Computation and Language
A Glyph Is Not a Letter, a Token Is Not a Word, a Space Is Not a Space: What the Units of Voynichese Are Not
Liudmila Rozanova and Alexander Temerev
The Voynich manuscript (Beinecke MS 408) is usually analysed on three unstated assumptions: that its glyphs are letters, that the strings between blanks are words, and that every blank is a word space. We test all three against the Zandbergen-Landini transliteration with matched prose, cipher, and pseudo-text controls and quire-level resampling. None holds, and the failures share a shape: the order in Voynichese sits at the edges of
tokens and at graded boundaries between them, not in the succession of
tokens themselves. Glyph regularity is too strong for one-to-one substitution of any tested plaintext (conditional
entropy 2.7 bits against about 3.5 for Latin, Italian, and English) and resolves instead onto a quire-stable scale of recurrent multi-symbol units.
Tokens form a plausible vocabulary, yet the identity of one
token predicts the next by under 1% of
token entropy, below every matched control (2-10%), while the glyphs at
token edges share 0.2 bits of mutual information, more than in any prose control. Blanks fall into two regimes: the separators transcribers marked uncertain behave like word-internal junctures, are physically narrower on the page (AUC 0.905 from independent image coordinates, with the same sign in a small blind ink audit), and are crossed by learned units even when every space is erased before learning. This profile is also what discriminates. A published Voynich-imitating cipher and a self-citation text generator both reproduce the low
entropy, the unit scale, the weak
token order, and the null result of a calibrated substitution attack; neither reproduces the edge-glyph coupling or the open, hapax-rich vocabulary (70% singleton types against 41% and 59-60%). Any account of the manuscript must therefore earn, rather than assume, the step from glyphs,
tokens, and separators to letters, words, and word spaces, and these are the measurements on which to do so.
Read the full abstract ▾
Computation and Language
There is No Theoretical Curse of Multilinguality For Embedding Space Structure
Niyati Bafna, Neha Verma, Vilém Zouhar et al. (+2 more)
A central goal of
multilingual NLP is to achieve high monolingual performance per
language and cross-lingual
alignment for large-scale
language coverage with a
multilingual model. The curse of multilinguality describes the phenomenon of degradation in
multilingual model performance as we increase
language coverage, posing a threat to the above goal. This paper asks whether
multilingual embedding spaces are inherently incapable of achieving perfect multilinguality without a prohibitive increase in required capacity. We first formalize the goal of "perfect multilinguality",
embodied in two multilinguality conditions. We then prove that the minimum dimensionality required for perfect multilinguality grows only logarithmically in the number of
languages. That is, we show that there is no theoretical curse of multilinguality for
embedding space structure. This suggests that the empirical curse of multilinguality is a result of real world data and training conditions. We back this understanding with a small-scale empirical study. Our paper provides the first theoretical and intrinsic perspective on the curse of multilinguality.
Read the full abstract ▾
All authors Niyati Bafna, Neha Verma, Vilém Zouhar, Philipp Koehn, David Yarowsky
Computation and Language
Uncertainty-Aware Decision Making in Multimodal Large Language Models
Abderrahmene Boudiaf, Irfan Hussain and Sajid Javed
Multimodal large
language models (MLLMs) increasingly answer questions whose correctness depends on visual, textual, temporal, acoustic, document, chart, or
embodied evidence. Their failures are therefore not only linguistic. A fluent answer may conceal poor input quality, a perceptual error, weak grounding, conflict between modalities, unstable
reasoning, distribution shift, or a question that is not answerable from the supplied evidence. This survey organizes the literature on uncertainty-aware MLLMs around a decision-centered framework: uncertainty sources give rise to observable signals, signals must be calibrated or controlled for risk, and calibrated uncertainty should determine the system action. We review work on
token and logit uncertainty, semantic disagreement, perturbation instability, grounding and attribution scores, verbalized confidence, verifier and judge scores, conformal prediction, selective answering, abstention, clarification,
retrieval, self-checking, and escalation. The central argument is that uncertainty should not be evaluated only as a confidence number; it should be evaluated by whether it improves behavior under insufficient, conflicting, shifted, or high-risk
multimodal evidence. We position this survey against text-only uncertainty and abstention surveys, broad MLLM surveys, MLLM
hallucination surveys, and safety-oriented reviews. We conclude with open problems in source-aware decomposition, action-aware
benchmarks, calibration under shift, black-box uncertainty estimation, broader modality coverage, reproducible reporting, and human-centered uncertainty communication.
