Last 7 Days (August 01 – August 07, 2026)
We construct unambiguous DNFs having width $O(n)$ but $0$-certificate complexity $Ω(n^2)$. By utilizing the special structure of these DNFs, we prove a lifting theorem with a constant-sized gadget that lifts the DNF to a communication problem, while losslessly translating the separation in certificate complexity to a separation in communication complexity. This leads to an optimal refutation of the Alon-Saks-Seymour conjecture, as well as an optimal communication lower bound for the Clique versus Independent Set problem, improving the previous results of Balodis, Ben-David, Göös, Jain and Kothari (FOCS 2021, SICOMP 2023) by several doubly logarithmic factors. As further applications of our construction to query complexity and learning theory, we exhibit: (a) a family of Boolean functions that has an optimal quartic separation between certificate complexity and approximate degree, and (b) a sample compression lower bound of $Ω(\sqrt{\log c})$ for multiclass concept classes over $c$ labels.
Primary: Stanford University
All Institutions: Stanford University
This paper provides an optimal refutation of the Alon-Saks-Seymour conjecture and establishes new lower bounds in communication and query complexity through novel constructions of unambiguous DNFs and a constant-sized lifting gadget. The work represents a significant theoretical contribution to machine learning theory, offering deep insights into the fundamental limits of learning and computation, with rigorous proofs that advance the state of the art in complexity theory.
The paper presents a significant theoretical advance in computational complexity and learning theory. The core methodology involves constructing unambiguous Disjunctive Normal Forms (DNFs) with specific width and certificate complexity properties. The authors then employ a lifting theorem with a constant-sized gadget to translate these query complexity separations into communication complexity lower bounds. This approach is mathematically rigorous and leverages deep connections between boolean function analysis, communication complexity, and learning theory. The construction of the DNFs and the proof of the lifting theorem constitute a novel methodological contribution to the field of theoretical computer science.
As a theoretical computer science paper, this work does not contain empirical experiments, datasets, or benchmarks in the traditional machine learning sense. The "results" are mathematical proofs establishing lower bounds and separations. Therefore, experimental evaluation is not applicable. The validity rests entirely on the correctness of the proofs.
Theoretical papers are reproducible in the sense that their proofs can be verified. The paper provides sufficient detail in the abstract and structure (implied by the section headers) to allow for verification by experts in the field. However, without access to the full text's proofs, one must rely on the abstract's claims. The acknowledgements mention interaction with LLMs, which is a transparency note but does not affect the mathematical reproducibility of the results.
The primary limitation is that this is a theoretical result. While it has profound implications for understanding the limits of learning and computation, it does not provide immediate algorithms or practical tools for practitioners. The "applications" mentioned (sample compression lower bounds, approximate degree separation) are also theoretical bounds. Furthermore, the reliance on LLMs for idea development, while acknowledged, is a minor concern regarding the originality of the *ideation* process, though the *execution* and *proof* remain the authors' responsibility.
This paper has high impact within the theoretical machine learning and complexity theory communities. Refuting the Alon-Saks-Seymour conjecture is a major milestone. The improved lower bounds for Clique vs. Independent Set and the new separations in query complexity provide fundamental insights into the hardness of learning and computation. It sets new benchmarks for what is achievable in certificate complexity and communication complexity, guiding future research in these areas. This paper provides an optimal refutation of the Alon-Saks-Seymour conjecture and establishes new lower bounds in communication and query complexity through novel constructions of unambiguous DNFs and a constant-sized lifting gadget. The work represents a significant theoretical contribution to machine learning theory, offering deep insights into the fundamental limits of learning and computation, with rigorous proofs that advance the state of the art in complexity theory.
In overparameterised classification, training data can be linearly separable even when the underlying distribution is not. In this setting, gradient descent (GD) on the logistic loss diverges in norm while converging in direction to a max-margin interpolating classifier, whose implicit bias can be statistically suboptimal. In this work, we show that early stopping can overcome this suboptimality: in a Gaussian mixture model with label-flipping noise, GD stopped at an appropriate oracle time achieves minimax-optimal excess zero-one risk for covariance spectra with fast and continuous decay, including polynomial and exponential spectral decays. Our analysis combines a sharp upper bound for the early-stopped iterate with a matching statistical lower bound over arbitrary classifiers, yielding optimal rates that are validated by experiments. A central technical contribution is a new calibration result that converts excess logistic risk into excess zero-one risk; it handles the model misspecification induced by the label-flipping noise, and removes the square-root rate in standard bounds. We also establish a lower bound for linear interpolators, showing that interpolation can require exponentially more samples than early stopping to achieve the same excess risk.
Primary: University of Oxford
All Institutions: University of Oxford
The paper presents a rigorous theoretical analysis demonstrating that early-stopped gradient descent achieves minimax-optimal excess zero-one risk in Gaussian mixture models, outperforming max-margin interpolators by a significant margin in sample complexity.
The paper addresses a fundamental tension in overparameterized classification: the statistical suboptimality of max-margin interpolators (implicit bias of GD) versus the potential benefits of early stopping. The methodology is theoretically rigorous, focusing on a Gaussian Mixture Model (GMM) with label-flipping noise. The core technical contributions are twofold: (1) deriving sharp upper bounds on the excess zero-one risk of early-stopped Gradient Descent (GD) for covariance spectra with fast decay (polynomial/exponential), and (2) establishing a novel calibration result that converts excess logistic risk to excess zero-one risk, effectively removing the square-root rate penalty typical in standard bounds under model misspecification. The authors also prove a lower bound for linear interpolators, demonstrating an exponential sample complexity gap compared to early-stopped GD. This is a significant theoretical advance in understanding the implicit regularization of GD in classification settings.
The abstract mentions that the optimal rates are validated by experiments. Given the theoretical nature of the work, the experiments likely serve to corroborate the derived rates in synthetic GMM settings. While the theoretical results are strong, the lack of extensive empirical validation on real-world datasets or more complex models (e.g., deep networks) limits the immediate practical impact, though this is common for high-theory papers. The validation of the "oracle time" stopping criterion is crucial; if the experiments show that this time is practically estimable or robust, the impact increases. However, the abstract implies an "oracle time," which may limit direct applicability without further algorithmic development.
The paper provides a full theoretical derivation with appendices for proofs. The notation is standard. Reproducibility of the theoretical claims is high for other theorists. Reproducibility of the empirical claims depends on the code availability, which is not explicitly linked in the provided text (URLs are "none"), but the mathematical framework is self-contained.
The primary limitation is the reliance on the "oracle time" for early stopping. In practice, knowing the optimal stopping time requires knowledge of the underlying distribution or validation data, which may not be available. The paper establishes a lower bound for interpolators, but does not provide a practical algorithm to find the optimal early stopping point without oracle knowledge. Additionally, the analysis is restricted to linear classifiers on Gaussian mixtures, which, while a canonical model, does not directly translate to non-linear deep learning settings without further bridging theory.
This work provides a rigorous theoretical justification for the use of early stopping in classification, a heuristic widely used in practice but poorly understood theoretically in the context of interpolation. It clarifies why max-margin solutions can be suboptimal and how early stopping mitigates this. This contributes to the broader field of algorithmic stability and implicit regularization, potentially guiding the design of better training procedures for overparameterized models. The paper presents a rigorous theoretical analysis demonstrating that early-stopped gradient descent achieves minimax-optimal excess zero-one risk in Gaussian mixture models, outperforming max-margin interpolators by a significant margin in sample complexity.
Modern GPUs rely on private per-SM L1 caches and a shared L2 cache, but this organization obscures cross-SM reuse: an L1 miss is typically forwarded to L2 even when the requested line already resides in a peer L1 cache, leading to redundant L2 access. Prior GPU L1-sharing designs attempt to recover such reuse through exact or broad remote-hit searches, which become increasingly difficult to scale and can interfere with the critical L1 miss path under high concurrency. %miss handling as more caches participate and more misses arrive concurrently. We observe that eliminating redundant L2 accesses does not require exact, chip-wide knowledge of private L1 contents. Instead, it requires only sufficient visibility to sharply narrow down a small set of candidate caches, leaving exact confirmation to a much smaller number of L1s. Based on this insight, we propose C2P-Cache, a scalable GPU L1-sharing mechanism that transforms remote-hit discovery from a chip-wide exact search problem into a lightweight filtering-and-confirmation process. C2P-Cache maintains compact Bloom-filter-based snapshots of private L1 tags, performs parallel chip-wide candidate filtering, and selectively probes only a small number of likely peer caches. To sustain high concurrency, C2P-Cache organizes filtering as bit-sliced matching over a banked and replicated snapshot matrix, enabling efficient, parallel processing of many concurrent misses without interfering with normal L1 accesses. Across a wide range of GPU workloads, C2P-Cache improves instructions per cycle (IPC) by up to 49.7\% and by 23.5\% on average for applications with high remote-L1 reuse and strong sensitivity to L2 latency, demonstrating that lightweight, scalable filtering can effectively unlock cross-SM reuse with modest overhead.
Primary: National University of Defense Technology
All Institutions: National University of Defense Technology
C2P-Cache introduces a scalable GPU L1 cache sharing mechanism that utilizes Bloom-filter-based snapshots to prune remote-hit candidates, significantly reducing redundant L2 accesses and improving IPC for memory-intensive workloads while maintaining low overhead and high concurrency.
The paper proposes C2P-Cache, a hardware mechanism for GPU L1 cache sharing. The core innovation is replacing exact, chip-wide remote hit searches with a probabilistic filtering stage using Bloom filters. Specifically, it maintains a "Snapshot Matrix" of Bloom filter states for all SMs. When an L1 miss occurs, the system performs a Boolean matrix multiplication (logical AND reduction) between the miss query (Access Matrix) and the Snapshot Matrix to identify candidate SMs. Only these candidates are probed for exact tag confirmation. This transforms a high-latency, high-contention search problem into a lightweight filtering-and-confirmation pipeline. The design includes specific optimizations for high concurrency, such as bit-sliced matching and a banked/replicated Snapshot Matrix organization to handle worst-case lookup demands without interfering with normal L1 accesses. The methodology is sound, leveraging well-known probabilistic data structures (Bloom filters) in a novel architectural context (GPU cache hierarchy) to solve a specific scalability bottleneck.
The evaluation is conducted using Accel-Sim, a standard cycle-level GPU simulator. The authors evaluate 24 workloads from ISPASS, Rodinia, Parboil, PolyBench, and Pannotia. They compare C2P-Cache against a baseline (no sharing) and three prior works (ATA, CCD, RING). Results show significant IPC improvements (up to 49.7%, avg 23.5% for sensitive workloads) and substantial L2 access reduction (avg 46.6%). The paper provides a thorough sensitivity analysis covering BF parameters, matching latency, remote return latency, and SM scaling. The results are consistent and demonstrate that C2P-Cache outperforms prior art in both performance and scalability, particularly as the number of SMs increases. The inclusion of power and area overhead estimates adds credibility to the practical feasibility assessment.
The paper provides detailed descriptions of the hardware components (BF Engine, Snapshot Matrix organization, addressing schemes) and simulation parameters (latencies, BF sizes, hash functions). The use of Accel-Sim and standard benchmarks allows for potential reproduction. However, the specific implementation details of the BF hash functions and the exact timing models for the Snapshot Matrix SRAM (modeled via CACTI) are abstracted. While sufficient for architectural researchers to reproduce the study, full bit-level reproducibility would require access to the specific Accel-Sim fork and CACTI configuration files, which are not explicitly linked but are standard practice in the field.
The primary limitation is the reliance on probabilistic filtering, which introduces false positives (unnecessary probes) and false negatives (missed reuse opportunities). The paper acknowledges this and shows that the impact is manageable, but in extreme cases, false positives can add latency. Additionally, the design assumes a specific GPU microarchitecture (banked L1s, specific interconnect) which may not generalize to all GPU designs without adaptation. The "Snapshot Matrix" consumes significant on-chip SRAM (estimated 40KB logical, though physical implementation details vary), which might be a constraint for smaller GPUs. The venue date (2026) is an anomaly, suggesting this might be a very recent acceptance or a metadata error, but the technical content is current.
This work addresses a fundamental scalability issue in modern GPUs: memory bandwidth and latency bottlenecks caused by private L1 caches. By enabling efficient cross-SM data reuse, C2P-Cache can improve performance for a wide range of parallel applications, including AI/ML workloads (Transformers, CNNs) and HPC applications (stencils, linear algebra). This contributes to the broader goal of making GPU architectures more efficient and scalable as core counts increase. It also highlights the value of probabilistic data structures in hardware design for system-level optimization. C2P-Cache introduces a scalable GPU L1 cache sharing mechanism that utilizes Bloom-filter-based snapshots to prune remote-hit candidates, significantly reducing redundant L2 accesses and improving IPC for memory-intensive workloads while maintaining low overhead and high concurrency.
In overparameterised classification, training data can be linearly separable even when the underlying distribution is not. In this setting, gradient descent (GD) on the logistic loss diverges in norm while converging in direction to a max-margin interpolating classifier, whose implicit bias can be statistically suboptimal. In this work, we show that early stopping can overcome this suboptimality: in a Gaussian mixture model with label-flipping noise, GD stopped at an appropriate oracle time achieves minimax-optimal excess zero-one risk for covariance spectra with fast and continuous decay, including polynomial and exponential spectral decays. Our analysis combines a sharp upper bound for the early-stopped iterate with a matching statistical lower bound over arbitrary classifiers, yielding optimal rates that are validated by experiments. A central technical contribution is a new calibration result that converts excess logistic risk into excess zero-one risk; it handles the model misspecification induced by the label-flipping noise, and removes the square-root rate in standard bounds. We also establish a lower bound for linear interpolators, showing that interpolation can require exponentially more samples than early stopping to achieve the same excess risk.
Primary: University of Oxford
All Institutions: University of Oxford
The paper presents a rigorous theoretical analysis demonstrating that early-stopped gradient descent achieves minimax-optimal excess zero-one risk in Gaussian mixture models, outperforming max-margin interpolators by a significant margin in sample complexity.
The paper addresses a fundamental tension in overparameterized classification: the statistical suboptimality of max-margin interpolators (implicit bias of GD) versus the potential benefits of early stopping. The methodology is theoretically rigorous, focusing on a Gaussian Mixture Model (GMM) with label-flipping noise. The core technical contributions are twofold: (1) deriving sharp upper bounds on the excess zero-one risk of early-stopped Gradient Descent (GD) for covariance spectra with fast decay (polynomial/exponential), and (2) establishing a novel calibration result that converts excess logistic risk to excess zero-one risk, effectively removing the square-root rate penalty typical in standard bounds under model misspecification. The authors also prove a lower bound for linear interpolators, demonstrating an exponential sample complexity gap compared to early-stopped GD. This is a significant theoretical advance in understanding the implicit regularization of GD in classification settings.
The abstract mentions that the optimal rates are validated by experiments. Given the theoretical nature of the work, the experiments likely serve to corroborate the derived rates in synthetic GMM settings. While the theoretical results are strong, the lack of extensive empirical validation on real-world datasets or more complex models (e.g., deep networks) limits the immediate practical impact, though this is common for high-theory papers. The validation of the "oracle time" stopping criterion is crucial; if the experiments show that this time is practically estimable or robust, the impact increases. However, the abstract implies an "oracle time," which may limit direct applicability without further algorithmic development.
The paper provides a full theoretical derivation with appendices for proofs. The notation is standard. Reproducibility of the theoretical claims is high for other theorists. Reproducibility of the empirical claims depends on the code availability, which is not explicitly linked in the provided text (URLs are "none"), but the mathematical framework is self-contained.
The primary limitation is the reliance on the "oracle time" for early stopping. In practice, knowing the optimal stopping time requires knowledge of the underlying distribution or validation data, which may not be available. The paper establishes a lower bound for interpolators, but does not provide a practical algorithm to find the optimal early stopping point without oracle knowledge. Additionally, the analysis is restricted to linear classifiers on Gaussian mixtures, which, while a canonical model, does not directly translate to non-linear deep learning settings without further bridging theory.
This work provides a rigorous theoretical justification for the use of early stopping in classification, a heuristic widely used in practice but poorly understood theoretically in the context of interpolation. It clarifies why max-margin solutions can be suboptimal and how early stopping mitigates this. This contributes to the broader field of algorithmic stability and implicit regularization, potentially guiding the design of better training procedures for overparameterized models. The paper presents a rigorous theoretical analysis demonstrating that early-stopped gradient descent achieves minimax-optimal excess zero-one risk in Gaussian mixture models, outperforming max-margin interpolators by a significant margin in sample complexity.
