Artificial Intelligence · Cross-listed from cs.CY
Plausible but Not Valid: A Psychometric Audit of LLMs as Synthetic Survey Respondents
Mantas Lukauskas and Viktorija Šarkauskaitė
Large
language models (LLMs) are increasingly used as synthetic survey respondents, but existing evaluations mostly ask whether individual answers look plausible. We ask a stricter, psychometric question: do LLMs preserve the joint distribution, latent structure, reliability, mediation pathways, and demographic effects of real human survey data? We introduce an open Lithuanian organisational-psychology
dataset (n=263 employees; three validated instruments; 68 items, 12 subscales) and condition 37 LLMs on real respondent profiles under a persona-disclosure ladder, presentation,
reasoning-effort and cross-
language ablations, counterfactual demographic swaps, and a memorization probe. The resulting Psychometric Similarity Score (PSS) is anchored against five statistical baselines, a held-out human ceiling, and the real answers of the same respondents. LLMs reproduce the direction of human psychometric relationships, but statistical baselines with no
language model match or beat them. The best LLM (PSS 0.81) is level with a Gaussian copula fit only on other respondents (0.82) and below the real answers of the same 100 people (0.89). A simple classifier separates every LLM sample from humans (median AUC 0.99), and verbatim recall of the items is rare (at most 4.7%) and unrelated to PSS. Counterfactual swaps move answers in the direction of human group differences and by a similar amount (role 0.49 and education 0.33 human SD, vs. 0.46 and 0.44 in humans). Gender swaps move them by 0.06 SD. Tucker's phi on UWES falls inside an item-permutation null for 10 of 37 models. Synthetic respondents compress the response scale (within-respondent SD 0.79 vs. 1.19), lose predictive validity on held-out humans (mean R^2=-0.14 vs. 0.28), and produce significant indirect effects on 4 of 7 mediation paths that are null in humans. LLM samples are therefore not a drop-in replacement for human survey data.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.CL
Rachid Arezki
Transformer architectures rely on dense self-
attention to model long-range dependencies, but this mechanism exhibits quadratic complexity with respect to sequence length. We introduce BCMT (Blockwise Causal
Memory Transformer), an architecture for long-context
language modeling that decouples local
token interactions from global context propagation. Dense causal self-
attention is applied independently within local blocks, while each block produces an adaptive summary aggregated through an exponential causal
memory. This
memory is subsequently injected back into the
token representations, enabling efficient propagation of long-range contextual information without relying on explicit global
attention. Unlike standard
Transformers and recurrent
memory architectures, BCMT maintains neither dense interactions between distant
tokens nor learned
memory states. Its
memory mechanism is fully parallelizable and remains compatible with standard implementations of dense self-
attention. Experiments on
language modeling with context lengths of up to 1024
tokens show that BCMT achieves validation performance comparable to that of Dense
Transformers while significantly improving training throughput and reducing
memory consumption. An ablation study further confirms that these improvements arise from the proposed
memory mechanism. These results demonstrate that an exponential causal
memory constructed from block summaries provides an effective alternative to dense global
attention mechanisms for long-context
language modeling.
Read the full abstract ▾
Artificial Intelligence
AI Evaluation Should Work With Humans
Jan Kulveit, Gavin Leech, Tomáš Gavenčiak et al. (+1 more)
This position paper argues that the dominant paradigm of AI evaluation (which focuses on superhuman autonomous performance and so implicitly targets the goal of replacing humans) is guiding AI development in the wrong direction. Instead, the AI community should pivot to evaluating the performance of human–AI teams. We argue that this collaborative shift will foster AI systems that act as true complements to human capabilities and therefore lead to far better societal outcomes than will the current process.
Read the full abstract ▾
All authors Jan Kulveit, Gavin Leech, Tomáš Gavenčiak, Raymond Douglas
Artificial Intelligence · Cross-listed from econ.GN
EU-ETS under attack? The impact of carbon price suppression on the decarbonization of the power sector
Javier Gonzalez-Ruiz, Carlos Rodriguez-Pardo, Alice Di Bella et al. (+3 more)
European countries are debating policies to mitigate the increased energy costs caused by renewed geopolitical tensions, while pursuing decarbonization and electrification. A notable example is Italy's 2026 Decreto Bollette package, which proposes to remove the carbon price equivalent from the bids of certain gas-driven power plants to wholesale electricity
markets, among other provisions. We use this as a case study to assess the long-term implications of suppressing the carbon price signal in the electricity
market for investment, emissions, and consumer costs. We employ a stylized Italian power system using MARLEY, a multi-
agent reinforcement learning framework focused on long-term electricity
market assessments. In this framework, we test this policy across configurations with varying levels of support for green investment, resource adequacy, and flexibility. Results show that partial suppression of the carbon price signal yields short-term cost reductions but only a minor long-term effect on total system costs, as the deferred emissions are ultimately repaid by consumers. CO$_2$ emissions rise across most configurations since suppressing the price signal erodes incentives for renewable and storage investment. Only the most ambitious configurations for supporting green investment avoid this outcome, but they do so by marginalizing the wholesale price signal itself, thereby requiring a commitment to a hybrid
market paradigm that is in contradiction with the rationale of the proposed price intervention.