Read the full abstract ▾
Computation and Language
Foundation Agents Meet Agentic Deep Research: Evidence-Grounded Clinical Code Forecasting
Junda Wang, Meysam Ghaffari, Akshat Choube et al. (+3 more)
Next-encounter ICD
forecasting predicts which standardized diagnosis codes will be documented at a future visit from the longitudinal record available beforehand. The task is prospective and multi-label: the target note does not yet exist, and several codes may be correct. Structured EHR foundation models capture recurrence and temporal progression, whereas
language foundation models generate flexible diagnostic hypotheses. We introduce ICD-Deepresearch, a DeepResearch workflow that composes these predictive foundation models with medical search and ICD dictionaries. Because no source reveals the future code set, research evaluates candidate transitions by linking patient evidence, external clinical relations, and exact code semantics under a fixed top-K budget. Candidate Generation uses SparseEHR to produce an EHR Prior that initializes two bounded Research Expansion rounds; an independent GPT-5 Direct Forecast supplies complementary candidates. Final Selection validates, deduplicates, and jointly ranks both paths, after which a separate module writes rationales without changing predictions. Finally ICD-Deepresearch achieves patient-averaged precision/recall of 24.60/35.09% on MIMIC-III and 25.14/48.32% on MIMIC-IV. Physicians rate 51% and 68% of its retrieved documents useful, compared with 22% and 39% for standalone GPT-5 web search and 32% and 41% for Medical Deep Research. ICD-Deepresearch therefore improves over the registered local comparators while retrieving evidence with higher physician-rated usefulness than the standalone research systems
Read the full abstract ▾
All authors Junda Wang, Meysam Ghaffari, Akshat Choube, Mohsen Sharifi Renani, Hong Yu, Carlos Morato
Computation and Language · Cross-listed from cs.LG
J-Miner: Recovering the Decision Logic of Fine-Tuned LLM Classifiers as Compact Rules
Yunfan Gao, Xinyi Huang, Tao Sheng et al. (+3 more)
Task-fine-tuned large
language model (LLM) classifiers acquire task-specific decision knowledge, but this knowledge remains implicit in distributed internal computations, making their decision logic difficult to interpret. We introduce the Executable Decision Compression (EDC) framework and propose J-Miner, which mines vocabulary-named variables from internal readouts and learns rules shared across inputs to produce executable explanations. Analysis reveals that a small set of these variables captures much of the classifier's decision behavior, holding for both varying parameter scales within a family and distinct families. Across six binary tasks, a rule using just one variable reproduces 76.7% of source-classifier decisions on average, rising to 88.8% with 16 variables. Most of the decision information retained by these variables comes from internal activations beyond literal surface matching. A lightweight text reader predicts the variable states, allowing the same fixed rules to execute independently of the source classifier.
Read the full abstract ▾
All authors Yunfan Gao, Xinyi Huang, Tao Sheng, Haorui Song, Yun Xiong, Haofen Wang
Computation and Language · Cross-listed from cs.AI
Memory Is Communication: The Frontier Between Remembering and Signaling
Yashar Talebirad, Eden Redman, Ali Parsaee et al. (+1 more)
A bounded
agent may obtain information for a decision from its own past, from peers, or from both sources. Retaining task-relevant history can reduce later communication, while a peer message can supply what
memory lacks. Under limits on both resources, how should an
agent allocate its information budget? Given a fixed task and decision rule, the
memory and message rate pairs attaining a performance threshold form an achievable region under specified rules for using history and peer observations. We call its efficient boundary the remembering–signaling frontier. Across conditions where history permits the same maximum reduction in task loss, we hypothesize that a bounded
agent will need less peer communication when it obtains a larger loss reduction from history. In preliminary referential games, target repetition coincided with shorter successful messages, while predictability from a hidden cyclic rule did not shorten them. Experiments varying
memory and message rates can estimate the frontier and test this prediction across cooperative tasks.