The "thinking-with-images" paradigm equips multimodal LLMs with active visual operations such as crop-and-zoom. However, models using these operations often achieve only marginal or negative gains over direct inference at substantially higher token cost. They may also repeatedly crop irrelevant regions and fail on questions that direct inference answers correctly. We ask whether the returned visual evidence causally affects the answer. To answer this question, we formulate visual tool-use as a causal graph that separates observation-mediated paths from action-induced shortcuts. We then audit it through interventions at the three levels: policy (comparing tool-use with direct inference), trajectory (corrupting all observations during rollout), and step (counterfactually replacing one individual observation under a fixed prefix). Our step-level estimand, Visual Evidence Gain, isolates the contribution of each returned observation. Across six representative models and five fine-grained perception benchmarks, we uncover policy miscalibration with two failure modes. In Calling Without Looking, returned observations have no causal effect on the answer. In Looking Without Planning, observations are informative but the call schedule is incoherent. A trajectory-level diagnostic decomposes the policy-level accuracy gain and shows that the gain is concentrated in a Calibrated minority. We term this discrepancy the illusion of visual tool-use: despite aggregate accuracy gains, visual tool-use is not causally effective across a broad range of rollouts. The code is available at https://github.com/OpenCausaLab/CauAudit.
Primary: OpenCausaLab
All Institutions: OpenCausaLab
The paper presents a novel causal audit framework that reveals the "illusion of visual tool-use" in multimodal LLMs, demonstrating that aggregate accuracy gains often mask significant policy miscalibration where visual evidence is causally disconnected from the final answer.
The paper proposes a rigorous causal framework to audit "thinking-with-images" multimodal LLMs. It introduces a three-level intervention protocol (policy, trajectory, step) to disentangle observation-mediated paths from action-induced shortcuts. The core methodological contribution is the "Visual Evidence Gain" (VEG) estimand, which uses counterfactual interventions at the step level to isolate the causal contribution of visual observations to the final answer. This approach is theoretically sound, adapting Pearl's structural causal models to the specific context of tool-use in MLLMs. The decomposition of policy-level accuracy gains into "Calibrated," "Calling Without Looking" (CWL), and "Looking Without Planning" (LWP) trajectories provides a novel diagnostic lens.
The authors evaluate six representative models across five fine-grained perception benchmarks. The experiments are comprehensive, covering interface-based and code-based tool-use implementations. The results robustly support the central claim: aggregate accuracy gains are driven by a minority of "Calibrated" rollouts, while many others exhibit policy miscalibration. The step-level analysis reveals distinct failure modes (CWL and LWP) that are not visible at the aggregate level. The use of multiple corruption schemes (random-crop, noise, blank) for trajectory-level interventions adds depth to the analysis. The findings are surprising and challenge the prevailing assumption that tool-use inherently improves reasoning by providing better evidence.
The paper provides detailed implementation details, including model checkpoints, decoding configurations, and benchmark specifications. The code is made publicly available, which significantly enhances reproducibility. The causal interventions are well-defined and can be replicated by other researchers. The use of open-source models and standard benchmarks further supports reproducibility.
The study is limited to open-source models and the crop-and-zoom tool. The extension to closed-source models (e.g., OpenAI o3/o4-mini) is not possible due to lack of access to token-level probabilities and intermediate observations. The findings may not generalize to other types of visual tools (e.g., OCR, segmentation) or video-based reasoning. The "RL-trap" hypothesis is presented as a plausible explanation but is not empirically verified through controlled training experiments.
This paper has significant implications for the development and evaluation of multimodal LLMs. It highlights the importance of causal auditing in understanding model behavior and suggests that current training objectives (outcome-only RL) may be insufficient for learning effective tool-use policies. The proposed diagnostic framework can guide the development of more robust and efficient multimodal systems. It also raises broader questions about the nature of "reasoning" in LLMs and the role of external tools in augmenting cognitive capabilities. The paper presents a novel causal audit framework that reveals the "illusion of visual tool-use" in multimodal LLMs, demonstrating that aggregate accuracy gains often mask significant policy miscalibration where visual evidence is causally disconnected from the final answer.
Flow-based generative models are typically sampled by solving a deterministic ordinary differential equation (ODE), whereas online reinforcement learning requires stochastic rollouts for policy exploration and optimization. Existing GRPO methods for flow models therefore replace the inference-time ODE with a stochastic differential equation (SDE) during training. Although the ODE and SDE share the same marginal distributions in continuous time, their finite-step discretizations can differ substantially. In particular, SDE rollouts often become blurry as the exploration noise increases, creating a mismatch between the samples used for reinforcement learning and those generated by the test-time ODE sampler. We introduce LC-GRPO, a flow-based GRPO framework with Langevin correction. Each rollout transition first takes an inference-aligned ODE Euler step and then applies a stochastic Langevin correction targeting the marginal distribution at the resulting timestep. The required score is recovered directly from the flow velocity, requiring no additional score model, while the resulting transition remains an isotropic Gaussian with a tractable likelihood for policy optimization. We theoretically show that, under suitable conditions, one Langevin correction step reduces the Wasserstein error of an imperfect ODE Euler step. At a matched randomness level, we further show that the proposed transition can be more accurate than the standard Euler--Maruyama discretization of the reverse SDE. Experiments on SD3.5-Medium, FLUX.1-Dev, and HunyuanVideo demonstrate that LC-GRPO consistently improves reward optimization across text-to-image and text-to-video tasks, preserves generation quality, and substantially narrows the gap between stochastic training rollouts and deterministic test-time ODE inference.
Primary: University of California, San Diego
All Institutions: University of California, San Diego
The paper presents a theoretically grounded and empirically validated method to align training and inference dynamics in flow-based generative models using Langevin correction, significantly enhancing the effectiveness of reinforcement learning fine-tuning for these architectures.
The paper addresses a critical and well-known issue in flow-based generative models: the mismatch between the stochastic exploration required for Reinforcement Learning from Human Feedback (RLHF) or Direct Preference Optimization (DPO) style training (often using SDEs or noisy ODEs) and the deterministic, high-quality generation used at inference time (ODEs). The proposed LC-GRPO method introduces a "Langevin correction" step after an ODE Euler step. This is a clever engineering and theoretical contribution. By using the flow velocity to approximate the score function, it avoids training an additional score network, which is a significant efficiency gain. The theoretical claim that one Langevin step reduces Wasserstein error is a strong theoretical anchor, provided the assumptions hold. The methodology is sound, building on established concepts of Langevin dynamics and flow matching, but applying them specifically to close the train-inference gap in GRPO is a novel and valuable insight.
The experiments cover major state-of-the-art models (SD3.5-Medium, FLUX.1-Dev, HunyuanVideo) across text-to-image and text-to-video tasks. This breadth is impressive and demonstrates generalizability. The results claim consistent improvement in reward optimization while preserving generation quality. The key metric here is the "gap" between training rollouts and test-time inference. If the paper quantitatively demonstrates that LC-GRPO narrows this gap significantly compared to standard SDE-based GRPO, it validates the core hypothesis. The use of multiple large models strengthens the claim that this is a general-purpose improvement rather than a model-specific hack.
The method relies on standard components (ODE solvers, Langevin dynamics, flow velocity). The claim that the score is recovered "directly from the flow velocity" suggests no additional hyperparameters for a separate score model. This should make the method relatively easy to reproduce for practitioners familiar with flow matching. The paper likely provides sufficient algorithmic details, though the exact discretization schemes and noise schedules need to be clearly defined for full reproducibility.
The primary limitation is the assumption that the flow velocity is a sufficiently accurate proxy for the score function, particularly in regions of high probability density variation or complex manifolds. The theoretical bound on Wasserstein error reduction likely depends on the step size and the smoothness of the flow, which may not hold for all complex distributions. Additionally, the computational overhead of the extra Langevin step (even if cheap) must be negligible compared to the benefit; if it slows down training significantly, it might not be practical. The paper does not explicitly discuss failure modes or cases where the correction might destabilize training.
This work facilitates the application of RLHF techniques to flow-based models, which are becoming increasingly popular due to their fast inference and deterministic nature. By closing the train-inference gap, it allows for more effective alignment of these models without sacrificing the quality of the generated samples. This has broad implications for the development of high-fidelity, aligned generative models for images and video. The paper presents a theoretically grounded and empirically validated method to align training and inference dynamics in flow-based generative models using Langevin correction, significantly enhancing the effectiveness of reinforcement learning fine-tuning for these architectures.
Self-evolving skill (SES) systems distill agent trajectories into persistent skills, allowing untrusted experience to become trusted instruction. We introduce PoisonedEvolution, a trajectory-poisoning attack on this promotion process. Our skill-visible black-box attacker can inspect a target skill and contribute bounded evidence, but cannot observe private pools or evolution logic or edit the skill bank. Artifact poisoning requires Inclusion, Evolution Attribution, and Realization. Attribution is the distinctive bottleneck: the target behavior must appear causally useful, recurrent, and generalizable before promotion. We evaluate four representative security-effect families using inert canary specifications. At 10% attacker support, across six mainstream LLM evolvers in SkillClaw, PoisonedEvolution embeds target behaviors in 546/600 trials (91.0% SER). On the structurally different Trace2Skill pipeline at the same ratio, it embeds target behaviors in 369/600 trials (61.5% SER), demonstrating transfer across evolution architectures. In a representative controlled study, three consistent attacker records suffice in a 30-record batch, whereas a single record is much weaker. Ablations identify recurring support, causal framing, and domain-aligned encoding as the main determinants of success. These findings expose evidence promotion as a security boundary for self-evolving agents.
Primary: Unknown
All Institutions: Unknown
The paper introduces a novel and effective trajectory poisoning attack on self-evolving agent skill systems, demonstrating that persistent backdoors can be embedded with high success rates, thereby exposing a critical security vulnerability in the evolution of autonomous AI agents.
The paper proposes "PoisonedEvolution," a black-box trajectory poisoning attack targeting Self-Evolving Skill (SES) systems. The core methodological contribution is the identification of "Attribution" as the critical bottleneck for successful poisoning: the attacker must craft trajectories that appear causally useful, recurrent, and generalizable to the evolution algorithm. The paper formalizes the attack vectors (Inclusion, Evolution Attribution, Realization) and demonstrates how inert canary specifications can be embedded into the persistent skill bank. The approach is theoretically sound within the context of LLM-based agent evolution, leveraging the tendency of evolution algorithms to select for performance metrics without verifying the provenance or safety of the underlying logic.
The evaluation is robust, covering six mainstream LLM evolvers in the SkillClaw framework and the Trace2Skill pipeline. The results are striking: a 91.0% Success Embedding Rate (SER) at 10% attacker support in SkillClaw and 61.5% in Trace2Skill. The ablation studies effectively isolate key determinants of success, such as recurring support, causal framing, and domain-aligned encoding. The use of controlled studies (e.g., 3 consistent records vs. 1) adds depth to the understanding of attack efficacy. The cross-architecture transfer demonstrates the generality of the vulnerability.
The paper provides detailed descriptions of the attack parameters, the target systems (SkillClaw, Trace2Skill), and the evaluation metrics. The use of "inert canary specifications" suggests a standardized method for verifying the presence of the poison, which aids in reproducibility. However, the specific implementation details of the "bounded evidence" constraint and the exact prompt engineering strategies for "causal framing" may require careful reconstruction to fully replicate the high success rates.
The primary limitation is the black-box nature of the attack, which relies on the assumption that the evolution algorithm's selection criteria can be gamed through trajectory design. The paper does not explore defensive mechanisms in depth, focusing instead on the vulnerability. Additionally, the "bounded evidence" constraint implies the attacker cannot fully control the outcome, only influence it, which might limit the scope of attacks in more robust systems. The evaluation is limited to specific SES frameworks; generalizability to all self-evolving agent architectures is plausible but not proven.
This paper has significant implications for the security of autonomous agent systems. As self-evolving agents become more prevalent, the risk of persistent, hard-to-detect backdoors in their skill libraries is a major concern. The findings expose a critical security boundary: the promotion process from experience to instruction is vulnerable to manipulation. This necessitates the development of rigorous verification and auditing tools for skill evolution pipelines. The work highlights the need for "security-by-design" in self-improving AI systems, where the integrity of the learning loop is as important as the initial model weights. The paper introduces a novel and effective trajectory poisoning attack on self-evolving agent skill systems, demonstrating that persistent backdoors can be embedded with high success rates, thereby exposing a critical security vulnerability in the evolution of autonomous AI agents.
Language models differ in how safely they behave and these differences are measured by safety benchmarks. But aggregated benchmark scores are hard to trust and interpret, because benchmarks duplicate one another, correlate heavily, and models may sandbag when they detect evaluation. To address these issues, we draw on Item Response Theory (IRT), a statistical toolkit for measuring these latents from performance on items with inferred psychometric properties. We fit IRT models to eight safety benchmarks across 192 language models, the largest psychometric analysis of LLM safety evaluations to date, and contribute three results. First, we find that three interpretable factors of refusal strictness, truthfulness, and contextual harm explain most of the variance between models across benchmarks. Second, psychometrically selected items recover full benchmark scores with lower error than random subsets of the same size, and roughly ten adaptively chosen items suffice for several individual benchmarks, cutting evaluation cost by 97-99%. Third, IRT supports audits of individual models, showing that it can be used to detect naive sandbagging and changes of model behind APIs. Overall, we show IRT is a ready-made toolkit for reading, reducing, and auditing safety benchmarks, which we recommend frontier labs and evaluators adopt.
Primary: UK AI Security Institute
All Institutions: UK AI Security Institute, Department for Science, Innovation, and Technology, Supervised Program for Alignment Research
This paper presents a rigorous psychometric analysis of LLM safety benchmarks, demonstrating that IRT can effectively decompose safety into latent factors, distill evaluation costs, and detect behavioral anomalies, offering a valuable methodological advancement for the field.
The paper applies Item Response Theory (IRT), a well-established psychometric framework, to the domain of Large Language Model (LLM) safety evaluation. The methodology involves fitting Two-Parameter Logistic (2PL) IRT models to item-level responses from 192 models across eight safety benchmarks. The authors employ standard psychometric techniques, including factor analysis to identify latent safety traits (refusal strictness, truthfulness, contextual harm), Fisher information for item selection, and person-fit statistics for anomaly detection. The approach is methodologically sound and rigorously applied, utilizing regularization to handle the specific data sparsity characteristics of LLM evaluations (many items, fewer models). While the application of IRT to LLMs is not entirely new (citing prior work on capability benchmarks), its systematic application to the complex, multi-dimensional landscape of *safety* benchmarks, particularly for the purpose of distillation and auditing, represents a sophisticated and novel synthesis of psychometrics and AI safety.
The experimental setup is robust, leveraging a large-scale dataset of 5,255 items and 192 models. The results are compelling: the authors demonstrate that three latent factors explain the majority of variance, that psychometrically selected items can recover benchmark scores with significantly lower error than random subsets (cutting evaluation cost by 97-99%), and that IRT-based person-fit statistics can detect specific forms of sandbagging and API substitution. The use of held-out splits and comparison against random baselines strengthens the claims regarding benchmark distillation. The detection of "naive sandbagging" is a strong empirical finding, though the authors correctly note limitations regarding sophisticated, adversarial sandbagging.
The paper provides extensive details on the preprocessing, model fitting (including regularization priors), and evaluation metrics. The inclusion of a full model roster and benchmark coverage matrix in the appendix enhances transparency. The reliance on OpenRouter's API for data collection is a potential reproducibility hurdle for exact replication of the *collection* phase, but the analysis code and data package are mentioned as available in supplementary material, which is standard practice. The clear description of the 2PL model and factor analysis procedures allows for independent verification of the statistical claims.
The authors acknowledge several limitations. The cohort size (192 models) is large for LLM studies but smaller than traditional human psychometric datasets, which may affect the stability of parameter estimates. The sandbagging detection is evaluated on "prompted model organisms" rather than fine-tuned models, which may behave differently. The factor analysis relies on empirical loading patterns, and the interpretation of latent factors as distinct "abilities" requires further validation. Additionally, the method assumes that the benchmarks are measuring stable traits, which may be violated if models exhibit context-dependent safety behaviors not captured by the static items.
This work has significant implications for the AI safety community. By providing a rigorous statistical framework for interpreting safety benchmarks, it addresses critical concerns about the validity and reliability of current evaluation practices. The ability to distill benchmarks could make safety evaluation more efficient and accessible, while the auditing capabilities offer a new tool for detecting deceptive behavior or model substitution in API-based systems. The recommendation for frontier labs to adopt these psychometric standards could lead to more trustworthy and comparable safety assessments across the industry. This paper presents a rigorous psychometric analysis of LLM safety benchmarks, demonstrating that IRT can effectively decompose safety into latent factors, distill evaluation costs, and detect behavioral anomalies, offering a valuable methodological advancement for the field.