Read the full abstract ▾
All authors Javier Gonzalez-Ruiz, Carlos Rodriguez-Pardo, Alice Di Bella, Paolo Mastropietro, Jose Pablo Chavez-Avila, Massimo Tavoni
Artificial Intelligence · Cross-listed from cs.CY
KumbhDoot: A Scale-Ready, LLM-Bounded Architecture for Mass-Gathering Public-Service Assistants
Saurabh Sakalkar, Abhishek Singh and Ramesh Raskar
Mass religious gatherings such as the Kumbh Mela concentrate tens of millions of people into a single region over a few weeks, producing intense, repetitive,
multilingual, and safety-critical demand for information. The default response, a conversational assistant that routes every query to a large
language model (LLM), is poorly matched to this setting: it is costly at scale, slow on emergency paths, prone to
hallucination on facts that can cause physical harm, and unusable when connectivity fails. We describe KumbhDoot, an agentic pilgrim assistant for the Nashik Simhastha Kumbh Mela built on a different principle. It operates on a foundational design principle that prioritizes semantic similarity over starting with an LLM. Generative models are invoked only in instances where similarity-based
retrieval is insufficient to produce a correct answer. The system utilizes a "semantic cache": an
embedding-indexed store as a single
retrieval primitive, which handles intent routing, answer caching, offline lookups, and multi-
agent retrieval. A custom three-tier
agent architecture operates directly on this store, ensuring decision paths remain inspectable and avoiding the use of generic multi-
agent frameworks that would trigger implicit per-step LLM calls. We present the architecture, an analytical cost model for its per-query economics, and an honest account of where similarity is sufficient and where generative
reasoning remains necessary. We argue that for bounded, high-stakes, low-connectivity public-service domains, a similarity-first and LLM-bounded design is not merely cheaper but architecturally more appropriate than an LLM-default one.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.IR
When Thinking Before Retrieval Hurts: TraceBound Diagnostics for Adaptive Knowledge-Graph Retrieval
Partha Sarathi Purkayastha
Adaptive
retrieval promises to make knowledge-graph question answering more robust by letting a controller search, inspect neighborhoods, revise actions, and stop when evidence is sufficient. We study this premise by introducing TraceBound, a lightweight profile- and trace-conditioned diagnostic protocol for an ARK-style retriever on text-rich knowledge graphs. TraceBound exposes a compact query profile before
retrieval, issues short trace hints after observable failure symptoms, and logs trajectory counters, while keeping graph data, tools, gold labels, and ranking metrics fixed. Across STaRK validation and held-out subsets, the added conditioning improves inspectability but consistently reduces
retrieval quality under open-weight controllers. Paired trajectory analysis localizes the degradation to repeated calls, zero-result calls, and misallocated exploration budget, while stricter interaction budgets shorten trajectories without repairing the policy. The result diagnoses the common failure mode in that "thinking before
retrieval” must be evaluated as a control problem over action selection, not as a
prompt-format change.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.IR
Multimodal Hybrid Retrieval-Augmented Generation for Scientific Document Understanding using Open-Source SLMs
Alexandru-Andrei Saucă and Ana-Luiza Rusnac
Large
Language Models tend to hallucinate when answering domain-specific ques tions from scientific documents without prior fine-tuning. Currently, methods such as
Retrieval-Augmented Generation partially solve this problem but face different challenges: limited context knowledge, difference between sparse and dense
retrieval, and
retrieval noise. This paper presents an Advanced
Multimodal Retrieval-Augmented Generation system that aims to solve those challenges and im prove the accuracy of information extraction. The proposed architecture introduces a
multimodal ingestion pipeline that leverages an open-source
Vision-
Language Model (Qwen2-VL-2B-Instruct) to generate textual summaries of tables and fig ures. The
retrieval phase integrates HNSW-based semantic search with GIN-based lexical search, unified through Reciprocal Rank Fusion and refined using Cross Encoder reranking to minimize
retrieval noise. To ensure conversational coherence across multi-turn interactions, a Query Condenser module is employed. Evaluation is conducted by independently assessing the ingestion,
retrieval and generation stages using the MMLongBench
benchmark, a BeIR-format synthetic
dataset and the DeepEval framework. Moreover, results demonstrate a 157% improvement in
retrieval quality over a Naive-RAG baseline, with only 50 ms additional la tency, while Qwen2-VL-2B-Instruct achieved results comparable to cloud-based models in BERTScore. These findings validate that open-source optimized SLMs, paired with advanced
retrieval strategies, can provide competitive performance for document understanding without relying on cloud-based models.
