action weights, yields substantial performance gains of 2x-4x across all environments. This empirically validates the paper's central hypothesis that memory management is an independently learnable and high-leverage skill. Furthermore, the optimized 32B open-weight model achieves performance competitive with frontier proprietary systems such as Claude Opus 4.5 and Gemini 3.1 Pro Thinking, a highly impactful finding that suggests memory optimization can significantly close the gap between open-source and state-of-the-art proprietary models on these tasks. The paper also provides compelling qualitative evidence, including a significant reduction in unproductive actions, a sharp decrease in redundant memory writes, and the emergence of a "consult-before-write" memory discipline in the trained specialist. The detailed examples of memory schema evolution (e.g., NetHack's coordinate-keyed map deduplication) further illustrate the concrete benefits of the scaffold optimization. The inclusion of strong baselines, including frontier proprietary models and basic context-management strategies, provides a comprehensive comparison.
The paper demonstrates an excellent commitment to reproducibility. A dedicated appendix provides comprehensive implementation details, including specific configurations for all three game environments (Crafter, MiniHack, NetHack), such as world area, agent view, reward settings, maximum episode steps, and evaluation seeds. Crucially, it details the outer-loop processes, specifying the meta-LLMs used (Claude Opus 4.6/4.7), the criteria for accepting revisions, retry mechanisms, training data collection procedures, and the exact LoRA hyperparameters (rank, alpha, dropout, effective batch size, learning rate, number of training epochs, and target modules) for each environment. The explicit mention of releasing the complete prompt templates and code at `https://github.com/autoLearnMem/AutoMem` is a significant strength, enabling researchers to replicate and build upon this work. This level of detail is commendable and sets a high standard for reproducibility in LLM agent research.
The authors thoughtfully acknowledge several limitations. The current memory system is episodic, meaning the file system starts fresh at the beginning of each episode, which prevents knowledge transfer across sessions. Extending this to persistent memory is identified as a natural next step. The experiments are conducted on game environments, which, while well-suited for studying memory, suggest a need to validate the approach on real-world, memory-intensive tasks. Additionally, the current framework optimizes a separate scaffold and memory specialist for each game, raising the question of whether a single, more generalized scaffold or specialist could be developed to operate effectively across diverse environments. An implicit limitation, common to meta-LLM-driven approaches, is the reliance on powerful proprietary models (Claude Opus) as meta-LLMs, which entails cost and potential for brittleness, though the iterative refinement and gating mechanisms help mitigate this.
The paper's findings have substantial broader implications. By demonstrating that automated memory optimization can significantly enhance LLM agent performance on long-horizon tasks, it offers a practical pathway for open-weight models to achieve capabilities comparable to frontier proprietary systems. This could democratize access to advanced agentic AI, making sophisticated LLM agents more accessible for research and development. The methodology of using meta-LLMs for trajectory-level review and targeted revision is a generalizable workflow that could be applied to optimize other agent capabilities beyond memory, potentially accelerating agent development across various domains. While the current applications are in games, the underlying principles are highly transferable to real-world tasks requiring complex, long-term information management. The authors responsibly note that the released artifacts are not directly applicable to high-stakes deployment without further safety review, acknowledging the ethical considerations. This paper introduces AutoMem, a novel framework that automates the learning of memory as a cognitive skill for LLM agents by iteratively optimizing both the memory's supporting structure (scaffold) and the model's proficiency in using it, yielding significant performance gains on long-horizon tasks and making open-weight models competitive with frontier systems. The work presents a highly innovative approach to a critical challenge in LLM agent development, leveraging meta-LLMs to automate the optimization of memory management in long-horizon tasks where human review is intractable. Its strong empirical results, demonstrating substantial performance improvements solely from memory optimization and bringing a 32B open-weight model to the level of frontier proprietary systems, highlight memory as a high-leverage objective and offer a promising direction for developing more capable, efficient, and accessible AI agents.
Graph-based semi-supervised learning (SSL) propagates a few labels over a similarity graph by minimizing a Dirichlet-type energy. The standard quadratic ($p=2$) energy reduces to a single graph-Laplacian solve, but it degenerates exactly where SSL is most useful when labels are scarce: gathering more unlabeled data drives the $p=2$ estimate to a near-constant function whenever $d\ge2$ (Nadler-Srebro-Zhou). Well-posedness requires the nonlinear $p$-Laplacian energy with $p>d$. Existing solvers reduce this to a sequence of weighted Laplacian solves, but their reference implementations use a direct sparse factorization or ichol-preconditioned CG instead. Plugging a near-linear Laplacian solver is not straightforward: at large $p$ the conductance weights degenerate near flat-gradient edges, making the system nearly singular and causing stagnation without a damped outer iteration. We close this gap. Recasting $p$-Laplacian SSL as a source-form nonlinear Laplacian flow $Bρ_p(B^\top x)=b$ and solving by damped chord-Newton continuation in $p$, every linearized system stays well-conditioned and can be delegated to a near-linear Laplacian engine. On size-scaled graph families the wall-clock is empirically $m^{0.96}$-$m^{1.02}$ per family (approximate Cholesky default), and a pooled fit across 228 SuiteSparse graphs gives $m^{1.19}$ vs.\ $m^{1.45}$ for direct factorization; the solver handles a $6.8\times10^7$-edge social network in minutes. Memory is the binding constraint: Cholesky fill reaches $10$-$280\times$ the graph nonzeros vs.\ our $O(m)$ hierarchy. Against the released FCL solver we are $1.5$-$14\times$ faster at matched accuracy. On MNIST $10$-NN, $p=3$ scores $64\%$ at one label per class vs.\ $36\%$ for $p=2$. Code: https://github.com/orenlivne/np.
Primary: Weizmann Institute of Science
All Institutions: Weizmann Institute of Science
The paper presents a significant engineering and numerical analysis breakthrough that makes scalable, nonlinear graph semi-supervised learning practically viable for the first time. By correctly integrating near-linear Laplacian solvers with a damped Newton continuation framework, it overcomes the stability and memory issues that previously confined $p$-Laplacian SSL to small graphs, enabling applications on industrial-scale networks with tens of millions of edges while maintaining the statistical advantages of nonlinear energy minimization.
The paper addresses a critical scalability bottleneck in Graph $p$-Laplacian Semi-Supervised Learning (SSL). While the statistical benefits of $p>2$ energies in mitigating the low-label degeneracy of quadratic ($p=2$) label propagation are well-established, practical adoption has been hindered by the superlinear memory and time complexity of direct sparse factorization solvers. The authors' key methodological contribution is the rigorous recasting of the $p$-Laplacian SSL problem as a nonlinear Laplacian flow ($B\rho_p(B^\top x)=b$) and the application of a damped chord-Newton continuation method. Crucially, they demonstrate that by using a conductance floor and guarded Anderson acceleration, the inner linearized systems remain well-conditioned, allowing the substitution of expensive direct solvers with near-linear time Laplacian engines (Approximate Cholesky or LAMG+). This is a non-trivial numerical analysis contribution, as naive substitution of near-linear solvers into the Newton loop typically leads to stagnation due to ill-conditioning at large $p$.
The experimental evaluation is comprehensive and convincing. The authors provide: 1. Theoretical validation: Reproducing the known low-label degeneracy of $p=2$ and showing that $p=3$ significantly improves accuracy (64% vs 36% on MNIST with 1 label/class). 2. Scaling analysis: Empirical evidence of near-linear scaling ($m^{0.96}-m^{1.02}$) on fixed graph families and a pooled fit of $m^{1.19}$ across 228 heterogeneous graphs. 3. Comparative benchmarks: Head-to-head comparisons against the incumbent FCL solver (showing 1.5-14x speedups) and Calder's GraphLearning package (showing significant speedups on geometric graphs). 4. Web-scale demonstration: Successfully solving SSL on a 68M-edge social network (LiveJournal) in minutes, a task infeasible for direct factorization methods due to memory constraints. The experiments are rigorous, covering controlled scaling, heterogeneous corpus analysis, and real-world industrial-scale graphs.
The paper provides a clear algorithm description, detailed hyperparameters (e.g., conductance floor $10^{-6}$, continuation schedule), and open-source code. The reproducibility is high, supported by the availability of the Julia implementation and the specific graph corpus used.
The authors honestly disclose several limitations: 1. The near-linear scaling is empirical; no theoretical complexity bound is provided for the outer iteration count on general graphs. 2. The solver is currently single-threaded, limiting absolute wall-clock performance compared to potential distributed implementations. 3. The comparison with FCL is limited to moderate sizes due to the MATLAB/Octave implementation's constraints, though the memory wall argument for larger graphs is strong. 4. The method relies on the effectiveness of the conductance floor, which, while theoretically justified as a preconditioner, is an empirical choice.
This work removes a major barrier to using nonlinear graph-based SSL at scale. By making $p$-Laplacian methods feasible for web-scale graphs, it enables more robust semi-supervised learning in regimes with scarce labels (few-shot learning, active learning) where GNNs often overfit and quadratic propagation fails. It bridges the gap between theoretical insights on $p$-Laplacian well-posedness and practical, large-scale machine learning infrastructure. The paper presents a significant engineering and numerical analysis breakthrough that makes scalable, nonlinear graph semi-supervised learning practically viable for the first time. By correctly integrating near-linear Laplacian solvers with a damped Newton continuation framework, it overcomes the stability and memory issues that previously confined $p$-Laplacian SSL to small graphs, enabling applications on industrial-scale networks with tens of millions of edges while maintaining the statistical advantages of nonlinear energy minimization.
Routing among large language models (LLMs) promises better quality at lower cost, motivated by the reported gap between learned routers and a per-instance oracle. But that oracle is computed from a single correctness label per (query, model), so under stochastic decoding it is one Bernoulli draw, not a reproducible property. We recast the question structurally: the expected per-instance oracle decomposes as $O^{\exp}=O^{\mathrm{repro}}+Δ$, into reproducible single-commit headroom $O^{\mathrm{repro}}$ and a non-negative single-commit selection floor $Δ$. Our main result is a recoverability asymmetry: this floor is closed by no single-commit router, yet is recovered by test-time sampling -- best-of-$K$ on the committed model, at the oracle's own budget, dominates the independent-pool single-draw oracle. The cap needs no cross-model independence; we prove it with the exact decomposition and noise-share bounds that shrink as the budget grows. The procedure adds no new router, only resampling. The floor's magnitude is a prospective, conservative localization, not an audit: our primary target LLMRouterBench (33 models, 391,645 instances) defines its oracle as a per-query union over single $T=0.2$ generations -- by construction a union of stochastic single draws. Since $O^{\mathrm{repro}}$ is non-identifiable from the released $k=1$ matrix, we estimate the noise share by fresh $k\ge20$ resampling under one-sided, dependence- and guessing-floor-corrected bounds, recasting 'model-recall failure' as thin-support union inflation. On a controlled open-model re-generation, single-draw noise is a substantial minority of the gap -- larger on an unsaturated benchmark, approaching half on the hardest queries where no model is reliable -- while the majority remains recoverable specialist advantage. We release a multi-sample oracle evaluation protocol for routing benchmarks.
Primary: National Yang Ming Chiao Tung University
All Institutions: National Yang Ming Chiao Tung University, Krixvon AI
This paper has significant broader impact for the field of LLM routing and evaluation methodology. 1. **Benchmark Design**: It provides a concrete, actionable protocol for benchmark designers to adopt multi-sample oracles (expected and reproducible variants) instead of single-draw ones, which are shown to be systematically inflated. This could lead to more accurate and reliable routing benchmarks. 2. **Interpretation of Routing Progress**: The work fundamentally re-calibrates the understanding of the "router-to-oracle gap" and the "model-recall failure" diagnosis. By quantifying the portion of the gap attributable to irreducible single-draw noise, it clarifies how much genuine headroom exists for routers, guiding research efforts more effectively. 3. **Research Direction**: It suggests that future routing research should focus on better ex-ante quality estimation and decorrelating model pools, rather than chasing an inflated ceiling. It also motivates further investigation into cost-quality claims and end-to-end latency with calibrated oracles. 4. **General LLM Evaluation**: The principles of accounting for stochasticity and decomposing performance into reproducible vs. noise components could extend beyond routing to other areas of LLM evaluation where single-sample metrics are common. This paper rigorously decomposes the LLM router-to-oracle gap, revealing that a substantial minority is single-draw label noise irrecoverable by single-commit routing, and proposes a multi-sample oracle evaluation protocol. The work provides a robust theoretical framework, compelling empirical evidence, and a highly reproducible methodology that significantly advances the understanding and evaluation of LLM routing systems, offering clear guidance for benchmark design and future research.
The methodology is exceptionally rigorous and well-articulated. The paper structurally recasts the problem of the router-to-oracle gap by defining three key oracles: the expected single-draw oracle ($O^{\exp}$), the reproducible single-commit headroom ($O^{\mathrm{repro}}$), and the verifier-free aggregation oracle ($O^{\mathrm{agg}}$). The core contribution is the exact, non-negative decomposition of the router-to-oracle gap ($G$) into recoverable specialist advantage ($G_{\mathrm{rec}}$) and single-draw label noise ($G_{\mathrm{noise}}$). This decomposition is backed by strong theoretical proofs (Theorems, Propositions, Corollaries) that establish the upward bias of the single-draw oracle and the "recoverability asymmetry"—that $G_{\mathrm{noise}}$ is irrecoverable by any single-commit router but can be recovered by test-time sampling. The proposed Algorithm 1 provides a clear, step-by-step protocol for multi-sample correctness estimation and gap decomposition, using raw frequencies for point estimates and Beta-Bernoulli posteriors for confidence intervals. Crucially, the methodology addresses the complexities of estimating $O^{\exp}$ in the presence of cross-model dependencies by using a seed-aligned estimator, which is unbiased. The use of one-sided, dependence- and guessing-floor-corrected bounds for conservative estimation of $G_{\mathrm{noise}}$ further enhances the robustness of the approach. The paper clearly distinguishes its contributions from prior and concurrent work, particularly regarding the focus on stochastic single-draw noise versus deterministic evaluation artifacts.
The experimental evaluation is comprehensive and well-controlled, designed to localize the empirical magnitude of the theoretically proven noise term. The primary target is LLMRouterBench, with RouterBench as secondary corroboration. For a controlled re-generation, the authors used a pool of eleven open-weight, text-only instruction models served identically under vLLM at $T=0.2$ with $k=30$ seed-aligned draws per (query, model) cell. Two exact-match benchmarks, GSM8K (saturated) and MATH-500 (unsaturated), were used, with thin-support queries oversampled. The experiments successfully pass pre-checks for independence and over-dispersion, licensing the magnitude study. Key findings include: 1. **Magnitude of Noise**: Single-draw noise ($G_{\mathrm{noise}}$) constitutes a substantial minority of the gap (12% on GSM8K, 36% on MATH-500), with the majority remaining recoverable specialist advantage (64-88%). 2. **Noise Concentration**: $G_{\mathrm{noise}}$ concentrates heavily in thin-support queries (e.g., 43% on MATH-500 for queries where only 3 of 11 models were correct), validating theoretical predictions. 3. **Pool Composition Control**: The paper rigorously controls for intra-lineage error correlation, showing that redundancy inflates the noise share. Experiments with lineage-deduplicated pools and cardinality sweeps confirm the theoretical predictions, demonstrating the robustness of the findings. 4. **Recoverability Check**: The falsifiable prediction that test-time sampling recovers what selection cannot is empirically confirmed, with best-of-$K$ sampling outperforming the independent-pool oracle. However, the analysis also highlights that verifier-free aggregation (majority vote) often falls short, indicating that a significant portion of the "guessing residual" requires a deploy-time verifier. The experimental design is exemplary in its controls, stratification, and careful interpretation of results, providing strong empirical support for the theoretical claims.
The reproducibility of this work is exceptionally high. The authors explicitly state that "Code, corrected oracles, and the per-model correctness data are available at https://github.com/luka-krixvon/routing-oracle-experiment". The paper provides detailed information about the experimental setup, including the specific models used (eleven open-weight instruction models from eight distinct pretraining lineages), the serving framework (vLLM), decoding parameters ($T=0.2$, top-$p$ $1.0$), and the number of seed-aligned draws ($k=30$). The system configuration, including hardware/software stack, is captured by a detection script and released with the code. The methodology for multi-sample correctness estimation and gap decomposition is clearly outlined in Algorithm 1. This level of detail and the release of artifacts make the work highly reproducible and verifiable by the community.
The paper acknowledges several limitations: 1. **Scope of Re-estimation**: The current estimates use $k$ samples at a single temperature on an open-model pool. Future work could extend this to larger $k$, multiple temperatures, and live frontier (closed-source) models to sharpen estimates and test the bias growth. 2. **Cross-model Error Correlation**: While the paper controls for intra-lineage correlation, it notes that it does not fully characterize how cross-model estimator-error correlation shifts routing optimality in general, leaving this for future work. 3. **Evaluation Metric Scope**: The primary analysis focuses on exact-match and multiple-choice tasks, explicitly excluding LLM-judge / continuous-graded ones due to the mixing of sampling noise with judge noise. This is a reasonable scoping decision but means the findings do not directly generalize to all types of LLM evaluations. 4. **Preprint Date**: The "Preprint, July 2026" date is unusual for an arXiv preprint, which typically reflects the current or a past year. While not impacting the technical content, it's an oddity.
This paper has significant broader impact for the field of LLM routing and evaluation methodology. 1. **Benchmark Design**: It provides a concrete, actionable protocol for benchmark designers to adopt multi-sample oracles (expected and reproducible variants) instead of single-draw ones, which are shown to be systematically inflated. This could lead to more accurate and reliable routing benchmarks. 2. **Interpretation of Routing Progress**: The work fundamentally re-calibrates the understanding of the "router-to-oracle gap" and the "model-recall failure" diagnosis. By quantifying the portion of the gap attributable to irreducible single-draw noise, it clarifies how much genuine headroom exists for routers, guiding research efforts more effectively. 3. **Research Direction**: It suggests that future routing research should focus on better ex-ante quality estimation and decorrelating model pools, rather than chasing an inflated ceiling. It also motivates further investigation into cost-quality claims and end-to-end latency with calibrated oracles. 4. **General LLM Evaluation**: The principles of accounting for stochasticity and decomposing performance into reproducible vs. noise components could extend beyond routing to other areas of LLM evaluation where single-sample metrics are common. This paper rigorously decomposes the LLM router-to-oracle gap, revealing that a substantial minority is single-draw label noise irrecoverable by single-commit routing, and proposes a multi-sample oracle evaluation protocol. The work provides a robust theoretical framework, compelling empirical evidence, and a highly reproducible methodology that significantly advances the understanding and evaluation of LLM routing systems, offering clear guidance for benchmark design and future research.
Brownian Bridge Diffusion Models (BBDM) offer an appealing framework for image restoration and inverse problems by constructing a stochastic bridge from the clean signal directly to the degraded observation, rather than to pure noise. Despite their promise, the choice of bridge schedule is typically inherited from heuristics, and a principled analytical framework for schedule design has been lacking. In this work, we develop such a framework by offering a novel analysis of BBDM reverse dynamics under a Mixture-of-Gaussians (MoG) prior. This setting yields a closed-form ideal posterior and a corresponding MMSE denoiser, while the BBDM-induced reconstruction law is captured analytically through a tractable surrogate. Building on these expressions, we formulate two complementary schedule-design objectives: a Wasserstein criterion targeting perceptual quality and an MSE criterion targeting reconstruction fidelity. Our work exposes an inherent tradeoff between the two and proves the existence of universal schedules for both that are independent of the degradation and prior. Extensive experiments on controlled MoG settings confirm full alignment between theory and practice, and experiments on the FFHQ dataset across inpainting, deblurring, and super-resolution tasks validate the practical value of our schedule-design criteria.
Primary: Technion – Israel Institute of Technology
All Institutions: Technion – Israel Institute of Technology
This paper provides a rigorous analytical framework for schedule design in Brownian Bridge Diffusion Models, deriving closed-form reconstruction laws under Mixture-of-Gaussians priors to expose and optimize the distortion-perception tradeoff. The technical contribution is significant for its mathematical depth and the clarity it brings to a previously heuristic area, though its direct impact is somewhat moderated by the reliance on approximations for high-dimensional applications.
The paper presents a rigorous analytical framework for schedule design in Brownian Bridge Diffusion Models (BBDM). The core methodological contribution is the derivation of exact posterior dynamics under a Mixture-of-Gaussians (MoG) prior. Recognizing that the exact MoG reverse process loses global affinity, the authors introduce a "selected-label" approximation that freezes the mixture component assignment, allowing for a closed-form reconstruction law. This enables the formulation of two explicit schedule-design objectives: one minimizing Wasserstein distance (perceptual quality) and one minimizing MSE (reconstruction fidelity). The theoretical derivation is mathematically sound, leveraging Gaussian conditioning identities and spectral decomposition to decouple the dynamics. The approach is novel in applying this specific analytical lens to BBDM schedules, moving beyond heuristic choices.
The experimental validation is structured in three tiers: synthetic MoG data, MNIST with fitted MoG priors, and real-world FFHQ images. The synthetic experiments effectively validate the theoretical claims regarding the selected-label approximation and the distortion-perception tradeoff. The MNIST experiments demonstrate that the theoretical schedules improve upon default schedules in PSNR and NLL. The FFHQ experiments show that the MSE-oriented schedule improves PSNR/SSIM while the W2-oriented schedule improves FID/LPIPS, confirming the theoretical tradeoff. However, the real-world experiments rely on "MoG-free heuristics" derived from the theoretical bounds rather than optimizing the full MoG objective (which is intractable at scale), which slightly weakens the direct link between the complex theory and the final applied results.
The paper provides extensive mathematical derivations in the appendix, including proofs of mean-exactness and covariance deficit. The experimental setup is detailed, including dataset splits, training epochs, and evaluation metrics. The use of standard datasets (FFHQ, MNIST) and publicly available libraries (torch-fidelity, lpips) aids reproducibility. The code for the BBDM models is not explicitly linked, but the methodology is sufficiently described for implementation.
The primary limitation is the reliance on the selected-label approximation for the theoretical analysis. While proven to be mean-exact and covariance-deficient, it is an approximation. The "universal" schedules derived are based on a bounded four-parameter family and may not be optimal for all degradation types or data distributions. Furthermore, the real-world experiments use heuristics rather than the full theoretical optimization, limiting the direct demonstration of the theory's power in high-dimensional settings. The assumption of linear inverse problems also restricts the scope.
This work provides a principled foundation for tuning diffusion models for inverse problems, potentially leading to more reliable and performant restoration algorithms. By exposing the inherent tradeoff between perceptual quality and fidelity through a clear analytical lens, it offers valuable insights for practitioners balancing these competing objectives. The framework could be extended to other bridge-based diffusion models or used to analyze other sampler parameters. This paper provides a rigorous analytical framework for schedule design in Brownian Bridge Diffusion Models, deriving closed-form reconstruction laws under Mixture-of-Gaussians priors to expose and optimize the distortion-perception tradeoff. The technical contribution is significant for its mathematical depth and the clarity it brings to a previously heuristic area, though its direct impact is somewhat moderated by the reliance on approximations for high-dimensional applications.