Read the full abstract ▾
All authors Yashar Talebirad, Eden Redman, Ali Parsaee, Osmar R. Zaiane
Computation and Language
Institution-Specific LLM Prompting Recovers PHI That De-identification Systems and Their Gold Standards Both Miss
Daniel Palacios, Matthew Brady Neeley, Angel Adetomike Otto et al. (+6 more)
Secondary use of electronic health records requires de-identification, yet existing systems miss institutionally situated protected health information (PHI) such as hospital abbreviations, building names, and internal codes whose status is locally determined. We ask whether large
language models (LLMs) with in-context learning (ICL) can close this gap and control the precision–recall trade-off. On 100 annotated pediatric oncology notes (5,322 PHI spans) from Texas Children's Hospital, we benchmarked eight LLMs against two purpose-built systems (Stanford TiDE, OpenMed PII) and two pattern-based baselines. Each LLM ran under three
prompts of increasing specificity: (1) a HIPAA-aligned baseline, (2) baseline plus the institutional PHI categories it missed, and (3)
prompt 2 plus instructions against over-redacting clinical content. We then compared 14~multi-
agent and ensemble configurations against the best single
prompt, with recall the primary safety metric. LLMs outperformed the purpose-built systems (best F1=0.918$\pm$0.001 vs.\ TiDE 0.779), with advantages concentrated in contextual categories. Naming the missed categories recovered 79% (48/61) of them, and discouraging over-redaction restored precision. No agentic architecture beat calibrated single-pass prompting (F1 0.906–0.907), but LLM outputs surfaced 414~candidate annotation gaps; re-annotation confirmed 227~PHI spans, against which the final
prompt reached recall=0.981 (F1=0.907$\pm$0.002). Well-calibrated ICL resolves both the institutional PHI gap and the precision–recall trade-off in one LLM call per note. LLMs cost more to run than traditional methods, but that cost buys a way to audit the reference standard. LLMs are a legitimate, adaptable alternative to purpose-built de-identification systems; institution-specific
prompt development should be the primary adaptation strategy.
Read the full abstract ▾
All authors Daniel Palacios, Matthew Brady Neeley, Angel Adetomike Otto, Shalini Dhamodharan, John P. Woodhouse, Chi-fan Lin, Mark Zobeck, Zhandong Liu, Hyun-Hwan Jeong
Computation and Language
Frozen Memory Is Not Enough: Rethinking External Memory as Extraction
Mingyuan Li, Guangsheng Yu, Xu Wang et al. (+1 more)
Methods for improving knowledge use in large
language models typically fall into two regimes. Non-parametric
retrieval offers flexible access to external knowledge, but adds
retrieval latency, context overhead, and only shallow integration with the backbone. Parametric adaptation is efficient at inference time, but entangles knowledge with model weights and can be hard to update, audit, or transfer. Engram-style hashed
memory occupies a middle regime: it stores learned information in an external, addressable table, yet consumes that table through a small learned reader. This raises a basic question: when such a
memory is moved across backbones, what matters more, the frozen
memory itself or the target-side reader? We study this question through cross-model frozen-
memory extraction, in which a
memory trained on a source model is frozen and attached to a different target model, with only a lightweight reader trained. Ablations show that learned
memory content and correct addressing both matter, but the transferred table becomes useful only through a reader aligned to the target model. In downstream question answering tasks, a dual-layer, four-branch reader nearly closes the gap between same-model and cross-model reuse, achieving an average score of 38.8 under our controlled evaluation protocol. Moreover, when the provider reader is directly compatible with the target interface, the frozen artifact can provide substantial utility without target-side training, while optional reader adaptation yields further improvement. These results suggest that Engram can serve as a reusable external knowledge artifact, provided that the target has access to a compatible reader interface; target-side adaptation can further improve
alignment when direct reader reuse is insufficient.