Multi-agent LLM systems relay key--value caches instead of text and credit their gains to exchanged ``latent thoughts''. That credit is a claim about \emph{which} example's cache is relayed, not merely that one is. We audit it causally in released systems. The cache is replaced with deranged (mismatched-example), zeroed, and moment-matched random counterparts, under two regimes defined by whether the receiver needs the sender's private information. Where it does, the battery reads ceiling: 100\% against 23--25\% for answer-irrelevant relays on the primary backbone, a contrast replicated across three families, five checkpoints, and a prose document-QA surface. Where it does not, a pre-registered five-seed protocol establishes equivalence within 2.8 points, a margin anchored to the audited system's reported gain, under Holm-corrected TOST on GSM8K and ARC-Challenge across three Qwen3 scales and on MedQA at 8B (one cell shows a small detected advantage inside the margin); a second family shows no detected advantage. A large cache effect need not be a pairing effect. In one natural cell, zeroing the relay costs 14.7 points; a mismatched cache, 0.4. Nor is need sufficient: under the same test, delivered channels span ceiling (LatentMAS's native relay), partial (KVComm's layer subset), and no detected example-specific transfer (C2C's released projector). Benchmark deltas do not by themselves establish latent-thought transmission; establishing it takes a mismatched-cache audit, which we release.
Primary: The Ohio State University
All Institutions: The Ohio State University
The paper provides a rigorous causal audit framework that debunks the "latent thoughts" attribution in popular multi-agent LLM systems, demonstrating that while latent channels can transmit information, they do not necessarily transmit example-specific content that improves performance on standard tasks, challenging the core value proposition of several recent systems.
The paper proposes a rigorous causal audit framework for multi-agent LLM systems that utilize latent communication (specifically KV-cache relaying). The core methodological innovation is the "derangement" intervention, which swaps the sender's KV cache with that of a mismatched example from the same batch, preserving the marginal distribution of the cache while breaking the semantic pairing. This is combined with zeroed and moment-matched random controls, and a "receiver-necessity" dissociation using procedurally generated sender-private information. The statistical approach employs pre-registered equivalence testing (TOST) with Holm correction, anchoring the equivalence margin to the audited system's own claimed gains. This moves the evaluation from simple benchmark delta comparisons to causal attribution of specific content transmission.
The evaluation is extensive and rigorous. It tests the audit on three released systems (LatentMAS, C2C, KVComm) across three model families (Qwen3, Mistral-Nemo, phi-4) and multiple checkpoints. The experiments cover both a "calibrated regime" (where the receiver cannot solve the task without the sender's private info) and a "natural regime" (standard benchmarks like GSM8K, ARC-Challenge, MedQA). The results are striking: in the calibrated regime, LatentMAS achieves ceiling performance (100% accuracy vs ~23% for controls), proving the channel works. In the natural regime, the audit finds no statistically significant advantage for the paired cache over the deranged cache, bounding the "pairing effect" below the system's claimed gain. This effectively debunks the claim that LatentMAS transmits useful "latent thoughts" in standard settings, suggesting the gains are likely due to interface effects or generic computation. The cross-system comparison (LatentMAS vs C2C vs KVComm) further demonstrates the portability of the audit.
The paper emphasizes reproducibility, mentioning a pre-registered analysis plan, frozen seed sets, and detailed statistical conventions. It claims to release the audit harness, calibration instrument, and run manifests. The use of standard benchmarks and released models enhances reproducibility. The detailed description of the derangement procedure and the statistical tests allows for independent verification.
The audit is limited to the specific configurations of the released systems; retrained or fine-tuned variants might behave differently. The calibrated regime relies on a specific type of procedurally generated registry; while a prose stress test was included, it may not cover all forms of latent communication. The audit measures example-pairing value, not the absolute value of the latent channel (which could still be useful for other reasons, though the paper argues against this for the "latent thoughts" claim). The results are specific to the models and tasks tested.
This paper has significant implications for the field of multi-agent LLMs. It provides a much-needed standard for evaluating latent communication mechanisms, moving beyond aggregate benchmark scores to causal attribution. It warns practitioners against crediting gains to "latent thoughts" without rigorous controls, potentially saving resources on ineffective architectures. It establishes a new benchmark for what constitutes evidence of content transmission in latent channels. The paper provides a rigorous causal audit framework that debunks the "latent thoughts" attribution in popular multi-agent LLM systems, demonstrating that while latent channels can transmit information, they do not necessarily transmit example-specific content that improves performance on standard tasks, challenging the core value proposition of several recent systems.
SciCode is the standard measure of the scientific-coding ability of language models: research-level problems that demand both frontier scientific theory and its implementation as working numerical code. It is a component of the Artificial Analysis Intelligence Index and a standing evaluation in government and national-laboratory suites. Yet its scores have recently plateaued: the strongest 2026 models cluster tightly around 60\% subproblem accuracy, and a successor model ties its predecessor. We trace this stagnation to defects in the benchmark itself. A per-problem, domain-expert audit of all 65 test problems uncovers 263 defects; 192 of them, spread across 91\% of the main problems, cause correct, instruction-following solutions to be wrongly rejected---through non-reproducible gold answers, over-tight tolerances, or self-contradictory specifications. Critically, 78\% of these score-suppressing defects require specialized physics or mathematics knowledge to detect, not mere clerical proofreading. We corrected every confirmable defect to produce SciCode-Verified. The corrections add only the specifications a well-posed problem requires, repair grading, and tighten the tests that were too lenient; every change is recorded with its justification and independently re-checked by a second domain expert. We re-evaluate twelve frontier model snapshots on the corrected benchmark and find a substantial recovery: subproblem accuracy rises from 45--60\% to 84--98\%, and main-problem accuracy from 9--27\% to 69--92\%. State-of-the-art models are far more proficient in scientific coding than SciCode has suggested---the bottleneck was not model capability, but the quality of the evaluation instrument. We release SciCode-Verified with its complete audit trail as the corrected public standard.
Primary: Chinese Academy of Sciences
All Institutions: Chinese Academy of Sciences, National Key Research and Development Program of China, National Natural Science Foundation of China, Quantum Science and Technology---National Science and Technology Major Project, Natural Science Foundation of Fujian Province
This paper presents a comprehensive and necessary correction to the SciCode benchmark, demonstrating that previous evaluations of language models' scientific coding abilities were significantly flawed due to benchmark defects. By releasing a rigorously audited and corrected version of the benchmark with a complete audit trail, it provides the field with a reliable tool for evaluating frontier models and sets a new standard for benchmark integrity in scientific AI.
The paper employs a rigorous, domain-expert-led audit methodology to identify and correct defects in the SciCode benchmark. The approach involves a multi-stage process: initial auditing by domain experts, adversarial re-review, and mechanical verification of corrections. The taxonomy of defects (scientific vs. surface, and direction of error) provides a structured framework for understanding benchmark degradation. The methodology is sound and addresses a critical gap in the reliability of automated evaluation for scientific coding tasks. The use of a "two-environment OR grading" mechanism to mitigate library version incompatibilities is a practical and robust addition to the evaluation protocol.
The experimental design is strong, featuring a matched before/after re-evaluation of twelve frontier model snapshots. The results are striking: subproblem accuracy increases from 45-60% to 84-98%, and main-problem accuracy from 9-27% to 69-92%. This dramatic shift effectively demonstrates that the previous benchmark scores were suppressed by artifacts rather than model capability. The analysis of specific failure modes (e.g., unspecified conventions, wrong gold values) is detailed and convincing. The inclusion of a "no-background" setting provides additional nuance regarding the models' ability to reconstruct derivations versus relying on provided scaffolding.
The paper excels in reproducibility. The authors release the corrected benchmark, the evaluation harness, and a complete audit trail (ledger) of every change with justification. The use of md5 checksums for data integrity and the release of per-step grading caches allow for independent verification. The mechanical checks and adversarial review process add layers of confidence to the corrections. The public repository provides all necessary components for the community to reproduce the results and potentially extend the audit.
The primary limitation is that the audit was conducted by the authors, who are also the creators of the benchmark (or closely affiliated), which may introduce bias, although the adversarial review process mitigates this to some extent. The authors acknowledge this in the limitations section. Additionally, the benchmark focuses on single-problem scientific coding rather than long-horizon agentic workflows, which is a recognized scope limitation. The small sample size of models evaluated (12) limits the statistical power of some comparative analyses, although the trends are clear.
This paper has significant broader impact by establishing a new standard for rigor in benchmark creation and maintenance. It highlights the critical importance of domain expertise in evaluating scientific AI systems and provides a template for how such audits should be conducted. By correcting the benchmark, it allows for more accurate tracking of model progress in scientific coding, which is crucial for guiding research and development in this high-stakes area. It also serves as a cautionary tale for other benchmark developers about the potential for silent degradation and the need for continuous verification. This paper presents a comprehensive and necessary correction to the SciCode benchmark, demonstrating that previous evaluations of language models' scientific coding abilities were significantly flawed due to benchmark defects. By releasing a rigorously audited and corrected version of the benchmark with a complete audit trail, it provides the field with a reliable tool for evaluating frontier models and sets a new standard for benchmark integrity in scientific AI.
Large language model agents are commonly trained through reinforcement learning with sparse trajectory-level rewards, which offer limited guidance on how strongly individual tokens should be updated. On-Policy Self-Distillation (OPSD) addresses this by re-scoring generated tokens under a privileged replay view to obtain dense, token-level supervision. However, we identify a confounding issue: the resulting support may reflect both the privileged information contained in the replay view and score shifts induced by the replay scaffold, making it difficult to attribute the support specifically to that information. This issue is especially pronounced when future environment observations serve as privileged information, since replaying them requires reconstructing an extended scaffold that itself perturbs token scores. To resolve this confounding, we propose Observation-Calibrated Self-Distillation (OCSD), which contrasts two structurally matched replay views, Full and Observation-Ablated, differing only in whether the actual future observation is present, to derive an observation residual that discounts score changes shared by the replay scaffold. OCSD then applies this residual to modulate token-level GRPO updates at high-uncertainty steps, while preserving the trajectory-level update direction. Experiments on ALFWorld, WebShop, and Search-QA across three Qwen3 model scales show that OCSD consistently outperforms strong baselines. Diagnostic analyses further confirm that the calibrated residual aligns better with local environment feedback. Our code is publicly available at https://github.com/yiy1x/OCSD.
Primary: Nanjing University
All Institutions: Nanjing University, Meituan
The paper presents a well-motivated and effective method for calibrating self-distillation signals in agentic RL, offering a clear solution to a previously underappreciated confounding issue.
The paper proposes Observation-Calibrated Self-Distillation (OCSD), a method designed to address a specific confounding issue in On-Policy Self-Distillation (OPSD) for agentic reinforcement learning. The authors argue that standard OPSD conflates the value of privileged future observations with the structural changes induced by the replay scaffold (e.g., added tokens, formatting). To disentangle these, OCSD introduces an "Observation-Ablated" view that preserves the scaffold but removes the actual future observation content. The difference between the Full view and the Ablated view yields an "observation residual," which is used to modulate token-level updates in GRPO. The methodology is theoretically sound and addresses a genuine attribution problem in hindsight distillation. The approach is relatively simple to implement, requiring only an additional forward pass for the ablated view, and integrates cleanly with existing RL frameworks.
The experimental evaluation is comprehensive, covering three distinct benchmarks (ALFWorld, WebShop, Search-QA) and three model scales (Qwen3-1.7B, 4B, 8B). The results show consistent improvements over strong baselines, including GRPO, OPSD, RLSD, and SDAR. The paper includes detailed ablation studies validating the necessity of each component (ablated view, step selection, sign alignment). Furthermore, diagnostic analyses (AUROC of signals against local feedback, word-level preference analysis, observation swapping) provide strong empirical evidence that the proposed residual is indeed more aligned with local environment feedback than the raw Full-view support. The computational overhead is reported to be minimal (~1.4%), which is a significant practical advantage.
The paper provides a public code repository and detailed implementation details in the appendix, including hyperparameters, training protocols, and evaluation settings. The use of standard benchmarks and the clear description of the replay evidence construction facilitate reproduction. The inclusion of random seeds and multiple runs for statistical significance further supports reproducibility.
The primary limitation is that the method relies on the availability of future observations (hindsight), which is specific to interactive/agent settings and not generalizable to all RL tasks. Additionally, while the method improves performance, the gains, while consistent, are not always massive (e.g., ~10-15% relative improvement on ALFWorld), suggesting that the confounding effect, while real, might not be the dominant bottleneck in all scenarios. The method also assumes that the "scaffold" effects are consistent between the Full and Ablated views, which might not hold if the model's attention mechanism is highly sensitive to the specific presence/absence of tokens in complex ways.
This work contributes to the broader understanding of how to effectively use hindsight information in RL for LLM agents. By providing a more calibrated signal, it could lead to more stable and efficient training of agentic systems. The insights into attribution confounds in self-distillation are valuable for the community working on RLHF and agentic RL. The paper presents a well-motivated and effective method for calibrating self-distillation signals in agentic RL, offering a clear solution to a previously underappreciated confounding issue.
Long-context LLM decoding reads the key-value (KV) cache at every step. Loading it takes longer than computing attention over it, so throughput is bandwidth-bound. Hence, reducing the cache size can raise both decoding speed and serving capacity. The challenge is to reduce cache size while preserving the attention products, keeping reconstruction cheap, and using a fixed per-token bit count. At two bits per element, the most competitive methods rely on orthogonal transforms. However, existing techniques are either data-oblivious or use the query statistics without deriving the transform from a distortion criterion. Moreover, they rely on transforms built on top of random or Hadamard rotations, which equalize variances across entries rather than compacting energy, and fixed-width scalar quantizers, which are suboptimal at low rates. In this paper, we formulate KV cache quantization as a transform coding problem in which distortion is the error in the attention products. We derive closed-form optimal transforms for keys and values from calibration statistics, under a high-resolution model. We show that the optimal key transform is not orthogonal and satisfies a generalized Parseval relation: the attention-aware distortion becomes mean-squared error (MSE) in the transform domain. Thus, we can use MSE-optimal vector quantizers applied directly to the transformed key coefficients. To meet the fixed-width layout requirement, we show that grouping coefficients into equal-volume partitions makes equal-size codebooks attain the variable-rate optimum under the same high-resolution model. At two bits per element, our method, termed NOVA-KV, recovers most of the long-context retrieval accuracy lost by scalar quantization methods at comparable throughput.
Primary: University of Southern California
All Institutions: University of Southern California
NOVA-KV introduces a novel non-orthogonal transform coding framework for KV cache quantization that minimizes attention product distortion, achieving significant throughput improvements and accuracy retention at 2 bits per element compared to state-of-the-art methods.
The paper proposes NOVA-KV, a method for quantizing Key-Value (KV) caches in Large Language Models (LLMs) to improve inference throughput. The core theoretical contribution is formulating KV cache compression as a transform coding problem where the distortion metric is the error in attention products (specifically key-query inner products), rather than the standard Mean Squared Error (MSE) of the vectors themselves. The authors derive a closed-form optimal transform for keys that is non-orthogonal, satisfying a generalized Parseval relation which allows the use of standard MSE-optimal vector quantizers (VQ) on the transformed coefficients. A key practical innovation is the "volume-equalizing" grouping strategy, which allows fixed-width codebooks to approximate the performance of variable-rate quantization, thereby maintaining the fixed-width layout required for efficient serving engine integration. The approach combines data-driven transforms with vector quantization, addressing the limitations of previous orthogonal-transform methods (like QuaRot or OSCAR) and scalar quantization.
The experimental evaluation is comprehensive and rigorous. The authors test NOVA-KV on multiple models (Llama-3.1-8B, Qwen3-8B/4B, GPT-OSS-20B) and benchmarks (RULER NIAH for long-context retrieval, GPQA-Diamond, HumanEval, LiveCodeBench, AIME25, MATH500). They demonstrate that at 2 bits per element, NOVA-KV significantly outperforms state-of-the-art orthogonal transform baselines (QuaRot, OSCAR) and scalar quantization, particularly in long-context retrieval tasks where accuracy degradation is most severe. The paper includes detailed ablation studies on the transform-quantizer combination and the grouping strategy. Throughput measurements show that NOVA-KV achieves significant speedups (1.6x-3.4x) over BF16 baselines on bandwidth-bound workloads, while maintaining comparable speed to other 2-bit methods. The inclusion of a production-ready serving stack implementation (SGLang) adds practical value.
The paper provides extensive implementation details, including the calibration procedure, codebook training (k-means), and the specific grouping heuristic. The algorithms are clearly defined in the appendix. The authors specify the hardware (A100, H100) and software (SGLang, Triton, CUDA) used. While the code is not explicitly linked in the provided text, the level of detail regarding the transform derivation, grouping logic, and kernel fusion strategy is sufficient for reproduction by researchers in the field. The calibration data (GPQA-Diamond prompts) is public, facilitating replication.