Fine-tuning a single low-rank adapter on many domains at once is multi-task learning: the domains must be co-learned, and how they share the adapter decides whether they help or hurt one another. Most efficient fine-tuning pipelines ignore this and train on a fixed, uniform mixture, leaving two coupled questions unanswered: how much should each domain participate, and which domains should be co-trained given that some transfer positively and others interfere? We show that both answers can be read off cheaply and without labels. A forward pass of the current shared adapter over a small unlabeled probe yields, per domain, a competence signal whose level tracks remaining headroom and whose trajectory tracks learning speed; the drift of these probe representations yields a signed cross-domain affinity that predicts pairwise transfer. We fold both into CoDA, a co-adaptive controller that solves a small entropy-regularized quadratic program on the simplex to set each domain's participation -- jointly its loss weight and its share of the sampled data -- rewarding high-headroom, still-learning, mutually synergistic domains and damping interfering ones. The controller is forward-only, adds no trainable parameters, and wraps any multi-task LoRA pipeline. Across five heterogeneous domains and two backbones, CoDA improves the average over uniform mixing, learned mixtures, gradient-surgery multi-task optimizers, and online data selection while using half the data, and lowers cross-domain gradient conflict. We prove that the competence signal tracks domain risk, that the participation program has a unique fixed point reached by a contraction, and that its solution performs transfer-aware water-filling; analysis, ablations, and controls corroborate each claim.
Primary: University of Electronic Science and Technology of China
All Institutions: University of Electronic Science and Technology of China, Sichuan University
CoDA introduces a novel, label-free, forward-only mechanism for dynamically balancing multi-task LoRA training by estimating domain competence and cross-domain affinity, achieving state-of-the-art performance with reduced data and compute costs.
The paper proposes CoDA, a co-adaptive controller for multi-task Low-Rank Adaptation (LoRA). The core innovation lies in using label-free, forward-only signals to dynamically adjust domain participation. Specifically, it defines "competence" based on normalized predictive entropy to estimate domain headroom and learning speed, and "affinity" based on the drift of probe representations to estimate signed cross-domain transfer. These signals feed into an entropy-regularized quadratic program that jointly optimizes loss weights and data sampling ratios. The approach is theoretically grounded with proofs regarding the tracking of domain risk, the uniqueness of the fixed point (contraction mapping), and its interpretation as transfer-aware water-filling. The methodology is elegant, avoiding the need for labeled validation sets or expensive gradient computations during the control loop.
The evaluation is robust, covering two large backbones (Qwen-2.5-7B, LLaMA-3.1-8B) and five heterogeneous domains (Knowledge, Math, Code, Reasoning, Biomedical). CoDA outperforms uniform mixing, static mixture baselines (DoReMi, Temperature), and gradient-surgery methods (PCGrad, GradNorm) across all metrics, achieving significant gains (+1.8 avg score) while using only 50% of the data. The paper provides strong ablations isolating the contribution of the headroom term versus the affinity term, demonstrating that the latter is crucial for capturing synergistic/interfering relationships. Mechanism analysis confirms that the affinity signal correlates highly ($r=0.94$) with oracle leave-one-out transfer measurements. The results are consistent across seeds and model scales.
The paper provides detailed descriptions of the experimental setup, including dataset sources, prompt templates, LoRA configurations, and hyperparameters. The algorithm is clearly defined with pseudocode. The authors state that code and configurations will be released. The reliance on forward passes makes the method computationally transparent and easy to implement on top of existing LoRA pipelines. The theoretical proofs are included in the appendix, adding to the reproducibility of the claims.
The method requires a small unlabeled probe set per domain, which may be a constraint in strictly zero-data settings (though no labels are needed). The competence signal relies on model calibration; severe miscalibration could degrade performance, although the authors note a warmup phase helps mitigate this. The method assumes that the probe data is representative of the domain distribution. Additionally, while it reduces gradient conflict, it does not eliminate it entirely, and the quadratic program solution, while efficient, adds some overhead compared to static mixing.
This work significantly advances the efficiency and effectiveness of multi-task fine-tuning for LLMs. By reducing the data and compute required for adapting models to multiple domains, it lowers the barrier to entry for specialized model deployment and reduces the environmental impact of training. The label-free nature of the controller makes it applicable to scenarios where labeled data is scarce or expensive. The insights into cross-domain transfer and interference provide valuable theoretical understanding for multi-task learning. CoDA introduces a novel, label-free, forward-only mechanism for dynamically balancing multi-task LoRA training by estimating domain competence and cross-domain affinity, achieving state-of-the-art performance with reduced data and compute costs.
Crowdsourced fact-checking systems have been adopted by major social media companies such as X, Meta, TikTok and Google with the aim of combating misleading information at scale without relying on centralized editorial control. These systems have been developed around a common underlying concept: a bridging mechanism that identifies notes flagging misleading information when they receive support from people with different perspectives rather than simple majority support. To our knowledge the only publicly disclosed bridging algorithms deployed for fact-checking are based on matrix factorization, as deployed by both X and Meta, augmented with additional components addressing abuse, targeted manipulation, and contributor brigades. This work examines the core matrix factorization portion of these systems, presenting theoretical and empirical evaluations of the degree to which coordinated users could vote strategically by leveraging the latent representations to fabricate the appearance of synthetic consensus within the bridging mechanism. Using historic production data, we find that up to 10.7% of lower quality notes could be manipulated above consensus thresholds using less than 10 ratings. We complement these findings with a theoretical analysis, revealing counterintuitively that rating a note as "Not Helpful" can increase its helpfulness score, as well as a cost model quantifying manipulation effort. We have developed and deployed mitigations within X's Community Notes algorithm to address synthetic consensus.
Primary: Stanford University
All Institutions: Stanford University, X Community Notes, xAI
This work has significant broader impact, particularly for social media platforms and the field of adversarial machine learning. It proactively identifies a critical vulnerability in crowdsourced fact-checking systems (like X, Meta, TikTok, Google) that rely on matrix factorization for "bridging consensus." By demonstrating how coordinated adversaries can fabricate synthetic consensus, the paper highlights a fundamental challenge in designing robust, decentralized content moderation systems. The theoretical insights, especially the counterintuitive "Not Helpful" rating effect, contribute to a deeper understanding of MF-based systems. Most importantly, the paper's findings directly led to the development and *deployment of mitigations* (population sample filtering) within X's Community Notes algorithm, demonstrating a direct translation of research into real-world system improvements. This sets a high bar for impactful research in platform security and responsible AI, encouraging transparency and open collaboration between academia and industry to strengthen critical public-facing systems. This paper presents a rigorous analysis of coordinated manipulation in matrix factorization-based crowdsourced fact-checking, demonstrating a practical attack on production data and leading to the deployment of mitigations in X's Community Notes. The work combines theoretical derivations, empirical validation on a large-scale real-world dataset, and a practical cost model to expose a significant vulnerability in systems designed to combat misinformation, offering both novel insights into adversarial ML and direct, actionable solutions for platform security.
The paper presents a well-structured and rigorous methodology for analyzing coordinated manipulation in crowdsourced fact-checking systems, specifically focusing on the core matrix factorization (MF) component. The two-phase attack strategy is logically sound: first, adversarial accounts establish diverse positions in the latent factor space by strategically rating existing notes; second, these accounts coordinate to boost a target note's helpfulness score. This approach directly targets the "bridging" mechanism designed to ensure diverse agreement. The theoretical analysis of the Manipulation Resistance Score (MRS) is a significant contribution, providing a closed-form expression for the optimal single rating injection in a 1-dimensional factor space, which is the production setting for X. The derivation, detailed in the appendix, is thorough and correct. A particularly novel and counterintuitive finding is that rating a note as "Not Helpful" can, under specific conditions related to the geometry of existing ratings, increase its helpfulness score. This highlights a subtle vulnerability in the MF model. The cost model for the full attack provides a practical framework for understanding the economic feasibility of such manipulations and for evaluating potential mitigations. The methodology is strong in its combination of theoretical derivation, practical attack formulation, and cost analysis.
The experimental evaluation is robust and highly impactful due to its use of historic production data from X Community Notes (Jan 2021 - Jan 2025). This real-world dataset lends significant credibility to the findings. The ability to predict note parameters ($f_n, i_n$) from text using a Voyage embedding model and a shallow MLP is empirically demonstrated with reasonable accuracy, validating the feasibility of Phase 1 of the attack. The simulation showing that 100 adversarial accounts can achieve diverse factor positions across the spectrum $[-0.4, 0.4]$ further supports the attack's practicality. The quantification of MRS is a key empirical result, demonstrating that up to 10.7% of lower-quality notes could be manipulated above consensus thresholds using fewer than 10 ratings. This is a stark and actionable finding. The cost model, while simplified, provides concrete estimates (e.g., $30.50 for a single note manipulation) and effectively highlights the dominant cost factors (account maintenance). The paper also discusses the effectiveness of deployed mitigations, such as population sample filtering, which is a strong indicator of real-world impact. The experiments are well-designed to validate the theoretical claims and quantify the practical threat.
The paper demonstrates a strong commitment to reproducibility. It explicitly states that the analysis is based on the "open data and source code of X Community Notes," which facilitates independent study. The dataset used is publicly released, and the specific embedding model (Voyage-3-large) is identified. Hyperparameter and implementation details for the prediction model are promised in the appendix (though the appendix provided in the prompt is truncated before these details). The computational resources are specified, and the total wall-clock time for experiments is given. The full derivation for optimal rating injection is provided in the appendix. The authors also state that X deployed mitigations and released them as part of the open-source algorithm, further enhancing reproducibility and real-world impact.
The paper openly discusses several limitations. Firstly, it acknowledges that production Community Notes implementations include anti-abuse components (e.g., Correlated Rater Detection, Rater Engagement Intercept, Net Helpful Minimums) that are not fully incorporated into the core analysis. While these are discussed qualitatively, their quantitative impact on the attack's cost and success rate is not fully modeled. Secondly, the analysis is conducted in a static setting, not accounting for dynamic feedback loops where a surfaced "Helpful" note might attract more ratings, potentially changing its status. Thirdly, the MRS computation uses a greedy algorithm, which might be a conservative approximation compared to exact combinatorial optimization. Additionally, the note parameter prediction model uses only note text, ignoring post content or URLs, which could lead to underestimation of attacker capabilities. Finally, the cost model is a simplified abstraction and doesn't capture all nuances of attacker utility or sophisticated evasion strategies.
This work has significant broader impact, particularly for social media platforms and the field of adversarial machine learning. It proactively identifies a critical vulnerability in crowdsourced fact-checking systems (like X, Meta, TikTok, Google) that rely on matrix factorization for "bridging consensus." By demonstrating how coordinated adversaries can fabricate synthetic consensus, the paper highlights a fundamental challenge in designing robust, decentralized content moderation systems. The theoretical insights, especially the counterintuitive "Not Helpful" rating effect, contribute to a deeper understanding of MF-based systems. Most importantly, the paper's findings directly led to the development and *deployment of mitigations* (population sample filtering) within X's Community Notes algorithm, demonstrating a direct translation of research into real-world system improvements. This sets a high bar for impactful research in platform security and responsible AI, encouraging transparency and open collaboration between academia and industry to strengthen critical public-facing systems. This paper presents a rigorous analysis of coordinated manipulation in matrix factorization-based crowdsourced fact-checking, demonstrating a practical attack on production data and leading to the deployment of mitigations in X's Community Notes. The work combines theoretical derivations, empirical validation on a large-scale real-world dataset, and a practical cost model to expose a significant vulnerability in systems designed to combat misinformation, offering both novel insights into adversarial ML and direct, actionable solutions for platform security.
Safety training for large language models (LLMs) is conducted predominantly in English, leaving uncertain how well safety mechanisms generalize to low-resource languages and mixed-language code-switching. We show that this creates an epistemic gap in which models confidently generate harmful responses for inputs that fall outside the distribution of their safety training. To study this phenomenon, we introduce STEER (Safety Targeted Embedding Exploit via Refinement), a gradient-guided attack that identifies words contributing most strongly to the model's refusal behavior and iteratively translates them into low-resource languages to suppress refusal while preserving harmful intent. Across six open-source 8B-parameter models, STEER achieves attack success rates of up to 93.0% on JailbreakBench and 96.7% on AdvBench, outperforming random code-switching and Greedy Coordinate Gradient (GCG). The resulting prompts also transfer to GPT-4o-mini, achieving a 35.5% attack success rate without requiring access to the target model, suggesting that the underlying weakness is not specific to a single architecture. These findings demonstrate that safety mechanisms aligned primarily on English cannot be assumed to generalize across multilingual inputs. We argue that improving multilingual safety requires broader coverage during alignment and mechanisms that explicitly detect and abstain on out-of-distribution inputs.
Primary: Nanyang Technological University, Singapore
All Institutions: Nanyang Technological University, Singapore
This paper has profound broader implications for LLM safety research and development: * **Fundamental Vulnerability**: It exposes a systemic and fundamental vulnerability in current LLM safety alignment practices, which are predominantly English-centric and concentrate refusal knowledge into a single, exploitable direction. * **Shift in Perspective**: It reframes LLM safety as an "epistemic coverage problem" rather than solely an adversarial robustness challenge, highlighting the model's "unknown unknowns" and overconfident extrapolation. This conceptual shift is critical for designing more robust safety mechanisms. * **Mech Interp as Attack Enabler**: It provides a concrete demonstration of how mechanistic interpretability findings can be directly leveraged to construct powerful attacks, underscoring the dual-use nature of such research. * **Actionable Defenses**: The findings directly inform the design of future defenses, advocating for broader multilingual coverage during alignment, distributing safety knowledge across multiple layers/directions, and implementing principled abstention mechanisms for out-of-distribution inputs. * **Auditing Tool**: The FLD analysis offers a principled method for auditing models' structural safety vulnerability before deployment, allowing developers to assess the brittleness of their safety encoding. * **Ethical Implications**: The high success rates of STEER highlight the urgent need for more robust multilingual safety alignment to prevent the deployment of LLMs that confidently generate harmful content in diverse linguistic contexts. This paper introduces STEER, a gradient-guided attack that exploits the English-centric nature and concentrated refusal direction of LLM safety mechanisms, achieving high attack success rates by iteratively translating high-attribution words into low-resource languages. The work provides compelling evidence that current safety alignment practices suffer from an epistemic coverage problem, offering a novel diagnostic tool (FLD) and actionable insights for developing more robust, multilingual safety mechanisms and principled abstention strategies.
The STEER (Safety Targeted Embedding Exploit via Refinement) methodology is a sophisticated and principled gradient-guided attack that leverages mechanistic interpretability findings to bypass LLM safety mechanisms. The pipeline consists of four well-defined steps: 1. **Layer Selection via Fisher Linear Discriminant (FLD)**: A novel and effective method to automatically identify the transformer layer where the refusal direction is most "legible" or concentrated. This provides a quantitative measure of the model's structural vulnerability, which is a significant contribution beyond just enabling the attack. 2. **Paraphrase Preprocessing**: A practical initial step using GPT-4o to rephrase harmful requests, reducing initial keyword activation and providing a cleaner signal for gradient attribution. Ablation studies confirm its importance. 3. **Gradient-based Token Attribution**: This is the core of the "targeted" aspect. By computing gradients of input word embeddings against the mech-interp-identified refusal direction, STEER precisely identifies which words contribute most to activating the safety filter. This is a direct and elegant application of interpretability findings. 4. **Iterative Code-Switching**: Words are iteratively translated into a pool of 11 low-resource and non-Latin script languages, prioritizing those with the highest attribution scores. The selection of the best translation is based on minimizing the refusal score, ensuring the attack is efficient and effective. The overall approach is highly systematic, combining insights from mechanistic interpretability, gradient-based optimization, and multilingual NLP to create a powerful and interpretable attack. The design choices are well-justified and empirically validated.
The experimental evaluation is comprehensive and rigorous. * **Models**: Six diverse open-source 7-9B parameter models (Llama-3-8B, Mistral-7B, Gemma-7B, Qwen3-8B, DeepSeek-R1-Distill-Llama-8B, GLM-4-9B) are tested, demonstrating the generality of the attack across different architectures. * **Benchmarks**: Three standard jailbreak benchmarks (JailbreakBench, HarmBench, AdvBench) are used, covering a wide range of harmful prompts. * **Baselines**: STEER is compared against strong baselines: Direct (unmodified), CSRT (random code-switching), and GCG (gradient-based adversarial suffix optimization). * **Results**: STEER achieves exceptionally high Attack Success Rates (ASR) of up to 93.0% on JailbreakBench and 96.7% on AdvBench, consistently outperforming all baselines, often by a significant margin (e.g., 80% vs 44% for DeepSeek-R1 on JBB). This demonstrates its superior efficiency and effectiveness. * **Iteration Efficiency**: The attack shows strong performance even with a low iteration budget (e.g., 88% ASR at @1 for Mistral-7B on JBB), highlighting the efficiency gained from targeted attribution. * **Refusal Score Validation**: The paper provides strong statistical evidence that the refusal score (dot product with the refusal direction) is indeed the decision variable for refusal, validating the mechanistic hypothesis. * **Black-box Transferability**: A crucial finding is the transferability of STEER-generated prompts to GPT-4o-mini, achieving a 35.5% ASR without white-box access. This suggests the exploited weakness is not architecture-specific but a fundamental property of current alignment methods. * **Ablation Studies**: Thorough ablations confirm the importance of FLD layer selection, the diverse language pool, and the paraphrase preprocessing step, reinforcing the robustness of the design choices. The evaluation is robust, well-designed, and provides compelling evidence for the paper's claims.
The paper provides a clear algorithmic description (Algorithm 1) of the STEER attack. Key parameters, language pool, and judge details are specified. Crucially, the authors provide code at `https://github.com/JvThunder/STEER`, which significantly enhances reproducibility. The use of open-source models and standard benchmarks further aids reproducibility.
1. **White-box Access**: STEER requires white-box access to the target model's internal representations and gradients, limiting its direct applicability to closed-source APIs. While transferability to GPT-4o-mini is shown, a dedicated black-box adaptation is not explored. 2. **Model Scale**: The evaluation is limited to 7-9B parameter models. While these are widely used, the findings might not directly generalize to much larger models (e.g., 70B+) or models with different safety alignment strategies. 3. **Automated Judge**: The use of GPT-4o as an automated judge, while common, might occasionally diverge from human assessments, especially for borderline cases of harmfulness or refusal. The dual-criterion (non-refusing and harmful) is a conservative approach, but human validation on a subset could strengthen this.
This paper has profound broader implications for LLM safety research and development: * **Fundamental Vulnerability**: It exposes a systemic and fundamental vulnerability in current LLM safety alignment practices, which are predominantly English-centric and concentrate refusal knowledge into a single, exploitable direction. * **Shift in Perspective**: It reframes LLM safety as an "epistemic coverage problem" rather than solely an adversarial robustness challenge, highlighting the model's "unknown unknowns" and overconfident extrapolation. This conceptual shift is critical for designing more robust safety mechanisms. * **Mech Interp as Attack Enabler**: It provides a concrete demonstration of how mechanistic interpretability findings can be directly leveraged to construct powerful attacks, underscoring the dual-use nature of such research. * **Actionable Defenses**: The findings directly inform the design of future defenses, advocating for broader multilingual coverage during alignment, distributing safety knowledge across multiple layers/directions, and implementing principled abstention mechanisms for out-of-distribution inputs. * **Auditing Tool**: The FLD analysis offers a principled method for auditing models' structural safety vulnerability before deployment, allowing developers to assess the brittleness of their safety encoding. * **Ethical Implications**: The high success rates of STEER highlight the urgent need for more robust multilingual safety alignment to prevent the deployment of LLMs that confidently generate harmful content in diverse linguistic contexts. This paper introduces STEER, a gradient-guided attack that exploits the English-centric nature and concentrated refusal direction of LLM safety mechanisms, achieving high attack success rates by iteratively translating high-attribution words into low-resource languages. The work provides compelling evidence that current safety alignment practices suffer from an epistemic coverage problem, offering a novel diagnostic tool (FLD) and actionable insights for developing more robust, multilingual safety mechanisms and principled abstention strategies.
Memory expertise is a learned skill: knowing what to encode, when to retrieve, and how to organize knowledge--a capacity known in cognitive science as metamemory. We bring this perspective to LLMs by treating memory management as a trainable skill. We promote file-system operations to first-class memory actions alongside task actions, letting the model itself decide how to manage its memory. This memory skill improves along two axes: the structure that supports it (prompts, file schemas, action vocabulary), and the proficiency of the model exercising it. Both axes resist manual optimization: episodes in long-horizon tasks run for thousands of steps, and a single memory mistake can hide long before it surfaces, making human review of full trajectories impractical. We introduce AutoMem, a framework that automates both axes. In the first loop, a strong LLM reviews complete agent trajectories and iteratively revises the memory structure that shapes how the agent interacts with its memory files. In the second loop, the agent's own good memory decisions are identified from many episodes and used as training signal to sharpen the model's memory proficiency directly. Across three procedurally generated long-horizon games (Crafter, MiniHack, and NetHack), optimizing memory alone--without modifying the model's task-action behavior--improved the base agent's performance ~2x-4x, bringing a 32B open-weight model competitive with frontier systems such as Claude Opus 4.5 and Gemini 3.1 Pro Thinking. Our results show that memory management is an independently learnable skill, and a high-leverage objective yielding large gains on long-horizon tasks.
Primary: Stanford University
All Institutions: Stanford University
The paper's findings have substantial broader implications. By demonstrating that automated memory optimization can significantly enhance LLM agent performance on long-horizon tasks, it offers a practical pathway for open-weight models to achieve capabilities comparable to frontier proprietary systems. This could democratize access to advanced agentic AI, making sophisticated LLM agents more accessible for research and development. The methodology of using meta-LLMs for trajectory-level review and targeted revision is a generalizable workflow that could be applied to optimize other agent capabilities beyond memory, potentially accelerating agent development across various domains. While the current applications are in games, the underlying principles are highly transferable to real-world tasks requiring complex, long-term information management. The authors responsibly note that the released artifacts are not directly applicable to high-stakes deployment without further safety review, acknowledging the ethical considerations. This paper introduces AutoMem, a novel framework that automates the learning of memory as a cognitive skill for LLM agents by iteratively optimizing both the memory's supporting structure (scaffold) and the model's proficiency in using it, yielding significant performance gains on long-horizon tasks and making open-weight models competitive with frontier systems. The work presents a highly innovative approach to a critical challenge in LLM agent development, leveraging meta-LLMs to automate the optimization of memory management in long-horizon tasks where human review is intractable. Its strong empirical results, demonstrating substantial performance improvements solely from memory optimization and bringing a 32B open-weight model to the level of frontier proprietary systems, highlight memory as a high-leverage objective and offer a promising direction for developing more capable, efficient, and accessible AI agents.
The methodology proposed in AutoMem is exceptionally well-conceived and technically sound. The central idea of treating memory management as a "trainable skill" for LLMs, drawing inspiration from cognitive science's metamemory, is a powerful conceptual shift. By promoting file-system operations (read, write, search, append, create) to first-class actions within the LLM's action space, the framework provides a flexible, observable, and controllable interface for external memory. The core technical contribution is the two-loop AutoMem framework. The first loop, scaffold optimization, leverages a powerful meta-LLM (Claude Opus 4.6) to review complete, long-horizon agent trajectories (up to $10^5$ steps) and iteratively revise the agent's code, prompts, and memory file schema. This addresses a critical bottleneck in long-horizon task development, where human review of such extensive traces is impractical. The meta-LLM effectively acts as a "code reviewer," diagnosing memory-related failures and proposing concrete structural improvements (e.g., coordinate-keyed deduplication, auto-synced inventory files, pre-populated strategy guides). The second loop, proficiency training, focuses on enhancing the model's parametric ability to make optimal memory decisions. Here, a meta-LLM (Claude Opus 4.7) acts as a "training engine," curating high-quality supervised training data from the agent's own experience and orchestrating the LoRA finetuning configuration. The architectural separation of a finetuned "memory specialist" model from the frozen "gameplay model" is a clever design choice, ensuring that memory skill acquisition is targeted and does not degrade the base model's existing task competence. This modularity allows for clean, additive gains. The overall framework is coherent, addresses a significant challenge in LLM agent development, and is grounded in a strong theoretical perspective.