Read the full abstract ▾
All authors Mingyuan Li, Guangsheng Yu, Xu Wang, Shaoxiong Ji
Computation and Language
Margin-Regularized Structured Semantic Alignment for Brain-Language Correspondence
Jiaqi Wang, Huawen Hu and Shu Zhang
With the rapid advancement of large
language models,
brain-
language decoding has achieved remarkable progress. However, it remains unclear whether decoded content genuinely reflects neural representations or is largely reconstructed by the
language model itself. This ambiguity limits interpretability and hinders the investigation of intrinsic
brain-
language correspondence. To address this challenge, we propose MD-SigLIP. This margin-regularized structured semantic
alignment framework directly aligns
brain embeddings with text
embeddings in a shared semantic space, enabling
retrieval-based decoding. This formulation enables explicit modeling of the correspondence between neural representations and
language semantics. Building upon duplicate-aware sigmoid contrastive learning, we introduce a listwise margin-regularized term that enforces structured ranking constraints between positive semantic clusters and negative samples. By modeling multi-positive semantic structure and margin-based ordering simultaneously, the method captures the
manifold organization of
language embeddings reflected in neural signals. Experiments demonstrate state-of-the-art
retrieval performance under both full-vocabulary and subset evaluation settings.
Read the full abstract ▾
Computation and Language
Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text
Benjamin Belay
A
language model's output does not by itself provide verifiable evidence about the internal computation that produced it. We study computational provenance: whether generated text can carry detectable evidence of which causally relevant internal state occurred. We test a bounded form of this idea in two controlled architectures: a modular feed-forward neural network and a
transformer-based model. Both architectures are trained on the same arithmetic task with a mandatory pathway through two discrete intermediate states, allowing different internal paths to produce the same answer. We deliberately switch between these paths, authenticate the state actually used, and let that verified state determine a subtle statistical pattern in the generated text that can later be detected. The feed-forward and
transformer systems each passed all 128 matched pairs in both their public and separately sealed protected end-to-end evaluations, with the detector recovering the signal associated with the authenticated internal state. The required causal computation also reproduced across five independently trained feed-forward models and three independently trained
transformers. In a separate answer-only
transformer experiment, our linear probes did not recover a naturally learned intermediate state. These results provide a controlled proof of concept that information about a verified, causally relevant internal state can be preserved in generated text even when the answer is unchanged.
Read the full abstract ▾
Computation and Language · Cross-listed from cs.LG
Proteus: Incremental Memory Activation for Long-Context Sequence Modeling
Reza Bayat, Ali Behrouz, Vahab Mirrokni et al. (+1 more)
The quadratic cost of
attention-based sequence models for long contexts has motivated a growing line of research on
memory-based models that can compress context into a compact state. However, most existing
memory models expose a static
memory throughout the entire sequence. Because early
tokens face no compression pressure, they occupy too many degrees of freedom and "pollute" the
memory state, leaving little capacity for later context and increasing interference between what is stored and what arrives next. We study a new paradigm of incremental
memory activation, where the effective capacity of
memory is progressively expanded as the context grows. Imposing an early bottleneck forces the model to compress history more effectively, while unlocking fresh capacity over time reduces interference and improves retention of later context. We instantiate this paradigm in Proteus, a straightforward mechanism that can be incorporated into a broad class of neural
memory architectures at no additional cost. We apply Proteus to state-of-the-art models, including SWLA, Comba, Titans, and Hope-
Attention, and observe consistent improvements on standard
language modeling and
reasoning, as well as on long-context
retrieval and understanding, with gains that grow at longer context lengths. Overall, our results show that static
memory is suboptimal and that scheduling effective capacity is a simple and broadly applicable tool for sequence modeling.
Read the full abstract ▾
All authors Reza Bayat, Ali Behrouz, Vahab Mirrokni, Aaron Courville
Computation and Language
Model Hypnosis: Strong control of AI via additive subliminal effects
Enric Boix-Adsera and Benedict Tessler
We demonstrate that AI models are broadly susceptible to a phenomenon we call model hypnosis, in which individually weak and seemingly irrelevant cues in the
prompt can be systematically combined to strongly control model behavior. Model hypnosis occurs across model families and scales, including in frontier
reasoning models, and hypnotic
prompts can transfer between models. Because the model is controlled by inconspicuous textual choices, such as paraphrases and typos, model hypnosis presents new challenges and avenues for AI safety, and is a major hurdle for AI interpretability.