The method relies on a "high-resolution" model for its theoretical derivations, which may not perfectly hold at very low bit rates (2 bits), although the authors acknowledge this and use the theory to guide design rather than as a strict guarantee. The non-orthogonal transform requires a matrix-vector multiplication ($R_K^{-1}$) during the write path (encoding) and potentially affects the read path if not fused efficiently; the paper addresses this with a fused kernel, but this adds implementation complexity compared to orthogonal transforms. The performance gain on some models (like Llama-3.1-8B) is less pronounced on general benchmarks compared to long-context retrieval, suggesting the method's primary strength is in preserving attention fidelity for retrieval rather than general reasoning capabilities where the model might already be robust to quantization noise.
This work addresses a critical bottleneck in LLM deployment: memory bandwidth. By enabling efficient 2-bit KV cache quantization with minimal accuracy loss, it facilitates the serving of longer context windows and larger batches on existing hardware, potentially lowering inference costs and increasing accessibility. The theoretical framework of attention-aware transform coding could influence future work in efficient LLM inference and compression. NOVA-KV introduces a novel non-orthogonal transform coding framework for KV cache quantization that minimizes attention product distortion, achieving significant throughput improvements and accuracy retention at 2 bits per element compared to state-of-the-art methods.
Clinical decision support is moving toward committees of language-model agents deliberating on a shared workspace. We ask whether such committees can be gamed by shortcuts, cues a benchmark rewards but a clinician would ignore. Across seven cohorts on six public datasets spanning text (MedQA-USMLE, MedMCQA, MIMIC-CXR reports), imaging (NIH ChestX-ray14, MIMIC-CXR-JPG, CheXpert) and tabular ICU records (SUPPORT2), Gemini committees resist these cues in isolation (flip 5-16%), yet a socially plausible shortcut spreads: when two peers assert the same wrong answer, the holdout under test adopts it in 38% of cases, as does a false "pre-screen" system flag, on both capability tiers. Of three oversight agents, a gate cannot separate adoption from honest agreement (false-positive rate 100%); a same-lineage judge reading only the transcript flags adoption on text (precision 100%, recall 93%) but collapses onto the gate in imaging; a referee that privately re-queries the holdout transfers to imaging (77-88% precision, 13-21% false-positive rate). Tripling a cue's visual salience does not move contagion, whereas a second peer voice raises it by half again. Gaming a hidden rubric is near-silent: only 1/10 text and 1/134 imaging drifters name the rubric they moved toward. What games a committee is social plausibility, and only a referee independent of self-report catches it. Code: https://github.com/criticaldata/benchmaxxing
Primary: MIT Critical Data
All Institutions: MIT Critical Data, Georgia State University, Politecnico di Milano, American International School Vienna, Boston University, Technische Hochschule Lübeck, Substrate Labs, University of British Columbia, Dartmouth College, University of Maryland, McGill University, University of Texas at Austin, King's College London, Beth Israel Deaconess Medical Center
This paper provides a rigorous empirical demonstration of social contagion of errors in multi-agent clinical AI systems, introducing a novel "referee" oversight mechanism that outperforms traditional judge-based evaluations in detecting benchmark gaming and shortcut cascades.
The paper introduces a novel evaluation framework called DOJO (Distributed Open Justice Oversight) to detect "benchmaxxing" in multi-agent clinical systems. The core methodological innovation is the "referee agent," which performs a private re-query of the holdout agent to distinguish between genuine reasoning and social conformity (shortcut cascades). This contrasts with standard "LLM-as-a-judge" approaches that rely solely on transcript analysis. The experimental design involves creating controlled environments where peer agents assert incorrect answers to observe if a holdout agent adopts them, effectively measuring social contagion of errors. The approach is theoretically sound and addresses a critical gap in evaluating agentic systems: the difference between isolated capability and collaborative reliability.
The authors conduct extensive experiments across seven cohorts on six public datasets (MedQA, MedMCQA, MIMIC-CXR, NIH ChestX-ray14, CheXpert, SUPPORT2). Key findings include: 1) Single agents are largely resistant to visual/textual shortcuts in isolation. 2) Social pressure from two peers asserting the same wrong answer causes adoption rates to spike to 38-61%. 3) Standard oversight mechanisms (gate, same-lineage judge) fail to detect this adoption, while the referee agent succeeds. 4) Self-reporting by agents is unreliable for detecting reward hacking. The results are robust across modalities (text, imaging, tabular) and demonstrate that social plausibility, not just cue strength, drives errors. The statistical analysis is rigorous, using exact McNemar tests and bootstrap confidence intervals, though some cohort sizes (e.g., NIH cascade n=35) are small.
The paper provides a GitHub repository. However, the authors explicitly note reproducibility challenges: MIMIC-CXR data cannot be fully released due to PhysioNet terms, and the imaging library version affects cue rendering. They provide checksums and a fixed font face to mitigate some issues. The use of a content-addressed cache for API calls aids in replaying specific runs. Despite these efforts, full reproducibility is hindered by data access restrictions and API dependencies.
The study is limited by the small sample sizes in some imaging cascade experiments (n=35 for NIH). The reliance on Gemini models means findings may not generalize to other LLM architectures or families. The "referee" agent's effectiveness is specific to the designed setup and may not capture all forms of agentic failure. The paper acknowledges that some metrics were structurally constrained (e.g., recall being a subset relation), which limits the interpretability of certain oversight metrics. Additionally, the social dynamics simulated are simplified compared to real-world clinical committees.
This work has significant implications for the deployment of multi-agent systems in high-stakes domains like healthcare. It highlights the risks of "social contagion" of errors in collaborative AI systems and challenges the assumption that ensemble methods or committee-based approaches automatically improve reliability. The findings suggest that oversight mechanisms must be structurally independent of the decision-making process (e.g., via private re-queries) rather than relying on self-reporting or transcript analysis. This could reshape how benchmarks are designed for agentic systems, emphasizing the need for dynamic, intervention-based evaluation rather than static accuracy metrics. This paper provides a rigorous empirical demonstration of social contagion of errors in multi-agent clinical AI systems, introducing a novel "referee" oversight mechanism that outperforms traditional judge-based evaluations in detecting benchmark gaming and shortcut cascades.
Dense pretrained transformers do not naturally expose interpretable units for circuit extraction. Existing approaches obtain such units by learning auxiliary sparse representations or training sparse models, incurring substantial additional computation while potentially introducing a fidelity gap between the representation being analyzed and the original pretrained model. We propose Sparse Weight Decomposition (SWD), which reparameterizes pretrained linear projections by factorizing each weight matrix into two sparse factors whose shared intermediate coordinates serve as individually addressable circuit units. Without training a separate replacement network, this parametric representation supports the same scoring, selection, and ablation circuit extraction workflow used for methods that learn sparse features. Across single-matrix replacements, SWD matches the held-out fidelity achieved by Transcoder and other strong baselines while using less than 1% of the data that those baselines use to train their replacements. For matched replacement fidelity, SWD reaches the same circuit sufficiency and necessity targets with fewer active read/write edges and selected units across tasks on GPT-2, Qwen2.5, and Qwen3.5-27B. We further show that SWD remains effective for full-model replacement of all attention and MLP weight matrices after fine-tuning the nonzero factor values. Finally, SWD also features a zero-data variant, allowing broader use of mechanistic interpretability analysis (e.g., per-step analysis).
Primary: Veri-Safe
All Institutions: Veri-Safe
Sparse Weight Decomposition offers a highly efficient and effective method for extracting interpretable circuit units from dense transformers by sparsifying weight matrices, significantly reducing the computational cost of mechanistic interpretability analysis while maintaining high fidelity and circuit quality.
The paper proposes Sparse Weight Decomposition (SWD), a method to extract interpretable circuit units from dense pretrained transformers by factorizing weight matrices into two sparse factors. This approach leverages Double Sparse Factorization (DSF) to create "bottleneck units" that are individually addressable for circuit extraction (scoring, selection, ablation). The methodology is theoretically grounded in matrix factorization and optimization (ADMM), aiming to bridge the gap between dense model weights and sparse, interpretable causal graphs. The key innovation is avoiding the training of auxiliary networks (like Transcoders) by directly sparsifying the existing weight matrices, significantly reducing computational overhead.
The authors conduct extensive experiments on GPT-2 Small, Qwen2.5 (0.5B-3B), and Qwen3.5-27B. They evaluate replacement fidelity (Cross-Entropy loss) and circuit cost-quality tradeoffs (sufficiency/necessity vs. active edges/units). Results indicate SWD matches the fidelity of Transcoders and VPD while using <1% of the training data. Crucially, SWD achieves better circuit efficiency (fewer active edges) for matched fidelity. The full-model replacement experiment on GPT-2 demonstrates scalability, and the zero-data variant shows promise for interpretability without calibration data. The baselines are strong and relevant (Transcoder, VPD, Sparse Pretraining).
The paper provides code and model links. The methodology is well-described, including optimization details (ADMM, hyperparameters). The use of standard benchmarks (Edge-Pruning, auto-circuit) and public models ensures reproducibility. The distinction between calibration-dependent and zero-data variants is clearly defined.
The paper acknowledges that SWD circuits are local and non-unique due to scaling/permutation symmetries in factorization. It also notes that identifiability is not guaranteed and that the method relies on first-order attribution, which may miss higher-order interactions. The full-model experiment is limited to GPT-2 Small, raising questions about scalability to larger models for full replacement. The "zero-data" variant has lower fidelity, limiting its applicability in some contexts.
This work significantly lowers the barrier to mechanistic interpretability by providing a computationally efficient way to extract circuits from large models without training expensive replacement networks. This could accelerate research into model internals, safety, and debugging. The zero-data variant allows for analysis of models where calibration data is unavailable or privacy-sensitive. Sparse Weight Decomposition offers a highly efficient and effective method for extracting interpretable circuit units from dense transformers by sparsifying weight matrices, significantly reducing the computational cost of mechanistic interpretability analysis while maintaining high fidelity and circuit quality.
Self-evolving agents increasingly convert interaction histories into reusable skills that persist beyond individual tasks. While prior work studies memory and retrieval poisoning, such attacks only affect agents when poisoned records are retrieved as context. We uncover a new and more fundamental risk: poisoned experiences can be transformed by the agent itself into durable behavioral artifacts. We present SkillJack, the first attack that exploits the experience-to-skill pipeline of self-evolving agents. Instead of directly manipulating runtime context, SkillJack hijacks the agent's own learning process to implant malicious behaviors into its reusable skill repertoire. We identify three key properties of this transformation: sanitization whitewashing, where malicious intent is obscured during skill extraction; cross-layer promotion, where transient experiences become persistent capabilities; and persistence isolation, where the attack survives removal of its original source records. We evaluate SkillJack on two representative systems, SkillX and Anything2Skill, using a shared dataset of 150 trajectories across four policy-risk categories. Results show that skill extraction substantially reduces attack detectability: in SkillX, safety detection drops from 98.5\% for poisoned trajectories to 11.4\% for extracted skills, while Anything2Skill shows a similar effect. Meanwhile, the implanted skills remain effective, achieving attack success rates of 56.2\% and 89.2\% on the two systems, respectively. Furthermore, 80.0\% of skill-mediated attacks persist after deleting the original poisoned records, and some skills unintentionally activate on benign queries. Our findings reveal skill evolution as a new attack surface and motivate provenance-aware skill lifecycle protection. Our code is available at https://github.com/Tencent/AI-Infra-Guard/research/skilljack.
Primary: Tencent Zhuque Lab
All Institutions: Tencent Zhuque Lab
SkillJack presents a critical security analysis of self-evolving agents, revealing that the skill extraction process itself can be hijacked to create persistent, hard-to-detect backdoors, fundamentally changing the threat model for autonomous AI systems.
The paper introduces "SkillJack," a novel attack vector targeting the experience-to-skill pipeline in self-evolving agents. The core methodology exploits the skill extraction process, where the agent's own learning mechanisms are used to "sanitize" and persist malicious behaviors as reusable skills. The authors identify three key properties: sanitization whitewashing, cross-layer promotion, and persistence isolation. This represents a significant conceptual shift from traditional context-poisoning attacks, moving the attack surface to the agent's internal memory consolidation phase. The approach is theoretically sound and addresses a critical gap in the security of autonomous agents that rely on long-term memory and skill reuse.
The evaluation is conducted on two representative systems, SkillX and Anything2Skill, using a dataset of 150 trajectories. The results are compelling and demonstrate the efficacy of the attack: safety detection drops drastically from ~98% on raw trajectories to ~11% on extracted skills, while attack success rates remain high (56-89%). The persistence of the attack after deleting source records (80%) is a strong empirical finding. However, the dataset size (150 trajectories) is relatively small for generalizing to broader agent architectures, and the evaluation is limited to two specific systems. While the findings are robust within this scope, the generalizability to more complex, multi-modal, or larger-scale agents remains to be seen.
The authors provide a code repository link, which enhances reproducibility. The description of the attack vectors and the evaluation metrics is clear. The use of a shared dataset across two systems allows for comparative analysis. However, the specific implementation details of the "sanitization" and "skill extraction" algorithms in SkillX and Anything2Skill are proprietary or complex, which might make exact replication difficult without full access to the underlying agent frameworks.
The primary limitation is the scale of the evaluation. 150 trajectories is insufficient to claim broad security guarantees for the entire class of self-evolving agents. The study focuses on specific policy-risk categories, and the behavior of the attack on more nuanced or adversarial environments is not explored. Additionally, the paper does not extensively discuss the computational overhead or feasibility of defending against such attacks, leaving the practical implications for system designers somewhat open.
This paper has significant broader impact for the AI safety and security community. It highlights a fundamental vulnerability in the design of self-evolving agents, specifically the assumption that experience replay or skill extraction is inherently safe. It motivates the need for provenance-aware skill lifecycle protection and new defense mechanisms that can detect malicious patterns in extracted skills, not just raw interactions. This work will likely influence the design of secure memory modules in future autonomous agents. SkillJack presents a critical security analysis of self-evolving agents, revealing that the skill extraction process itself can be hijacked to create persistent, hard-to-detect backdoors, fundamentally changing the threat model for autonomous AI systems.
We construct unambiguous DNFs having width $O(n)$ but $0$-certificate complexity $Ω(n^2)$. By utilizing the special structure of these DNFs, we prove a lifting theorem with a constant-sized gadget that lifts the DNF to a communication problem, while losslessly translating the separation in certificate complexity to a separation in communication complexity. This leads to an optimal refutation of the Alon-Saks-Seymour conjecture, as well as an optimal communication lower bound for the Clique versus Independent Set problem, improving the previous results of Balodis, Ben-David, Göös, Jain and Kothari (FOCS 2021, SICOMP 2023) by several doubly logarithmic factors. As further applications of our construction to query complexity and learning theory, we exhibit: (a) a family of Boolean functions that has an optimal quartic separation between certificate complexity and approximate degree, and (b) a sample compression lower bound of $Ω(\sqrt{\log c})$ for multiclass concept classes over $c$ labels.
Primary: Stanford University
All Institutions: Stanford University
This paper provides an optimal refutation of the Alon-Saks-Seymour conjecture and establishes new lower bounds in communication and query complexity through novel constructions of unambiguous DNFs and a constant-sized lifting gadget. The work represents a significant theoretical contribution to machine learning theory, offering deep insights into the fundamental limits of learning and computation, with rigorous proofs that advance the state of the art in complexity theory.
The paper presents a significant theoretical advance in computational complexity and learning theory. The core methodology involves constructing unambiguous Disjunctive Normal Forms (DNFs) with specific width and certificate complexity properties. The authors then employ a lifting theorem with a constant-sized gadget to translate these query complexity separations into communication complexity lower bounds. This approach is mathematically rigorous and leverages deep connections between boolean function analysis, communication complexity, and learning theory. The construction of the DNFs and the proof of the lifting theorem constitute a novel methodological contribution to the field of theoretical computer science.
As a theoretical computer science paper, this work does not contain empirical experiments, datasets, or benchmarks in the traditional machine learning sense. The "results" are mathematical proofs establishing lower bounds and separations. Therefore, experimental evaluation is not applicable. The validity rests entirely on the correctness of the proofs.
Theoretical papers are reproducible in the sense that their proofs can be verified. The paper provides sufficient detail in the abstract and structure (implied by the section headers) to allow for verification by experts in the field. However, without access to the full text's proofs, one must rely on the abstract's claims. The acknowledgements mention interaction with LLMs, which is a transparency note but does not affect the mathematical reproducibility of the results.