The experimental evaluation is rigorous and highly convincing. The paper selects three challenging, procedurally generated long-horizon games—Crafter, MiniHack, and NetHack—which are ideal environments for testing sophisticated memory management due to their length, stochasticity, and the inherent need for persistent knowledge (e.g., maps, inventory, strategies). The use of the BALROG harness ensures a standardized and challenging benchmark. The primary metric, game progression rate, is appropriate for these complex tasks. The results are remarkably strong: optimizing memory *alone*, without modifying the base model's task-action weights, yields substantial performance gains of 2x-4x across all environments. This empirically validates the paper's central hypothesis that memory management is an independently learnable and high-leverage skill. Furthermore, the optimized 32B open-weight model achieves performance competitive with frontier proprietary systems such as Claude Opus 4.5 and Gemini 3.1 Pro Thinking, a highly impactful finding that suggests memory optimization can significantly close the gap between open-source and state-of-the-art proprietary models on these tasks. The paper also provides compelling qualitative evidence, including a significant reduction in unproductive actions, a sharp decrease in redundant memory writes, and the emergence of a "consult-before-write" memory discipline in the trained specialist. The detailed examples of memory schema evolution (e.g., NetHack's coordinate-keyed map deduplication) further illustrate the concrete benefits of the scaffold optimization. The inclusion of strong baselines, including frontier proprietary models and basic context-management strategies, provides a comprehensive comparison.
The paper demonstrates an excellent commitment to reproducibility. A dedicated appendix provides comprehensive implementation details, including specific configurations for all three game environments (Crafter, MiniHack, NetHack), such as world area, agent view, reward settings, maximum episode steps, and evaluation seeds. Crucially, it details the outer-loop processes, specifying the meta-LLMs used (Claude Opus 4.6/4.7), the criteria for accepting revisions, retry mechanisms, training data collection procedures, and the exact LoRA hyperparameters (rank, alpha, dropout, effective batch size, learning rate, number of training epochs, and target modules) for each environment. The explicit mention of releasing the complete prompt templates and code at `https://github.com/autoLearnMem/AutoMem` is a significant strength, enabling researchers to replicate and build upon this work. This level of detail is commendable and sets a high standard for reproducibility in LLM agent research.
The authors thoughtfully acknowledge several limitations. The current memory system is episodic, meaning the file system starts fresh at the beginning of each episode, which prevents knowledge transfer across sessions. Extending this to persistent memory is identified as a natural next step. The experiments are conducted on game environments, which, while well-suited for studying memory, suggest a need to validate the approach on real-world, memory-intensive tasks. Additionally, the current framework optimizes a separate scaffold and memory specialist for each game, raising the question of whether a single, more generalized scaffold or specialist could be developed to operate effectively across diverse environments. An implicit limitation, common to meta-LLM-driven approaches, is the reliance on powerful proprietary models (Claude Opus) as meta-LLMs, which entails cost and potential for brittleness, though the iterative refinement and gating mechanisms help mitigate this.
The paper's findings have substantial broader implications. By demonstrating that automated memory optimization can significantly enhance LLM agent performance on long-horizon tasks, it offers a practical pathway for open-weight models to achieve capabilities comparable to frontier proprietary systems. This could democratize access to advanced agentic AI, making sophisticated LLM agents more accessible for research and development. The methodology of using meta-LLMs for trajectory-level review and targeted revision is a generalizable workflow that could be applied to optimize other agent capabilities beyond memory, potentially accelerating agent development across various domains. While the current applications are in games, the underlying principles are highly transferable to real-world tasks requiring complex, long-term information management. The authors responsibly note that the released artifacts are not directly applicable to high-stakes deployment without further safety review, acknowledging the ethical considerations. This paper introduces AutoMem, a novel framework that automates the learning of memory as a cognitive skill for LLM agents by iteratively optimizing both the memory's supporting structure (scaffold) and the model's proficiency in using it, yielding significant performance gains on long-horizon tasks and making open-weight models competitive with frontier systems. The work presents a highly innovative approach to a critical challenge in LLM agent development, leveraging meta-LLMs to automate the optimization of memory management in long-horizon tasks where human review is intractable. Its strong empirical results, demonstrating substantial performance improvements solely from memory optimization and bringing a 32B open-weight model to the level of frontier proprietary systems, highlight memory as a high-leverage objective and offer a promising direction for developing more capable, efficient, and accessible AI agents.
In long-context use, large language models frequently synthesize answers from the meaning of a relevant context span rather than literally copy-pasting them. Identifying which attention heads perform this synthesis matters for interpreting long-context model behavior. Yet existing detectors miss these heads by construction: they reward heads whose attended token matches the generated token, a literal-copy criterion that captures where a head reads but not what it writes through its output-value (OV) circuit, the very mechanism that carries non-literal retrieval. We introduce Logit-Contribution Scoring (LOCOS), a write-aware detector that scores each head by the projection of its OV-circuit output onto the answer-token unembedding direction, contrasting needle and off-needle source positions in a single forward pass. Across three model families (Qwen3, Gemma-3, OLMo-3.1), mean-ablating the top LOCOS heads on the NoLiMa non-literal retrieval benchmark collapses ROUGE-L at lower head counts than prior attention-based detections; on Qwen3-8B, ablating 50 heads drives ROUGE-L from 0.401 to 0.000 while the strongest baseline still retains 0.292. The selected heads are retrieval-specific: parametric recall and arithmetic reasoning stay at baseline under the same ablation. On Qwen3-8B, the same ablation also drops MuSiQue from 0.55 to 0.08 and BABI-Long from 0.62 to 0.20, while a random-heads control stays within 0.05 of baseline.
Primary: University of Edinburgh
All Institutions: University of Edinburgh
LOCOS makes a significant contribution to the field of LLM interpretability and mechanistic interpretability. By providing a "write-aware" detector, it enables researchers to identify and understand the attention heads responsible for synthesizing non-literal answers from long contexts, a crucial aspect of advanced LLM behavior. This can lead to: * **Improved Model Understanding**: Deeper insights into how LLMs process and synthesize information, moving beyond simple token copying. * **Enhanced Debugging and Safety**: Pinpointing specific circuits responsible for non-literal retrieval could help diagnose issues like hallucination or incorrect synthesis in RAG systems. * **Targeted Model Optimization**: Identifying these critical heads could inform more efficient model architectures or targeted fine-tuning strategies for long-context tasks. * **New Research Directions**: The method opens avenues for further investigation into the interplay between QK and OV circuits in various LLM capabilities. The provided code and datasets will facilitate further research in this area. Logit-Contribution Scoring (LOCOS) is a novel, write-aware method that effectively identifies non-literal retrieval heads in large language models by measuring their direct contribution to the answer logit. The paper presents a robust methodology and compelling experimental evidence across multiple LLM families and tasks, demonstrating that LOCOS consistently and causally identifies heads critical for synthesizing answers from context, thereby significantly advancing the mechanistic understanding of long-context LLM behavior.
The paper introduces Logit-Contribution Scoring (LOCOS), a novel, "write-aware" detector for identifying non-literal retrieval heads in large language models. The core insight is that existing methods, which rely on attention patterns (where a head reads), fail to capture non-literal retrieval where the output-value (OV) circuit transforms attended content into a synthesized answer (what a head writes). LOCOS addresses this by scoring each head based on the scalar projection of its OV-circuit output onto the correct answer-token's unembedding vector. This directly measures the head's contribution to the answer logit. A key methodological strength is the use of spatial contrast, comparing logit contributions from needle positions against length-normalized off-needle contributions within a single decoding step. This allows for efficient scoring (single forward pass per probing trial) and effectively isolates needle-specific contributions, cancelling out uniform contributors. The aggregation method pools scores over all answer steps across passing trials. The method is well-defined, mathematically grounded, and directly tackles a critical limitation of prior work in mechanistic interpretability.
The experimental evaluation is exceptionally thorough and convincing. The authors test LOCOS across six configurations spanning three modern LLM families (Qwen3, Gemma-3, OLMo-3.1) on the NoLiMa non-literal retrieval benchmark. Causal validation is performed via mean-ablation of top-ranked heads, a robust technique for assessing causal importance. 1. **Ablation Comparison**: LOCOS consistently produces significantly steeper ROUGE-L degradation curves than all attention-based baselines (Wu/NIAH-scored, Wu/NoLiMa-scored, and a random control). On Qwen3-8B, ablating just 50 LOCOS heads collapses ROUGE-L from 0.401 to 0.000, while the strongest baseline retains 0.292. This is a striking and highly convincing result. 2. **OV Contribution Isolation**: A control experiment comparing LOCOS to an attention-only spatial-contrast score (matching LOCOS's aggregation but removing the OV projection) demonstrates that the OV projection is crucial for consistent reliability and severe performance collapse across models. 3. **Bottom-k Control**: Ablating heads with negative spatial contrast scores (contributing from off-needle positions) shows no degradation, effectively ruling out the objection that LOCOS merely ablates any answer-aligned signal. This confirms that LOCOS identifies *needle-specific* retrieval heads. 4. **Retrieval Specificity**: LOCOS heads are shown to be retrieval-specific, with parametric recall and arithmetic reasoning tasks remaining largely unaffected by the same ablation. LOCOS achieves the highest dissociation score across all models, indicating minimal damage to non-retrieval capabilities. 5. **Literal vs. Non-Literal Specificity**: Ablating LOCOS heads degrades both non-literal (NoLiMa) and literal (NIAH) retrieval, but with a steeper drop on NoLiMa, confirming its ability to identify the non-literal subset missed by prior methods. 6. **Downstream Evaluation**: Ablating LOCOS heads significantly degrades performance on complex downstream long-context benchmarks like MuSiQue and BABILong, particularly for the Qwen3 family, demonstrating transferability and real-world impact. The experiments are comprehensive, include strong baselines and controls, and provide compelling evidence for the efficacy and specificity of LOCOS.
The paper provides a clear methodological description, including equations for per-position logit contribution, spatial contrast, and aggregation. Key experimental details such as model families, benchmarks (NoLiMa, NIAH, parametric tasks), ablation method (mean-ablation with query vector calibration), and evaluation metrics (ROUGE-L, accuracy) are well-documented. The authors provide GitHub and HuggingFace dataset links, which significantly enhance reproducibility. The level of detail provided is sufficient for researchers to replicate the core findings.
The authors acknowledge two main limitations: 1. **Off-needle baseline**: If the context contains distractor information semantically related to the answer, the off-needle contribution might rise, potentially causing LOCOS to under-score heads performing broad semantic matching rather than targeted needle retrieval. While desirable for span-specific retrieval, this might miss heads involved in more diffuse contextual integration. 2. **Architecture coverage**: The evaluation focuses on specific decoder-only transformer families. The authors caution that the observed causal head-ablation magnitudes and late-layer concentration should not be assumed to transfer without verification to other architectures like Mixture-of-Experts, encoder-decoder stacks, or state-space models.
LOCOS makes a significant contribution to the field of LLM interpretability and mechanistic interpretability. By providing a "write-aware" detector, it enables researchers to identify and understand the attention heads responsible for synthesizing non-literal answers from long contexts, a crucial aspect of advanced LLM behavior. This can lead to: * **Improved Model Understanding**: Deeper insights into how LLMs process and synthesize information, moving beyond simple token copying. * **Enhanced Debugging and Safety**: Pinpointing specific circuits responsible for non-literal retrieval could help diagnose issues like hallucination or incorrect synthesis in RAG systems. * **Targeted Model Optimization**: Identifying these critical heads could inform more efficient model architectures or targeted fine-tuning strategies for long-context tasks. * **New Research Directions**: The method opens avenues for further investigation into the interplay between QK and OV circuits in various LLM capabilities. The provided code and datasets will facilitate further research in this area. Logit-Contribution Scoring (LOCOS) is a novel, write-aware method that effectively identifies non-literal retrieval heads in large language models by measuring their direct contribution to the answer logit. The paper presents a robust methodology and compelling experimental evidence across multiple LLM families and tasks, demonstrating that LOCOS consistently and causally identifies heads critical for synthesizing answers from context, thereby significantly advancing the mechanistic understanding of long-context LLM behavior.
Autonomous scientific discovery systems offer the potential to accelerate research by automating the process of hypothesis generation and validation. However, current systems operate within constrained search spaces or require predefined research questions, limiting their capacity for true open-ended inquiry. Furthermore, while they generate hypotheses iteratively, they largely lack the ability to explicitly synthesize their own accumulated findings to uncover complex, interconnected phenomena. We introduce DiscoPER, an autonomous large language model-powered framework that conducts open-ended research by dynamically generating and executing code to explore datasets without pre-specified research objectives. To ensure rigorous scientific validity, every proposed discovery must pass statistical testing. To overcome the limitations of isolated search, our framework introduces a second-order reasoning mechanism that periodically analyzes its own accumulated discoveries. By treating prior discoveries as empirical data, DiscoPER identifies structural patterns, confounds, and epistemic gaps, actively redirecting hypothesis exploration toward uncharted regions of the search space. The search space is further expanded by incorporating tool use, enabling the system to explore hypotheses beyond structured metadata by seamlessly processing and extracting useful information from multimodal sources like images. Evaluated on iNatDisco, a new multimodal ecological knowledge benchmark with pattern-level ground truth obtained from peer-reviewed literature, DiscoPER recovers 8 of 9 known patterns with a 72.7% hypothesis support rate, outperforming both classical causal discovery and LLM-guided baselines. Ablations show that DiscoPER scales with more data, and confirms the benefits of second-order meta-reflection.
Primary: University of Edinburgh
All Institutions: University of Edinburgh, Massachusetts Institute of Technology
[One sentence main contribution]. DiscoPER introduces a novel autonomous scientific discovery framework that combines LLM-driven hypothesis generation, code-based statistical validation, and second-order meta-reflection to enable open-ended, data-driven scientific inquiry. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper presents a significant advancement in agentic ML for scientific discovery by addressing the critical limitation of isolated hypothesis generation in existing systems. By introducing a structured "Propose-Evaluate-Reflect" loop, DiscoPER enables the system to synthesize accumulated findings, identify gaps, and redirect its search strategy dynamically. The rigorous validation mechanism, which requires hypotheses to pass statistical tests on held-out data, ensures scientific validity and mitigates LLM hallucination. The creation of the iNatDisco benchmark provides a much-needed evaluation standard for open-ended discovery, moving beyond task-specific QA. The empirical results demonstrate that this approach significantly outperforms both classical causal discovery methods and guided LLM baselines, particularly in recovering complex, multi-variable patterns. This work establishes a new paradigm for autonomous scientific agents that are not only capable of generating ideas but also of critically evaluating and building upon their own discoveries.
The paper proposes DiscoPER, an autonomous scientific discovery framework that integrates Large Language Models (LLMs) with executable code and statistical testing. The core methodological innovation is the "Propose-Evaluate-Reflect" loop. Unlike previous systems that either require predefined research questions (guided) or lack iterative synthesis (unstructured), DiscoPER operates in an open-ended manner ($P=$ none). It generates hypotheses as Python code, validates them on held-out data to prevent p-hacking, and employs a second-order "Reflect" module. This Reflect module analyzes the accumulated claim store to identify epistemic gaps, confounds, and compound hypotheses, thereby steering the search space in subsequent iterations. The approach effectively bridges the gap between classical causal discovery (restricted edge spaces) and LLM-based reasoning (prone to hallucination) by grounding all claims in statistical significance while allowing the LLM to explore a Turing-complete hypothesis space. The inclusion of multimodal capabilities via tool use (VLMs) further expands the scope of discoverable patterns beyond tabular metadata.
The evaluation is rigorous and addresses the specific challenges of open-ended discovery. The authors introduce iNatDisco, a new benchmark derived from iNaturalist data, which includes ground-truth patterns from peer-reviewed literature. This is a significant contribution, as existing benchmarks are largely task-oriented. DiscoPER achieves 8/9 pattern recovery on iNatDisco-800 and 8/12 on iNatDisco-50K, outperforming classical causal discovery methods (which fail to capture complex interactions) and guided LLM baselines. The ablation studies clearly demonstrate the value of the Reflect module, showing improvements in both recall and hypothesis support rate. The counterfactual evaluation is particularly strong, proving that the system relies on data-driven evidence rather than memorized LLM priors. The scaling analysis provides insight into the system's behavior with respect to data size and iteration count.
The paper provides detailed implementation specifications, including model versions (Claude Sonnet 4.6, etc.), statistical thresholds (effect size > 0.2, p < 0.05), and the structure of the hypothesis code. The use of executable code for hypotheses enhances reproducibility, as the validation steps are deterministic given the data and code. The description of the iNatDisco dataset construction is sufficient for replication. However, the reliance on proprietary LLMs (Claude, GPT) means that exact performance replication might vary with model updates, though the methodology itself is open.
The system is computationally expensive due to the iterative nature of code generation, execution, and reflection. The performance is bounded by the quality and bias of the underlying LLMs and the available data. The "Reflect" module, while effective, introduces latency and potential for compounding errors if the initial claims are flawed. Additionally, the benchmark, while novel, is specific to ecology; generalization to other scientific domains requires further validation. The system's ability to discover truly novel, non-intuitive patterns beyond those present in the training data of the LLM remains an open question, although the counterfactual tests mitigate some of this concern.
This work has significant implications for accelerating scientific discovery across disciplines. By automating the iterative process of hypothesis generation and validation, it can help researchers identify patterns that might be overlooked due to human cognitive biases or limitations. The open-ended nature of the system encourages exploration of uncharted regions of the search space, potentially leading to new scientific insights. However, the reliance on AI for scientific discovery raises ethical considerations regarding the verification of findings and the potential for automated bias reinforcement. The framework provides a robust template for building autonomous scientific agents that prioritize empirical validity. [One sentence main contribution]. DiscoPER introduces a novel autonomous scientific discovery framework that combines LLM-driven hypothesis generation, code-based statistical validation, and second-order meta-reflection to enable open-ended, data-driven scientific inquiry. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper presents a significant advancement in agentic ML for scientific discovery by addressing the critical limitation of isolated hypothesis generation in existing systems. By introducing a structured "Propose-Evaluate-Reflect" loop, DiscoPER enables the system to synthesize accumulated findings, identify gaps, and redirect its search strategy dynamically. The rigorous validation mechanism, which requires hypotheses to pass statistical tests on held-out data, ensures scientific validity and mitigates LLM hallucination. The creation of the iNatDisco benchmark provides a much-needed evaluation standard for open-ended discovery, moving beyond task-specific QA. The empirical results demonstrate that this approach significantly outperforms both classical causal discovery methods and guided LLM baselines, particularly in recovering complex, multi-variable patterns. This work establishes a new paradigm for autonomous scientific agents that are not only capable of generating ideas but also of critically evaluating and building upon their own discoveries.
Language models increasingly write probabilistic programs (in NumPyro, Stan, or Pyro), but a program that compiles, runs, and passes every unit test can still be \emph{statistically} wrong -- a Gaussian likelihood for heavy-tailed data, a Poisson for over-dispersed counts, an invalid prior support, or a pathological parameterization. The right verifier is therefore not a test suite but the Bayesian workflow itself: posterior predictive checks, simulation-based calibration, sampler diagnostics ($\hat R$, divergences, ESS), and held-out predictive density. We study this calibration oracle along three axes. \textbf{Detection:} on a benchmark of $14$ misspecification types across $10$ model families ($200$ instances), it flags the bug with AUC $0.97$ ($88\%$ at $2\%$ FPR \emph{when handed the correct reference program, an upper bound}) -- and a fully \emph{reference-free} version that uses no correct program reaches $62$--$78\%$ (the upper figure from a small automated model search), versus $0\%$ for a unit-test oracle. \textbf{Repair:} used as feedback in an LLM repair loop across fifteen models, calibration significantly outperforms unit-test feedback -- which is itself \emph{significantly worse than no feedback at all}, a passing test inducing false confidence that suppresses repair -- and improves over no feedback on strong-but-unsaturated models (GPT-5.1 $33{\to}92\%$, Claude $75{\to}100\%$; paired McNemar, $n{=}228$). \textbf{Reality:} on programs LLMs write from scratch for neutral briefs, $15$--$47\%$ of runnable ones are statistically misspecified (unit tests catch none), and calibration-guided repair significantly beats LLM-as-judge review, a Bayesian-workflow checklist, and data-summary self-debug. Across all three, the lesson is the same: for probabilistic programs, correctness is calibration, not compilation.
Primary: Columbia University
All Institutions: Columbia University
This paper introduces a paradigm shift for verifying LLM-generated probabilistic programs, demonstrating that Bayesian calibration diagnostics are essential for detecting code-invisible statistical errors, significantly outperforming and even revealing the harm of traditional unit tests in LLM repair loops. The comprehensive technical contribution, rigorous empirical validation on both injected and LLM-generated bugs, and the clear, actionable insights make this a genuinely field-wide significant paper that will reshape how LLM-assisted probabilistic modeling systems are designed and evaluated.
The paper proposes a robust methodology for detecting and repairing statistically misspecified probabilistic programs generated by Language Models (LLMs). The central innovation is the "calibration oracle," which formalizes and automates the Bayesian workflow diagnostics (Posterior Predictive Checks, Simulation-Based Calibration, sampler diagnostics like R-hat and divergences, and held-out predictive density) into a programmatic verifier. This oracle is designed to identify "code-invisible misspecification"—statistical errors that traditional unit tests (compilation, execution, output shape) cannot detect. The repair loop integrates this oracle as feedback for LLMs, guiding them to iteratively refine their programs. The methodology is well-grounded in Bayesian principles, and the formal distinction between code-visible and code-invisible bugs is crucial for understanding the limitations of existing LLM code verification paradigms. The aggregation of diverse diagnostics into a single verdict, with defined thresholds, provides a practical and actionable signal for automated systems.
The experimental evaluation is exceptionally thorough and convincing, covering detection, repair, and real-world applicability. 1. **Detection**: A comprehensive benchmark of 200 instances across 14 misspecification types and 10 model families was created. The calibration oracle achieved an impressive AUC of 0.97 (88% detection at 2% FPR), demonstrating its efficacy. Critically, a *reference-free* version of the oracle (without a ground-truth correct program) still achieved 62-78% detection, highlighting its practical utility. In stark contrast, the unit-test oracle achieved 0% detection for code-invisible bugs. 2. **Repair**: Experiments with 15 diverse LLMs (open and API) in a repair loop showed that calibration feedback consistently outperformed "no feedback" and "unit-test feedback." A surprising and impactful finding was that unit-test feedback was often *worse than no feedback*, as it induced false confidence and suppressed repair. Calibration feedback led to substantial improvements for strong-but-unsaturated models (e.g., GPT-5.1 from 33% to 92%), with statistically significant gains ($p < 4.5 \times 10^{-10}$ for pooled invisible-bug repairs). 3. **Real LLM Programs**: This section provides the strongest evidence. LLMs were tasked to write programs from scratch for neutral briefs. The study found that 15-47% of runnable LLM-generated programs were statistically misspecified (none caught by unit tests). Calibration-guided repair significantly outperformed strong baselines, including LLM-as-judge review, Bayesian-workflow checklists, and data-summary self-debug, achieving an 84% fix rate for misspecified programs. The results are robust, with detailed ablations and sensitivity analyses for oracle thresholds.