Read the full abstract ▾
Computation and Language · Cross-listed from cs.AI
From Answers to Policies: Efficient In-Context Learning System through Emulating Expert Investigation
Minh-Ha Nguyen, Ngoc-Ngo Quang Tran, Thuy Dung Nguyen et al. (+1 more)
Pretrained large
language models offer a practical foundation for learning useful behavior from few task-specific examples. We argue that current
prompt and context optimization methods underuse the extensive knowledge and
reasoning capabilities of trillion-parameter models. These capabilities can make adaptation more sample-efficient, more compute efficient and at no performance loss when organized around how human experts investigate failures. We formalize Policy Iteration with Human Feedback (PIHF), which makes this implicit procedure explicit for LLM
agents to execute, and build its automated implementation, PIHF-MCP. Initialized from clinician feedback on rare-disease diagnosis, PIHF-MCP supplies the expert procedure, testing tools, review and persistent inquiry records to develop reusable task policies. Across general
reasoning benchmarks (BIG-Bench Extra Hard, HoVer and LiveBench-Math), PIHF-MCP improved performance of the baseline model by 16.9, 22.2 and 4.7 percentage points, respectively. With a matched baseline model, development used about 1/5 of the labelled examples and 4% of the task rollouts reported by a previous SOTA in-context optimizer, making it about 9 times faster and 3 times cheaper at comparable or higher scores. In a low-data rare-disease diagnosis setting, policies developed from previous SOTA
prompt optimizers trailed a previously published PIHF-developed system on every held-out cohort (on average 16 percentage points). These findings support a route to more efficient inference-time scaling: PIHF-MCP develops reusable policies from a few examples that improve performance on unseen cases and across models. Because each policy comes from an explicit, recorded investigation, the process also keeps humans in the loop and enables ownership and learning, making it well suited to high-stakes decisions.
Read the full abstract ▾
All authors Minh-Ha Nguyen, Ngoc-Ngo Quang Tran, Thuy Dung Nguyen, Cathy Shyr
Computation and Language
ClawGym II: Exploring Black-Box RL on Agent Harness
Huatong Song, Fei Bai, Ming Yang et al. (+17 more)
Agent harnesses have substantially improved performance on long-horizon tasks by coordinating
agent interactions with the environment. However, reinforcement learning through complex harnesses remains largely unexplored, as scaling such training to long-horizon
agent tasks introduces fundamental challenges. In this work, we present a unified black-box RL framework for stable and scalable optimization of general
agents through complex harnesses. Concretely, we first build a sandbox-based execution infrastructure that isolates task environments and harnesses within temporary sandboxes for large-scale concurrent rollouts. We then decouple policy optimization from opaque harness execution and place a serving proxy at the model boundary to capture model calls. To reconstruct multi-turn trajectories and improve training efficiency, we organize the captured calls into prefix trees and further adapt both critic-based PPO and critic-free GRPO to optimize over the recovered tree structure. Meanwhile, we maintain training-inference consistency throughout the optimization process. Finally, we introduce mix-harness training, allowing a single model to be jointly optimized by heterogeneous harnesses. With Qwen3-30A3B, black-box RL improves Pass@1 on ClawGym-Bench by 9.98 and 14.81 points through OpenClaw and Claude Code, respectively, while remaining stable over 200-400 optimization steps. Moreover, the framework yields consistent gains on more challenging tasks such as JobBench and OfficeQA. Overall, our framework enables effective, stable, and scalable optimization of general
agents through black-box harnesses, supporting unified training across heterogeneous execution systems.
Read the full abstract ▾
All authors Huatong Song, Fei Bai, Ming Yang, Renyuan Li, Jia Deng, Jujie He, Zhange Zhang, Daixuan Cheng, Yan Xing, Qi Yun, Xuxing Chen, Danyang Li, Feng Chang, Chuan Hao, Ran Tao, Jian Yang, Bryan Dai, Wayne Xin Zhao, Mingjie Tang, Ji-Rong Wen
Computation and Language · Cross-listed from cs.RO
Mohammad Albinhassan, Yuming Feng, Alessandra Russo et al. (+1 more)
Language and
vision-
language models generate plausible
embodied plans but do not guarantee executability, as their outputs can violate environment dynamics or act on incorrectly grounded entities. We present a neurosymbolic
agent that factors long-horizon household tasks into task-directed visual exploration and constrained symbolic planning. In the first phase, a
vision-
language model and exploration harness acquire goal-relevant predicates and instance bindings from
egocentric observations and grounded interactions, producing a symbolic initial state. In the second, a PDDL transition model restricts decoding to
tokens that extend applicable actions. Monte Carlo tree search then evaluates executable continuations using a domain-independent planning heuristic. The resulting plans are executable by construction under the transition model, with transfer to the environment conditioned on correct visual grounding. On VirtualHome and ALFWorld, open 4B-27B models exceed 90% success in both environments, and our smallest
agent substantially outperforms a 27B direct visual policy in each. Constraints and search prove complementary rather than interchangeable: in ALFWorld either alone solves under a third of tasks, whereas their combination solves over 95%. The method also uses several times fewer generated
tokens than extended thinking and far fewer model-visible images than direct interaction, and residual failures localize to state acquisition rather than plan generation without any specialized training.