The primary limitation is that this is a theoretical result. While it has profound implications for understanding the limits of learning and computation, it does not provide immediate algorithms or practical tools for practitioners. The "applications" mentioned (sample compression lower bounds, approximate degree separation) are also theoretical bounds. Furthermore, the reliance on LLMs for idea development, while acknowledged, is a minor concern regarding the originality of the *ideation* process, though the *execution* and *proof* remain the authors' responsibility.
This paper has high impact within the theoretical machine learning and complexity theory communities. Refuting the Alon-Saks-Seymour conjecture is a major milestone. The improved lower bounds for Clique vs. Independent Set and the new separations in query complexity provide fundamental insights into the hardness of learning and computation. It sets new benchmarks for what is achievable in certificate complexity and communication complexity, guiding future research in these areas. This paper provides an optimal refutation of the Alon-Saks-Seymour conjecture and establishes new lower bounds in communication and query complexity through novel constructions of unambiguous DNFs and a constant-sized lifting gadget. The work represents a significant theoretical contribution to machine learning theory, offering deep insights into the fundamental limits of learning and computation, with rigorous proofs that advance the state of the art in complexity theory.
Language models are increasingly promoted from examinees to examiners: they write the test suites, answer keys, rubrics, and reward functions that define correctness for other systems. We measure the capability that role assumes and find it lacking under the protocol the role is usually deployed with, one-shot greedy authoring with no test-time reasoning. Across four reference constructions - two with complete finite truth, one with a hardened executable reference (HumanEval+/MBPP+), one with an explicitly incomplete lexical reference (WordNet) - models judge whether a candidate belongs far better than they author the set itself. On the incompleteness-proof algorithmic construction the gap is +0.34 to +0.29 F1 over a 24x parameter range and does not close; on executable code, models judging at F1 0.74-0.90 author suites admitting only 19-42% of oracle-correct solutions. A control locates the deficit: asked to emit the predicate rather than its extension, the same models reach F1 about 0.99. The failure is not missing knowledge or an inability to specify, but an inability to materialise the region a specification induces. The dominant error is omission, which resists audit: an over-inclusion is a token a reviewer can challenge, a missing member an absence whose discovery is the authoring problem itself. Models detect planted over-inclusions 6-7x more often than planted omissions, and a production deployment of 43,227 items fails omission-first at 10:1. Wired into RLVR, an authored key costs 1.9 points of accuracy against an exact oracle and 18.5 WordNet-relative (six paired seeds, p=0.031). Gating authored verifiers on a known-correct probe cuts false rejection from 58-92% to at most 5%, but keeps only 5-39% of suites. Repairing them instead, by rewriting each wrong expected value to what a reference execution returns, raises yield 3.3-10.6x across four author families.
Primary: University of Macau
All Institutions: University of Macau
The paper makes a compelling and empirically rigorous case for a fundamental asymmetry in LLM capabilities: while models are proficient at judging membership in a set, they are significantly less capable of authoring the set itself, a deficit driven by silent omissions that resists standard audit and has tangible costs in RLVR pipelines.
The paper employs a rigorous comparative methodology to isolate the "judging-authoring asymmetry" in Large Language Models (LLMs). By constructing ground-truth benchmarks where the acceptable set is mechanically decidable (algorithmic) or executable (code), the authors create a controlled environment to measure the fidelity of authored sets against execution-based judgments. The methodology is strong because it avoids the circularity of using LLMs to grade LLMs, instead relying on oracles and execution. The decomposition of the deficit into "emission," "stopping," and "specification" components via format controls (JSON checkboxes vs. free text) and intensional controls (writing predicates vs. enumerating sets) provides a deep mechanistic understanding of the failure mode. The use of multiple model families and scales ensures the findings are not artifacts of a specific architecture.
The experimental evaluation is comprehensive and robust. It covers four distinct construction types: complete finite truth (word lists with simple predicates), executable truth (HumanEval+/MBPP+), lexical truth (WordNet), and arithmetic truth. The results consistently show that models judge membership significantly better (F1 0.74-0.90) than they author the corresponding sets (F1 0.19-0.42 for code). The paper includes ablation studies on prompt sensitivity, emission format, and model scale. Crucially, it tests frontier models (GPT-5.1, Claude Opus 4.8) and finds the gap persists, although test-time reasoning can close it for simple rules. The inclusion of a "production-scale" field evidence section (43,227 items) adds significant weight to the practical relevance of the findings. The statistical significance is addressed via paired seeds and confidence intervals.
The paper provides detailed descriptions of the construction protocols, including the specific predicates, word lists, and code benchmarks used. The use of deterministic seeds for sampling and the clear definition of the authoring vs. execution interfaces enhance reproducibility. The authors explicitly state that no model output is graded by a model, relying instead on mechanical execution or oracle labels, which facilitates independent verification. The code and data are likely available given the standard practices of such venues, though specific URLs are not in the text. The clear distinction between the "gate" and "repair" mitigations allows other researchers to replicate the baseline failures and improvements.
The primary limitation is the scope of the "authoring" task. The paper focuses on one-shot greedy decoding without test-time reasoning for the main results, acknowledging that reasoning can close the gap for simple rules. This means the findings may not apply to systems that utilize extensive chain-of-thought or self-correction. Additionally, the "lexical" construction suffers from the inherent incompleteness of WordNet, which the authors correctly identify as a confound for precision, though they mitigate this by relying on recall and complete-truth constructions for their main claims. The "repair" mitigation requires a known-correct reference solution, which is not always available in real-world scenarios, limiting the immediate applicability of the proposed fix.
This paper has significant implications for the development of LLM-based agents, automated testing, and reinforcement learning from verifiable rewards (RLVR). By demonstrating that LLM-authored verifiers are prone to silent omissions and over-specification, it warns against blindly trusting model-generated test suites and reward functions. The finding that omission errors resist audit suggests that current evaluation pipelines may be systematically biased towards under-acceptance. The proposed mitigation (gating on known-correct probes) offers a practical path forward for deploying LLM-authored components safely. This work shifts the community's focus from "can LLMs judge?" to "can LLMs define the space of correctness?", a crucial distinction for building reliable AI systems. The paper makes a compelling and empirically rigorous case for a fundamental asymmetry in LLM capabilities: while models are proficient at judging membership in a set, they are significantly less capable of authoring the set itself, a deficit driven by silent omissions that resists standard audit and has tangible costs in RLVR pipelines.
Flow Matching trains continuous-time generative models by regressing the velocity field of a probability path between a simple source distribution and a target data distribution. The coupling that pairs source and target samples strongly affects optimization and sample quality, but structured couplings typically rely on mini-batch transport or assignment procedures whose cost grows at least quadratically in batch size. We propose Quantile Coupling Flow Matching (QC-FM), a lightweight one-sided coupling: rather than matching two pre-sampled batches, it samples only the data batch and constructs each paired source directly. Data ranks projected along a small number of random orthogonal directions are mapped to Gaussian quantiles, and the latent code is completed in the orthogonal complement by conditional Gaussian sampling. The construction is one-dimensional per slice, so the coupling requires no pairwise cost matrix and no assignment to solve. We show that, for each drawn frame, this coupling eliminates the irreducible regression variance along every selected slice and makes the ideal flow exactly straight there, while leaving the sampling prior unchanged: generation still starts from the standard Gaussian, and the training source deviates from it only through the copula of the slice codes, whose transport cost we bound. For training, we apply QC to an anchor subset and complete the remaining source slots with exact Gaussian samples, retaining the QC bias while preserving an explicit signal from the Baseline coupling. Across CIFAR-10, CelebA, FFHQ, and ImageNet-64, QC-FM improves over the Baseline under matched training budgets, reducing FID by up to 12.9%, and outperforms OT-CFM on all four datasets. These results suggest that preserving projected rank structure is a simple and scalable way to inject useful geometric bias into FM couplings without solving a mini-batch transport problem.
Primary: Unknown
All Institutions: Unknown
This paper introduces Quantile Coupling Flow Matching, a computationally efficient, one-sided coupling scheme for Flow Matching that reduces regression variance and improves sample quality without the quadratic cost of mini-batch optimal transport.
The paper proposes Quantile Coupling Flow Matching (QC-FM), a method to structure the coupling between source (noise) and target (data) distributions in Flow Matching (FM). Instead of solving an expensive optimal transport (OT) assignment problem within mini-batches, QC-FM projects data onto random orthogonal directions, ranks the projections, and maps these ranks to Gaussian quantiles to construct the source samples. This "one-sided" coupling is computationally efficient ($O(B \log B)$ vs $O(B^2)$ or $O(B^3)$) and theoretically motivated by the reduction of irreducible regression variance along the selected slices. The authors also introduce hybrid schemes (Mixture and Adjacency) to handle the remaining source slots. The methodology is sound, leveraging well-known concepts from sliced Wasserstein distances and comonotone coupling, but applies them in a novel, efficient way for continuous-time generative modeling.
The authors evaluate QC-FM on standard image generation benchmarks: CIFAR-10, CelebA, FFHQ, and ImageNet-64. They compare against the Baseline (independent coupling) and OT-CFM (minibatch optimal transport). Results show that QC-FM-Mixture consistently outperforms the Baseline and OT-CFM in terms of FID scores under matched training budgets. The paper provides detailed ablation studies on hyperparameters (number of slices $k$, anchor ratio $p$) and computational cost analysis, demonstrating significant speedups in coupling construction time compared to Hungarian/Sinkhorn solvers. The experiments are rigorous and support the claims of improved sample quality and efficiency.
The paper provides a detailed description of the algorithm, including the construction of the source samples, the hybrid completion schemes, and the theoretical bounds. The experimental setup is well-described, specifying model architectures (EDM-based U-Net), optimizers, and training schedules. The code is not explicitly linked in the text provided, but the algorithmic details are sufficient for reproduction. The theoretical proofs in the appendix add to the clarity of the method's properties.
The method is batch-local; the quantiles are estimated from the current mini-batch, which may introduce noise or instability compared to global quantile estimates. The performance gain is moderate (up to 12.9% FID reduction), and the method does not achieve global optimality. The choice of hyperparameters ($k$, $p$) appears dataset-dependent, requiring some tuning or heuristic selection. The theoretical analysis focuses on per-slice properties and does not provide a direct bound on final FID or sample quality.
By providing a scalable alternative to expensive optimal transport couplings in Flow Matching, QC-FM enables more efficient training of continuous-time generative models. This could lower the computational barrier for high-quality image generation and facilitate the use of structured couplings in larger-scale settings. The approach may also inspire similar efficient coupling strategies in other diffusion or flow-based modeling frameworks. This paper introduces Quantile Coupling Flow Matching, a computationally efficient, one-sided coupling scheme for Flow Matching that reduces regression variance and improves sample quality without the quadratic cost of mini-batch optimal transport.
Large language model agents increasingly act through stateful tools, yet model generation and environment execution remain serialized at every step. As decoding accelerates, tool execution becomes a growing bottleneck. Existing action- or observation-only speculation leaves much of this latency exposed: value is concentrated in a few slow calls, some outcomes emerge only through execution, and longer lookahead typically requires an increasingly unlikely chain of action predictions. We present AOSpec, a lossless framework that co-speculates actions and observations across the full agent-environment loop. Expected Value Decoding (EVD) directs observation speculation toward outcomes with the greatest expected latency benefit, optimizing expected time hidden rather than hit rate. For outcomes only execution can reveal, AOSpec launches latency-critical target actions in isolated forks that contain their effects, while Joint Action-State Verification (JASV) verifies both the action and its origin state against committed execution before reuse. JASV recasts long-horizon action dependency from full-chain prediction into target action-state verification, breaking the lookahead--accuracy tradeoff and unlocking long-range overlap without sacrificing serial semantics. Across Terminal-Bench serving settings spanning four harnesses, five actor models, and five serving speeds, AOSpec outperforms every practical baseline, reducing mean end-to-end latency by 11.8-32.5% and p99 latency by up to 42.8%. Its gains increase as decoding accelerates, and its observation model transfers from Terminal-Bench to SWE-bench Verified without retraining.
Primary: Unknown
All Institutions: Unknown
The paper presents a practical and timely optimization for LLM agent serving, offering moderate novelty in adapting speculative decoding to the agent loop. While the latency gains are promising, the technical contribution is incremental rather than transformative, and the full rigor of the claims remains unverified without the complete text and code.
The paper proposes "AOSpec," a framework for low-latency serving of LLM agents. The core technical contribution lies in "co-speculation" of actions and observations, moving beyond traditional speculative decoding which typically only predicts tokens. The method introduces Expected Value Decoding (EVD) to prioritize speculation paths with high latency benefits and Joint Action-State Verification (JASV) to verify the consistency of actions and states in isolated forks. The methodology addresses the specific bottleneck of tool execution in agent loops, which is a valid and important problem. However, the approach is largely an engineering adaptation of speculative decoding principles to the agent domain rather than a fundamental theoretical breakthrough. The "isolated forks" mechanism for containing side effects is a standard virtualization concept applied to LLM inference, which is clever but not novel in computer science terms.
The evaluation is conducted on Terminal-Bench and SWE-bench Verified, which are relevant benchmarks for agent performance. The results claim significant latency reductions (11.8-32.5% mean, up to 42.8% p99). The experimental setup spans multiple models and serving speeds, providing a reasonable level of robustness. However, the abstract-only text provided lacks detailed tables, statistical significance tests, or ablation studies that would confirm the magnitude of these gains. The claim of "lossless" performance is critical; if the speculation introduces any semantic drift in the agent's reasoning, the utility is compromised. The paper asserts this is handled by JASV, but without seeing the verification logic's overhead and failure modes, the net benefit is hard to fully assess. The transferability to SWE-bench is a strong point, suggesting generalizability.
The paper text provided is a skeleton with section headers but no detailed methodology or experimental code. Reproducibility cannot be assessed from the text alone. The claims rely on specific implementations of EVD and JASV which are not described in sufficient detail in the abstract. The lack of code or detailed algorithmic pseudocode in the provided text is a significant barrier to immediate reproducibility.
The primary limitation is the dependency on the accuracy of the observation model. If the observation model is incorrect, the speculation fails, potentially requiring rollback or fallback to sequential execution, which could negate latency gains. The "isolated forks" approach likely incurs memory and computational overhead for maintaining state copies, which might become prohibitive for long-horizon agents with large context windows. Furthermore, the assumption that tool execution is the sole bottleneck may not hold for all agent tasks, particularly those with heavy computational steps or network latency that is not parallelizable with decoding.
This work contributes to the efficiency of LLM agents, making them more viable for real-time applications. By reducing latency, it lowers the cost and improves the user experience of agent-based systems. However, faster agents could also accelerate the deployment of automated systems in critical domains, raising safety and alignment concerns if not properly monitored. The focus on efficiency is positive for the field's scalability. The paper presents a practical and timely optimization for LLM agent serving, offering moderate novelty in adapting speculative decoding to the agent loop. While the latency gains are promising, the technical contribution is incremental rather than transformative, and the full rigor of the claims remains unverified without the complete text and code.
Modern vision language models (VLMs) turn high-resolution images into long sequences of visual tokens. Every token traverses the language decoder and persists in its prompt KV cache, inflating inference cost and motivating aggressive visual compression. Existing score-based methods assign each token an independent importance score and retain the Top-K. However, text queries consume collective, signed attention messages from the visual population, not isolated patches. Consequently, equally sized Top-K sets can repeatedly cover one salient region, omit sparse but complementary evidence and discard information carried by the removed population. We therefore formulate faithful visual compression as constructing a compact coreset for decoder messages, and introduce our training-free Grounded Message Coreset Pruning (GMC) which jointly allocates support across query-grounded, appearance, and coordinate-aware evidence, then transports discarded states into selected representatives at their original multimodal positions before physical compaction and native attention resume. This decomposes faithful compression into two coupled components, including selecting carriers that cover the required message modes and realizing the signed population message on those carriers. We further derive bounds connecting their errors to signed-message distortion, visual innovation, and candidate-margin stability. Experiments across multiple VLM families and diverse benchmarks demonstrate strong performance, with GMC-H2 retaining 97.78% Full-relative mean capability on Qwen2.5-VL-7B using 80.2% fewer visual tokens, while GMC-L16 reaches 100.36%. Controlled interventions verify that collective support and population realization jointly drive these gains.
Primary: Cardiff University
All Institutions: Cardiff University, Chinese Academy of Sciences, Foundation Model Research Center, Institute of Automation, School of Engineering, School of Future Technology, University of Chinese Academy of Sciences, Wuhan AI Research
[One sentence main contribution]. [The paper introduces GMC, a training-free visual token compression method that formulates faithful compression as constructing a coreset for decoder messages, jointly optimizing support allocation and population realization to preserve signed, complementary evidence, achieving state-of-the-art fidelity with significantly reduced token counts across multiple VLM families.]