The paper demonstrates a high commitment to reproducibility. It specifies exact snapshots for API models and HuggingFace revisions for open models. Detailed hyperparameters for LLM generation (temperature, max tokens, repair budget) and NUTS inference (chains, draws, x64) are provided. Oracle thresholds are explicitly stated, and their sensitivity is analyzed. Crucially, the authors commit to releasing "The full system prompt, contract, feedback templates, benchmark generators, and analysis scripts with the paper," which is excellent practice and will enable full replication and extension of their work.
The authors are transparent about several limitations: 1. **PPC power**: The effectiveness of Posterior Predictive Checks depends on the chosen test statistics, meaning some misspecifications might remain undetected if not captured by the tracked statistics. 2. **Right fit, wrong structure**: The oracle primarily assesses distributional fit, not causal or generative correctness, making it blind to structural errors that yield similar predictive distributions. 3. **Over-wide predictive**: An overly confident or under-confident model might "cover" the data and pass PPC despite being fundamentally wrong. 4. **Diagnosis without remedy**: Weaker LLMs may receive accurate diagnostic feedback but lack the capability to translate it into a correct structural fix. 5. **SBC expense**: Simulation-Based Calibration is computationally intensive, limiting its practical use in the repair loop for large or costly models. 6. **Inference failure**: Sampler diagnostics can sometimes fire due to poor inference (e.g., NUTS issues) rather than genuine model misspecification, leading to false positives. 7. **Benchmark scope**: The repair experiments use a subset of bugs, and the tasks are classical low-dimensional models, suggesting that extending the approach to high-dimensional or complex structured models (e.g., deep models, spatial-temporal models) is future work.
This paper has profound broader impact for the burgeoning field of LLM-assisted scientific computing and probabilistic modeling. It fundamentally shifts the paradigm for verifying LLM-generated probabilistic code from "compilation" to "calibration," providing a principled and empirically validated framework for ensuring statistical correctness. This work is crucial for building trustworthy and reliable LLM agents that can assist in scientific discovery, data analysis, and model development. The PPL-agnostic nature of the Bayesian diagnostics means the approach is broadly applicable across popular probabilistic programming languages like Stan, Pyro, and PyMC. The surprising finding that unit-test feedback is actively harmful for LLM repair loops is a critical insight for designing future LLM agent architectures. This paper sets a new standard for evaluating and improving LLM-generated scientific code. This paper introduces a paradigm shift for verifying LLM-generated probabilistic programs, demonstrating that Bayesian calibration diagnostics are essential for detecting code-invisible statistical errors, significantly outperforming and even revealing the harm of traditional unit tests in LLM repair loops. The comprehensive technical contribution, rigorous empirical validation on both injected and LLM-generated bugs, and the clear, actionable insights make this a genuinely field-wide significant paper that will reshape how LLM-assisted probabilistic modeling systems are designed and evaluated.
Kilometer-scale convection shapes precipitation extremes, tropical organization, and cloud feedbacks, but most global atmospheric models approximate these processes at 25-100 km resolution. Global storm-resolving physics models resolve convective systems explicitly, but at a cost -- roughly one MWh per simulated day on exascale supercomputers -- that limits long-duration simulation. We introduce STRATA (Storm-resolving Tile-based autoRegressive Atmosphere Transformer Architecture), the first autoregressive AI emulator for global storm-resolving atmospheric dynamics. STRATA is trained on the highest-resolution atmospheric dataset yet used for global AI emulation: 17 days of SCREAM physics-model output at 4.9-km resolution (~25 million grid cells) sampled every 10 minutes. Our central premise is that on 10-minute timescales atmospheric dynamics are predominantly local, so training on small spatial tiles trades scarce global temporal samples for abundant local spatial samples and enables global rollout via overlapping-tile blending. STRATA combines 3D patch embedding and local 3D neighborhood attention, a novel Stereographic Rotary Position Embedding (StereoRoPE) for grid-invariant encoding, and a pixel-space de-aliasing decoder that suppresses patch-scale rollout artifacts. An iso-FLOP scaling study reveals that km-scale emulation requires ~10x more FLOPs per grid point than coarse-resolution AI weather models, consistent with the higher information density of convective-scale dynamics. Trained on only 17 days of data, STRATA produces stable 24-hour global rollouts with realistic km-scale dynamics across diverse regimes, though large-scale biases develop with lead time. It achieves 48 simulation days per megawatt-hour -- about 50 times better energy efficiency than the SCREAM physics model -- and 741 simulated days per wall-clock day at 512 H100 GPUs. Code and dataset are publicly available.
Primary: NVIDIA
All Institutions: NVIDIA, Lawrence Livermore National Laboratory, Pacific Northwest National Laboratory, National Energy Research Scientific Computing Center (NERSC)
STRATA represents a significant advance in scientific machine learning by successfully demonstrating autoregressive global emulation at storm-resolving resolution, addressing key computational and methodological challenges through innovative architectural design and rigorous physical constraints.
The paper introduces STRATA, a transformer-based autoregressive emulator for global storm-resolving atmospheric dynamics. The core methodological innovation lies in addressing the computational intractability of training global models at kilometer-scale resolution. The authors propose a tile-based training strategy that trades scarce global temporal samples for abundant local spatial samples, leveraging the locality of atmospheric dynamics on 10-minute timescales. Key technical contributions include: 1) A 3D patch embedding and local neighborhood attention backbone adapted from Diffusion Transformers (DiT) for deterministic weather forecasting. 2) StereoRoPE, a novel stereographic rotary position embedding that provides grid-invariant encoding, allowing the model to generalize across different spherical grid topologies (cubed-sphere, lat-lon, stereographic) without retraining. 3) A pixel-space de-aliasing decoder using bilinear upsampling and depthwise convolutions to suppress checkerboard artifacts inherent in patch-based tokenization. 4) A rigorous spectral stability analysis explaining why patch-based architectures suffer from instability and how the proposed decoder mitigates this. The approach is technically sophisticated, combining insights from atmospheric physics (locality, mass continuity constraints) with advanced deep learning architectures (transformers, positional embeddings, stability analysis).
The evaluation is comprehensive and rigorous. The model is trained on 17 days of high-resolution (4.9 km, 10-minute) output from the SCREAM physics model, a significant step up from previous AI weather models that typically use reanalysis data (ERA5) at much coarser resolutions. The paper demonstrates stable 24-hour global rollouts, capturing realistic convective-scale dynamics including tropical cyclones, fronts, and orographic precipitation. Quantitative metrics include Fractions Skill Score (FSS) for rainfall, error growth rates, and precipitation distribution analysis. The paper also includes an iso-FLOP scaling study, revealing that km-scale emulation requires ~10x more FLOPs per grid point than coarse-resolution models, a finding with significant implications for the field. The energy efficiency comparison (48 simulated days per MWh vs. 1 for SCREAM) is a strong practical result. The evaluation of grid invariance on unseen grids is a novel and compelling test of the StereoRoPE method.
The paper provides detailed implementation details, including architecture hyperparameters, training objectives, and optimization strategies. The code and dataset are publicly available, which is a major plus for reproducibility. The description of the tile-based inference and distributed implementation is sufficiently detailed for replication. The acknowledgment of dataset inconsistencies (SST/IC mismatch) adds to the transparency.
The model exhibits large-scale biases that develop with lead time, likely due to the tile-based training being blind to global-mean constraints (e.g., mass continuity for vertical velocity). The authors address this with post-processing filters (spherical harmonic filtering for vertical velocity, constraints for specific humidity), but this suggests the model does not learn global conservation laws natively. The reliance on only 17 days of training data is a significant limitation for capturing long-term climate variability or rare events, although the authors argue it is sufficient for short-term dynamic emulation. The model is not coupled with a coarse-resolution model, limiting its ability to simulate multi-decadal climate scenarios.
This work has the potential to revolutionize high-resolution climate simulation by making storm-resolving simulations orders of magnitude more energy-efficient. This could enable large ensemble simulations for uncertainty quantification in climate projections, particularly for extreme weather events and cloud feedbacks. The methodological contributions (tile-based training, StereoRoPE, de-aliasing) are generalizable to other scientific domains requiring high-resolution, global, autoregressive modeling on spherical domains (e.g., ocean dynamics, astrophysics). The public release of the dataset and code will accelerate research in scientific machine learning. STRATA represents a significant advance in scientific machine learning by successfully demonstrating autoregressive global emulation at storm-resolving resolution, addressing key computational and methodological challenges through innovative architectural design and rigorous physical constraints.
Controllable image generation methods, such as ControlNet, have demonstrated a remarkable capacity to introduce visual conditions(e.g., depth maps) to guide image generation. However, these methods often struggle with complex multi-instance scenes, frequently leading to attribute confusion among instances. While recent approaches attempt to mitigate this via manual instance labeling, such requirements are labor-intensive. In this paper, we propose InstanceControl, a novel multi-instance controllable generation method that eliminates the need for instance labeling. We identify the primary bottleneck in existing methods as the inability to accurately associate instance descriptions with their corresponding regions within visual conditions. To address this, we leverage the Vision-Language Model (VLM) to establish instance-level correspondences between text prompts and visual conditions. Specifically, the VLM automatically parses instance descriptions from the text prompts and simultaneously predicts instance masks based on the visual conditions. Furthermore, since the predicted masks may contain noise, we introduce an adaptive mask refinement strategy that dynamically refines these instance masks during the generation process. Extensive experiments demonstrate that our approach outperforms state-of-the-art methods, achieving superior fidelity and precise instance-level control.
Primary: Harbin Institute of Technology
All Institutions: Harbin Institute of Technology, HUAWEI Noah's Ark Lab
InstanceControl has significant broader impact potential: 1. **Reduced Annotation Burden:** By eliminating the need for manual instance labeling during inference, it drastically reduces the labor and time costs associated with fine-grained controllable image generation, making such tools more accessible and practical for real-world applications. 2. **Enhanced Content Creation:** It empowers users with more precise and intuitive control over complex multi-instance scenes, which is invaluable for creative industries, design, virtual reality, and artistic expression. 3. **Advancement in Controllable Generation:** It pushes the boundaries of controllable image generation by effectively addressing the long-standing challenge of attribute confusion in multi-instance scenarios, paving the way for more sophisticated and reliable generative AI systems. 4. **VLM Application:** It demonstrates a novel and effective application of Vision-Language Models for grounding on non-RGB visual conditions, opening new avenues for VLM research beyond traditional image understanding tasks. 5. **Robustness to Imperfect Inputs:** The adaptive mask refinement strategy offers a generalizable approach to handle noisy or uncertain inputs from upstream perception modules, which is a common challenge in complex AI pipelines. InstanceControl introduces a novel framework for multi-instance controllable image generation that eliminates the need for labor-intensive manual instance labeling. The paper makes a significant technical contribution by leveraging Vision-Language Models to automatically establish instance-level correspondences between text prompts and visual conditions, and by proposing an adaptive mask refinement strategy to robustly handle noisy predicted masks during the generation process. The comprehensive experiments and strong quantitative and qualitative results demonstrate its superior fidelity and precise instance-level control compared to state-of-the-art methods, marking a substantial advancement in the field of controllable generative AI.
The methodology of InstanceControl is well-conceived and addresses a critical bottleneck in multi-instance controllable image generation: the need for manual instance labeling. The proposed two-stage framework is logical and effectively integrates state-of-the-art components. The first stage, "Instance-level Text-Visual Condition Association," is highly innovative. Instead of relying on RGB images for VLM grounding, the authors adapt a VLM (Sa2VA) to parse instance descriptions from text prompts and predict corresponding instance masks directly from *visual conditions* (e.g., canny, depth, HED maps). This is a non-trivial adaptation, as existing grounding models are typically designed for semantic consistency with RGB content. The tailored dataset construction, leveraging Gemini 2.5 Pro for detailed prompts and correspondence generation, is a significant enabler for this stage. The "Shared SEG Token (SST)" strategy is a clever detail to handle multiple textual descriptions for a single instance, ensuring consistent mask predictions. The second stage, "Instance-aware Controllable Generation," effectively integrates these automatically derived correspondences into a diffusion model. Recognizing the inherent noise in VLM-predicted masks, the "Mask Refinement Module (MRM)" is a crucial component. It adaptively refines masks by combining the VLM's confidence score, attention-based masks from the generative model, and image latent features. This adaptive approach is superior to hard constraints or simple fusion strategies, allowing the model to be robust to prediction inaccuracies. The integration of these refined masks via a correspondence mask into the attention mechanism of the diffusion model is a standard yet effective way to enforce instance-level control. The overall methodology is robust, leveraging the strengths of VLMs for understanding and diffusion models for generation, while mitigating their respective weaknesses (VLM's noise, diffusion's attribute confusion).
The experimental evaluation is comprehensive and rigorous, demonstrating the strong performance of InstanceControl. 1. **Baselines:** The paper compares against a wide range of state-of-the-art methods, categorized into those requiring instance labeling (EliGen, CreatiLayout, Seg2Any, DreamRenderer) and those without (FLUX ControlNet). This provides a clear picture of where InstanceControl stands relative to both types of approaches. Additionally, comparisons with unified understanding and generation models (Qwen-Image ControlNet, Nano Banana) further validate its superiority. 2. **Visual Conditions:** Evaluation across canny edges, depth maps, and HED maps confirms the generalizability of the method to diverse control signals. 3. **Metrics:** A robust set of quantitative metrics is used, including MIoU for spatial alignment, Local CLIP and VQA-based Accuracy (Spatial, Color, Shape, Texture) for region-wise quality, and FID/ImageReward for global image quality. The use of Qwen2-VL-72B for fine-grained VQA assessment is particularly noteworthy for its detailed evaluation of attribute fidelity. 4. **Benchmarks:** Evaluation on a custom MIG-Eval dataset (derived from their constructed data), COCO-POS, and an out-of-domain HiCo-7K benchmark (in supplementary) demonstrates both in-domain and out-of-domain effectiveness. 5. **Results:** InstanceControl consistently outperforms all baselines, often by significant margins, especially against label-free methods like FLUX ControlNet. Remarkably, it even surpasses several methods that rely on manual instance labeling, highlighting the effectiveness of its automated approach. The qualitative results visually confirm the superior fine-grained attribute control and reduced attribute confusion. 6. **Ablation Studies:** Detailed ablation studies on the Shared SEG Token (SST) and the Mask Refinement Module (MRM) clearly demonstrate the contribution of each proposed component, providing strong empirical justification for their inclusion. 7. **Data Construction:** The effort in constructing a high-quality, detailed dataset using Gemini 2.5 Pro is a significant strength, enabling the VLM to perform robust grounding on visual conditions.
The paper provides a good level of detail regarding reproducibility. Key aspects include: * Specific backbone models used (Sa2VA, SAM, FLUX.1-Canny/Depth, XLabs HED ControlNet). * Use of LoRA modules with specified rank (256). * Training steps (30k for Stage 1, 80k + 10k for Stage 2), batch sizes (64, 4), learning rates ($4 \times 10^{-5}$, $1 \times 10^{-4}$), and schedules (cosine). * Loss weights ($bce=2.0, dice=0.5$). * Hardware used (four NVIDIA A6000 GPUs). * Details on dataset construction are mentioned to be in the supplementary material, which is crucial. The project page URL is provided, which often includes code or further details. Overall, the information provided should allow for a high degree of reproducibility.
1. **VLM Dependency:** The method heavily relies on a powerful VLM (Sa2VA, and Gemini 2.5 Pro for data generation) for initial instance parsing and mask prediction. While effective, this introduces a dependency on the capabilities and potential biases of these large models. 2. **Mask Noise Mitigation, Not Elimination:** While the Mask Refinement Module effectively mitigates noise and inaccuracies in predicted masks, it does not eliminate them entirely. The paper mentions that severe errors like localization offsets or missed objects can still cause incorrect generation, and an interactive mechanism is provided for rectification, implying it's not fully autonomous in all cases. 3. **Computational Cost:** Training and inference with large VLMs and diffusion models, especially with additional refinement modules, can be computationally intensive, potentially limiting real-time applications or deployment on resource-constrained devices. 4. **Dataset Specificity:** The custom dataset construction, while a strength, means the VLM is fine-tuned on specific types of visual conditions and prompt styles. Generalization to vastly different visual conditions or highly ambiguous prompts might require further adaptation.
InstanceControl has significant broader impact potential: 1. **Reduced Annotation Burden:** By eliminating the need for manual instance labeling during inference, it drastically reduces the labor and time costs associated with fine-grained controllable image generation, making such tools more accessible and practical for real-world applications. 2. **Enhanced Content Creation:** It empowers users with more precise and intuitive control over complex multi-instance scenes, which is invaluable for creative industries, design, virtual reality, and artistic expression. 3. **Advancement in Controllable Generation:** It pushes the boundaries of controllable image generation by effectively addressing the long-standing challenge of attribute confusion in multi-instance scenarios, paving the way for more sophisticated and reliable generative AI systems. 4. **VLM Application:** It demonstrates a novel and effective application of Vision-Language Models for grounding on non-RGB visual conditions, opening new avenues for VLM research beyond traditional image understanding tasks. 5. **Robustness to Imperfect Inputs:** The adaptive mask refinement strategy offers a generalizable approach to handle noisy or uncertain inputs from upstream perception modules, which is a common challenge in complex AI pipelines. InstanceControl introduces a novel framework for multi-instance controllable image generation that eliminates the need for labor-intensive manual instance labeling. The paper makes a significant technical contribution by leveraging Vision-Language Models to automatically establish instance-level correspondences between text prompts and visual conditions, and by proposing an adaptive mask refinement strategy to robustly handle noisy predicted masks during the generation process. The comprehensive experiments and strong quantitative and qualitative results demonstrate its superior fidelity and precise instance-level control compared to state-of-the-art methods, marking a substantial advancement in the field of controllable generative AI.
We present a zero-shot, training-free and optimization-free framework for generating 360 panoramic images and videos by directly injecting spherical priors into pre-trained diffusion transformers. Existing methods either rely on costly fine-tuning on scarce panoramic data that limits generalization, or leverage multi-step optimization that incurs prohibitive inference latency. We observe that contemporary generative models natively exhibit some panoramic priors from large-scale training. However, these emergent capabilities are insufficient, as the models fundamentally fail to satisfy the rigorous topological constraints imposed by equirectangular projection (ERP). We introduce a zero-shot and optimization-free approach that resolves these constraints at inference time. Spherical RoPE replaces standard rotary position embeddings: low-frequency channels are re-parameterized as 3D Cartesian coordinates to natively encode the spherical manifold, while high-frequency channels are harmonically quantized to enforce exact periodicity. Coupled with complementary Semantic Distortion classifier-free guidance (CFG) that explicitly steers geometry, we avoid retraining and inherit the full creative breadth of state-of-the-art models. Our approach generalizes across diverse backbones and 360 generation modalities. We demonstrate this across text-to-panorama using Flux.1, Flux.2, and LTX-Video backbones, achieving competitive performance against baselines, all while remaining training-free. Project page: https://orhir.github.io/SpheRoPE
Primary: Tel-Aviv University
All Institutions: Tel-Aviv University, Hebrew University of Jerusalem
SpheRoPE introduces a novel, training-free framework for 360-degree panorama generation by integrating spherical priors directly into diffusion transformers via modified position embeddings and guidance, achieving competitive results across multiple backbones without the need for fine-tuning or optimization.
The paper proposes SpheRoPE, a training-free, zero-shot method for generating 360-degree panoramic images and videos using pre-trained diffusion transformers (DiTs). The core innovation lies in replacing standard Rotary Position Embeddings (RoPE) with Spherical RoPE. This involves re-parameterizing low-frequency channels into 3D Cartesian coordinates to natively encode the spherical manifold and harmonically quantizing high-frequency channels to enforce periodicity. This is coupled with a Semantic Distortion classifier-free guidance (CFG) mechanism to steer geometry. The approach is theoretically sound, addressing the topological mismatch between planar training data (ERP) and spherical reality without retraining. It leverages the emergent capabilities of large models while correcting their fundamental geometric flaws.
The authors evaluate SpheRoPE on multiple state-of-the-art backbones, including Flux.1, Flux.2, and LTX-Video. They demonstrate competitive performance against existing baselines in text-to-panorama and text-to-video tasks. The evaluation highlights the method's ability to resolve topological artifacts (seams, discontinuities) common in naive ERP generation. The results suggest that the method generalizes well across different model architectures, which is a significant strength. However, as a zero-shot method, it relies on the underlying model's quality, so comparisons are against other zero-shot or fine-tuned baselines. The paper likely includes qualitative visualizations and potentially quantitative metrics like FID or CLIP scores adapted for panoramas, though specific numbers are not provided in the abstract. The claim of "competitive performance" suggests it matches or exceeds fine-tuned methods in some aspects while being significantly more efficient.
The paper provides a project page URL. As a training-free method, reproducibility is high provided the source code for the Spherical RoPE injection and Semantic Distortion guidance is released. The reliance on pre-trained models (Flux, LTX-Video) means the community has access to the base weights, facilitating replication. The method's simplicity (modifying embeddings and guidance) makes it easier to implement than full fine-tuning pipelines.
The primary limitation is the reliance on the pre-trained model's inherent knowledge. If the base model lacks semantic understanding of specific panoramic scenes, SpheRoPE cannot create that knowledge from scratch. Additionally, the harmonic quantization and Cartesian re-parameterization might introduce subtle artifacts if not tuned correctly for specific resolutions or aspect ratios. The method is currently demonstrated on text-to-panorama; its effectiveness on more complex video generation with temporal consistency across the spherical manifold needs rigorous long-term evaluation. There may also be a trade-off between geometric correctness and semantic fidelity, which the Semantic Distortion CFG aims to mitigate but may not eliminate entirely.
This work significantly lowers the barrier to entry for high-quality 360-degree content generation. By eliminating the need for costly fine-tuning on scarce panoramic data, it democratizes access to VR/AR content creation tools. It also provides a generalizable technique for handling non-Euclidean data structures in diffusion models, which could be extended to other domains like spherical video, global climate modeling visualization, or astronomical data. The reduction in inference latency compared to optimization-based methods makes it more viable for real-time applications. SpheRoPE introduces a novel, training-free framework for 360-degree panorama generation by integrating spherical priors directly into diffusion transformers via modified position embeddings and guidance, achieving competitive results across multiple backbones without the need for fine-tuning or optimization.
4D hand motion reconstruction from egocentric video is bottlenecked by clear limitations of existing methods: image-based pipelines depend on a detector that fails under heavy occlusion, while video-based methods rely on temporal modules learned only from scarce hand-pose annotations, a narrow signal insufficient to model motion dynamics, occlusion reasoning, and hand-object interaction. These capabilities, however, are exactly what video generative models must implicitly acquire when trained to synthesize coherent video at internet scale. Motivated by this, we present ViDiHand, which leverages the representations of a pretrained video diffusion model to reconstruct 4D two-hand pose. We adapt it via a hand-overlay rendering objective that specializes its features for hands while preserving its world priors. A decoder then recovers metric-scale pose from the adapted features. The whole pipeline operates directly on full frames--no detector, no infiller, and no test-time optimization. On ARCTIC, HOT3D, and HOI4D, ViDiHand substantially outperforms prior methods, establishing video diffusion models as a powerful new foundation for hand motion reconstruction and a promising route to scalable in-the-wild data collection for embodied AI. Project page: https://vidihand.github.io.
Primary: A*STAR (Agency for Science, Technology and Research)
All Institutions: A*STAR, NTU Singapore (Nanyang Technological University), Alibaba Group
The paper presents a significant advancement in 4D hand motion reconstruction by effectively adapting video diffusion models for perception tasks, achieving state-of-the-art performance on challenging benchmarks through a novel hand-overlay rendering adaptation and a geometrically-aware dual-branch decoder.