Read the full abstract ▾
Artificial Intelligence
AIR-BENCH Live: An Evolving Safety Benchmark for Foundation Models
Rohan Naphade, Minzhou Pan and Bo Li
Foundation-model safety
benchmarks capture the AI risks of their time of publication: as models improve and governments pass new AI-safety legislation, their risk taxonomies become incomprehensive and their attack
prompts become ineffective. We present AIR-BENCH Live, a self-evolving successor to AIR-BENCH 2024. An automated update pipeline monitors government regulation and classifies new policies against the current four-tier risk taxonomy, either matching them to existing categories or proposing new granular categories. Then, a multi-
agent, persona-driven
prompt generation
algorithm generates realistic,
multilingual prompts with minimal human review, leaving room for improvement with modern jail breaking techniques. This
algorithm is used to overhaul legacy
prompts and generate
prompts for new categories. In our current version, the pipeline has expanded the
benchmark from 314 to 335 granular risks, with the 21 new categories drawing from 31 truly novel policy clauses across seven jurisdictions. Evaluating 14 recent models, we find a wide safety spread (from 0.17 to 0.89 among the models judged on their own behavior), that the modernized
prompts are on average 0.06 points harder than the 2024 set, with the largest drops concentrated among the most compliant models, and that most models are modestly less safe on non-English
prompts. By continuously absorbing new regulation and regenerating
prompts, AIR-BENCH Live is designed to evolve alongside a fast-moving field.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.LG
The Active Ingredient in Muon's Grokking
Yufeng Wang
The
Muon optimizer reaches the grokking threshold on modular arithmetic faster than AdamW. Prior work attributes this to "spectral-norm constraints plus orthogonalized momentum" but does not isolate which mechanism matters. To better understand Moun's behavior, we run multi-seed and multi-learning-rate sweeps to decompose and stress-test the effect. First, an ablation shows the speedup comes from orthogonalization (the Newton-Schulz iteration): orthogonalize-only matches full
Muon, whereas spectral-only is no faster than AdamW and is unreliable, and this verdict holds across learning rates. Second, a mechanistic analysis finds that orthogonalizing optimizers reach generalization at roughly 3x lower spectral norm and, controlling for how much the
embedding actually moves, settle into a lower-norm solution rather than simply perturbing the
embedding less. Third, reducing the Newton-Schulz iteration count from five to one accelerates reaching the threshold but makes the grokked solution fragile, prone to transient collapse, with fragility that grows with learning rate; a single iteration is fast and stable only at small learning rate, while the canonical five iterations are the learning-rate-robust choice. We also show spectral scaling can be dropped at no measured cost. A methodological thread runs throughout: under a stability-aware metric, "faster" claims about grokking optimizers can invert, so we report both first-crossing and sustained-grok times. To support reproducibility, we release our full training and analysis code at https://github.com/louiswang524/
muon-grokking-frontier
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.LG
Leveraging Offline Supervision for Efficient and Generalizable Reinforcement Learning in Large-Scale Vision-Language-Action Models
Dmitriy Poyarkov, Aleksei Staroverov and Aleksandr I. Panov
It is commonly observed that online reinforcement learning (RL) produces better-performing strategies than offline methods across a broad range of performance measures. In particular, RL-trained policies exhibit stronger out-of-distribution (OOD) behavior, where models trained only with imitation learning approaches often struggle. A recent study introduced an OOD-focused
benchmark and reported that RL-trained
vision-
language-action (VLA) policies achieve noticeably better OOD performance and slightly better in-distribution (IND) performance than their counterparts trained with supervised fine-tuning (SFT). In this work, we investigate whether hybrid offline-online training can combine the advantages of both approaches. Specifically, we study RL methods regularized by offline supervision via either offline data or an offline-trained reference policy. We evaluate these approaches on the OOD
benchmark and compare them with both offline-only training and standard RL. Our results show that although offline training achieves limited OOD performance by itself, incorporating offline supervision into RL preserves strong OOD capability while substantially improving training efficiency. In particular, the guided methods reach performance close to that of standard RL while requiring roughly half of the training budget. Rather than producing a trade-off between speed and OOD performance, the hybrid approach retains strong OOD capability while achieving this efficiency gain. Project page: https://alstar8.github.io/offline-supervision-vla-rl
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.NE
QDEvo: A Multi-Objective Quality-Diversity Framework for Automated Heuristic Design
Nam Do Khanh, Nhat Nguyen Tran Minh, Dat Pham Vu Tuan et al. (+2 more)
The integration of Large
Language Models (LLMs) with evolutionary computation has emerged as a powerful paradigm for automated heuristic design in combinatorial optimization. However, existing approaches suffer from mode collapse, converging to homogeneous populations that lack semantic diversity and fail to explore the full algorithmic space. We propose Quality-Diversity
Evolution (QDEvo), a multi-objective framework that integrates Quality-Diversity optimization with LLM-driven heuristic search, maintaining an unbounded archive of semantically diverse
algorithms using pre-trained code
embeddings and incorporating hierarchical self-reflection to guide the evolutionary process. Extensive experiments across standard
benchmarks and real-world industrial applications demonstrate that QDEvo significantly outperforms state-of-the-art methods in both Hypervolume and Inverted Generational Distance metrics. Our framework enables the discovery of heuristics that are simultaneously high-performing, computationally efficient, and semantically diverse, providing practitioners with a rich portfolio of solutions for complex optimization problems.