The paper proposes "Grounded Message Coreset Pruning" (GMC), a training-free method for compressing visual tokens in Vision-Language Models (VLMs). The core theoretical contribution is reframing token selection not as independent importance scoring, but as constructing a "coreset" for the collective, signed attention messages received by the language decoder. The method involves two coupled steps: (1) Support Allocation: Using a facility-location objective with query-grounded, appearance, and spatial clients to select a subset of tokens that cover complementary evidence modes; (2) Population Realization: Transporting the hidden states of discarded tokens to the selected representatives, preserving their original multimodal coordinates and signed contributions before native attention resumes. The authors provide theoretical bounds connecting the compression error to signed-message distortion and visual innovation. The approach is technically sophisticated, moving beyond simple redundancy reduction to address the specific mechanics of cross-attention in VLMs.
The evaluation is extensive, covering multiple VLM families (Qwen2.5-VL-7B, LLaVA-1.5-7B) and diverse benchmarks (POPE, AMBER, HallusionBench, CHAIR, TextVQA, ChartQA, MME, MMBench, GQA). The results demonstrate that GMC retains significantly higher fidelity than state-of-the-art baselines (VisionZip, MMTok) at aggressive compression ratios (e.g., retaining ~98% capability with 80% fewer tokens). The paper includes rigorous ablation studies isolating the effects of support allocation vs. population realization, and controlled interventions verifying the theoretical claims. The performance gains are consistent across discriminative and generative tasks, and the method shows strong transferability across different model architectures without retraining.
The paper provides detailed descriptions of the algorithm, including the facility-location solver, the transport mechanism, and the coordinate preservation strategy. It mentions frozen probes and specific settings in the appendix (referenced but not fully visible in the provided text snippet, though standard for such submissions). The training-free nature of the method enhances reproducibility as it requires no additional training data or parameter updates. The use of standard benchmarks and open-source base models facilitates independent verification.
The method introduces computational overhead during the pruning phase due to the facility-location optimization and state transport, although this is a one-time prefill cost. The theoretical bounds, while insightful, rely on assumptions about Lipschitz continuity and submodularity that may not hold perfectly in deep non-linear transformers. The paper focuses on static image inputs; the behavior with video or highly dynamic sequences is less explored. Additionally, the "appearance" and "spatial" clients rely on fixed heuristics or banks which might require tuning for specific domains (e.g., dense text vs. open scenes).
This work addresses a critical bottleneck in deploying large VLMs: inference cost and memory usage. By enabling faithful compression without retraining, it lowers the barrier for running powerful multimodal models on edge devices or in high-throughput applications. The theoretical framework of "message coresets" could inspire similar approaches for other sequence-to-sequence or multimodal architectures where collective context matters. It also highlights the importance of preserving signed, complementary information in attention mechanisms, which may influence future model design and pruning strategies. [One sentence main contribution]. [The paper introduces GMC, a training-free visual token compression method that formulates faithful compression as constructing a coreset for decoder messages, jointly optimizing support allocation and population realization to preserve signed, complementary evidence, achieving state-of-the-art fidelity with significantly reduced token counts across multiple VLM families.]
Vision-language models (VLMs) are expected to revise their reasoning when visual evidence changes. Failures to do so are often attributed to insufficient visual attention or contextual inertia, leaving unclear what models reuse instead of recomputing from the current image. We show that evidence-bearing reasoning in a prior chain of thought (CoT) can form a textual shortcut that competes behaviorally with visual recomputation. Across 16 VLMs, a matched counterfactual analysis identifies evidence-bearing content as the most robust carrier of prior-CoT influence. Removing this evidence-bearing content shifts answer preference more than removing length-matched non-evidence context or the final-answer span, with prior control weakening progressively as more stale evidence is removed. Reordering this evidence also weakens prior control, showing that its organization modulates shortcut strength. Beyond the immediate answer, the shortcut can retain residual influence after answer correction: weakening current-image support shifts preference back toward the prior answer, while repeated prior answers and reused premises arise mainly when the shortcut remains active. To limit this influence, we introduce Fresh-State Attention Firewall (FSAF), a training-free intervention that isolates fresh computation from the prior CoT. Across five VLMs, FSAF raises visual update rate from 35.28% to 53.61% and reduces prior-answer rate from 39.22% to 3.67%. Reliable VLM self-reflection therefore requires more than looking again: fresh visual recomputation must be protected from stale textual reuse.
Primary: JD.com
All Institutions: JD.com
The paper makes a significant contribution by diagnosing the "textual shortcut" problem in VLM self-reflection and proposing a novel, training-free attention masking intervention (FSAF) that effectively mitigates this issue, leading to more reliable visual recomputation across a wide range of models.
The paper proposes a rigorous diagnostic framework to isolate "textual shortcuts" in Vision-Language Models (VLMs) during self-reflection. The core methodological contribution is the "Fresh-State Attention Firewall" (FSAF), a training-free intervention that uses attention masking to prevent the model's fresh reasoning trace from attending to the prior, potentially stale, chain-of-thought. The diagnostic methodology involves a matched counterfactual analysis where evidence-bearing content is systematically removed or reordered to measure its causal influence on answer preference. This approach is technically sound, leveraging standard transformer attention mechanisms but applying them in a novel, interventionist manner to diagnose internal model behavior. The distinction between "evidence-bearing" and "non-evidence" context is well-defined and operationally implemented.
The evaluation is extensive, covering 16 different VLMs across multiple families (Qwen, Gemma, InternVL, Kimi). The experiments are carefully controlled, using paired comparisons to isolate the effect of the prior CoT. The results are robust: removing evidence-bearing content consistently shifts answer preference toward the current image, and FSAF significantly improves the "visual update rate" while reducing "prior-answer rate." The inclusion of "support withdrawal" tests to show residual dependence even after correct answers is a strong empirical addition. The use of a large language model as a semantic judge is noted, which is a standard but imperfect practice; however, the paired design mitigates some of this noise. The scale of evaluation (16 models) provides high confidence in the generalizability of the findings.
The paper provides detailed implementation specifics, including the exact attention masking logic, the conversation templates, and the evaluation protocols. The use of vLLM and Transformers backends is standard. The code for FSAF is described in sufficient detail for replication. The dataset (VS-Bench) is referenced from prior work, ensuring consistency. The paper includes an appendix with extensive ablation studies and protocol maps, enhancing reproducibility.
The primary limitation is that FSAF is a training-free intervention that modifies the inference-time attention pattern. While effective, it may not be compatible with all model architectures or inference engines that do not expose low-level attention hooks. Furthermore, the "semantic judge" introduces a potential bias, although the paired design helps. The paper focuses on Qwen models for the FSAF evaluation, which limits the generalizability of the *intervention's* effectiveness to other architectures, although the *diagnosis* is broader. The method assumes that the prior CoT is the primary source of the shortcut, which might not hold in all complex reasoning scenarios involving multi-step visual grounding.
This work has significant implications for the reliability of VLMs in safety-critical applications where self-correction is expected to be robust. By identifying that VLMs often "reuse" stale reasoning rather than "recomputing" from visual evidence, the paper highlights a fundamental flaw in current self-reflection paradigms. The proposed FSAF offers a practical, immediate solution to improve VLM reliability without retraining. This could lead to more trustworthy AI systems in domains like medical imaging or autonomous driving, where visual grounding is paramount. The paper makes a significant contribution by diagnosing the "textual shortcut" problem in VLM self-reflection and proposing a novel, training-free attention masking intervention (FSAF) that effectively mitigates this issue, leading to more reliable visual recomputation across a wide range of models.
We present LiveLight, the first diffusion-based framework for real-time streaming video relighting with interactive 3D lighting control. Achieving this is non-trivial, as it requires overcoming three critical challenges: effectively injecting dynamic 3D lighting into a diffusion model, maintaining high-fidelity generation under an extremely low NFE (Number of Function Evaluations) budget for real-time speed, and facilitating continuous streaming for interactive control. To address these pain points, we propose three key designs. First, for accurate lighting injection, we propose a lightweight adapter that feeds Multi-Plane Light Irradiance (MPLI) conditions-depth-aware irradiance maps encoding 3D lighting geometry-directly into the diffusion backbone. Second, to prevent rendering quality degradation at low NFEs towards real-time distillation, we introduce a geometry-guided feedback branch. This training-time constraint leverages a frozen geometry estimator to enforce depth- and normal-consistent relighting, ensuring geometrically plausible shading without adding inference overhead. Finally, to enable streaming interaction, we develop a progressive rolling-window strategy that maintains a denoising ladder of latent chunks at varying noise levels. By propagating intermediate states, this strategy guarantees temporal coherence and supports arbitrarily long video relighting with per-frame reference refresh. Extensive experiments on real-world and synthetic benchmarks demonstrate that LiveLight achieves state-of-the-art relighting quality while running at real-time speed, significantly outperforming offline baselines in temporal stability, lighting controllability, and user preference. To foster real-time interactive relighting research, we will publicly release our models, training data, and synthetic data generator.
Primary: University of Macau
All Institutions: University of Macau, University of Tuebingen
LiveLight presents a significant technical advancement in real-time video relighting by effectively combining diffusion models with 3D lighting priors and a novel streaming denoising strategy, achieving a rare balance of interactivity, quality, and speed.
The paper proposes "LiveLight," a diffusion-based framework for real-time streaming video relighting. The core technical contributions are threefold: 1) A lightweight adapter injecting Multi-Plane Light Irradiance (MPLI) conditions into the diffusion backbone to handle 3D lighting geometry. 2) A geometry-guided feedback branch using a frozen geometry estimator to enforce depth/normal consistency during training, mitigating quality degradation at low Number of Function Evaluations (NFE). 3) A progressive rolling-window strategy for denoising latent chunks to enable continuous streaming and temporal coherence. The approach addresses the specific bottleneck of real-time interactive control in video diffusion models, which is a significant challenge given the computational cost of diffusion steps. The integration of explicit 3D lighting priors (MPLI) with diffusion is a novel architectural choice compared to standard text/image-conditioned relighting.
The authors evaluate LiveLight on real-world and synthetic benchmarks. They claim state-of-the-art performance in relighting quality, temporal stability, and controllability. The key metric is "real-time speed," implying a high frames-per-second (FPS) rate, likely achieved through the low NFE distillation. The comparison against offline baselines highlights the trade-off between quality and speed, arguing that LiveLight achieves a superior balance. The inclusion of user preference studies adds qualitative validation. However, as this is a TOG paper (a top-tier graphics venue), the evaluation is expected to be rigorous regarding visual fidelity and physical plausibility of lighting.
The authors state they will publicly release models, training data, and a synthetic data generator. This is a strong indicator of reproducibility. The use of a frozen geometry estimator suggests that pre-trained models for depth/normal estimation are used, which are widely available (e.g., MiDaS, NormalNet), aiding reproducibility. The specific "MPLI" format and adapter architecture details would need to be clearly documented in the code release for full reproducibility.
The paper acknowledges the challenge of maintaining high fidelity at extremely low NFEs. While the geometry-guided feedback helps, diffusion models at very low steps can still suffer from artifacts or loss of fine detail compared to higher-step offline methods. The reliance on a "frozen geometry estimator" means that if the input video has poor depth/normal estimation (e.g., due to motion blur or occlusion), the relighting quality may degrade. The "rolling-window" strategy might introduce boundary artifacts at the edges of the window if not carefully blended. The term "real-time" is relative; it likely refers to >30 FPS on high-end GPUs, not necessarily mobile devices.
This work enables new applications in virtual production, real-time VR/AR content creation, and interactive video editing. By making high-quality, physically plausible relighting interactive and real-time, it lowers the barrier for creators to manipulate lighting in video content. The release of the synthetic data generator could also benefit the broader community working on 3D-aware video generation. LiveLight presents a significant technical advancement in real-time video relighting by effectively combining diffusion models with 3D lighting priors and a novel streaming denoising strategy, achieving a rare balance of interactivity, quality, and speed.
Many-shot in-context learning (ICL) lets vision-language models (VLMs) adapt from image--label demonstrations without weight updates, and is widely assumed to improve as more demonstrations are supplied. We show the opposite: as demonstrations accumulate, a subset of VLMs undergo an \emph{in-context collapse}, a sharp, sometimes catastrophic accuracy drop spanning synthetic classification, natural-image classification, and VQA benchmarks, in some models falling below chance while outputs remain well-formed. Across an open VLM panel ($0.5$B--$11$B) and a frontier model (Claude Sonnet 4.5), the collapse is graded. Two capabilities turn out to be dissociable: robustness to accumulating demonstrations and the ability to learn a novel rule in context, their combinations yield three reproducible regimes. A parameter-matched lesion-and-rescue causally localizes the collapse to the vision-language integration pathway: an adapter on the connector and early/mid layers restores genuine learning (remap accuracy $0.39!\rightarrow!0.91$ at 16 shots), while an equal-capacity adapter on the late readout does not. We propose \textsc{CircA}, whose core is a one-time integration vaccine: trained once on one synthetic task, it transfers collapse-resistance to unseen task families (chance$\rightarrow$$0.71$/$0.60$ on CIFAR/Fashion). The layers best for in-context integration are not the layers best for weight-based consolidation, the late readout achieves higher accuracy and less forgetting at fewer parameters. The collapse is an integration failure at the vision--language interface, correctable by a lightweight, transferable intervention.
Primary: University of Pennsylvania
All Institutions: University of Pennsylvania, Amazon Generative AI Innovation Center
The paper introduces and characterizes "in-context collapse" in VLMs, a phenomenon where accuracy degrades with more demonstrations, and proposes CircA, a transferable integration-circuit adaptation framework to mitigate it. [Comprehensive analysis of the technical contribution, methodology, and significance to the field].
The paper proposes a rigorous mechanistic investigation into the failure modes of Vision-Language Models (VLMs) during many-shot in-context learning (ICL). The core methodological contribution is the definition of "in-context collapse" and the dissociation of "robustness" from "learning" using contamination-free synthetic concepts (remap verbalizers). The authors employ a parameter-matched lesion-and-rescue strategy, inserting low-rank adapters (LoRA) at specific integration vs. readout loci to causally localize the failure to the vision-language integration pathway (connector and early/mid layers). They further propose CircA, a framework involving a "vaccine" (offline adapter training), a "gate" (copy-rate monitoring), and an "inject" path (task-vector amortization). This approach is methodologically sound, leveraging tools from mechanistic interpretability to solve a practical engineering problem in multimodal ICL.
The experimental evaluation is comprehensive and convincing. It spans a diverse panel of open-weight VLMs (0.5B to 11B parameters, various connector types) and includes frontier closed models (Claude Sonnet 4.5, Amazon Nova). The use of synthetic tasks with arbitrary label mappings effectively isolates genuine in-context learning from pretraining prior retrieval. The results clearly demonstrate the collapse phenomenon, validate the causal localization hypothesis through the asymmetry of adapter placement, and show that the CircA vaccine transfers collapse-resistance to unseen tasks. The inclusion of a continual learning comparison adds depth, distinguishing the integration locus from the consolidation locus.
The paper provides a public GitHub repository with code and data. The experimental setup is well-described, including specific model versions, prompt templates, and decoding parameters. The use of standard benchmarks (CIFAR, Fashion) and clearly defined synthetic tasks ensures that other researchers can reproduce the collapse phenomenon and the proposed mitigations. The code availability significantly enhances the paper's reproducibility and utility.
The study focuses primarily on classification and VQA tasks. The "vaccine" requires a one-time offline training step, which may not be feasible for all deployment scenarios or closed-API models (though the gate and inject paths offer alternatives). The synthetic tasks, while useful for isolation, may not fully capture the complexity of natural image domains. Additionally, the collapse is observed in a "subset" of VLMs; a broader analysis of why certain architectures (e.g., cross-attention vs. MLP-projector) are more susceptible would strengthen the generalizability of the findings. The evaluation of frontier models is limited to API access, preventing deeper mechanistic analysis of those specific models.
This work has significant implications for the deployment of VLMs in few-shot and many-shot settings. By identifying a specific failure mode (collapse) and providing a lightweight, transferable mitigation (CircA), it enables more reliable adaptation of VLMs without weight updates. It also bridges the gap between mechanistic interpretability and practical model engineering, offering a causal understanding of how visual and linguistic information is integrated. This can guide future model architectures and training strategies to be more robust to context accumulation. The paper introduces and characterizes "in-context collapse" in VLMs, a phenomenon where accuracy degrades with more demonstrations, and proposes CircA, a transferable integration-circuit adaptation framework to mitigate it. [Comprehensive analysis of the technical contribution, methodology, and significance to the field].