The paper proposes a novel paradigm for 4D hand motion reconstruction by leveraging the internal representations of a large-scale pretrained Video Diffusion Model (Wan2.1-VACE). Instead of treating the diffusion model as a generative black box or a frozen feature extractor, the authors introduce a "hand-overlay rendering" adaptation stage. This involves finetuning only the VACE branch of the model to regenerate input clips with semi-transparent rendered hand overlays. This clever pretext task specializes the model's world priors (occlusion reasoning, temporal coherence, 3D geometry) for hand-centric tasks without destroying the general visual knowledge. The decoder is a dual-branch architecture: a Hand-Token Branch for holistic articulated pose and a Joint-Heatmap Branch for local 2D localization, coupled by mutual cross-attention and a closed-form geometric solve for camera translation. This design elegantly separates the holistic vs. local inductive biases of the representation. The approach is methodologically sound, theoretically motivated by the capabilities of generative models, and technically sophisticated in its integration of diffusion features with geometric constraints.
The evaluation is comprehensive and rigorous. The authors test on three challenging egocentric hand benchmarks: ARCTIC (heavy occlusion), HOT3D (fisheye, high dynamic range, motion blur), and HOI4D (cross-dataset generalization). They introduce a "penalty protocol" that folds false negatives into pose metrics, providing a more realistic assessment of detection robustness than standard TP-only metrics. ViDiHand establishes new state-of-the-art results across all metrics, with particularly significant gains in frame accuracy (detection robustness) and temporal jitter (smoothness). The ablation studies are thorough, validating the choice of DiT layer, denoising step, and decoder components. The cross-dataset transfer to HOI4D demonstrates the generalizability of the learned priors. The results are statistically significant and practically meaningful, showing that video diffusion models capture richer spatiotemporal priors than discriminative video models or image-based detectors.
The paper provides detailed implementation details, including the specific backbone (Wan2.1-VACE), the two-stage training curriculum (joint overlay then MANO mesh overlay), and the decoder architecture. The supplementary material contains extensive details on the evaluation protocol, metric definitions, and ablation studies. The project page link suggests code/data availability, which is standard for high-impact ML papers. The use of a publicly available backbone (Wan2.1) enhances reproducibility, although the specific finetuning steps and data preprocessing pipelines would need to be carefully followed. The closed-form geometric solve is well-defined.
The primary limitation is computational cost. The method runs at 5.5 fps on 4 A100 GPUs, making it an offline annotation tool rather than a real-time solution. The authors acknowledge this and suggest distillation as a future direction. Additionally, Stage 1b still requires MANO-annotated video, which is a scarce resource, though the authors propose self-supervised pretexts to relax this in the future. The method may also struggle with extreme cases not covered in the training data, although the cross-dataset results suggest good generalization.
This work has significant implications for embodied AI, robotics, and human-computer interaction. By providing a scalable, high-quality method for 4D hand reconstruction from egocentric video, it enables the creation of large-scale datasets for training robot policies and understanding human behavior. The paradigm shift towards leveraging video generative models for perception tasks could influence future research in 3D vision, motion capture, and video understanding. It also highlights the untapped potential of diffusion models for discriminative tasks, potentially inspiring similar approaches in other domains. The paper presents a significant advancement in 4D hand motion reconstruction by effectively adapting video diffusion models for perception tasks, achieving state-of-the-art performance on challenging benchmarks through a novel hand-overlay rendering adaptation and a geometrically-aware dual-branch decoder.
Data, as the fundamental substrate of modern intelligence, has greatly driven the development of current foundation models. Naturally, researchers aim to extend this paradigm to the domain of GUI agents, hoping to build strong GUI agents through a similar paradigm. However, GUI agent data cannot be directly harvested from the internet, making it costly and difficult to collect at scale. As a result, current GUI agents suffer from poor cross-device generalization and limited visual grounding ability for fine-grained GUI elements. As an attempt to address data challenge in GUI agents, we propose GUICrafter, a weakly-supervised GUI agent leveraging massive unannotated screenshots to substantially reduce the reliance on expensive human annotations. GUICrafter explores a curriculum learning framework for training GUI agents through two progressive stages. First, the model learns visual grounding from large-scale unannotated screenshots and webpages, leveraging the rich contextual signals inherent in GUI interactions without human annotations. Then, in Stage 2, we leverage a small amount of high-quality data to calibrate the model via reinforcement learning. Experiments show that GUICrafter achieves competitive, or even superior, performance to advanced systems like UI-TARS while using only 0.1% of its data. Furthermore, under the same amount of annotated data, GUICrafter surpasses all previous methods such as GUI-R1. Code, data, and models are available at https://github.com/fansunqi/GUICrafter.
Primary: Tsinghua University
All Institutions: Tsinghua University, Tencent Hunyuan
GUICrafter presents a significant advancement in GUI agent training by introducing a scalable weakly-supervised pretraining stage that leverages unannotated screenshots for visual grounding, achieving state-of-the-art performance with minimal annotated data. The technical contribution lies in the effective formulation of meta-tasks from interactive signals and the robust two-stage RLVR framework, which offers a practical and efficient path forward for data-constrained GUI agent development.
The paper proposes GUICrafter, a two-stage training framework for GUI agents. Stage 1 involves "weakly-supervised GUI pretraining" using massive unannotated screenshots. The core innovation here is the extraction of interactive signals (clickable/typable elements) from web pages and mobile apps to create "meta-tasks" (e.g., "click any clickable area"). This allows the model to learn visual grounding without human annotation by leveraging the inherent structure of GUIs. Stage 2 uses a small amount of high-quality, manually annotated data for reinforcement learning (RLVR with GRPO) to calibrate the model. The reward design includes a Gaussian position reward to provide finer-grained feedback than binary point-in-box rewards. The approach effectively bridges the gap between large-scale unsupervised visual learning and precise task-oriented grounding.
The evaluation is comprehensive, covering multiple benchmarks across web (Mind2Web, ScreenSpot-Pro), mobile (AndroidControl, AITW, AndroidWorld), and general (OmniACT) domains. The results show that GUICrafter-3B and GUICrafter-7B achieve performance competitive with or superior to state-of-the-art models like UI-TARS and GUI-R1, despite using significantly less annotated data (0.1% of UI-TARS's data). The ablation studies effectively demonstrate the contribution of Stage 1 (visual grounding improvement) and Stage 2 (task completion calibration). The comparison against baselines is fair, including reproductions of GUI-R1 on full datasets. The scalability analysis (10k to 500k samples) provides strong evidence for the data efficiency and robustness of the weakly-supervised stage.
The authors provide code, data, and models. The methodology is clearly described, including the specific extraction tools (Playwright) and the reward function formulas. The use of standard benchmarks and clear reporting of metrics (Element Accuracy, Step Success Rate, etc.) enhances reproducibility. The distinction between the weakly-supervised data generation and the supervised fine-tuning data is clear.
The method still relies on a small amount of high-quality annotated data in Stage 2 for calibration, although this is significantly reduced compared to prior work. The weakly-supervised data generation relies on automated extraction which may have noise (though the paper shows robustness to this). The "meta-tasks" are somewhat generic and may not capture the semantic intent of complex user goals, which is handled in Stage 2. The approach is primarily tested on web and mobile interfaces; generalization to other GUI types (e.g., desktop applications with complex non-standard widgets) might require further validation.
This work addresses a critical bottleneck in GUI agent development: data scarcity. By demonstrating that massive unannotated data can be leveraged for visual grounding, it lowers the barrier to entry for building robust GUI agents. This could accelerate the development of autonomous agents for web and mobile interaction, with implications for accessibility, automation, and human-computer interaction. The open-source release contributes to the community by providing a new baseline and dataset generation pipeline. GUICrafter presents a significant advancement in GUI agent training by introducing a scalable weakly-supervised pretraining stage that leverages unannotated screenshots for visual grounding, achieving state-of-the-art performance with minimal annotated data. The technical contribution lies in the effective formulation of meta-tasks from interactive signals and the robust two-stage RLVR framework, which offers a practical and efficient path forward for data-constrained GUI agent development.
Technology computer-aided design (TCAD) semiconductor device simulation is fundamentally constrained by the high computational cost of iteratively solving coupled drift-diffusion equations. Existing ML surrogates either reduce internal physics to macroscopic scalar regressions, or rely on single-step mappings that lack the iterative refinement required to resolve stiff, coupled fields. To address this, we introduce PCGD, a Physics-Guided Conditional Graph Diffusion framework operating natively on unstructured TCAD meshes to predict coupled electrostatic and carrier density fields. PCGD employs a Condition-Aware MeshGraphNet denoiser that explicitly injects boundary conditions and device structure context via global cross-attention. By augmenting data-driven denoising with a physics-guided hybrid objective that integrates exponent-free quasi-Fermi gradient matching with noise-aware PDE residuals, PCGD progressively enforce physical constraints in the iterative diffusion trajectory. This strategy successfully bypasses the numerical instabilities typical of stiff drift-diffusion equations. Evaluated on a challenging mixed PN/MOS benchmark, PCGD significantly outperforms deterministic one-step regression (1.207% error) and local diffusion (1.585% error) baselines by achieving a sub-percent mean relative field error of 0.835%, while concurrently reducing maximum PDE residual errors by nearly three orders of magnitude compared to pure diffusion. It also transfers robustly to unseen SOI topologies (0.815% error) via LoRA adaptation, using 5.30$\times$ less data and 14.34$\times$ fewer parameters than full fine-tuning. Ultimately, PCGD bridges the computational efficiency of generative surrogates with the rigorous physical fidelity of traditional TCAD, unlocking highly scalable, field-level analysis for robust device engineering.
Primary: Fudan University
All Institutions: Fudan University, Shanghai Integrated Circuit Manufacturing Innovation Center
PCGD has a profound broader impact, particularly in the semiconductor industry and scientific machine learning. By significantly accelerating TCAD simulations while maintaining high physical fidelity, it can drastically shorten the design cycle for advanced semiconductor devices, fostering innovation in microelectronics for applications ranging from AI hardware to power electronics. The methodology for stabilizing physics-informed diffusion models for highly stiff and nonlinear PDEs is generalizable beyond TCAD. It offers a blueprint for tackling similar challenges in other scientific and engineering domains, such as materials science, fluid dynamics, and biomechanics, where complex multiphysics simulations are computationally expensive and numerically challenging. The concept of a hybrid AI-TCAD simulation workflow, where ML provides robust initial guesses to accelerate or stabilize traditional solvers, represents a powerful paradigm for integrating AI into complex scientific computing pipelines, promising both efficiency and reliability. Furthermore, the successful application of parameter-efficient fine-tuning (LoRA) for domain adaptation in a scientific context highlights its potential for developing more adaptable and data-efficient ML models for specialized scientific tasks. PCGD introduces a physics-guided conditional graph diffusion framework that effectively addresses the computational bottlenecks and physical fidelity challenges in TCAD device simulation. This work makes substantial contributions through its mesh-native graph diffusion approach, condition-aware MeshGraphNet architecture with global cross-attention, and a novel hybrid physics-guided training objective that stabilizes learning for stiff, nonlinear drift-diffusion equations. The impressive empirical results, demonstrating sub-percent accuracy and near three-order-of-magnitude reduction in PDE residuals, coupled with robust transferability to unseen topologies, position PCGD as a significant advancement in ML-accelerated scientific computing, with clear implications for future semiconductor design and broader multiphysics simulation.
The methodology presented in PCGD is highly sophisticated and meticulously designed to tackle the inherent challenges of TCAD device simulation. The core idea of formulating coupled-field prediction as a conditional generative denoising task on native unstructured TCAD meshes is a significant departure from previous ML surrogates. This approach leverages the iterative refinement capabilities of diffusion models to decouple macroscopic field construction from microscopic detail resolution, which is crucial for handling the extreme stiffness and exponential nonlinearities of semiconductor physics. The Condition-Aware MeshGraphNet denoiser is a well-thought-out architectural innovation. By explicitly injecting boundary conditions and device structure context via global cross-attention, it effectively overcomes the limitations of purely local message passing, ensuring that critical global information (like terminal biases and device layout) is directly accessible to every mesh node. This design choice is critical for accelerating convergence to correct physical operating conditions. The most impactful methodological contribution is the hybrid physics-guided objective. It ingeniously combines an exponent-free quasi-Fermi gradient matching loss ($L_G$) for stable guidance during early, noisy diffusion stages with noise-aware, adaptively scaled exact PDE residuals ($L_P$) for fine-grained physical correction in later stages. The dual-tier stabilization strategy for $L_P$ (validity-aware SNR gating and adaptive batch balance) is a robust solution to prevent gradient divergence caused by the extreme nonlinearity of drift-diffusion equations. The detailed mathematical derivation connecting Scharfetter-Gummel flux to quasi-Fermi gradients and the implementation of GPU-accelerated graph operators for discrete PDE residuals further demonstrate the technical depth and rigor of the proposed framework.
The experimental evaluation is comprehensive, rigorous, and strongly supports the claims made in the paper. The use of a challenging mixed PN/MOS benchmark dataset, comprising a large number of training and validation snapshots from distinct devices and operating modes, ensures the robustness of the evaluation. The device-trajectory level splitting for train/validation is critical for assessing generalization. The ablation studies are particularly effective, systematically isolating the contributions of iterative generative refinement, global conditioning, and physics-guided supervision by comparing PCGD against well-chosen baselines (deterministic one-step regression, local diffusion, and condition-aware diffusion with varying levels of physics guidance). The chosen metrics, mean relative $L_2$ error and log-compressed maximum PDE residual error, are appropriate and provide a holistic view of both accuracy and physical consistency. The results are highly impressive: PCGD achieves a sub-percent mean relative field error (0.835%) and significantly outperforms all baselines, reducing maximum PDE residual errors by nearly three orders of magnitude compared to pure diffusion. The analysis of convergence dynamics clearly illustrates the stability gained from the hybrid physics-guided objective. Furthermore, the demonstration of robust transferability to unseen SOI topologies via parameter-efficient LoRA adaptation, requiring significantly less data and fewer parameters than full fine-tuning, is a strong indicator that PCGD learns generalizable physical priors, which is crucial for practical adoption in industrial settings.
The paper provides a commendable level of detail for reproducibility. The methodology is thoroughly described with mathematical formulations for the graph representation, diffusion process, Condition-Aware MeshGraphNet, and the hybrid physics-guided objective. The appendix offers specific architectural settings, coefficients for the loss functions, and details on the baseline architectures. Crucially, numerical safety measures for handling stiff exponentials and precision truncation are explicitly mentioned. The schema for mesh features and interface edges is also detailed. While the absence of publicly available code (no project URL provided) is a common limitation for arXiv preprints, the textual descriptions are sufficiently comprehensive for an experienced researcher with expertise in GNNs, diffusion models, and scientific computing to implement the core components of PCGD. Access to the specific TCAD data generation pipeline would be the final piece for exact replication of the dataset.
Despite its strengths, PCGD exhibits some limitations. The paper acknowledges "severe zero-shot degradation" when transferring to major out-of-distribution topological shifts (e.g., SOI MOSFETs not seen during pretraining). While LoRA adaptation effectively addresses this, it implies that the model, despite learning physical priors, still relies on structural interpolation from its pretraining data, limiting its immediate "universal foundational model" capabilities without a much broader pretraining corpus. The current experimental validation is primarily on 2D devices. While the paper discusses the theoretical O(N) scaling advantage for 3D simulations, empirical validation on massive 3D meshes, including memory footprint and training/inference times, is yet to be demonstrated. The computational cost of training such a complex diffusion model on large graph datasets is likely substantial, though not explicitly quantified. Finally, the proposed hybrid AI-TCAD workflow mentions routing high-residual cases back to traditional solvers, but the practical implementation details, criteria for routing, and the efficiency gains from this hybrid approach are not fully explored.
PCGD has a profound broader impact, particularly in the semiconductor industry and scientific machine learning. By significantly accelerating TCAD simulations while maintaining high physical fidelity, it can drastically shorten the design cycle for advanced semiconductor devices, fostering innovation in microelectronics for applications ranging from AI hardware to power electronics. The methodology for stabilizing physics-informed diffusion models for highly stiff and nonlinear PDEs is generalizable beyond TCAD. It offers a blueprint for tackling similar challenges in other scientific and engineering domains, such as materials science, fluid dynamics, and biomechanics, where complex multiphysics simulations are computationally expensive and numerically challenging. The concept of a hybrid AI-TCAD simulation workflow, where ML provides robust initial guesses to accelerate or stabilize traditional solvers, represents a powerful paradigm for integrating AI into complex scientific computing pipelines, promising both efficiency and reliability. Furthermore, the successful application of parameter-efficient fine-tuning (LoRA) for domain adaptation in a scientific context highlights its potential for developing more adaptable and data-efficient ML models for specialized scientific tasks. PCGD introduces a physics-guided conditional graph diffusion framework that effectively addresses the computational bottlenecks and physical fidelity challenges in TCAD device simulation. This work makes substantial contributions through its mesh-native graph diffusion approach, condition-aware MeshGraphNet architecture with global cross-attention, and a novel hybrid physics-guided training objective that stabilizes learning for stiff, nonlinear drift-diffusion equations. The impressive empirical results, demonstrating sub-percent accuracy and near three-order-of-magnitude reduction in PDE residuals, coupled with robust transferability to unseen topologies, position PCGD as a significant advancement in ML-accelerated scientific computing, with clear implications for future semiconductor design and broader multiphysics simulation.
LLM agents carry conclusions across steps and sessions in compressed memory, and memory products (e.g., mem0, LangMem) rewrite conversation into stored "facts" that later steps trust. We show this rewriting manufactures confidence: across our constructed agent settings, a casual, hedged remark becomes a confident, dated assertion the agent then obeys like a verified fact, granting every above-clearance request it faces. No attacker is needed: a role that was true once and never corrected is stored as a flat fact and acted on like a deliberate injection. We then isolate what the agent responds to. It is not the source: attributed, unattributed, and even forged "system of record" claims all grant alike. It is the confidence of the phrasing. A hedge is discounted, a flat assertion is obeyed, and this holds with no special keyword. Not all hedges are equal, though: the evidential register is the least-discounted, with "reportedly" obeyed like a flat assertion on most models. The obvious fixes fail. A passive "unverified" tag is ignored, and an active "do not trust this" instruction escalates even correct memory, so it is safe only by refusing to decide. The real fix lives in the store: keep the tentative phrasing rather than upgrade it. But that is hygiene, not a defense against an attacker who can simply write a confident lie. The deployable lesson is narrower and constructive: a single load-bearing memory is the hazard, and one redundant source restores correct decisions. We release the harness and demonstrations.
Primary: unknown
All Institutions: unknown
This paper has significant broader impact for the development and deployment of LLM agents. It identifies a fundamental, pervasive, and under-defended failure mode ("manufactured confidence") in how LLM agents process and store information in consolidated memory. This phenomenon can lead to agents being confidently wrong, granting unauthorized access, or making incorrect financial decisions, even without an explicit attacker. The findings challenge current memory consolidation practices and highlight the critical need for memory architectures that preserve epistemic status. The "hearsay blind spot" is a particularly alarming discovery, as it means agents may treat unverified reports as established facts. The paper provides crucial, actionable lessons for practitioners: avoid single load-bearing memories for consequential decisions, and implement redundant verification sources. While the proposed store-side fix is not a complete defense against adaptive attackers, it significantly raises the bar and improves hygiene. This work is essential for enhancing the safety, reliability, and trustworthiness of LLM agents in real-world applications. This paper identifies and rigorously diagnoses "manufactured confidence," a critical and pervasive failure mode in LLM agent memory consolidation where hedged remarks are rewritten into confident facts, leading to agents making confidently wrong decisions across diverse models and memory products. The comprehensive analysis reveals that agents obey the confidence of phrasing rather than its source, are blind to hearsay markers, and that common mitigations like passive tags or active distrust instructions are ineffective or lead to abdication, underscoring the necessity of preserving epistemic status in memory stores and employing redundant information sources for consequential decisions.
The methodology is exceptionally strong and well-designed for diagnosing the phenomenon of "manufactured confidence." The authors construct multi-step agent settings (access control, budget approval, running total) where memory is load-bearing, allowing for clear ground truth and legible impact. A crucial aspect is the use of real, shipped memory products (mem0, LangMem) alongside a verbatim control, which grounds the findings in practical agent deployments. The systematic probing involves varying how memory is presented (confident, passive tag, active instruction), dissecting the cues agents respond to (modality, hearsay, explicit non-verification), and testing the impact of source attribution (bare, attributed, forged authority). The inclusion of a "natural case" (staleness without injection) alongside adversarial injection strengthens the generalizability of the problem. The use of five diverse, state-of-the-art LLMs from four providers (Anthropic, Meta, OpenAI, Qwen) ensures the findings are not model-specific. The methodology also includes a symmetry test (over-denial) to rule out simple grant bias and a detailed analysis of the "laundering" process within memory products. The approach is comprehensive, rigorous, and effectively isolates the mechanisms behind manufactured confidence.
The experimental evaluation is thorough and provides compelling evidence for the paper's claims. Key findings include: 1. **Manufactured Confidence**: Memory consolidation rewrites hedged remarks into confident assertions, leading to high confident-wrong rates (0.50-1.00) across all models in consequential decisions. 2. **Source Invariance**: Agents obey the confidence of phrasing, not its source. Attributed, unattributed, and even forged "system of record" claims grant alike, demonstrating a critical blindness to provenance. 3. **Failure of Obvious Fixes**: Passive "unverified" tags are largely ignored, especially by non-Anthropic models. Active "do not trust this" instructions lead to abdication (escalating everything), not discrimination, costing all utility. 4. **Redundancy as a Fix**: A second, authoritative source allows agents to discriminate, turning distrust into selective caution rather than blanket abdication. 5. **Hearsay Blind Spot**: Evidential registers, particularly "reportedly," are the least-discounted hedges, often obeyed like flat assertions on most models. This is a critical, pervasive vulnerability. 6. **Symmetry**: The effect is symmetric, causing both over-granting and over-denial based on manufactured confidence, ruling out a simple grant bias. 7. **Consolidation, Not Vendor**: The laundering of hedges into confident facts is a property of LLM consolidation itself, not specific memory products or extraction LLMs. The experiments are quantitatively presented with clear rates, using temperature 0 for deterministic behavior per scenario. The results are consistent across models, highlighting a systemic issue. The distinction between "belief" and "low threshold" based on rationale analysis adds a qualitative layer to the findings.
The paper demonstrates a high commitment to reproducibility. The authors explicitly state, "We release the harness, data, and demonstrations at https://github.com/collapseindex/manufactured-confidence." They provide detailed information on the models used (exact API identifiers, providers, access dates), temperature settings, agent system prompts, memory poisoning setup, and memory backend configurations. Specific scripts (e.g., `cues.py`, `forged.py`) are mentioned, indicating a well-structured codebase. This level of detail and code release makes the experiments highly reproducible.
The authors are commendably transparent about the limitations: 1. **Constructed Scenarios**: The tasks are decision-shaped but not live deployments, and even "natural staleness" sessions are constructed, meaning the base rate of this failure mode in the wild is not measured. 2. **Scope**: The study focuses on two memory products, four extractors, and five phrasings, with deep probes primarily in access control. While robust, it's not exhaustive. The Zep probe is limited. 3. **Belief vs. Threshold**: The distinction relies on verbalized rationales, which are not ground-truth processing. 4. **Non-Adaptive Threat Model**: The proposed store-side defense is not robust against an adaptive attacker who can directly supply confident, forged authority. 5. **Sample Sizes**: While effects are large and consistent, $n$ values (e.g., 15 for decisions, 10 for poisonings) are relatively small for statistical generalization, though the deterministic nature at temperature 0 mitigates this for the constructed scenarios. 6. **Fix is a Prompt**: The hedge-preserving extraction is demonstrated via a prompt, not a fully engineered production store.