Read the full abstract ▾
All authors Nam Do Khanh, Nhat Nguyen Tran Minh, Dat Pham Vu Tuan, Long Doan, Binh Huynh Thi Thanh
Artificial Intelligence
BatteryLake: Agentic, Physics-Grounded Curation of Heterogeneous Battery Aging Data and Benchmarking
Tianwen Zhu, Hao Wang and Yonggang Wen
Public battery aging
datasets are a critical asset for advanced health management, but their practical use is often limited by inconsistent formats, unclear schemas, and metadata scattered across repositories and publications. Current curation remains largely manual and hard to reproduce, while general-purpose data integration tools miss the domain-specific semantics of electrochemical time-series data. We present BatteryLake, a governed data lakehouse that turns raw public battery data into
benchmark-ready assets through an agentic, physics-grounded curation framework, with three contributions. First, LLM
agents extract metadata and synthesize
dataset-specific converters, grounding every output in verbatim evidence and abstaining when none supports a value. Second, a human-in-the-loop mechanism frames verification as selective prediction and gates admitted data through 26 schema, statistical, and physical-plausibility rules. Third, we release an open
benchmark of 41
datasets from over 25 institutions, with standardized SOH and RUL tasks, three split protocols, and eight baseline model families. The platform,
benchmark, and curation protocol are publicly available at https://tianwen1209.github.io/batterylake/.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from eess.SP
Physics-Informed Structure Anchoring With Capture-Aware Prototype Calibration for Cross-Environment RF Fingerprinting
Fengchong Yao, Jianbing Li, Qing Liu et al. (+4 more)
Radio frequency fingerprint identification (RFFI) exploits transmitter-specific hardware imperfections as physicallayer identity cues for Internet of Things (IoT) devices, but deep models often degrade across acquisition environments. In multi-
antenna reception,
antenna topology and frequencyoffset dynamics structure receiver observations, while capturedependent variation distorts target
embeddings and misaligns source-trained decision boundaries. This article proposes physicsinformed structure anchoring with capture-aware prototype calibration (PISA-CAPC) to address both representation and decision mismatches. The two stages separate source representation construction from target decision correction. During source training, PISA organizes
antenna tokens through a
topology-guided graph, conditions propagation on CFO-derived acquisition dynamics, and applies bounded contextual residual suppression to preserve identity evidence. At deployment, unlabeled capture-aware prototype calibration (U-CAPC) estimates capture-local prototypes and recalibrates target decision scores while keeping the representation and source classifier fixed. Thus, calibration uses neither target labels nor target-domain backbone updates. On a measured WiFi
benchmark with four receive
antennas and ten transmitters, PISA-CAPC achieves a mean target-domain Macro-F1 of 0.9257 under a balanced transductive setting. Component ablations support complementary roles for
topology-guided anchoring, CFO-conditioned modulation, reliability-aware
token aggregation, contextual suppression, and capture-aware calibration. These results indicate that physically motivated representation learning can be combined with labelfree decision calibration to improve cross-environment RFFI under the evaluated protocol without changing the deployed backbone.
Read the full abstract ▾
All authors Fengchong Yao, Jianbing Li, Qing Liu, Qikun Liu, Kefeng Song, Haitao Li, Song Wang
Artificial Intelligence · Cross-listed from cs.CV
ReflectWorld-MM: An Entity-Oriented Multimodal Memory System for Open-Ended Video Streams
Xiaokang Ma, Yifan Sun, Zhihong Jin et al. (+6 more)
Building assistants that can continually watch the world, remember what they see, and reason over their accumulated experience is a long-standing goal, and recently
multimodal agents equipped with long-term
memory over
video streams have attracted increasing interest. Unfortunately, existing systems either keep their
memory inside the model context or in a flat feature store, and organize it around frames rather than around the persistent entities a stream is really about, which confines them to bounded
videos and weakens their ability to track who and what reappears over time. In this paper, we propose ReflectWorld-MM, an entity-oriented
multimodal memory system for open-ended
video streams. It consists of three parts. The first is a perception front-end that turns an audiovisual stream into entity-resolved observations under a bounded short-term
memory. The second is a hierarchical long-term
memory, grounded in human
memory theory, that couples a multi-scale episodic
memory, an evolving entity-centric semantic
memory, and a procedural
memory. The third is a complete realization, built for real-world operation, that ingests arbitrary streams and plugs into off-the-shelf assistants. Across six long-
video and lifelong-
memory benchmarks, ReflectWorld-MM achieves the best accuracy on all six, outperforming strong
memory agents and a frontier model.
Read the full abstract ▾
All authors Xiaokang Ma, Yifan Sun, Zhihong Jin, Jie Gu, Yudong Luo, Shenyi Shao, Chu Tang, Jingmin Chen, Li Pu
Artificial Intelligence · Cross-listed from cs.NE
LLM-Driven Evolutionary Generation of Multi-Objective Bayesian Optimization Algorithms
Georgios Laskaris, Reuben Brasher, Niki van Stein et al. (+3 more)
Designing effective multi-objective
Bayesian optimization (MOBO)
algorithms requires balancing many interdependent design choices whose optimal configuration is problem-dependent and typically demands deep expertise. We extend the LLaMEA framework to MOBO, using large
language models as mutation and crossover operators within evolutionary strategies to generate complete
algorithm implementations, with SMAC hyperparameter optimization integrated into the evolutionary loop. Across nine evolutionary runs we generated approximately 900
algorithms and benchmarked them on twelve synthetic problems (ZDT, DTLZ, WFG) and three real-world engineering problems (RE), using a BoFire qParEGO implementation as a state-of-the-art
Bayesian-optimization baseline. On the synthetic suite the strongest generated
algorithm attains the highest mean normalized hypervolume (0.971, vs. 0.869 for qParEGO) while requiring roughly 60x less wall-clock time; a Friedman test with post-hoc analysis places the two in a single top-performing group, and per-problem tests find the generated
algorithm significantly better than qParEGO on 7 of the 12 problems and never worse, matching state-of-the-art accuracy at an order-of-magnitude lower cost. On the three unseen real-world engineering problems a generated
algorithm attains the best mean normalized hypervolume (0.985, vs. 0.971 for qParEGO)–significantly better than qParEGO on two of the three problems–at roughly 3.4x lower wall-clock cost, confirming that the gains transfer beyond the synthetic regime. LLM-driven evolutionary search can thus discover
algorithm designs that achieve Pareto-efficient trade-offs difficult to reach through manual design.