Diffusion Transformers (DiTs) have emerged as a core architecture in generative modeling due to their scalability and adaptability to multimodal tasks. DiTs comprise isotropic transformer blocks, and learn representations progressively across depth, where the denoising objective drives later layers to focus on fine-detail reconstruction. This results in degraded representation quality and an imbalanced encoder-decoder behavior. Prior approaches such as representation alignment (REPA) mitigate this by encouraging stronger early representations via training regularization. Alternatively, U-Net-style DiT architectures introduce explicit multi-scale encoder-decoder structures for improved convergence. But they build on standard U-Net wisdom via learnable operators for spatial downsampling, which are not well-suited to transformer architectures, introducing inefficiencies and compatibility issues with components such as cross-attention and representation regularization. In this work, we propose UDT, a U-Net diffusion transformer that combines the representation power of DiTs with the encoding-decoding benefits of U-Nets, through data-adaptive token merging for downsampling and upsampling, while preserving the DiT token dimension. Our baseline UDT architecture outperforms existing U-Net DiTs and achieves performance comparable to REPA across all model sizes. Furthermore, using architectural optimization and REPA, UDT outperforms SiT's 7.9 FID at 1400 epochs (w/o CFG) within 40 epochs (~ 40x faster convergence) for XL model size on 256x256 ImageNet. Finally, it achieves strong image generation performance with CFG, reaching FID of 1.38 (320 epochs) with SD-VAE and 1.35 (500 epochs) with VA-VAE, providing a new backbone for DiTs with strong empirical benefits.
Primary: University of Minnesota
All Institutions: University of Minnesota
The paper presents UDT, a novel U-Net style Diffusion Transformer architecture that leverages data-adaptive token merging to achieve faster convergence and improved generative performance, offering a significant efficiency boost for training large-scale diffusion models.
The paper proposes UDT, a U-Net style Diffusion Transformer that integrates data-adaptive token merging (ToMe) for downsampling and upsampling. The core innovation lies in using token similarity to merge redundant tokens (e.g., background regions) rather than fixed spatial pooling, which preserves semantic information better than standard U-Net downsampling in transformers. The authors argue that this approach mitigates the "imbalanced encoder-decoder" problem in isotropic DiTs by explicitly creating a bottleneck while maintaining token dimensionality. The methodology is sound, leveraging existing efficient transformer techniques (ToMe) in a novel architectural context (Diffusion Transformers). The integration with REPA (Representation Alignment) is also logically derived from the preserved token resolution at the bottleneck.
The experimental evaluation is extensive and rigorous. The authors compare UDT against strong baselines including SiT, U-DiT, and REPA variants on ImageNet 256x256 and 512x512. The results demonstrate significant improvements in training efficiency (convergence speed) and final FID scores. Notably, the claim of achieving SOTA-like FID scores in a fraction of the training epochs (e.g., 40x faster convergence for XL models) is compelling and supported by detailed FID-vs-Epoch curves. The ablation studies on token merge strategies, advanced techniques (RoPE, SwiGLU), and drop-in replacement capabilities for various DiT variants (JiT, MMDiT) add robustness to the claims. The comparison with U-DiT is particularly important as it addresses the specific niche of U-Net style DiTs.
The paper provides a GitHub link to the code, which is a strong positive for reproducibility. The experimental setup closely follows established protocols (SiT, REPA), using standard optimizers, learning rates, and evaluation metrics (FID, IS). The implementation details in the appendix are sufficient for replication. The use of standard datasets (ImageNet) and pre-trained encoders (DINOv2 for REPA) further ensures that the results can be verified by the community.
The paper acknowledges limitations regarding video generation and very high-resolution (2K) images, which is standard for current DiT research. However, a potential limitation is the reliance on the ToMe algorithm's heuristic for token merging; while effective, it introduces a hyperparameter (merge rate) that needs tuning. Additionally, the performance gain in FID is partly attributed to faster convergence, meaning the "final" performance might eventually be matched by longer-trained isotropic DiTs, though the efficiency gain is the primary contribution. The paper does not extensively analyze the impact of token merging on the quality of generated samples beyond FID/IS (e.g., diversity, mode collapse), although qualitative samples are provided.
This work has significant implications for the efficiency and accessibility of training large-scale diffusion models. By reducing the computational cost and training time, UDT lowers the barrier to entry for researchers and practitioners. The architectural improvements also enhance the representational quality of DiTs, potentially benefiting downstream tasks like image editing or inpainting that rely on intermediate features. The broader impact is positive, promoting more efficient and scalable generative AI. The paper presents UDT, a novel U-Net style Diffusion Transformer architecture that leverages data-adaptive token merging to achieve faster convergence and improved generative performance, offering a significant efficiency boost for training large-scale diffusion models.
While feed-forward 3D Gaussian Splatting (3DGS) enables efficient 3D reconstruction, achieving high-fidelity rendering remains challenging. Existing pixel-aligned approaches suffer from spatial inflexibility and massive structural redundancy, whereas query-based methods lack 3D priors and entangle geometry with appearance, yielding blurry, pose-dependent results. To overcome these deficiencies, we propose \textbf{QuerySplat}, a feed-forward 3DGS framework driven by geometric priors and explicit appearance decoupling. Specifically, we design a dual-branch query-based decoder: the geometry branch leverages a pretrained Vision Geometric Model for spatial understanding, which intrinsically endows QuerySplat with pose-free modeling capabilities, while the appearance branch recovers high-frequency details through a dedicated pathway separated from geometric attribute regression. Extensive experiments demonstrate that QuerySplat mitigates the blurry rendering issues of early query-based models and consistently outperforms pixel-aligned approaches in rendering fidelity. On the challenging DL3DV benchmark, it achieves state-of-the-art novel view synthesis performance, with average PSNR gains of 2.30 dB and 1.04 dB over the best pose-free and pose-required baselines, respectively. Project Page: https://inspatio.github.io/querysplat.
Primary: InSpatio Research
All Institutions: InSpatio Research
QuerySplat presents a robust and effective solution to the challenges of feed-forward 3DGS by leveraging geometric priors from VGMs and decoupling attribute prediction, achieving state-of-the-art results on challenging benchmarks and advancing the field of pose-free novel view synthesis.
The paper proposes QuerySplat, a feed-forward 3D Gaussian Splatting (3DGS) framework that decouples geometry and appearance prediction using a dual-branch query-based decoder. The core innovation lies in leveraging a frozen pretrained Vision Geometric Model (VGM, specifically VGGT) to provide geometric priors and a self-calibrated coordinate system, enabling pose-free reconstruction. The geometry branch predicts spatial attributes (center, scale, rotation) while a separate appearance branch predicts opacities and colors. This design addresses the entanglement issues in previous query-based methods (like TokenGS) and the spatial inflexibility of pixel-aligned methods. The methodology is technically sound, combining established components (VGMs, 3DGS, query decoders) in a novel architectural arrangement. The use of transient early-stage regularization (Chamfer distance to VGM depth, opacity floor) is a practical engineering contribution to stabilize training.
The evaluation is conducted on the DL3DV benchmark, a large-scale and challenging dataset for novel view synthesis. The paper reports State-of-the-Art (SOTA) performance in terms of PSNR, SSIM, and LPIPS across 2, 4, and 12-view settings compared to recent posed and pose-free baselines (DepthSplat, TokenGS, YoNoSplat, etc.). The gains are significant (e.g., +2.30 dB PSNR over the best pose-free baseline). Qualitative results demonstrate sharper textures and better geometric coherence. The inclusion of an optional Test-Time Optimization (TTO) module further boosts performance, showing flexibility. The ablation studies effectively validate the contributions of the dual-branch design, regularization, and VGM backbone.
The paper provides detailed implementation details, including the VGM backbone (VGGT), query counts, training schedules, and loss functions. The use of a standard benchmark (DL3DV) and standard metrics facilitates comparison. However, as an arXiv preprint without an accompanying public code repository link (only a project page is listed), immediate reproducibility is slightly hindered, though the description is sufficiently detailed for a competent researcher to implement. The reliance on a specific VGM (VGGT) means results are tied to that model's availability.
The paper acknowledges that the method relies on the quality of the underlying VGM. If the VGM fails to estimate accurate geometry or poses (e.g., in textureless regions or extreme occlusions), the reconstruction may suffer. The computational cost of using a large VGM encoder (VGGT) is not explicitly quantified in terms of inference time compared to lighter baselines, though it is described as "feed-forward." The method is currently evaluated primarily on the DL3DV dataset; generalization to other domains (e.g., indoor vs. outdoor, synthetic vs. real) is implied but not exhaustively proven. The "pose-free" capability is dependent on the VGM's pose estimation accuracy.
This work contributes to the democratization of 3D content creation by enabling high-fidelity 3D reconstruction from unposed, sparse image collections without per-scene optimization. This has significant implications for robotics, augmented reality, and digital twins where rapid, accurate 3D understanding from casual captures is crucial. By decoupling geometry and appearance, it also offers a more modular approach to 3D scene representation that could inspire future research in neural rendering. QuerySplat presents a robust and effective solution to the challenges of feed-forward 3DGS by leveraging geometric priors from VGMs and decoupling attribute prediction, achieving state-of-the-art results on challenging benchmarks and advancing the field of pose-free novel view synthesis.
Humanoid household tasks often require concurrent loco-manipulation, where the robot must move, adjust posture, maintain balance, and manipulate objects as a single coordinated behavior. Yet existing humanoid policies typically decompose locomotion and manipulation, while recent world-action models remain either arm-centric or video-centered. We present $ω$-0, a latent predictive whole-body world-action model for real-world humanoid concurrent loco-manipulation. Given a language instruction, current visual observation, and robot proprioceptive state, $ω$-0 directly predicts controller-compatible whole-body action latents for real-robot execution. Rather than reconstructing future videos, $ω$-0 learns compact future observation embeddings as a lightweight predictive objective, coupling latent visual foresight with diffusion-based whole-body action generation. The model supports egocentric RGB, exocentric RGB, and exocentric depth inputs, and leverages controller-based simulation replay to ground human/public visual-motion priors into robot-executable action latents. We further collect $ω$-HOME, a 40+ hour real-world household humanoid dataset with synchronized multi-view observations, whole-body SMPL motions, robot states, and action latents. Real-world experiments on 11 household tasks demonstrate that a single $ω$-0 model can produce smooth manipulate-while-moving behaviors and consistently outperform representative imitation learning, VLA, humanoid, and WAM baselines.
Primary: Shanghai Jiao Tong University
All Institutions: Shanghai Jiao Tong University, Tsinghua University, University of Cambridge
The paper presents a significant advancement in humanoid robotics by introducing a latent predictive world-action model that effectively handles concurrent loco-manipulation. The introduction of the $\omega$-HOME dataset and the novel approach of predicting action latents rather than visual reconstructions offer a compelling alternative to existing methods. The strong empirical results on real-world tasks suggest that this approach is viable and impactful. [One sentence main contribution]. The paper introduces $\omega$-0, a latent predictive world-action model for concurrent humanoid loco-manipulation, and the $\omega$-HOME dataset, demonstrating superior performance over existing imitation learning and VLA baselines in real-world household tasks.
The paper proposes $\omega$-0, a latent predictive world-action model designed for concurrent humanoid loco-manipulation. The core methodological contribution is the shift from video reconstruction (common in visual world models) to predicting controller-compatible whole-body action latents. This approach couples latent visual foresight with diffusion-based action generation. The model ingests language instructions, multi-view observations (RGB/Depth), and proprioceptive states to output actions directly. The use of "controller-based simulation replay" to ground human/public visual-motion priors into robot-executable action latents is a significant technical choice, aiming to bridge the sim-to-real gap and leverage large-scale pre-trained priors. The architecture appears to be a transformer-based or diffusion-based sequence model operating in a latent space, which is a current trend in robotics (e.g., RT-2, Octo, but applied to whole-body control).
The evaluation includes the collection of $\omega$-HOME, a 40+ hour real-world household humanoid dataset. This is a substantial contribution in itself, providing a benchmark for concurrent loco-manipulation. Experiments are conducted on 11 household tasks. The paper claims that $\omega$-0 outperforms representative imitation learning, VLA (Vision-Language-Action), humanoid-specific, and WAM (World Action Model) baselines. The results demonstrate smooth manipulate-while-moving behaviors. The inclusion of real-world experiments is crucial for this domain. However, the specific quantitative metrics (e.g., success rates, task completion times, kinematic smoothness scores) are not fully detailed in the abstract, but the claim of consistent outperformance suggests rigorous benchmarking. The comparison against VLAs is particularly relevant given the current hype cycle.
The paper introduces a new dataset ($\omega$-HOME), which aids reproducibility for future work in this specific niche. The code and model weights are not explicitly linked in the provided text, but the detailed description of the model architecture and the dataset collection process suggests that the work is grounded in reproducible practices. The use of standard inputs (RGB, Depth, Proprioception) and outputs (Action Latents) facilitates integration with existing control stacks.
The paper likely faces limitations common to latent world models: the quality of the action latent space is dependent on the fidelity of the predictive model. If the prediction of future latent states is inaccurate, the action generation may fail. Additionally, the reliance on "human/public visual-motion priors" might introduce biases or domain gaps if the training data distribution differs significantly from the deployment environment. The complexity of training a whole-body model with concurrent loco-manipulation constraints is high, and the computational requirements for inference might be a barrier for real-time deployment on current humanoid hardware.
This work contributes to the broader goal of general-purpose humanoid robots capable of performing complex household tasks. By enabling concurrent loco-manipulation, it moves beyond static manipulation, which is a critical step towards practical autonomy. The release of the $\omega$-HOME dataset provides a valuable resource for the robotics community, potentially accelerating research in whole-body control and world models. The paper presents a significant advancement in humanoid robotics by introducing a latent predictive world-action model that effectively handles concurrent loco-manipulation. The introduction of the $\omega$-HOME dataset and the novel approach of predicting action latents rather than visual reconstructions offer a compelling alternative to existing methods. The strong empirical results on real-world tasks suggest that this approach is viable and impactful. [One sentence main contribution]. The paper introduces $\omega$-0, a latent predictive world-action model for concurrent humanoid loco-manipulation, and the $\omega$-HOME dataset, demonstrating superior performance over existing imitation learning and VLA baselines in real-world household tasks.
Recent data-driven methods for synthesizing 6-DoF grasp poses use generative models to learn complex grasp pose distributions and generate diverse candidate poses. In particular, SE(3)-equivariant flow-based models generate grasp poses that transform consistently with object rotations and translations. However, these methods sample by iterative numerical integration, requiring tens of function evaluations per grasp and limiting their use in real-time manipulation. We propose GraspMeanFlow, an SE(3)-equivariant MeanFlow framework for few-step 6-DoF grasp generation. Our method learns the average velocity over a finite time interval, defined through the time-ordered exponential so that it reproduces exactly the rigid-body displacement accumulated over that interval. We prove that a point-cloud-conditioned distribution transported by an equivariant average-velocity flow map remains invariant, so equivariance is retained under few-step sampling, and we condition the field on a pair of times by lifting both to equivariant vectors, leaving the backbone otherwise unchanged. For stable training, we pair a flow-matching boundary term with either of two consistency terms: the differential MeanFlow identity, whose target requires a Jacobian-vector product, or an equivalent semigroup loss that avoids it. Experiments on ACRONYM show that a single function evaluation of GraspMeanFlow reaches the EMD that an iterative SE(3) flow model needs five steps to approach, that a second instantiation of the same framework improves grasp success by up to 24.3 points in the few-step regime, and that both generate grasp distributions transforming exactly with the object.
Primary: National Science Foundation / U.S. Department of of Energy (Affiliations not explicitly listed in text, but funding sources indicate US Government Labs/Universities)
All Institutions: National Science Foundation, U.S. Department of Energy, DOE Office of Science, SciDAC LEADS Institute
GraspMeanFlow presents a robust and theoretically sound extension of flow matching to SE(3), offering a practical solution for few-step, equivariant grasp generation that significantly outperforms existing iterative methods in efficiency and success rate.
The paper proposes GraspMeanFlow, an SE(3)-equivariant generative model for 6-DoF grasp pose synthesis. The core technical contribution is the adaptation of MeanFlow (average-velocity flow matching) to the SE(3) manifold. The authors address the non-commutative nature of SO(3) by defining average velocity via the time-ordered exponential, ensuring that the learned Lie-algebra element reproduces the exact rigid-body displacement over a finite interval. They provide theoretical proofs for equivariance preservation under few-step sampling and propose two training objectives: a differential MeanFlow identity (requiring Jacobian-vector products) and a semigroup consistency loss (JVP-free). The methodology is mathematically rigorous, correctly handling the geometric constraints of the special Euclidean group. The approach effectively bridges the gap between high-fidelity continuous normalizing flows and the efficiency requirements of real-time robotic manipulation.