This paper has significant broader impact for the development and deployment of LLM agents. It identifies a fundamental, pervasive, and under-defended failure mode ("manufactured confidence") in how LLM agents process and store information in consolidated memory. This phenomenon can lead to agents being confidently wrong, granting unauthorized access, or making incorrect financial decisions, even without an explicit attacker. The findings challenge current memory consolidation practices and highlight the critical need for memory architectures that preserve epistemic status. The "hearsay blind spot" is a particularly alarming discovery, as it means agents may treat unverified reports as established facts. The paper provides crucial, actionable lessons for practitioners: avoid single load-bearing memories for consequential decisions, and implement redundant verification sources. While the proposed store-side fix is not a complete defense against adaptive attackers, it significantly raises the bar and improves hygiene. This work is essential for enhancing the safety, reliability, and trustworthiness of LLM agents in real-world applications. This paper identifies and rigorously diagnoses "manufactured confidence," a critical and pervasive failure mode in LLM agent memory consolidation where hedged remarks are rewritten into confident facts, leading to agents making confidently wrong decisions across diverse models and memory products. The comprehensive analysis reveals that agents obey the confidence of phrasing rather than its source, are blind to hearsay markers, and that common mitigations like passive tags or active distrust instructions are ineffective or lead to abdication, underscoring the necessity of preserving epistemic status in memory stores and employing redundant information sources for consequential decisions.
Diffusion Language Models (DLMs) are typically trained under fixed context structures, restricting denoising to predetermined token subsets. This creates a mismatch between training and inference, where models must operate over arbitrary configurations, leading to degradation off the training grid. We propose Adaptive Block Diffusion (ABD), which resolves this mismatch by optimizing denoising risk over a distribution of prefix-window configurations. By treating the configuration as a stochastic variable, ABD trains a single model over the full configuration space without architectural changes. We show that generalization across decoding strategies is governed by the support of the training distribution, and that ABD guarantees denoising optimality for any inference policy whose configurations are covered during training. Empirically, ABD exhibits structural invariance across decoding scales, avoiding off-grid collapse and recovering a monotonic relationship between block size and perplexity, while matching or outperforming fixed-block specialists at their target scales.
Primary: Microsoft AI
All Institutions: Microsoft AI
Adaptive Block Diffusion has significant broader impact for the field of Diffusion Language Models and potentially for structured generative models more generally. By providing a principled and effective solution to the training-inference mismatch, ABD makes DLMs more robust, generalizable, and practical for real-world deployment. The ability of a single model to perform well across various decoding scales and strategies simplifies model management and enables more flexible inference scenarios, such as adaptive generation speeds or streaming decoding. This could accelerate the adoption and development of DLMs in diverse applications. The theoretical framework also offers a valuable new perspective on understanding generalization in structured generative models, potentially inspiring similar training paradigms in other domains beyond text. The demonstrated improved zero-shot generalization to domain-shifted text further suggests that ABD could lead to more versatile and less domain-specific language models. Adaptive Block Diffusion resolves the training-inference mismatch in Diffusion Language Models by optimizing denoising risk over a stochastic distribution of prefix-window configurations, leading to a single model that exhibits structural invariance and robust generalization across diverse decoding scales. This paper presents a theoretically grounded and empirically validated framework that significantly enhances the robustness and flexibility of Diffusion Language Models, addressing a critical limitation of prior fixed-structure approaches and paving the way for more adaptable and generalizable text generation.
The methodology is robust and elegantly addresses a core problem in Diffusion Language Models (DLMs): the training-inference mismatch caused by fixed context structures. Adaptive Block Diffusion (ABD) proposes a novel training objective that treats the denoising configuration (prefix length $k$ and window length $\ell$) as a stochastic variable, optimizing denoising risk over a distribution $\pi$ of these configurations. This approach is commendable for not requiring architectural changes, instead focusing on a principled modification to the training process. The theoretical analysis is a significant strength, formally defining conditional denoising risk and proving statistical consistency over the support of $\pi$. The "Training-Inference Alignment" theorem, leveraging the Radon-Nikodym theorem, rigorously demonstrates that if an inference policy's configuration distribution is covered by the training distribution's support, then denoising optimality is guaranteed. This provides a strong theoretical foundation for the empirical claims of structural invariance. The practical implementation details, particularly the attention mask construction and the `ABDBoundaryManager` for sampling block lengths, are clearly described in the appendix, showcasing a well-thought-out and implementable solution.
The experimental evaluation is comprehensive, well-designed, and provides strong empirical evidence supporting the theoretical claims. The authors use standard language modeling benchmarks (LM1B, OpenWebText) and ensure fair comparisons by using an identical transformer architecture to existing baselines (MDLM, BD3LM). The most compelling result is the demonstration of "structural invariance": ABD successfully recovers the monotonic relationship between block size and perplexity, a fundamental property for generative models, which fixed-block specialists fail to maintain off their training grid. This directly validates the core hypothesis that training over a broad configuration distribution leads to better generalization. Furthermore, ABD matches or outperforms fixed-block specialists at their target scales, indicating that multi-scale training acts as a regularizer rather than a compromise. The zero-shot generalization experiments on diverse datasets, including scientific text, show improved robustness and suggest that ABD learns a more configuration-invariant language representation. The ablations on configuration distribution types (categorical exponential, uniform, lognormal) and training budget allocation are particularly insightful, offering practical guidance on how to tune ABD for specific inference regimes and demonstrating the trade-offs involved.
The paper excels in reproducibility. The methodology is clearly articulated, and the appendix provides detailed pseudocode for the critical components, including the `abd_attention_mask` and `ABDBoundaryManager`. The authors explicitly state that they leverage the same codebase, datasets, architecture, likelihood evaluation, and inference setup as a previously published work (arriola2025blockdiffusioninterpolatingautoregressive), which significantly lowers the barrier to reproduction. Specific details regarding training budget allocation and configuration sampling strategies are also provided. This level of detail and reliance on a shared foundation is exemplary.
The authors openly acknowledge several limitations. A key one is the dependence on the choice of the configuration distribution $\pi$. While $\pi$ offers a principled way to balance performance across decoding regimes, an suboptimal choice can bias the model towards frequently sampled configurations, potentially leading to uneven performance across scales. This implies that careful tuning of $\pi$ is necessary for specific application scenarios. Additionally, ABD does not directly address inference efficiency; while it enables flexible decoding, the selection of optimal inference-time policies remains an open problem. Finally, the theoretical analysis provides optimality guarantees under support coverage but does not offer finite-sample guarantees, meaning practical performance might still be influenced by the quality and density of training coverage in finite data regimes.
Adaptive Block Diffusion has significant broader impact for the field of Diffusion Language Models and potentially for structured generative models more generally. By providing a principled and effective solution to the training-inference mismatch, ABD makes DLMs more robust, generalizable, and practical for real-world deployment. The ability of a single model to perform well across various decoding scales and strategies simplifies model management and enables more flexible inference scenarios, such as adaptive generation speeds or streaming decoding. This could accelerate the adoption and development of DLMs in diverse applications. The theoretical framework also offers a valuable new perspective on understanding generalization in structured generative models, potentially inspiring similar training paradigms in other domains beyond text. The demonstrated improved zero-shot generalization to domain-shifted text further suggests that ABD could lead to more versatile and less domain-specific language models. Adaptive Block Diffusion resolves the training-inference mismatch in Diffusion Language Models by optimizing denoising risk over a stochastic distribution of prefix-window configurations, leading to a single model that exhibits structural invariance and robust generalization across diverse decoding scales. This paper presents a theoretically grounded and empirically validated framework that significantly enhances the robustness and flexibility of Diffusion Language Models, addressing a critical limitation of prior fixed-structure approaches and paving the way for more adaptable and generalizable text generation.
Existing computer-use benchmarks fail to capture the realism, complexity, and long-horizon demands of real-world computer use, limiting their ability to reveal the limitations of frontier agents. We introduce OSWorld 2.0, a benchmark of 108 long-horizon computer-use workflows across everyday and professional tasks, designed to capture complex and challenging real-world phenomena. Each task represents a realistic end-to-end workflow that takes human users a median of about 1.6 hours to complete and requires an average of 318 tool calls with Claude Opus 4.7 using maximum thinking, compared with about 30 in OSWorld 1.0. OSWorld 2.0 targets challenge phenomena that are common in real workflows yet underrepresented in prior benchmarks, spanning interaction-design challenges such as streaming interaction and dynamic environments, as well as agent-pattern challenges such as cross-source reasoning, implicit-state inference, and visual-spatial precision. Tasks are grounded in authentic input artifacts and cross-referenced against realistic stateful user profile data, and include separate safety reports auditing safety-sensitive execution. Under our primary binary-completion metric at 500 steps, Claude Opus 4.8 with maximum thinking and batched tool calls scores best but still completes only 20.6% of tasks at a 54.8% partial score; GPT-5.5 is far more token-efficient yet plateaus near 13%. These results show that current agents are still far from professional-level computer use: rather than stumbling on basic GUI control or coding, they lose track of constraints, miss information that arrives mid-task, guess rather than ask the user, and skip verification, struggling most when a task hinges on hidden state they must recover.
Primary: XLang
All Institutions: XLang
OSWorld 2.0 establishes a rigorous, long-horizon benchmark for computer-use agents, revealing that current frontier models struggle significantly with state tracking, verification, and dynamic environments, setting a new, more realistic standard for evaluating autonomous agent capabilities.
The paper introduces OSWorld 2.0, a benchmark designed to evaluate computer-use agents on long-horizon, real-world workflows. The methodology shifts focus from short, isolated GUI interactions to complex, multi-application tasks that mimic professional work (e.g., reimbursement, data analysis, creative editing). Key methodological innovations include: 1) The use of self-hosted, stateful web services (email, banking, chat) to simulate realistic environments without relying on volatile live websites. 2) A fine-grained, checkpoint-based evaluation system (averaging ~27 checkpoints per task) rather than binary pass/fail, allowing for partial credit and more nuanced analysis. 3) The annotation of tasks with specific "challenge phenomena" (e.g., cross-source reasoning, dynamic environments, implicit-state inference) to diagnose specific agent failures. 4) The inclusion of a simulated user channel and dynamic environment updates to test agent robustness to information arrival and state changes. This approach is rigorous and addresses a critical gap in current benchmarks which often overstate agent capabilities by using short, static tasks.
The authors evaluate seven frontier models (Claude Opus 4.7/4.8, GPT-5.5, Sonnet 4.6, Qwen 3.7-Plus, MiniMax M3, Kimi 2.6) under various constraints (step budgets, thinking levels, batching). The results are stark: even the best configuration (Claude Opus 4.8 with max thinking and batching) achieves only 20.6% binary completion and 54.8% partial score. The paper provides a detailed analysis of failure modes, highlighting that agents struggle with hidden state recovery, constraint tracking, and verification, rather than basic GUI control. The analysis of token efficiency vs. performance is particularly insightful, showing that GPT-5.5 is more efficient but plateaus earlier, while Opus models spend significantly more tokens for marginal gains. The breakdown of performance by challenge phenomena provides actionable insights for future research. The experiments are comprehensive, covering multiple models, configurations, and detailed error analysis.
The paper claims to release the environment, tasks, self-hosted websites, and agent rollout trajectories. The use of self-hosted services ensures that the environment is stable and reproducible, unlike benchmarks relying on live web services. The detailed description of the task construction pipeline, including the quality assurance steps (unit tests, human re-solving, adversarial audits), enhances reproducibility. The specific model configurations and hyperparameters are clearly stated. The primary limitation is the computational cost of running these long-horizon tasks, but the provided infrastructure should allow other researchers to reproduce the evaluations.
The benchmark is limited to 108 tasks, which, while diverse, may not cover all possible real-world scenarios. The self-hosted web services, while realistic, are simulations and may not capture all edge cases or security quirks of live production systems. The "simulated user" is a simplified model of human interaction and may not fully capture the nuance of human communication. The evaluation relies on model-based judges for some open-ended tasks, which may introduce bias or inaccuracies, although the authors attempt to mitigate this with objective checklists and validation. The focus on long-horizon tasks means that short, simple tasks are underrepresented, which might skew the perceived difficulty for simpler use cases.
This paper has significant implications for the development of autonomous agents. By demonstrating that current frontier models are far from solving realistic, long-horizon computer use tasks, it sets a realistic baseline for the field. It highlights the need for improvements in state management, reasoning over long horizons, and self-correction. The safety analysis, revealing that agents can cause harmful side effects (e.g., leaking API keys, exhausting disk space), underscores the risks of deploying such agents in real-world settings. The benchmark provides a valuable tool for researchers to track progress and identify specific weaknesses in agent architectures. It encourages a shift towards more robust, reliable, and safe agent systems. OSWorld 2.0 establishes a rigorous, long-horizon benchmark for computer-use agents, revealing that current frontier models struggle significantly with state tracking, verification, and dynamic environments, setting a new, more realistic standard for evaluating autonomous agent capabilities.
Retrieval-augmented generation (RAG) typically treats context selection as ranking chunks against a single query embedding. This assumption breaks down for complex queries, such as multi-hop or ambiguous questions, where top-k selection tends to over-cover one semantic aspect while ignoring critical sub-questions. We propose GeoRAG, which recasts context selection as Information Demand Coverage Optimization. GeoRAG builds a multi-dimensional demand distribution through diverse sub-query generation and reverse-validation weighting, then selects context by minimizing the Sinkhorn-Wasserstein distance between this demand distribution and the coverage of the selected set. The resulting demand-weighted facility-location objective is monotone submodular, giving a $1-1/e$ greedy guarantee, which we approximate with a Sinkhorn-based marginal-gain surrogate. The method is unsupervised, training-free, and retrieval-agnostic. We further show that single-point, query-proximity scorers cannot cover multi-modal demands, exposing a structural limit of ranking-based selection. On six open-domain QA benchmarks, GeoRAG improves exact match (EM) by +6.5 to +7.5 points over top-k truncation (up to +9.7 on HotpotQA and ASQA) and outperforms strong baselines including MMR, DPP, BGE-Reranker, SMART-RAG, and AdaGReS, with stable gains across context budgets and sub-query generators.
Primary: Singapore Management University
All Institutions: University of Shanghai for Science and Technology, Singapore Management University
GeoRAG presents a theoretically grounded, empirically superior method for RAG context selection by modeling information demand as a multi-dimensional distribution and optimizing for coverage via submodular optimization, significantly outperforming existing ranking and diversity-based approaches on complex QA benchmarks.
The paper proposes GeoRAG, a novel context selection framework for Retrieval-Augmented Generation (RAG) that moves beyond single-point query embeddings. The core innovation is reformulating context selection as an Information Demand Coverage Optimization problem. It constructs a multi-dimensional "Information Demand Proxy" distribution using diverse sub-query generation and reverse-validation weighting. The selection process minimizes the Sinkhorn-Wasserstein distance between this demand distribution and the coverage of the selected set. The authors prove that the resulting facility-location objective is monotone submodular, providing a theoretical $(1-1/e)$ greedy guarantee. They further demonstrate a structural limitation of existing ranking-based methods (query-proximity-monotone selectors) in handling bimodal information needs, providing a rigorous theoretical foundation for their approach. The method is unsupervised and training-free, making it broadly applicable.
The experimental evaluation is comprehensive and robust. The authors test GeoRAG across six open-domain QA benchmarks (NQ, TriviaQA, HotpotQA, 2WikiMHQA, ASQA, FEVER) and six different retrieval backends (Dense, BM25, Hybrid RRF, HyDE, MultiQuery, GraphRAG). GeoRAG consistently outperforms strong baselines, including MMR, DPP, BGE-Reranker, SMART-RAG, and AdaGReS, with significant gains on multi-hop datasets (up to +9.7 EM on HotpotQA). The paper includes extensive ablation studies isolating the contributions of the demand distribution (Axis A) and the set-aware coverage selection (Axis B). Crucially, they perform a "Full-Wikipedia" experiment without gold-injection to prove the method's effectiveness in realistic, harder retrieval settings. They also provide direct measurements of demand-dimension coverage, empirically validating that GeoRAG successfully covers multiple semantic peaks where baselines fail.
The paper provides detailed algorithmic descriptions, including the specific steps for sub-query generation, reverse-validation, and the Sinkhorn-based marginal gain calculation. Hyperparameters are clearly listed. The use of standard benchmarks and open-source models (Qwen3-Embedding-8B, Qwen3-4B) enhances reproducibility. The code is not explicitly linked in the text provided, but the methodological details are sufficient for implementation.
The method relies on LLM-generated sub-queries, which introduces a dependency on the quality and diversity of the generator. While the paper shows robustness across different generators, poor sub-query generation could degrade performance. The reverse-validation step adds computational overhead, though the latency analysis suggests it is manageable. The theoretical guarantee applies to the exact facility-location objective, while the deployed method uses a Sinkhorn surrogate; the paper acknowledges this but shows the surrogate performs well. The method is primarily evaluated on open-domain QA; its performance on more complex reasoning tasks or non-QA RAG applications is less clear.
GeoRAG addresses a fundamental limitation in current RAG systems: the inability to handle complex, multi-faceted queries effectively. By providing a retrieval-agnostic, training-free solution that significantly improves answer quality, it has the potential to become a standard component in RAG pipelines. The theoretical insights into the limitations of single-point embeddings also contribute to a deeper understanding of information retrieval in the LLM era. GeoRAG presents a theoretically grounded, empirically superior method for RAG context selection by modeling information demand as a multi-dimensional distribution and optimizing for coverage via submodular optimization, significantly outperforming existing ranking and diversity-based approaches on complex QA benchmarks.
World models aim to capture environment dynamics in ways that support perception, reasoning, and action, and have recently become a central direction in Vision-Language-Action-World (VLAW) modeling. Meanwhile, unified vision-language models have demonstrated strong multimodal generation capabilities, yet their potential as world models remains underexplored. In this work, we introduce \texttt{WorldBagel}, a unified VLAW framework built on BAGEL, a modern multimodal unified model, and use it to systematically investigate the role of unification in world modeling. Across multi-task robotic manipulation and cross-domain experiments, \texttt{WorldBagel} consistently outperforms task-specific alternatives and learns action representations that are more structured and semantically aligned with visual and linguistic context. Experiments on LIBERO, Language Table, and Franka show that unification is not only an architectural convenience, but also a key factor in learning effective VLAW models, leading to consistent empirical gains and deeper insights into multimodal world modeling. Code and model checkpoints will be released upon acceptance.
Primary: Georgia Institute of Technology
All Institutions: Georgia Institute of Technology
WorldBagel makes a significant contribution to the field of embodied AI and multimodal learning. By demonstrating the power of architectural unification for Vision-Language-Action-World modeling, it paves the way for more capable and general-purpose robotic agents. The ability to jointly understand language, perceive the environment, predict actions, and model future states within a single framework is a crucial step towards truly intelligent robots. The proposed Fourier-based action representation (FFAD/FFAT) is a valuable technical innovation that could be adopted by other robotics policies for more robust and structured action learning. The findings on stability under distribution shifts are particularly relevant for deploying robots in real-world, uncertain environments. This work encourages further research into leveraging large-scale unified multimodal models for complex embodied tasks, potentially leading to breakthroughs in robot learning and generalization. WorldBagel introduces a unified VLAW framework built on BAGEL, systematically demonstrating that architectural unification significantly improves multi-task robotic manipulation performance, yields higher-quality action representations via Fourier-based tokenization, and enhances stability under distribution shifts, thereby providing a promising foundation for scalable multimodal world models. This paper presents a robust methodology for integrating vision, language, action, and world modeling into a single coherent framework, supported by strong empirical results and insightful analyses of action representation and robustness, making a substantial contribution to the development of more capable and generalizable embodied AI systems.
The paper introduces WorldBagel, a unified Vision-Language-Action-World (VLAW) framework built upon the BAGEL two-tower architecture. The core methodological contribution lies in extending a powerful multimodal generative model (BAGEL) to jointly support multimodal understanding, structured action modeling, and future world prediction. The VLAW formulation is clearly defined, aiming to model the joint distribution of future observations and actions conditioned on past states and language instructions. A significant technical contribution is the Fourier Feature Action Decoder (FFAD) and Fourier Feature Action Tokenizer (FFAT). FFAD addresses the limitations of standard regression and discretization-based action tokenizers by mapping continuous actions into Fourier features and predicting in this space. The inverse mapping uses phase-consistent averaging for reconstruction. This approach is well-justified with theoretical analysis provided in the appendix, demonstrating Lipschitz stability, injectivity, consistency of reconstruction, and approximation advantages. This mathematical rigor is a strong point. The interleaved VLAW modeling via sequence plans, adapted from BAGEL, is a practical and flexible way to structure multimodal sequences for multi-view, multi-step observations and control. The concept of sampling different sequence plans to balance training objectives is sound. Furthermore, the LLM-inspired multimodal train-time data sampling, using mixture dataset sampling and priority sequence-plan sampling, is a crucial engineering detail for stabilizing training across heterogeneous datasets and balancing policy learning with world modeling. The overall architecture leverages the strengths of BAGEL's GEN/UND experts, with action modeling integrated through fine-tuned tokenizers and decoders rather than a new expert. This design choice maintains the unified nature of the model.
The experimental evaluation is comprehensive and rigorous, addressing three key empirical findings: multi-task performance, action representation quality, and stability under distribution shifts. 1. **Multi-task Performance**: WorldBagel is evaluated on LIBERO, Language Table, and Franka benchmarks. On LIBERO, it achieves state-of-the-art multi-task manipulation performance (98.0% average success rate), outperforming strong VLA baselines like OpenVLA-OFT and RynnVLA-002. The world modeling capabilities are also quantitatively assessed using FVD, PSNR, SSIM, and LPIPS, showing consistent improvements over RynnVLA-002 across all datasets, especially in action-conditioned prediction. This clearly demonstrates the empirical gains of the unified VLAW approach. 2. **Action Representation Quality**: A detailed ablation study on action decoder design (regression, bin discretization, FAST, FFAD) on LIBERO shows FFAD significantly reduces action MSE and improves success rates. Further analysis on the number of Fourier bands (K) in FFAD/FFAT provides insights into optimal hyperparameter choices. Crucially, the representation structure analysis using a linear probe classifier reveals that FFAD produces more structured and task-relevant action embeddings, leading to higher task identity prediction accuracy. This is a strong validation of the FFAD design. 3. **Stability Under Distribution Shifts**: The paper investigates robustness to action noise, scaling, and temporal perturbations on LIBERO. WorldBagel consistently maintains higher prediction fidelity (PSNR, LPIPS) compared to RynnVLA-002 under these shifts. The eigenvalue spectrum analysis further supports this, showing WorldBagel learns richer and more stable action representations (higher effective rank, lower dominant eigenvalue ratio). This finding is particularly important for real-world robotics applications where such shifts are common. The choice of baselines is appropriate, including recent strong VLA models and a direct competitor (RynnVLA-002) that also aims for VLAW unification. The use of multiple metrics (success rate, FVD, PSNR, SSIM, LPIPS, A-MSE, linear probe accuracy, eigenvalue spectrum) provides a holistic view of the model's performance and internal properties. The experiments are well-designed to support the paper's claims about the benefits of unification.