Read the full abstract ▾
All authors Georgios Laskaris, Reuben Brasher, Niki van Stein, Elena Raponi, Thomas Bäck, Florian Neukart
Artificial Intelligence · Cross-listed from cs.MA
Collective Intelligence with Foundation Models
J. de Curtò and I. de Zarzà
As foundation models grow in scale and diversity, coordinating multiple models into cooperative
reasoning systems offers a path toward safer, more reliable AI. This chapter presents a multi-
agent framework where solver models generate independent drafts, each undergoes structured critique and revision by a critic
agent, and an aggregator
agent synthesizes a final consensus solution. A scoring module provides semantic, numerical, and procedural evaluation across all
agents. Through ablation studies on a
benchmark spanning calculus, physics, chemistry, biology, economics, optimization, statistics, and mathematics, we isolate the contributions of framework architecture versus model diversity. We compare four configurations: (1) Individual Baseline, (2) Homogeneous Framework using one shared model, (3) Redundant Homogeneous Solvers using multiple instances of the same model, and (4) Heterogeneous Framework with diverse specialized models. Results show that while framework structure and redundant sampling yield modest gains, model heterogeneity is the critical factor driving substantial performance improvements. The heterogeneous configuration achieves superior step-wise accuracy (0.64 vs. 0.54 for individual models; 2.3x improvement over homogeneous configurations) with reduced variance across categories and difficulty levels. Step-wise
reasoning quality (correctness of intermediate steps, not just final answers) improves dramatically only with model diversity, showing that heterogeneous
agents provide complementary error detection and
reasoning refinement essential for explainability and auditability. We discuss architectural principles, evaluation methodology, and implications for Global Applied AI, showing how heterogeneous multi-
agent coordination supports transparent, auditable, high-confidence decision-making across scientific and industrial domains.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from eess.IV
Non-contact, Real-time, Heart-rate Measurement using Image Processing with Commodity Cameras and AI Agents
Kelly Li and Fulu Li
Heart rate measurement is one of the key requirements for real-time health monitoring, in particular for health caring of elderly people. Traditional heart rate measurement relies on contact sensing mechanisms such as some heart rate measurement devices at medical hospitals or some wearable devices with embedded sensors such as Apple Watch, etc. In this paper, we develop a system for non-contact, real-time, heart rate measurement using image processing with commodity cameras such as an embedded camera on a laptop, where we use an innovative
algorithm to capture the relevant signals for the computation of heart rate in a time series in real life environments. The presented heart rate computation (HRC) process is composed with four major steps: (a) identify frames per second of the camera in use, i.e., 30 frames per second for a given camera, (b) face detection (FD) with shape predictor of 68 face landmarks using deep learning (DL) method, (c) time sliding window (TSW)
algorithm to de-noise the signal by smoothing out the noise, and (d) compute heart rate based on identified signal periodicity. We test and analyze the developed prototypes against heart rate results by Apple Watch and check the difference range in multiple rounds and compute the mean of the difference for the measurement values of the heart rate of the same person at the same time. We will do further tuning and optimization of the present methods and deploy the system as a personal AI
agent [6] for health monitoring as our future directions.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.CR
When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents
George Torres, Sharad Shrestha and Satyajayant Misra
Personal AI
agents powered by large
language models can reason and act using available tools to access emails, manage calendars, and push code to remote repositories, all with minimal oversight. When augmented with long-term
memory, an
agent can recall specific details relevant to the current task, reducing the need for large context windows. Currently, long-term
memory agents tend to fall into two distinct domains: conversational and action-planning
agents. Personal assistant
agents sit at the convergence of these two domains and handle sensitive information while interacting with untrusted information sources, creating previously unaccounted security vulnerabilities. In this work, we introduce the novel attack vector, GhostWriter, which exploits current
memory subsystems in tool-using personal
agents to poison their
memory store. GhostWriter operates in two phases: injection, where an adversary sends a hidden attack payload to the target
agent; and activation, in which the poisoned
memory is retrieved. We show that GhostWriter achieves near-universal injection rates of approximately 98% and a high average activation rate of approximately 60% against state-of-the-art
agents. This attack is possible due to the lack of security-focused
memory governance. In response, we propose Agentic
Memory Sentry (AM-Sentry), which leverages two mitigation techniques: a
memory-saving policy and a
memory-
retrieval screen. Our experiments show that AM-Sentry dramatically reduces GhostWriter's success rate while preserving
agent utility.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.CV
LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection
Vincent Lébé, Yannick Prudent, Corentin Friedrich et al. (+3 more)
Object detectors have many applications in safety-critical systems, but they are known to be sensitive to worst-case perturbations such as
adversarial attacks, which limits their applicability in real-world scenarios. Compared with classification,
adversarial robustness for object detection has received less
attention, and existing methods are often tied to
adversarial training, whose performance may not transfer across attacks, perturbation budgets, or architectures. In this work, we introduce Lipschitz-constrained variants of object detection architectures as robust-by-design alternatives to standard detectors. We validate this approach with LipSSD, a Lipschitz-constrained Single Shot MultiBox Detector (SSD), and provide a comprehensive study of its
adversarial robustness using multiple white-box
adversarial attacks and
datasets. We first analyze the accuracyrobustness trade-off induced by Lipschitz constraints and show that it can be controlled through a single training hyperparameter. We then demonstrate that Lipschitzconstrained detectors are complementary to
adversarial training: under the same training setup on the Pascal VOC
dataset, adversarially trained LipSSD improves mAP@50 on unseen attacks by up to 15 points over classical adversarially trained SSD. Finally, we use more specific safety-critical
datasets such as LARD and KITTI, and show that Lipschitz-constrained detectors can improve robustness while largely preserving clean performance. These results suggest that architectural Lipschitz control is a practical and attack-agnostic direction for improving the robustness of object detectors.