The evaluation is conducted on the ACRONYM dataset, comparing against strong baselines including EquiGraspFlow, SE(3)-DiffusionFields, and BRIDGER. The results demonstrate significant improvements in few-step regimes (NFE=1 to 5). Specifically, GraspMeanFlow achieves higher grasp success rates (up to 24.3 points improvement over EquiGraspFlow at NFE=5) and lower Earth Mover's Distance (EMD) with fewer function evaluations. The ablation studies effectively isolate the contribution of the consistency terms and the coupling strategies. The inclusion of both distributional fidelity (EMD) and task-specific performance (simulated lift success) provides a comprehensive view of the model's utility. The latency analysis further supports the practical value of the method for real-time applications.
The paper provides detailed mathematical derivations, including the handling of the left Jacobian and the time-ordered exponential. The implementation details are clear, noting the use of the EquiGraspFlow backbone and specific training schedules (warm-up with $\alpha$-Flow). The authors mention using publicly released checkpoints for baselines and a consistent evaluation protocol. However, the code is not explicitly linked in the provided text (URL extraction returned none), which slightly hinders immediate reproducibility, though the methodological description is sufficient for implementation by experts in geometric deep learning.
The authors acknowledge limitations regarding objects with high symmetry (e.g., Pencil), where the displacement target may treat physically equivalent orientations as distinct errors. They also note that the endpoint-style sampler requires careful scheduling and that post-training on self-generated samples had mixed results. The method's performance degrades relative to iterative baselines at very high step counts (NFE=20), as the iterative solvers can integrate the instantaneous field more accurately when computational budget is not constrained.
This work has significant implications for robotic manipulation, particularly in scenarios requiring real-time decision-making. By enabling high-quality grasp generation with minimal computational overhead, it facilitates more responsive and robust autonomous systems. The theoretical framework for equivariant average-velocity flow matching on manifolds may also inspire applications in other domains involving rigid body dynamics or geometric data generation, such as protein structure prediction or molecular dynamics. GraspMeanFlow presents a robust and theoretically sound extension of flow matching to SE(3), offering a practical solution for few-step, equivariant grasp generation that significantly outperforms existing iterative methods in efficiency and success rate.
World Action Models (WAMs) couple action generation with prediction of future states. Their effectiveness depends on whether future dynamics are modeled in a space that is both aligned with action generation and sufficiently geometry-aware to capture where and how actions change the scene. Existing WAMs typically satisfy only part of this requirement, relying on either perceptually heavy observation-space targets or auxiliary latent spaces that are not jointly structured for action relevance and geometry. We propose SG-WAM, a self-guided framework that learns geometry-aware action-conditioned dynamics directly in the policy-derived representation space. SG-WAM introduces learnable dynamics tokens and a Self-Guided World Predictor that forecasts their future latent states conditioned on intervening robot actions. Prediction targets are generated by an exponential moving average copy of the same policy backbone, providing stable supervision within the representation family used by the action expert. Geometric supervision further structures the policy image-token representations, providing spatially grounded context for the dynamics tokens and yielding a future-alignment space that is both action-relevant and geometry-aware. Latent future prediction, geometric grounding, and flow-matching action generation are jointly optimized end-to-end in a unified framework. Built on a 0.9B model without large-scale embodied pretraining, SG-WAM achieves 98.5% average success on LIBERO and 73% on LIBERO-Plus, while outperforming strong baselines in both in-distribution and out-of-distribution real-world evaluations.
Primary: Nanyang Technological University
All Institutions: Nanyang Technological University, National University of Singapore, The University of Hong Kong
SG-WAM presents a novel self-guided world modeling framework that effectively integrates geometric supervision into policy-derived latent spaces, achieving state-of-the-art results on standard robotic manipulation benchmarks with a moderately sized model.
The paper proposes SG-WAM, a framework for world modeling in robotics that integrates action generation with future state prediction. The core innovation lies in learning dynamics directly within the policy-derived representation space using "dynamics tokens." It employs a Self-Guided World Predictor that forecasts future latent states conditioned on robot actions, using an exponential moving average (EMA) copy of the policy backbone for stable supervision. Crucially, it introduces geometric supervision to structure these representations, aiming to create a space that is both action-relevant and geometry-aware. The method combines latent future prediction, geometric grounding, and flow-matching action generation in a unified end-to-end optimization. While the integration of geometric priors into latent world models is a known direction, the specific mechanism of self-guided supervision within the policy space to align action and geometry is a distinct methodological contribution.
The evaluation focuses on the LIBERO and LIBERO-Plus benchmarks, which are standard for long-horizon robotic manipulation tasks. The reported results are 98.5% average success on LIBERO and 73% on LIBERO-Plus. These results are competitive, particularly on LIBERO, suggesting the method is effective for in-distribution tasks. The paper claims outperformance of strong baselines in both in-distribution and out-of-distribution real-world evaluations. However, the abstract-only score of 60 suggests the initial impression was moderate, and the full text analysis confirms that while the results are strong, they do not represent a paradigm shift in performance (e.g., solving previously unsolvable tasks) but rather an incremental improvement in efficiency and generalization via better representation learning. The use of a 0.9B model without large-scale embodied pretraining is a notable efficiency claim, appealing to resource-constrained settings.
The paper describes the architecture (0.9B model), training objectives (joint optimization of prediction, geometric grounding, and action generation), and benchmarks (LIBERO). However, as an arXiv preprint, the availability of code is not guaranteed, and the URL extraction found none. The description of the "geometric supervision" and "dynamics tokens" provides sufficient detail for a competent researcher to attempt reproduction, but the lack of explicit hyperparameters or code links reduces immediate reproducibility confidence.
The primary limitation is the reliance on the LIBERO suite, which, while standard, may not fully capture the complexity of real-world unstructured environments. The claim of "out-of-distribution real-world evaluations" is significant but requires scrutiny of the specific distribution shifts tested. Furthermore, the complexity of jointly optimizing three distinct objectives (prediction, geometry, action) may introduce training instability or require careful tuning, which is not fully detailed in the abstract. The performance drop on LIBERO-Plus (73%) compared to LIBERO (98.5%) suggests limitations in handling more complex or varied tasks.
This work contributes to the field of embodied AI by providing a more efficient and geometry-aware approach to world modeling, which is critical for sample-efficient learning in robotics. By reducing reliance on large-scale pretraining, it makes advanced world modeling more accessible. The alignment of action and geometry in latent space could lead to more robust and interpretable robotic policies. SG-WAM presents a novel self-guided world modeling framework that effectively integrates geometric supervision into policy-derived latent spaces, achieving state-of-the-art results on standard robotic manipulation benchmarks with a moderately sized model.
On-device deployment of Large Language Models (LLMs) has become essential for personalized edge applications. A primary bottleneck is external memory access (EMA) in feed-forward network (FFN) layers. Speculative decoding and mixture-of-experts (MoE) are promising solutions. Speculative decoding reduces the number of decoding stages by generating multiple tokens per stage, and MoE minimizes per-stage cost through sparse expert activation. However, there is an incompatibility when combining these two techniques. We propose EdgeXpert, a software-hardware co-designed LLM accelerator that resolves this incompatibility. In the prefill stage, the prompt-wise expert reuse reformulates routing as prompt-level expert reuse rather than independent per-token expert selection. It identifies important tokens using a lightweight encoder, constructs a shared expert set from them, and routes less important tokens with a reduced expert budget to lower expert EMA. In the decode stage, depth-aware expert coalescing exploits the contextual similarity and mutual exclusivity of same-depth candidate tokens. Rather than loading the union of all required channels, EdgeXpert loads only salient channels and applies computational calibration to recover accuracy without additional memory access. Synthesized in Samsung 28nm technology at 800 MHz, EdgeXpert achieves up to 56.3% latency reduction and 44.1% energy reduction compared to prior works, while maintaining near-baseline accuracy.
Primary: KAIST
All Institutions: KAIST
EdgeXpert presents a compelling software-hardware co-design solution for edge LLM inference, effectively bridging the gap between speculative decoding and mixture-of-experts architectures to achieve substantial latency and energy savings. The rigorous hardware implementation and clear performance gains make it a valuable contribution to the field of efficient AI systems.
The paper proposes EdgeXpert, a software-hardware co-designed accelerator targeting the specific bottleneck of External Memory Access (EMA) in Large Language Model (LLM) inference on edge devices. The core innovation lies in resolving the incompatibility between Speculative Decoding (SD) and Mixture-of-Experts (MoE). The authors introduce two key techniques: 1) Prompt-wise Expert Reuse in the prefill stage, which identifies important tokens and constructs a shared expert set to reduce the expert budget for less important tokens, thereby lowering EMA. 2) Depth-aware Expert Coalescing in the decode stage, which exploits contextual similarity among same-depth candidate tokens to load only salient channels and applies computational calibration to recover accuracy. This approach is technically sound and addresses a critical gap in current edge LLM deployment, where memory bandwidth is the primary constraint. The co-design aspect (algorithmic routing changes + hardware support) is well-motivated.
The evaluation is conducted on a synthesized chip using Samsung 28nm technology at 800 MHz. The results claim up to 56.3% latency reduction and 44.1% energy reduction compared to prior works, while maintaining near-baseline accuracy. The metrics are relevant to the edge deployment context. However, the citation count is 0, and the venue is listed as MICRO 2026 (which is in the future relative to the current date, suggesting this might be a preprint or the venue information is projected/hypothetical in the prompt context, but we treat it as a top-tier systems venue). The performance gains are significant and directly address the stated problem. The use of a custom silicon implementation adds weight to the hardware contributions, although the lack of software ecosystem details or broader model compatibility testing (beyond the implied standard LLMs) is a minor gap.
The paper provides specific technology node (Samsung 28nm) and frequency (800 MHz), which aids in hardware reproducibility. However, as is common with hardware papers, the full RTL or detailed microarchitecture diagrams might be proprietary or omitted for brevity. The algorithmic components (routing, calibration) are described, but the exact hyperparameters for the "lightweight encoder" and "computational calibration" are not fully detailed in the abstract, though presumably present in the full text. Reproducibility is moderate to high for systems researchers but lower for pure ML researchers without hardware access.
The primary limitation is the reliance on a specific hardware implementation (28nm), which may not generalize to newer process nodes or different hardware architectures without significant redesign. The "computational calibration" to recover accuracy suggests that the sparsity introduced by the coalescing technique incurs some accuracy loss, which is mitigated but not eliminated. The effectiveness of the "prompt-wise expert reuse" depends heavily on the quality of the lightweight encoder, which adds its own latency and energy overhead, a trade-off that must be carefully balanced. Furthermore, the evaluation is limited to inference; training or fine-tuning on such hardware is not addressed.
This work has significant implications for democratizing LLMs by enabling high-performance, low-power inference on resource-constrained edge devices. This could accelerate the deployment of personalized AI assistants, privacy-preserving local AI, and IoT applications. By reducing energy consumption and latency, it supports the sustainability goals of AI deployment. The co-design approach provides a blueprint for future hardware-software integration for emerging model architectures. EdgeXpert presents a compelling software-hardware co-design solution for edge LLM inference, effectively bridging the gap between speculative decoding and mixture-of-experts architectures to achieve substantial latency and energy savings. The rigorous hardware implementation and clear performance gains make it a valuable contribution to the field of efficient AI systems.
Modern GPUs rely on private per-SM L1 caches and a shared L2 cache, but this organization obscures cross-SM reuse: an L1 miss is typically forwarded to L2 even when the requested line already resides in a peer L1 cache, leading to redundant L2 access. Prior GPU L1-sharing designs attempt to recover such reuse through exact or broad remote-hit searches, which become increasingly difficult to scale and can interfere with the critical L1 miss path under high concurrency. %miss handling as more caches participate and more misses arrive concurrently. We observe that eliminating redundant L2 accesses does not require exact, chip-wide knowledge of private L1 contents. Instead, it requires only sufficient visibility to sharply narrow down a small set of candidate caches, leaving exact confirmation to a much smaller number of L1s. Based on this insight, we propose C2P-Cache, a scalable GPU L1-sharing mechanism that transforms remote-hit discovery from a chip-wide exact search problem into a lightweight filtering-and-confirmation process. C2P-Cache maintains compact Bloom-filter-based snapshots of private L1 tags, performs parallel chip-wide candidate filtering, and selectively probes only a small number of likely peer caches. To sustain high concurrency, C2P-Cache organizes filtering as bit-sliced matching over a banked and replicated snapshot matrix, enabling efficient, parallel processing of many concurrent misses without interfering with normal L1 accesses. Across a wide range of GPU workloads, C2P-Cache improves instructions per cycle (IPC) by up to 49.7\% and by 23.5\% on average for applications with high remote-L1 reuse and strong sensitivity to L2 latency, demonstrating that lightweight, scalable filtering can effectively unlock cross-SM reuse with modest overhead.
Primary: National University of Defense Technology
All Institutions: National University of Defense Technology
C2P-Cache introduces a scalable GPU L1 cache sharing mechanism that utilizes Bloom-filter-based snapshots to prune remote-hit candidates, significantly reducing redundant L2 accesses and improving IPC for memory-intensive workloads while maintaining low overhead and high concurrency.
The paper proposes C2P-Cache, a hardware mechanism for GPU L1 cache sharing. The core innovation is replacing exact, chip-wide remote hit searches with a probabilistic filtering stage using Bloom filters. Specifically, it maintains a "Snapshot Matrix" of Bloom filter states for all SMs. When an L1 miss occurs, the system performs a Boolean matrix multiplication (logical AND reduction) between the miss query (Access Matrix) and the Snapshot Matrix to identify candidate SMs. Only these candidates are probed for exact tag confirmation. This transforms a high-latency, high-contention search problem into a lightweight filtering-and-confirmation pipeline. The design includes specific optimizations for high concurrency, such as bit-sliced matching and a banked/replicated Snapshot Matrix organization to handle worst-case lookup demands without interfering with normal L1 accesses. The methodology is sound, leveraging well-known probabilistic data structures (Bloom filters) in a novel architectural context (GPU cache hierarchy) to solve a specific scalability bottleneck.
The evaluation is conducted using Accel-Sim, a standard cycle-level GPU simulator. The authors evaluate 24 workloads from ISPASS, Rodinia, Parboil, PolyBench, and Pannotia. They compare C2P-Cache against a baseline (no sharing) and three prior works (ATA, CCD, RING). Results show significant IPC improvements (up to 49.7%, avg 23.5% for sensitive workloads) and substantial L2 access reduction (avg 46.6%). The paper provides a thorough sensitivity analysis covering BF parameters, matching latency, remote return latency, and SM scaling. The results are consistent and demonstrate that C2P-Cache outperforms prior art in both performance and scalability, particularly as the number of SMs increases. The inclusion of power and area overhead estimates adds credibility to the practical feasibility assessment.
The paper provides detailed descriptions of the hardware components (BF Engine, Snapshot Matrix organization, addressing schemes) and simulation parameters (latencies, BF sizes, hash functions). The use of Accel-Sim and standard benchmarks allows for potential reproduction. However, the specific implementation details of the BF hash functions and the exact timing models for the Snapshot Matrix SRAM (modeled via CACTI) are abstracted. While sufficient for architectural researchers to reproduce the study, full bit-level reproducibility would require access to the specific Accel-Sim fork and CACTI configuration files, which are not explicitly linked but are standard practice in the field.
The primary limitation is the reliance on probabilistic filtering, which introduces false positives (unnecessary probes) and false negatives (missed reuse opportunities). The paper acknowledges this and shows that the impact is manageable, but in extreme cases, false positives can add latency. Additionally, the design assumes a specific GPU microarchitecture (banked L1s, specific interconnect) which may not generalize to all GPU designs without adaptation. The "Snapshot Matrix" consumes significant on-chip SRAM (estimated 40KB logical, though physical implementation details vary), which might be a constraint for smaller GPUs. The venue date (2026) is an anomaly, suggesting this might be a very recent acceptance or a metadata error, but the technical content is current.
This work addresses a fundamental scalability issue in modern GPUs: memory bandwidth and latency bottlenecks caused by private L1 caches. By enabling efficient cross-SM data reuse, C2P-Cache can improve performance for a wide range of parallel applications, including AI/ML workloads (Transformers, CNNs) and HPC applications (stencils, linear algebra). This contributes to the broader goal of making GPU architectures more efficient and scalable as core counts increase. It also highlights the value of probabilistic data structures in hardware design for system-level optimization. C2P-Cache introduces a scalable GPU L1 cache sharing mechanism that utilizes Bloom-filter-based snapshots to prune remote-hit candidates, significantly reducing redundant L2 accesses and improving IPC for memory-intensive workloads while maintaining low overhead and high concurrency.