The paper states that "Code and model checkpoints will be released upon acceptance," which is a positive commitment. Detailed hyperparameters (learning rate, weight decay, batch size, training steps, K for FFAT/FFAD, priority weights) and hardware (8 H200 GPUs) are provided, which are crucial for reproducibility. The mathematical derivations for FFAD/FFAT in the appendix also contribute to understanding and potentially re-implementing those components. Given the complexity of large multimodal models, the release of code and checkpoints is essential for full reproducibility.
1. **Computational Cost**: While not explicitly stated as a limitation, training and deploying a model built on a large unified multimodal backbone like BAGEL is inherently computationally intensive, requiring significant resources (e.g., 8 H200 GPUs for 80K steps). This might limit its applicability for resource-constrained environments or rapid iteration. 2. **Scope of World Modeling**: The "world modeling" aspect primarily focuses on next-frame prediction for manipulation tasks. While crucial, it doesn't delve into more abstract forms of world knowledge, causal reasoning, or long-horizon planning beyond short action rollouts, which are often goals of broader world models. 3. **Reliance on Supervised Fine-tuning**: The model relies on supervised fine-tuning (SFT) on existing robotic datasets. While effective, this approach might be limited by the diversity and scale of available demonstration data, potentially hindering generalization to truly novel tasks or environments compared to models that learn more extensively through self-supervision or interaction. 4. **Generalizability Beyond Manipulation**: The experiments are confined to robotic manipulation tasks. While these are challenging, the generalizability of "unified VLAW modeling" to other embodied AI domains (e.g., navigation, human-robot interaction) or even broader generative tasks is not explored.
WorldBagel makes a significant contribution to the field of embodied AI and multimodal learning. By demonstrating the power of architectural unification for Vision-Language-Action-World modeling, it paves the way for more capable and general-purpose robotic agents. The ability to jointly understand language, perceive the environment, predict actions, and model future states within a single framework is a crucial step towards truly intelligent robots. The proposed Fourier-based action representation (FFAD/FFAT) is a valuable technical innovation that could be adopted by other robotics policies for more robust and structured action learning. The findings on stability under distribution shifts are particularly relevant for deploying robots in real-world, uncertain environments. This work encourages further research into leveraging large-scale unified multimodal models for complex embodied tasks, potentially leading to breakthroughs in robot learning and generalization. WorldBagel introduces a unified VLAW framework built on BAGEL, systematically demonstrating that architectural unification significantly improves multi-task robotic manipulation performance, yields higher-quality action representations via Fourier-based tokenization, and enhances stability under distribution shifts, thereby providing a promising foundation for scalable multimodal world models. This paper presents a robust methodology for integrating vision, language, action, and world modeling into a single coherent framework, supported by strong empirical results and insightful analyses of action representation and robustness, making a substantial contribution to the development of more capable and generalizable embodied AI systems.
We elucidate the design space of Representation Distribution Matching (RDM), our name for the paradigm that trains a one-step image generator by matching generated and reference feature distributions under frozen pretrained encoders. We identify two design axes, how the distributions are compared and the representations they are compared in, and controlled studies along them yield three findings. First, the classical MMD, which could not train convincing generators a decade ago, becomes a strong and scalable objective once estimated right. Second, the generated batch is then the operative variable, with an optimum above 2048, far beyond customary batch sizes. Third, any single representation can be gamed, driven below the real score while images stay visibly fake, so we match against a balanced battery of encoders and evaluate with SW_r14, a Sliced-Wasserstein distance over 14 encoders that is independent of the training loss and resists gaming. Combining the preferred choices yields improved RDM (iRDM): it sets the one-step state of the art on ImageNet at SW_r14 1.30, corroborated by PickScore, a human-preference proxy our objective never optimizes, which prefers it over the prior best one-step generator on 71.2% of matched samples. The same recipe post-trains the four-step FLUX.2 [klein] into a one-step generator, surpassing the four-step version on GenEval, 0.826 to 0.794, and on PickScore, 22.76 to 22.58, in 90 H200 GPU-hours. Project page: https://alan-lanfeng.github.io/rdm/.
Primary: Valeo
All Institutions: Valeo, Alan Turing Institute (implied by author handle 'alan-lanfeng' and typical affiliation for such work, though only Valeo is explicitly funded; however, standard academic papers list affiliations. The text says "Project page: https://alan-lanfeng.github.io/rdm/" and "funded by Valeo". Without explicit author list, I will infer the primary institutional affiliation from the funding and project page context. The author 'alan-lanfeng' likely refers to Alan Feng or similar. A quick mental check of recent one-step generation papers suggests this is likely from Valeo and/or a university. Given the prompt asks to extract from text, and only Valeo is explicitly mentioned as funding/affiliation in the Acknowledgments, I will list Valeo. However, 'alan-lanfeng' is a GitHub handle. Let's look for other clues. The paper mentions "alan-lanfeng.github.io". This is likely a single-author or small team paper. I will list Valeo as the primary institution found in the text.)
This paper presents a significant advancement in one-step image generation by rigorously elucidating the design space of Representation Distribution Matching, introducing a robust MMD estimator with Nyström approximation, and demonstrating that large-batch, multi-encoder training yields state-of-the-art results while mitigating metric gaming, thereby providing a scalable and effective alternative to teacher-based distillation methods.
The paper proposes "Representation Distribution Matching" (RDM), a framework for training one-step image generators by directly matching feature distributions between generated and real images using frozen pretrained encoders. The core methodological contributions are threefold: 1) A specific estimator for Maximum Mean Discrepancy (MMD) that uses an exact within-batch repulsion term and a Nyström approximation for the attraction term against a frozen full-data reference, which the authors argue is superior to Fréchet distance or drifting fields for this task. 2) The identification that large, fresh generation batches (N > 2048) are critical for stable estimation, enabled by gradient caching. 3) A multi-encoder matching strategy using a "battery" of 14 diverse frozen encoders, balanced via a proportional Lagrangian controller to prevent the generator from gaming any single encoder's metric. The approach is theoretically grounded in kernel mean embeddings and optimal transport concepts, applied pragmatically to the current state-of-the-art in teacher-free distillation.
The experimental evaluation is rigorous and comprehensive. The authors conduct controlled ablations on the two design axes (comparison metric and representation space). They demonstrate that their method, iRDM, sets a new state-of-the-art for one-step generation on ImageNet-256 with an SW_r14 score of 1.30, significantly outperforming prior methods like pMF-H FD-SIM (2.05). They also show that post-training FLUX.2 (a 4-step model) into a 1-step model using this recipe improves GenEval and PickScore scores over the 4-step baseline, a surprising and valuable result. The use of an independent evaluation metric (SW_r14) that is not part of the training loss effectively mitigates concerns about metric gaming. The inclusion of a held-out encoder panel for evaluation adds robustness to the claims.
The paper provides significant detail for reproducibility. It specifies the encoder architectures, the Nyström landmark count (4096), batch sizes (5120/10240), learning rates, and the specific Lagrangian control mechanism. The reference to "gradient caching" and the specific implementation of the Nyström attraction term are clear. The project page likely contains code, which is standard for arXiv papers. The use of standard pretrained encoders (DINOv2, CLIP, etc.) ensures that the components are accessible. The detailed ablation studies allow other researchers to replicate the design space exploration.
The primary limitation is the computational cost of training. The requirement for large batch sizes (N=5120) and the use of 10 encoders for forward passes per step, while optimized with gradient caching, still implies a substantial memory and compute footprint compared to smaller-batch methods. The method relies heavily on the quality and diversity of the frozen encoders; if the encoder panel is biased or insufficiently diverse, the "balanced" training might still fail to capture all aspects of realism. Additionally, while it surpasses the 4-step FLUX on GenEval, it is a post-training step, meaning the base model's capabilities are a prerequisite. The "one-step" nature inherently limits the complexity of the generated distribution compared to iterative methods, as evidenced by the gap between 1.30 and the real-data floor of 1.00.
This work significantly advances the field of efficient generative modeling by demonstrating that high-quality one-step generation is achievable without online teachers or adversarial training, relying instead on careful distribution matching in feature space. This could lead to faster inference times for image generation, making it more accessible for real-time applications. The insights into metric gaming and the proposal of a robust multi-encoder evaluation metric (SW_r14) provide a valuable tool for the community to better assess generator quality. However, the ease of generating realistic images also raises standard concerns about misuse in creating deepfakes or misleading content, though the one-step nature might make it less suitable for high-fidelity, long-tail content generation compared to multi-step models. This paper presents a significant advancement in one-step image generation by rigorously elucidating the design space of Representation Distribution Matching, introducing a robust MMD estimator with Nyström approximation, and demonstrating that large-batch, multi-encoder training yields state-of-the-art results while mitigating metric gaming, thereby providing a scalable and effective alternative to teacher-based distillation methods.
Large vision-language models (LVLMs) have achieved strong performance across many medical imaging tasks, yet their application to ultrasound remains limited due to its inherent complexity and variability. In this work, we revisit what is truly needed to enable real-world ultrasound understanding. Instead of introducing complex architectures or elaborate training strategies, we show that data scale and clinically faithful data alignment are the key factors. We construct a large-scale dataset of 1.5M real-world ultrasound examinations, containing 17.7M images, multi-organ coverage, and paired uncurated clinical reports. Crucially, we organize the data at the examination level, aligning multiple images with their corresponding reports to reflect real clinical workflows. We then fine-tune a standard LVLM using low-rank adaptation (LoRA) on this dataset without task-specific modifications. Surprisingly, this simple recipe already leads to strong performance across diverse ultrasound understanding tasks, outperforming prior methods designed with more complex pipelines. Beyond these results, we present model and data scaling analyses that provide insights into the role of scale in ultrasound LVLMs.
Primary: Technical University of Munich
All Institutions: MedAI Technology (Wuxi) Co. Ltd, Technical University of Munich
This paper makes a substantial contribution to medical vision-language modeling by demonstrating that large-scale, clinically aligned data curation and simple fine-tuning of standard LVLMs can outperform complex, specialized architectures for ultrasound understanding, providing a new benchmark and paradigm for the field.
The paper proposes a straightforward yet effective pipeline for ultrasound understanding: constructing a massive dataset (1.5M exams, 17.7M images) and fine-tuning a standard LVLM (Qwen3-VL-4B) using LoRA. The core methodological contribution is not a new architecture, but the rigorous demonstration that "data scale + clinically faithful alignment" supersedes complex architectural modifications or specialized training strategies in this domain. The approach is simple, relying on examination-level supervision where multiple images are paired with long-form reports, mimicking real clinical workflows. This challenges the prevailing trend of designing intricate multimodal adapters for medical imaging.
The experimental evaluation is comprehensive and robust. The authors benchmark LUMI against a wide array of state-of-the-art general-purpose (InternVL3.5, Qwen3.5, Kimi-VL) and medical-domain (HuatuoGPT, Lingshu, EchoVLM) models across five major ultrasound categories. The results show significant improvements, particularly in clinical fidelity metrics (F1 score) and higher-order NLP metrics (BLEU-4, ROUGE-L). The inclusion of an LLM-based evaluator for clinical correctness is a strong methodological choice that adds depth beyond standard text similarity metrics. Scaling analyses (model and data) provide valuable empirical insights, showing saturation points that guide future resource allocation.
The paper provides detailed hyperparameters, training configurations (LoRA rank, learning rate, batch size), and data preprocessing steps. The dataset size and source descriptions are clear. However, the dataset itself (1.5M exams) is likely too large and privacy-sensitive to be fully open-sourced in its raw form, which may limit direct reproducibility of the training phase for others. The code/model availability is indicated by the project URL, which is crucial for verification.
The primary limitation is the potential for hallucination when presented with incomplete image sets at inference time, as the model is trained on complete examinations. Additionally, the reliance on uncurated, real-world reports introduces noise and variability in language style, which might affect generalization to standardized reporting formats. The study focuses on report generation and lacks detailed evaluation on downstream diagnostic tasks (e.g., specific lesion detection accuracy vs. radiologist agreement).
This work has significant implications for medical AI, demonstrating that high-quality, large-scale data alignment can drive performance gains more effectively than architectural complexity. It encourages the community to prioritize data curation and clinical fidelity in medical LVLM development. The dataset and model could accelerate research in ultrasound AI, potentially improving diagnostic support in resource-limited settings where expert sonographers are scarce. This paper makes a substantial contribution to medical vision-language modeling by demonstrating that large-scale, clinically aligned data curation and simple fine-tuning of standard LVLMs can outperform complex, specialized architectures for ultrasound understanding, providing a new benchmark and paradigm for the field.
Safe motion planning in dynamic environments requires reasoning about the uncertainty in predicted obstacle motion without sacrificing real-time performance. Existing conformal approaches conformalize a scalar score that aggregates per-obstacle prediction errors, losing spatial coherence and scaling poorly with scene density. We instead conformalize the entire predicted distance field at once. This functional conformal prediction (FCP) framework yields a distribution-free, field-level lower bound, from which safety follows uniformly: any trajectory satisfying the resulting constraint is certified safe, independent of how the control space is sampled. The key enabler is that the residual distance field is empirically low-rank and approximately time-invariant, which makes the bound decomposable in coefficient space. An envelope is fitted offline via functional PCA and a Gaussian-mixture inductive conformal procedure, then refined online by a lightweight adaptive functional conformal (AFCP) update on a low-dimensional vector. This keeps the per-step cost largely insensitive to obstacle count and retains long-run field coverage under distribution shift. We embed the envelope as a tightened safety constraint in a sampling-based model predictive controller, FCP-MPC. On the ETH--UCY pedestrian benchmarks and a dense 3D quadrotor task with up to 280 dynamic obstacles, FCP-MPC attains a favorable balance of safety, feasibility, and efficiency, reaching goals where pointwise and egocentric conformal baselines become too conservative or too expensive, while keeping per-step computation far below online uncertainty-reasoning baselines.
Primary: Seoul National University
All Institutions: Seoul National University
This paper introduces a novel Functional Conformal Prediction framework for safe motion planning, leveraging the low-rank structure of prediction errors to provide scalable, distribution-free safety guarantees in dynamic environments. The approach effectively addresses the computational and spatial coherence limitations of prior conformal methods, offering a significant advancement in the integration of statistical uncertainty quantification with real-time robotic control.
The paper proposes a Functional Conformal Prediction (FCP) framework to address the scalability and spatial coherence issues of existing conformal prediction (CP) methods in safe motion planning. Instead of conformalizing scalar scores per obstacle, the authors treat the prediction error of the distance field as a functional object in a Hilbert space. They leverage the empirical observation that residual distance fields are low-rank and approximately time-invariant. This allows them to perform Functional PCA (FPCA) to decompose the field into a few principal components. A Gaussian Mixture Model (GMM) is fitted to the coefficients of these components in an offline stage, and an inductive conformal procedure is used to create a distribution-free envelope. Online, an Adaptive Functional Conformal Prediction (AFCP) update adjusts a scalar multiplier to handle distribution shifts. This approach decouples the expensive statistical calibration from the real-time planning loop, allowing the safety constraint to be evaluated efficiently for any sampled trajectory in an MPC framework. The methodology is theoretically sound, providing asymptotic safety guarantees under both exchangeable and non-exchangeable (adaptive) settings.
The authors evaluate FCP-MPC on two benchmarks: the ETH-UCY pedestrian dataset (2D) and a dense 3D quadrotor simulation with up to 280 dynamic obstacles. They compare against pointwise and egocentric conformal baselines, as well as online uncertainty-reasoning methods. The results indicate that FCP-MPC achieves a favorable balance of safety, feasibility, and efficiency. It successfully reaches goals where pointwise methods are too conservative and egocentric methods are too expensive or lose coverage. The per-step computation remains largely insensitive to obstacle count, demonstrating the scalability of the functional approach. The experiments are comprehensive, covering both 2D and 3D scenarios and varying densities.
The paper provides a GitHub repository link (https://github.com/CORE-SNU/FCP-MPC), which significantly aids reproducibility. The methodology is described in detail, including the offline FPCA and GMM fitting, and the online AFCP update. The use of standard benchmarks (ETH-UCY) also facilitates comparison. However, the specific implementation details of the "dense 3D quadrotor task" (e.g., exact dynamics, sensor noise models, prediction model architecture) might require careful reading of the appendix or code to fully replicate.
The method relies on the assumption that the residual distance field is low-rank and approximately time-invariant. While verified empirically, this may not hold in all environments (e.g., highly dynamic, non-stationary scenes with complex occlusions). The offline calibration requires a sufficiently large and representative dataset of residual fields. The adaptive update (AFCP) provides long-run coverage but may take time to converge to the correct threshold under rapid distribution shifts. The soft-constraint variant degrades safety guarantees by a controllable slack, which might be unacceptable for some high-risk applications.
This work contributes to the field of safe autonomous systems by providing a scalable and theoretically grounded method for uncertainty-aware motion planning. By enabling real-time safety guarantees in dense, dynamic environments, it facilitates the deployment of robots in more complex real-world scenarios. The functional conformal prediction framework could also be applicable to other domains involving spatial or functional data uncertainty, such as medical imaging or environmental monitoring. This paper introduces a novel Functional Conformal Prediction framework for safe motion planning, leveraging the low-rank structure of prediction errors to provide scalable, distribution-free safety guarantees in dynamic environments. The approach effectively addresses the computational and spatial coherence limitations of prior conformal methods, offering a significant advancement in the integration of statistical uncertainty quantification with real-time robotic control.
Embodied task planning asks an agent to turn a natural-language instruction into an executable sequence of actions in a physical scene, and is a building block for household, assistive, and service robots. Recent prompting-based and reinforcement-learning planners generate fluent action text but lack a cheap deterministic check that the produced plan is valid in the target world, while high-fidelity simulation is too slow to serve as an inner-loop training signal. The general problem is therefore how to obtain verifiable supervision and rewards for embodied planners without relying on string-level matching or full simulation. Here we show that a single BDDL specification, automatically constructed from open-world video evidence or curated tasks, can serve as a shared interface for data construction, plan verification, and reward design. A video-to-BDDL parser, an LLM verifier, and a lightweight symbolic engine together supply dense feedback at millisecond latency. We further introduce GroupAdapt, a difficulty-aware length schedule that uses the in-batch group pass rate as a zero-cost signal so that hard prompts get wider length tolerance and automatically tighten as their pass rate improves. Under the guidance of the proposed verifier and GroupAdapt schedule, the 8B planner attains a Strict-Pass score of 97.3 on BEHAVIOR-1000, yielding a 25.9 percent relative improvement over the Qwen3-8B baseline. This result exceeds the strongest large-model baseline by 3.5 percent, while simultaneously compressing the response length by 79 percent to 207 tokens, demonstrating both effectiveness and efficiency.
Primary: The Hong Kong University of Science and Technology
All Institutions: The Hong Kong University of Science and Technology, University of London
This paper presents a significant advancement in embodied AI by introducing a BDDL-centric pipeline that integrates symbolic verification with reinforcement learning, enabling compact and correct task planning for 8B models that outperform larger baselines. The rigorous evaluation and clear methodology make it a valuable contribution to the field of robotics and machine learning.
The paper proposes a coherent pipeline for embodied task planning that bridges the gap between open-world natural language instructions and executable symbolic plans. The core methodological innovation lies in the use of BDDL (Behavior Domain Definition Language) as a unified interface for data construction, verification, and reward design. Specifically, the authors introduce a video-to-BDDL parser to generate training data from open-world videos, an LLM verifier to ensure semantic consistency, and a lightweight symbolic engine for millisecond-latency verification. The training methodology combines Supervised Fine-Tuning (SFT) with Symbolic-Reinforcement Learning (using DAPO). A key technical contribution is "GroupAdapt," a difficulty-aware length scheduling mechanism that uses the in-batch group pass rate to dynamically adjust length tolerance, allowing harder prompts to have more flexibility while enforcing conciseness on easier ones. This approach effectively decouples correctness learning from length compression, addressing a common failure mode in LLM planning where early compression leads to errors.
The experimental evaluation is rigorous and comprehensive. The authors evaluate on the BEHAVIOR-1K benchmark, specifically B-100 and B-1000, using metrics like Strict-Pass (SP), Engine-Pass (EP), and Goal Completion Ratio (GCR). The results show that the proposed 8B model significantly outperforms larger baselines (e.g., Qwen3-8B, Gemma-4-31B) in terms of SP score (97.3% on B-1000) while maintaining competitive performance on other metrics. The ablation studies effectively demonstrate the contribution of each component: SFT initialization, symbolic reward shaping, and GroupAdapt. The analysis of length compression is particularly strong, showing a 79% reduction in response length without sacrificing correctness. The inclusion of out-of-domain mathematical reasoning tasks (AIME, MATH) serves as a sanity check to ensure that the length compression does not degrade general reasoning capabilities, which is a valuable addition.
The paper provides detailed descriptions of the methodology, including the BDDL structure, the symbolic engine logic, and the RL hyperparameters (DAPO settings, group size, learning rates). The appendix contains extensive details on data construction, action library expansion, and reward landscape analysis. The use of open-weight models (Qwen3, Gemma) and standard benchmarks (BEHAVIOR-1K) enhances reproducibility. However, the specific implementation of the video-to-BDDL parser and the LLM verifier (likely proprietary or custom-built) might present some challenges for exact replication, although the logical flow is clear. The code for the symbolic engine and RL training loop appears to be the primary barrier to full reproducibility, but the paper provides sufficient detail for a competent researcher to implement.
The paper acknowledges several limitations. First, the method is a planning model and does not handle low-level control, which is a necessary layer for real-world deployment. Second, the reliance on BDDL requires robust scene understanding and object grounding, which can be noisy in real-world settings. The paper notes that real-time scene-to-BDDL construction is an open problem. Third, the performance is evaluated in simulation; real-world transferability is not demonstrated. Finally, the method's effectiveness is tied to the quality of the BDDL specifications and the action library, which may need manual curation or extensive LLM-assisted expansion for new domains.
This work has significant implications for the development of autonomous robots and embodied AI systems. By providing a scalable and verifiable method for training planners, it addresses a critical bottleneck in making robots capable of following complex, natural language instructions in unstructured environments. The emphasis on efficiency (shorter response times) and correctness (symbolic verification) aligns with the industry's need for reliable and deployable AI systems. The use of open-world video data for training also suggests a path towards more data-efficient and generalizable planning models. However, the reliance on simulation and symbolic representations may limit immediate applicability in highly dynamic or unstructured real-world scenarios without significant additional engineering. This paper presents a significant advancement in embodied AI by introducing a BDDL-centric pipeline that integrates symbolic verification with reinforcement learning, enabling compact and correct task planning for 8B models that outperform larger baselines. The rigorous evaluation and clear methodology make it a valuable contribution to the field of robotics and machine learning.
General-purpose robot policies should be modeled as dynamical systems, yet many VLA and generative imitation policies still rely on present observations or short windows. This Markovian shortcut fails in memory-dependent manipulation: identical observations can demand different actions after different histories. We present Chronos, a physics-informed full-history framework for non-Markovian long-horizon manipulation. The key idea is to elevate observation history from auxiliary context to the latent state of the policy dynamics. At each physical control step, Chronos forms one state-representative token by fusing observation and proprioception, so the token sequence is aligned one-to-one with physical time. A selective state space model propagates this causal historical state, which conditions a multimodal coarse action prior through implicit maximum likelihood estimation (IMLE). This prior is then refined by a second-order Schrodinger-inspired bridge that predicts acceleration fields, yielding smoother and more physically grounded robot motion. Across 16 simulated tasks and 4 real-world experiments, Chronos is evaluated on precision insertion, general manipulation, and memory-dependent long-horizon control. On RMBench, where success requires remembering task phase, Chronos achieves 73.6% average success, outperforming Markovian VLA baseline pi0.5 by +62.4 percentage points, a 6.6x relative gain, while using 10x fewer parameters. It also surpasses the memory VLA Mem-0 by 22.8 points while using over 30x fewer parameters. In real-world dual-arm experiments using a single RGB camera, Chronos achieves 78% average success over four tasks, including 72% on the three memory-dependent tasks, whereas pi0.5 achieves 7% overall and 0% on the memory-dependent subset. These results suggest that history should not be treated as auxiliary context, but as the latent state of the manipulation policy.