Read the full abstract ▾
All authors Vincent Lébé, Yannick Prudent, Corentin Friedrich, Thomas Massena, Ronan Sicre, Franck Mamalet
Artificial Intelligence · Cross-listed from cs.RO
IMR: Iterative Mode-World Weighted Regression for Multi-Agent Trajectory Prediction
Honglin Wang, Shiyao Pan and Yun-Fu Liu
Multi-
agent motion prediction is essential for automated vehicles to understand the intentions of surrounding vehicles. However, previous prediction-based and anchor-based methods have limitations in mode diversity and prediction accuracy, respectively. These limitations may cause inadequate safety assessments and behavioral deviations in automated vehicles. To address this issue, a mode-world weighted regression loss is proposed to bridge the gap between these features. Specifically, this approach mitigates mode collapse while simultaneously improving world ranking and top-1 confidence. Furthermore, the proposed iterative decoder improves prediction accuracy by recurrently and segmentally generating trajectories. Experimental results show the proposed method ranks first in the Argoverse 2 multi-
agent motion
forecasting benchmark against other methods.
Read the full abstract ▾
Artificial Intelligence
Yusuf Khan and Carlo Lipizzi
Language agents run a loop - observe, reason, act - but the
memory they reason over sits outside it: a store queried at most once per turn. We study the regime where
memory moves inside the loop, read and written on every step. The obstacle has always been latency: networked stores answer in tens to hundreds of milliseconds, and in-loop
retrieval can inflate end-to-end latency by up to 83x when
retrieval is expensive. Prior work manages that cost rather than questioning it: serving-layer scheduling hides it, "
memory-first" designs ration
retrieval to once per turn. We argue latency is a property of where the store lives, not the in-loop pattern: an in-process store answers in ~100us, three orders of magnitude below the network regime, and at that speed the per-step tax collapses. By the extended-mind thesis's parity principle, a store fast enough to be constantly and directly available becomes extended working
memory, not a tool the
agent merely consults. The premise is causal: holding a fixed per-turn
memory-latency budget and varying only the store's answer speed, redundant actions rise monotonically with latency - 0.0 of 12 at in-process speed, 7.2 of 12 at a 110ms cloud round trip (gpt-5-nano, gpt-5-mini; exact permutation p=0.0079). We demonstrate the regime end-to-end: across four GPT-5-class models under a bounded window, recall improves from 0/5 to 3.6-4.8/5 with in-loop
memory, store ops at p50 80-165us - though an instructed restate-every-reply baseline also solves it perfectly, at a
token cost that grows with the working set. The store never lost a fact in any run (244 of 244 writes kept); every miss traces to the
agent's read policy, not the store. Our measurements also relocate the bottleneck: the dominant per-step cost is
embedding (~200-400ms over the network); pairing the in-process store with a small local embedder returns the complete operation to a measured ~40us.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.HC
Depression Symptoms and Relational Patterns in 187k ChatGPT Histories
Neil K. R. Sehgal, Dunigan Folk, Lyle Ungar et al. (+1 more)
Large
language models are increasingly used as private, always-available conversational systems, but little is known about how people with depressive symptoms use them. Building on CSCW work on disclosure and peer support, we examine ChatGPT as an emerging informal support infrastructure: private, persistent, responsive, and available outside ordinary hours. We analyze 187,093 ChatGPT conversations from 766 participants who completed the PHQ-8, comparing those below the moderate-symptom threshold (score of 10) with those at or above it. Higher-PHQ participants used ChatGPT more for mental-health, interpersonal, loneliness, self-focused, and support-seeking conversations, with pronounced late-night and recurring month-level patterns. Their
language contained more first-person singular pronouns and absolutist terms. They more often engaged ChatGPT in high-disclosure contexts, but professional redirection was not higher.
Language-based prediction was modest and insufficient for screening (AUROC 0.591). We argue these histories should not be treated as clinical screening data but as evidence LLMs are increasingly used as informal support infrastructure.