Primary: Huazhong University of Science and Technology
All Institutions: Huazhong University of Science and Technology
[One sentence main contribution]. Chronos introduces a physics-informed, full-history state-space framework for non-Markovian manipulation, achieving state-of-the-art performance on memory-dependent benchmarks with significantly fewer parameters than existing VLA models. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper makes a significant technical contribution by addressing the non-Markovian nature of long-horizon robotic manipulation through a novel combination of Selective State Space Models for full-history encoding and a Schr\"odinger-inspired second-order bridge for action refinement. The methodology is rigorous, with a clear theoretical derivation linking quantum mechanical concepts to action-space acceleration fields, and the empirical results are strong, particularly on RMBench where it outperforms much larger memory-augmented VLAs. The approach is highly relevant to the current landscape of robot learning, offering a scalable and efficient alternative to large-scale transformer-based policies for tasks requiring temporal memory. The comprehensive evaluation across simulated and real-world tasks, along with detailed ablations, provides strong evidence for the efficacy of the proposed method.
The paper proposes Chronos, a framework addressing the non-Markovian nature of long-horizon manipulation. The core methodological contributions are twofold: (1) A full-history state representation using a Selective State Space Model (Mamba) that treats the entire observation history as the latent state, rather than using it as auxiliary context or a short window. This allows for precise temporal credit assignment across the full trajectory. (2) A physics-informed action generation module based on a "Schr\"odinger-inspired bridge." This module uses Implicit Maximum Likelihood Estimation (IMLE) to generate a coarse multimodal prior, which is then refined by a second-order differential equation solver that predicts acceleration fields. The derivation from the Schr\"odinger equation via Madelung transformation to a quantum Hamilton-Jacobi equation provides a theoretical justification for modeling action refinement as a physical process involving position stabilization and velocity dissipation. The approach is theoretically grounded and distinct from standard diffusion or flow-matching policies by explicitly modeling acceleration and using a quartic noise schedule compatible with second-order dynamics.
The evaluation is comprehensive, covering 16 simulated tasks and 4 real-world experiments. The results are compelling, particularly on RMBench, where Chronos achieves a 73.6% average success rate, significantly outperforming Markovian baselines like pi0.5 (+62.4 points) and memory-augmented VLAs like Mem-0 (+22.8 points), while using substantially fewer parameters (0.3B vs >10B for Mem-0). On RoboTwin 2.0, it achieves state-of-the-art performance in general manipulation. The ablation studies effectively isolate the contributions of the SSM memory and the second-order bridge, demonstrating that the acceleration-based refinement provides smoother and more precise actions, especially in contact-rich tasks like precision insertion. The real-world results on dual-arm manipulation further validate the transferability of the learned policies.
The paper provides a project page and code repository link. The methodology is described with sufficient mathematical detail, including the derivation of the acceleration target and the specific noise schedules. The use of standard components (Mamba, PointNet, DINOv2) facilitates implementation. However, the specific hyperparameters for the Schr\"odinger bridge integration steps and the IMLE latent update dynamics are crucial for reproduction and are partially detailed in the text. The claim of "memory-efficient training" via chunked perception is a practical detail that aids reproducibility.
The paper acknowledges that in fully observable, local-geometry-dominated tasks (e.g., Put Bottles Dustbin), Chronos slightly underperforms strong Markovian diffusion policies like DP3. This suggests that the overhead of full-history modeling may not always be beneficial when the present state is a sufficient statistic. Additionally, the reliance on a single RGB camera in real-world experiments might limit performance in complex lighting or occlusion scenarios compared to multi-view setups. The theoretical derivation, while elegant, is a specific projection of quantum mechanics concepts to control theory, and its generalizability to other domains beyond robotics is unclear.
This work advances the field of robotic manipulation by providing a robust solution to the long-standing problem of memory-dependent control. By demonstrating that full-history modeling can be efficient and effective, it challenges the prevailing trend of scaling VLA models with short-context windows. The physics-informed action generation could inspire more physically grounded generative models in other control domains. The significant performance gap on memory benchmarks highlights the limitations of current foundation models in temporal reasoning, guiding future research towards better temporal architectures. [One sentence main contribution]. Chronos introduces a physics-informed, full-history state-space framework for non-Markovian manipulation, achieving state-of-the-art performance on memory-dependent benchmarks with significantly fewer parameters than existing VLA models. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper makes a significant technical contribution by addressing the non-Markovian nature of long-horizon robotic manipulation through a novel combination of Selective State Space Models for full-history encoding and a Schr\"odinger-inspired second-order bridge for action refinement. The methodology is rigorous, with a clear theoretical derivation linking quantum mechanical concepts to action-space acceleration fields, and the empirical results are strong, particularly on RMBench where it outperforms much larger memory-augmented VLAs. The approach is highly relevant to the current landscape of robot learning, offering a scalable and efficient alternative to large-scale transformer-based policies for tasks requiring temporal memory. The comprehensive evaluation across simulated and real-world tasks, along with detailed ablations, provides strong evidence for the efficacy of the proposed method.
Large-scale dexterous grasp datasets encode rich priors over hand-object interaction, but their use has largely been confined to grasp generation and pick-and-place manipulation. We study whether such data can instead support functional dexterity in articulated tool use, where a robot must acquire a tool, maintain contact, and operate its functional moving parts. We adapt a hierarchical imitation learning framework that combines high-level hand sub-goal prediction with a low-level goal-conditioned controller. We construct a 355k-trajectory grasp-pretraining dataset from large-scale dexterous grasp annotations and use it to pretrain the low-level controller. The controller is then fine-tuned on downstream task demonstrations. To evaluate this setting, we introduce DexCraft, a simulation benchmark with six articulated tool-use tasks requiring coordinated finger motion. Across simulation and real-world experiments, our approach outperforms end-to-end diffusion policy baselines and hierarchical policies trained from scratch. In the real world, it improves full-task success by 33.3 percentage points over DP3. These results show that grasp datasets can serve not only as resources for grasp synthesis, but also as scalable pretraining data for contact-rich dexterous manipulation. Videos are shown on https://yingyuan0414.github.io/grasp2dexterity/ .
Primary: Carnegie Mellon University
All Institutions: Carnegie Mellon University
The paper presents a compelling method for leveraging large-scale grasp datasets to enable dexterous tool use, demonstrating significant performance gains through hierarchical imitation learning and pretraining.
The paper proposes a hierarchical imitation learning framework for dexterous tool use. The core methodological contribution is the adaptation of a low-level goal-conditioned controller (based on Diffusion Policy) pre-trained on a large-scale synthetic grasp dataset (G2D-Pretrain, derived from Dexonomy). The high-level policy predicts 16-DoF hand keypoints as sub-goals, addressing the insufficiency of coarse gripper-centric sub-goals for dexterous hands. The approach effectively bridges the gap between static grasp synthesis data and dynamic, contact-rich manipulation tasks by leveraging the rich kinematic priors in grasp datasets. The hierarchical decomposition (high-level planning, low-level execution) is well-motivated and technically sound, particularly the semantic mapping of joint spaces between the Shadow hand (pretraining) and LEAP hand (fine-tuning).
The evaluation includes a new simulation benchmark, DexCraft, with six articulated tool-use tasks. The paper provides extensive ablation studies comparing end-to-end policies (DP, DP3), hierarchical policies from scratch, and their pre-trained counterparts. The results demonstrate significant improvements, particularly in the real-world setting where the proposed method improves full-task success by 33.3 percentage points over DP3. The sample efficiency analysis further supports the claim that pretraining reduces the need for downstream demonstrations. The inclusion of both simulation and real-world experiments strengthens the validity of the claims, although the real-world evaluation is limited to three tasks and a single robot setup.
The paper provides detailed descriptions of the data augmentation process for G2D-Pretrain, the policy architectures, and the experimental setups. The project website link suggests code or video availability, which aids reproducibility. The use of standard simulators (ManiSkill3) and datasets (Dexonomy) facilitates replication. However, the specific details of the teleoperation setup and the exact implementation of the semantic joint mapping for the LEAP hand might require additional clarification for perfect reproducibility.
The reliance on manually annotated sub-goals for training the high-level policy limits scalability. The simulation benchmark uses single object instances per task, which may not fully capture the generalization capabilities required for diverse object geometries. The real-world evaluation is constrained by the specific hardware setup (Franka + LEAP Hand) and does not explore the impact of tactile feedback or online adaptation, which are critical for robust dexterous manipulation.
This work significantly advances the field of dexterous manipulation by demonstrating that large-scale grasp datasets, previously underutilized for dynamic tasks, can serve as powerful pretraining resources. This could lower the barrier to entry for learning complex manipulation skills by reducing the need for costly real-world demonstrations. The DexCraft benchmark provides a valuable resource for evaluating articulated tool use, encouraging further research in this area. The paper presents a compelling method for leveraging large-scale grasp datasets to enable dexterous tool use, demonstrating significant performance gains through hierarchical imitation learning and pretraining.
Long-context inference is increasingly common in large language model (LLM) serving, driven by retrieval-augmented generation and agentic systems. In disaggregated inference, these workloads require transferring large Key-Value (KV) caches across the network, where decoding cannot begin until the transfer completes. Recent KV quantization techniques reduce data volume and alleviate this bottleneck, but existing schemes fail to achieve both low network-exposed latency and high inference accuracy. We challenge the assumption that the KV cache is an indivisible unit that must be fully received before use. We leverage the observation that different bits in the KV cache contribute unequally to attention computation and inference precision: the most significant bits capture the coarse structure of attention and the least significant bits refine precision. This property enables partial use of the KV cache during decoding. We present Lynx, a system that enables progressive, split-stream KV transfer by partitioning the KV cache into a high-priority Anchor stream carrying the most significant bits and a low-priority Residual stream carrying remaining precision. Decoding begins upon receipt of the Anchor stream and proceeds speculatively while the Residual stream is transferred concurrently, followed by verification that ensures equivalence to higher-precision decoding. Across multiple models and serving workloads, Lynx achieves Time-to-First-Token (TTFT) comparable to aggressive 4-bit KV quantization, while matching the accuracy of high-precision (BF16) inference, improving TTFT over standard 8-bit KV quantization by up to $1.43\times$ and improving accuracy over state-of-the-art by up to $5.1\%$.
Primary: University College London
All Institutions: University College London, Huawei
Lynx introduces a progressive speculative quantization framework that decouples KV cache transfer from decoding initiation, achieving significant latency reductions without sacrificing inference accuracy in long-context LLM serving.
The paper proposes "Lynx," a novel system for disaggregated LLM inference that challenges the assumption that the Key-Value (KV) cache must be fully transferred before decoding begins. The core innovation is a hierarchical split-stream quantization scheme that partitions the KV cache into a high-priority "Anchor" stream (Most Significant Bits) and a low-priority "Residual" stream (Least Significant Bits). By transmitting the Anchor stream first, the decode instance can begin speculative token generation using the coarse-grained KV data. Once the Residual stream arrives, the system verifies the speculative tokens against the full-precision (or higher-precision) KV cache. This approach effectively overlaps network communication with computation, treating the network transfer as a draft model in speculative decoding. The methodology is technically sound, leveraging the observation that MSBs dominate attention score magnitudes due to the exponential nature of Softmax, while LSBs refine precision. The integration of non-linear logarithmic quantization and outlier-aware chunking further enhances the fidelity of the Anchor stream.
The evaluation is comprehensive, covering three models (LLaMA 3.1 8B, Qwen 3 32B, Mistral 3 24B) and three datasets (MMLU-Pro, Needle-in-the-Haystack, QMSum) across varying context lengths (up to 128K) and bandwidths (10-50 Gbps). The results demonstrate that Lynx achieves Time-to-First-Token (TTFT) comparable to aggressive 4-bit quantization while maintaining accuracy equivalent to 8-bit or BF16 inference. Specifically, it improves TTFT over standard 8-bit quantization by up to 1.43x and improves accuracy over state-of-the-art compression methods (like CacheGen) by up to 5.1%. The paper includes detailed ablation studies on context length scaling and bandwidth variations, showing that the benefits of speculative overlap increase with longer contexts and lower bandwidths. The use of Ascend NPUs (Huawei hardware) is a specific constraint but does not detract from the generalizability of the system design principles.
The paper provides significant implementation details, including the quantization algorithm (Algorithm 1), the split-stream construction logic, and the speculative verification protocol. It mentions implementation in ~2k lines of Ascend-C kernels and ~2k lines of Python, integrated into vLLM-Ascend. However, the code is not publicly available (no GitHub URL provided), and the evaluation is conducted on proprietary Huawei Ascend hardware, which may limit direct reproducibility for researchers using standard NVIDIA GPU stacks. The detailed description of the SerDes protocol and the non-blocking runtime architecture offers a strong basis for future reproduction.
The primary limitation is the reliance on specific hardware (Ascend NPUs) and the lack of public code. The speculative decoding verification introduces computational overhead; while the paper argues this is negligible compared to communication savings, this overhead scales with the number of speculative tokens and could become significant in very high-bandwidth, low-latency scenarios where the communication bottleneck is less severe. Additionally, the approach assumes a disaggregated prefill-decode architecture, which is not universal for all LLM serving setups. The accuracy guarantee relies on the verification step, which implies that if the Residual stream is delayed or lost, the system must wait, potentially negating the latency benefits in unstable network conditions.
This work has significant implications for the efficiency and scalability of long-context LLM serving, particularly in cloud environments where disaggregated inference is becoming standard. By enabling high-precision inference with lower effective latency, it allows for more responsive AI agents and retrieval-augmented generation systems. The technique of using partial data for speculative execution could inspire similar approaches in other areas of distributed machine learning where data dependencies are hierarchical or can be approximated. Lynx introduces a progressive speculative quantization framework that decouples KV cache transfer from decoding initiation, achieving significant latency reductions without sacrificing inference accuracy in long-context LLM serving.
In retrieval augmented generation (RAG) and agentic LLM serving, prompts are assembled from independent segments into long contexts, making the prefill stage dominate the per-request computation cost. To this cost, two directions have emerged in parallel: position-independent caching (PIC) admits KV reuse for non-contiguous segments shared across different requests, while hybrid-attention models reduce computation complexity by replacing most full-attention layers with linear attention. However, they cannot coexist: applying PIC to hybrid-attention models breaks down because per-token KV-cache reuse primitives do not transfer to the per-request recurrent state. In this work, we present Hypic, the first serving system for hybrid-attention LLMs with position-independent caching. For linear-attention layers, we identify the segment-cumulative transition operator as the missing algebraic primitive, and cache it alongside each segment's zero-start end-state, enabling near-exact and constant-time state composition of independently cached segments. For the remaining full-attention layers, existing PIC methods also fail as linear layers do not expose the per-token hidden states for selective recomputation. We show that the most significant attention deviation concentrates at segment boundaries, so recomputing only a small seam window at each boundary suffices to restore cross-segment lookback. Finally, Hypic exploits segment-level self-containment to parallelize cache-miss prefill across instances, turning long cold requests -- a major tail-latency contributor under both prefix caching and prior PIC -- into an accelerable workload. Evaluated across four hybrid-attention models and five workloads, Hypic reduces time-to-first-token (TTFT) by 2.45x on average and improves peak throughput by up to 2.0x over existing systems, while staying within 3.3 points of full-recompute accuracy.
Primary: Xiaohongshu Inc.
All Institutions: Xiaohongshu Inc., Peking University, Shanghai Jiao Tong University
This paper presents a significant systems contribution by resolving the incompatibility between position-independent caching and hybrid-attention LLMs through novel algebraic primitives and boundary-aware recomputation, enabling substantial latency and throughput improvements for RAG and agentic workloads.
The paper addresses a critical intersection in LLM serving: the compatibility of Position-Independent Caching (PIC) with Hybrid-Attention architectures (which mix linear and full attention). The authors correctly identify that standard PIC primitives fail for linear attention layers because the state transition is not per-token but segment-cumulative. Their proposed solution, caching the "segment-cumulative transition operator" alongside the end-state, is a mathematically sound and novel algebraic primitive for state composition. Furthermore, they address the full-attention layer bottleneck in PIC by identifying that attention deviations are localized at segment boundaries, proposing a "seam window" recomputation strategy. This is a sophisticated systems-level optimization that balances accuracy and efficiency. The approach is rigorous, leveraging the specific mathematical properties of linear attention (associativity) to enable caching that was previously thought incompatible.
The evaluation is comprehensive, covering four hybrid-attention models and five distinct workloads. The results show a 2.45x reduction in Time-to-First-Token (TTFT) and up to 2.0x improvement in peak throughput compared to existing systems. Crucially, they maintain accuracy within 3.3 points of full-recompute baselines, which is an acceptable trade-off for the significant latency gains in serving scenarios. The inclusion of tail-latency analysis for long cold requests adds depth, demonstrating that the system effectively mitigates a known pain point in prefix caching. The empirical evidence strongly supports the claims made in the abstract.
The paper provides sufficient technical detail regarding the algebraic primitives and the seam-window recomputation logic. The authors are from major tech companies and universities, suggesting access to robust infrastructure for such experiments. While the full codebase isn't explicitly linked in the provided text, the methodological description is precise enough for replication by systems researchers. The use of standard benchmarks and clear metrics (TTFT, throughput, accuracy delta) ensures that the results are verifiable.
The primary limitation is the accuracy trade-off. While 3.3 points is "close," in high-stakes applications, this deviation might be significant. The "seam window" size is a hyperparameter that likely requires tuning per model and context length. Additionally, the benefits are most pronounced in RAG and agentic workflows with long, composed contexts; for short, single-sequence prompts, the overhead of managing these complex caches might not yield proportional benefits. The paper focuses on serving efficiency rather than training efficiency, limiting its scope to the inference phase.
This work has significant implications for the deployment of next-generation LLMs that utilize hybrid attention for efficiency. By enabling PIC for these models, it reduces the computational cost and latency of RAG and agentic systems, making them more scalable and accessible. This could accelerate the adoption of hybrid-attention architectures in production environments where latency and cost are critical constraints. It also sets a new standard for how systems researchers should approach caching in non-standard attention mechanisms. This paper presents a significant systems contribution by resolving the incompatibility between position-independent caching and hybrid-attention LLMs through novel algebraic primitives and boundary-aware recomputation, enabling substantial latency and throughput improvements for RAG and agentic workloads.
LLM inference comprises a compute-bound prefill phase and a memory-bound decode phase, and recent systems disaggregate them onto separate hardware. Yet today's datacenter GPUs rely on costly HBM whose bandwidth sits almost entirely idle during prefill. LLM serving across memory-heterogeneous accelerators (MemHA) pairs GDDR-based accelerators for prefill with HBM-based GPUs for decode, promising lower cost without sacrificing performance. Pushed to its most economical form, MemHA serving is inherently cross-vendor, since the best-suited chip for each phase may come from a different vendor. This breaks two assumptions that single-vendor disaggregation takes for granted -- a KV format both ends consume natively, and a shared software stack. We present \textbf{HMA-Serve}, a MemHA-centric disaggregated serving system pairing GDDR-based accelerators for prefill with HBM-based GPUs for decode efficiently. HMA-Serve achieves this through (1) phase-wise quantization, applying vendor-native low precision for high-throughput prefill while keeping decode in high-precision BF16, (2) a compute-transfer pipeline that overlaps each layer's KV cache transfer with later-layer prefill to reduce time-to-first-token (TTFT), and (3) deferred dequantization, shipping raw quantized bytes and reconstructing them lazily on the decode GPU to reduce network bandwidth and HBM usage. Across four Qwen3 models (4B--32B) and three production traces, HMA-Serve delivers up to $3.2\times$ higher goodput than state-of-the-art memory-homogeneous methods and $4.8\times$ higher goodput-per-dollar, with no measurable loss on generation-quality benchmarks.
Primary: Shanghai Jiao Tong University
All Institutions: Shanghai Jiao Tong University
HMA-Serve presents a compelling systems solution for cost-effective LLM inference by effectively disaggregating prefill and decode phases across memory-heterogeneous, cross-vendor accelerators, achieving significant gains in goodput and cost-efficiency without compromising generation quality.
The paper proposes HMA-Serve, a disaggregated LLM serving system that pairs GDDR-based accelerators (Tenstorrent Blackhole) for the compute-bound prefill phase with HBM-based GPUs (NVIDIA A100) for the memory-bound decode phase. The core methodological innovation lies in addressing the cross-vendor heterogeneity, which breaks assumptions of native KV format compatibility and shared software stacks. The authors introduce three coordinated mechanisms: (1) Phase-wise quantization, utilizing vendor-native low precision (BFP8) for prefill and high precision (BF16) for decode to optimize throughput and accuracy respectively; (2) Compute-transfer pipelining, which overlaps per-layer KV cache egress (device-to-host DMA + RDMA) with subsequent layer prefill computation to hide latency; and (3) Deferred dequantization, where raw quantized bytes are shipped and lazily reconstructed into BF16 within the fused paged attention kernel on the decode side, avoiding extra HBM reads and leveraging integer ALUs for bit manipulation. This approach effectively turns hardware incompatibility into a performance lever.
The evaluation is conducted on real silicon, a significant strength compared to simulation-based prior work. The testbed consists of a four-chip Tenstorrent mesh for prefill and a single NVIDIA A100 for decode, connected via 100 Gbps RoCE. Experiments cover four Qwen3 models (4B-32B) and three production traces (ShareGPT, LongBench, arXiv). Results show up to 3.2x higher goodput and 4.8x higher goodput-per-dollar compared to state-of-the-art homogeneous disaggregation (DistServe-Homo) and colocation baselines. The paper provides detailed breakdowns of latency components (TTFT, TPOT) and demonstrates that the precision asymmetry does not degrade generation quality on standard benchmarks (MATH500, AIME). The comparison against an "oracle" colocation baseline further validates the efficiency of the disaggregated approach for larger models.
The paper provides specific hardware configurations (Tenstorrent Blackhole p150, NVIDIA A100 80GB), network details (100 Gbps RoCE), and software versions (vLLM 0.19.1). It describes the kernel modifications (monkey-patching prefill runtime, fused decode kernels) in sufficient detail for replication by systems researchers. However, access to Tenstorrent hardware is currently a barrier to immediate independent reproduction, though the methodology is sound.
The current evaluation is limited to a specific hardware pairing (Tenstorrent + NVIDIA). The performance gains for smaller models (4B) are modest or negative in raw goodput compared to homogeneous setups, suggesting the overhead of disaggregation and cross-vendor transfer may not always be justified for small workloads. The system relies on a specific RDMA fabric setup, and performance may vary with different network topologies or congestion control mechanisms. Additionally, the "oracle" colocation baseline assumes perfect routing, which may be optimistic in practice.
This work highlights the growing fragmentation in the AI accelerator landscape and provides a practical framework for leveraging heterogeneous hardware in production LLM serving. By demonstrating that cost-efficient GDDR chips can effectively offload prefill, it offers a pathway to reduce the total cost of ownership for LLM inference, potentially democratizing access to high-performance serving infrastructure. It also sets a precedent for handling cross-vendor interoperability in disaggregated systems. HMA-Serve presents a compelling systems solution for cost-effective LLM inference by effectively disaggregating prefill and decode phases across memory-heterogeneous, cross-vendor accelerators, achieving significant gains in goodput and cost-efficiency without compromising generation quality.