Read the full abstract ▾
All authors Neil K. R. Sehgal, Dunigan Folk, Lyle Ungar, Sharath Chandra Guntuku
Artificial Intelligence
FirstResearch: Auditable Question Formation for LLM Scientific Discovery Agents
Yufeng Wang
LLM systems for scientific discovery increasingly assist with ideation, literature synthesis, experiment planning, and report generation, but the first research question they propose can remain difficult to audit: it may sound plausible without exposing the mechanism, falsifier, or assumption that a scientist should inspect. We introduce FirstResearch, a first-principles research-question formation framework for scientific LLM
agents whose core artifact is a structured Research Question Certificate. The certificate records primitive definitions, assumptions, a mechanism model, a tension or contradiction, a falsifiable hypothesis, a minimal decisive test, and a failure update rule, making the proposed question inspectable before downstream execution. On ten LLM-
agent research topics, FirstResearch outperforms controlled
prompt-level baselines inspired by AI co-scientist,
Agent Laboratory, and AI Scientist-v2 under a primary DeepSeek-blind-judge protocol. A Gemini-2.5-Flash independent-judge rescore of the same 40 baseline packages preserves the system-level ranking, with FirstResearch scoring 4.86/5 versus 4.38/5 for the strongest baseline and Pearson agreement of 0.865 on average score. A one-repeat ablation checkpoint further suggests that the certificate-centered core is the strongest component: certificate-only scoring reaches 4.90/5 under DeepSeek and 4.88/5 under Gemini, while removing certificates drops below 1/5 under both judges. These results are preliminary and use LLM judges rather than human domain experts, but they support a narrow scientific-discovery claim: explicit derivation constraints are a promising mechanism for making LLM-generated scientific questions more auditable. Code,
prompts, saved outputs, and reproduction scripts are available at https://github.com/louiswang524/FirstResearch.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.CY
Beyond Accuracy: How Humans Evaluate Legally Correct but Socially Controversial Legal Advice from Machines
Benjamin Minhao Chen and Zhiyu Li
AI systems are increasingly used to provide legal advice, raising questions about whether laypeople accept guidance from
algorithms–especially when that advice is legally correct but socially controversial. We report a preregistered survey experiment with 3,348 adults in mainland China examining how people evaluate identical legal advice when it is attributed either to an AI system or to a human lawyer, and when it is accompanied by
reasoning or not. Contrary to expectations of
algorithm aversion, attribution to an AI system has no net effect on perceived reasonableness. However, mediation analyses reveal opposing psychological pathways underlying this null result. AI-attributed advice is perceived as more objective, which increases perceived reasonableness, but also as less comprehensive and less attentive to special circumstances, which decreases perceived reasonableness. By contrast, providing legal
reasoning substantially increases perceived reasonableness regardless of source, largely by enhancing perceptions of objectivity. Qualitative responses corroborate this tension between objectivity and contextual sensitivity in evaluations of legal advice. Together, these findings suggest that public responses to AI legal advisors are shaped not by rigid attitudes toward automation, but by the balancing of competing normative expectations. The results have implications for theories of
algorithm aversion and the design of AI recommendation systems in normatively salient domains.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.CL
RPAM: A Principled Metric for Evaluating Associations in Language Models with High Predictive Validity in Downstream Outputs
Damian Hodel, Jevin West and Aylin Caliskan
Language models (LMs) exhibit problematic biases, such as stereotypes. Effectively analyzing and mitigating such biases requires accurate and generalizable evaluation methods of the underlying associations. Some existing approaches focus on downstream metrics that analyze associations in generated text. Since generated text content can vary drastically across LMs, such metrics often require specialized evaluation
datasets, which limits the generalization of such downstream metrics. In contrast, upstream metrics examine LMs at the fundamental level of
embeddings or continuation probabilities, enabling principled association analyses across LMs. Yet, to date, no upstream metric for generative LMs has uncovered a strong relationship with real-world associations, including those measured in generated text. To address this gap, we introduce the Relative Probability Association Metric (RPAM), an association evaluation metric for generative LMs. For three LMs of different quality of
language generation and purpose (Mistral-7B-Instruct, Mistral-7B, and GPT-2) and well-studied evaluation
datasets (WEAT-WS, Bellezza, WS-353, and SST2), we find a strong relationship between upstream RPAM measurements and corresponding implicit and explicit associations observed in humans, as well as biases measured downstream with LM-specific tasks, outperforming prior record values where applicable.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.SE
What Do AI Agents Actually Change? An Empirical Taxonomy of Mutation Patterns in Performance-Improving Pull Requests
Illia Dovhoshliubnyi, Nima Soroush, Ashkan Sami et al. (+1 more)
AI coding
agents are black boxes: we cannot inspect how they generate code, but we can inspect what they change. This distinction matters for search-based software engineering (SBSE), where techniques such as genetic improvement (in the performance-optimisation application we study) depend on mutation operators that reflect how code is actually transformed. Fewer than 1% of the 33,596
agent PRs in AIDev-pop target performance, making each case a rare window into otherwise opaque
agent behaviour. We classify 1,254 performance-relevant diff hunks from 216 of these PRs, spanning five
agent systems, against the 18-category syntactic mutation taxonomy of Even-Mendoza et al. (2025) using a dual-LLM intersection pipeline. Three categories dominate: name modification (37.0%), object creation (26.4%), and type change (22.7%), a profile markedly different from prior GI corpora where no change accounted for 84%. Each
agent's deployed system commits to a distinctive mutation vocabulary, and each performance strategy activates a largely disjoint category subset.
Agent identity and target strategy are therefore informative priors that narrow the effective SBSE operator space. Replication package: https://github.com/5uper6rain/ssbse-challenge-2026
Read the full abstract ▾
All authors Illia Dovhoshliubnyi, Nima Soroush, Ashkan Sami, Alexander Brownlee
Artificial Intelligence · Cross-listed from cs.RO
Physics-Regularized Machine Learning for Proprioceptive Vehicle Localization Using Onboard Sensors
Abinav Kalyanasundaram, Karthikeyan Chandra Sekaran, Wolfgang Utschick et al. (+1 more)
Accurate and robust localization is essential for autonomous mobility systems in real-world environments. While fusing Inertial Measurement Unit (IMU) data with satellite-based correction signals provides precise vehicle pose estimates, performance degrades substantially during outages. Recent studies indicate that Machine Learning (ML) can improve IMU-based proprioceptive localization, highlighting untapped potential for onboard sensors readily available in production vehicles. This paper introduces Physics-Regularized Machine Learning for Localization (PRML2), a hybrid framework that combines the complementary strengths of Kalman filtering and data-driven learning to estimate vehicle pose directly from onboard sensors. A key aspect of PRML2 is its physics-regularized learning, enabled by end-to-end training of an ML model through a differentiable Kalman filter. This improves consistency with vehicle motion models, thereby enhancing both localization accuracy and generalization across driving conditions. We evaluate the performance limits of ML-enhanced onboard odometry on a publicly available
dataset and show that PRML2 achieves superior localization accuracy and demonstrates real-time capability. This work also introduces a novel
dataset to support vehicle localization research under low-friction conditions. The proposed framework provides a robust and cost-effective solution for vehicle localization under degraded sensing conditions by integrating learning with physics-based priors.
Read the full abstract ▾
All authors Abinav Kalyanasundaram, Karthikeyan Chandra Sekaran, Wolfgang Utschick, Michael Botsch
Artificial Intelligence · Cross-listed from cs.CL
Do It Right! A Methodology for Successful NLP System Development
Olga V. Patterson, Brett South, T. Elizabeth Workman et al. (+1 more)
Natural
language processing (NLP) is a common method for supplying data to clinical research and decision making by extracting information from electronic medical records. Numerous textbooks and tutorials describe specific
algorithms and applications for text processing, yet algorithmic knowledge is only one ingredient of a successful NLP project. Drawing on the available literature, this paper presents a stepwise approach that applies the Systems Development Life Cycle (SDLC) to projects that rely on data extraction through
language processing.
Read the full abstract ▾
All authors Olga V. Patterson, Brett South, T. Elizabeth Workman, Scott L DuVall
Artificial Intelligence · Cross-listed from cs.SE
EvalLoop: A Methodology for Evaluation-Driven Iterative Improvement of Business AI Systems
Kenneth Benavides, Josh Fleischer and Danti Chen
Teams deploying large
language models in business contexts need evaluation systems, yet most treat evaluation as static model selection: run
benchmarks, rank models, deploy the winner. This framing misses evaluation's primary value for production systems–diagnosing why a system underperforms and guiding what to fix. We present EvalLoop, a methodology for evaluation-driven iterative improvement. EvalLoop organizes evaluation around three mechanisms: (1) dimensional metric grouping that decomposes quality into business-relevant dimensions enabling orthogonal failure diagnosis; (2) failure mode classification that categorizes why outputs fail within weak dimensions, bridging diagnosis to action; and (3) a structured iteration workflow where each evaluation run varies one system variable and compares dimensional profiles before and after. We validate EvalLoop through a case study on sales intelligence briefing generation (10 models, 3 providers, 18 metrics, 5 dimensions, 3 iterations). Dimensional diagnosis identified that 69% of
hallucination failures were
prompt-induced interpretation errors–invisible in aggregate scoring. A targeted
prompt fix improved the best model from 82.6% to 94.6% overall, with improvement concentrated in diagnosed dimensions (Content Accuracy +16.8pp, Synthesis Power +26.4pp). An undirected configuration change in a prior iteration produced zero impact, illustrating the cost of iterating without diagnosis. We additionally demonstrate that dimensional profiling enables deployment-specific model selection, and that a one-time blind human gate on a finalist panel (4 models, 16 cases) confirms dimensional rankings while resolving multi-criteria deployment trade-offs–a 94% reduction in review burden compared to evaluating the full design. EvalLoop is packaged as reusable artifacts (playbook,
agent specification, template repository) for adoption by other teams.
Read the full abstract ▾
Artificial Intelligence · Cross-listed from cs.LG
Safe Bayesian Optimization with Counterfactual Policies
Katherine Avery, Bruno Castro da Silva and David Jensen
In many decision-making settings, new interventions are acceptable only if they do not reduce outcomes below some established threshold. For example, in clinical medicine, new treatments are often acceptable only if they do not worsen outcomes relative to an established standard of care. Safe
Bayesian optimization maximizes an objective subject to safety constraints. In the setting that we consider here, safety is defined relative to a known baseline policy whose outcomes are counterfactual and therefore unobserved. Thus, the counterfactual outcomes of the baseline policy must be estimated and those (uncertain) estimates must be used to safely optimize the objective. We address this estimation problem by using conformal prediction to construct valid uncertainty intervals for counterfactual baseline outcomes, and we show how these intervals can be integrated into safe
Bayesian optimization to ensure that constraint violations occur at or below a user-specified rate. We also show how to adapt these conformal estimates to different kinds of
covariate shift. We provide a safety proof, experimental evidence, and a sensitivity analysis.
Read the full abstract ▾