Read the full abstract ▾
All authors Mohammad Albinhassan, Yuming Feng, Alessandra Russo, Pranava Madhyastha
Computation and Language
Semantic Bandits: In-Context Exploration-Exploitation is Biased by Semantic Priors
David Eric Austin, Kaheer Suleman and Jackie Chi Kit Cheung
Large
language models (LLMs) are increasingly deployed as decision-making
agents in settings that require sophisticated environmental exploration. However, existing work has raised questions about how LLMs actually balance exploration and exploitation. Unlike classical
agents, LLM
agents engage with tasks through natural
language, exposing them to semantic information with no formal counterpart in the task structure. We introduce the semantic bandit, an extension of the multi-armed bandit setting that explicitly considers the textual labels assigned to actions, and use it to study how semantic priors — inductive biases arising from associations between
language and expected reward learned during pre-training, shape LLM exploration behaviour. We find that semantically informative action labels reduce exploration in favour of exploitation, improving performance when aligned with the reward structure and severely degrading it when misaligned. We further find that negative rewards trigger substantially more exploration than equivalent positive rewards, consistent with an expected-scale bias induced by reward conventions common in pre-training data. Overall, we argue that the use of
language to define the environment and rewards introduces unavoidable biases derived from the fact that the model is trained on word co-occurence, with implications for the reliability and robustness of LLM
agents in real-world decision-making settings.
Read the full abstract ▾
Computation and Language · Cross-listed from cs.HC
Closing the Affective Loop: Multimodal Speaker-Listener Emotion-Dynamics-Aware Empathetic Social Robots
Zi Haur Pang, Casey Kennington and Tatsuya Kawahara
Empathetic social
robots should respond not only to what users say, but also to how their
emotions dynamically evolve during interaction. However, existing empathetic dialogue systems are often text-centered and primarily model empathy as a one-way mapping from the user's
emotion to the system response, limiting their ability to capture
embodied speaker–listener affective exchange. We present AffectLoop, a
multimodal speaker-listener
emotion-dynamics-aware spoken dialogue system implemented on the Misty II
robot. The system tracks the speaker's verbal and facial affective dynamics, estimates the
robot listener's own verbal and behavioral affective state, and conditions LLM-based response generation on both affective streams. The
robot then generates a short spoken empathetic response together with emotionally congruent
embodied behavior, forming a closed speaker–listener affective loop. We evaluate the system in a pilot within-subject study with five participants, comparing it with an otherwise identical utterance-conditioned baseline that omits the speaker- and listener-affective-state inputs. The proposed system received higher overall impression ratings, especially for empathetic response and user satisfaction. Post-hoc log analysis further showed higher speaker-listener affective
alignment and stronger valence-based distress recovery. These preliminary results suggest that explicitly modeling both speaker emotional dynamics and listener affective state can improve
embodied empathetic interaction.
Read the full abstract ▾
Computation and Language
Does the LM Head Create a Harmful Gradient Bottleneck? A Causal Test
Anand Murugan
The
language-model head maps a hidden state of width D to a vocabulary of size V, so its transpose can return at most D independent directions to the
Transformer. Godey and Artzi argue that this severe projection is a harmful optimization bottleneck. We separate the geometry from the causal claim. Our backward-only intervention keeps the ordinary logits and the exact LM-head parameter update while reducing only the rank of the gradient sent into the
Transformer. Across five paired seeds on byte-level and BPE-8192 WikiText-2 models, reducing backward rank increases validation loss. An equally ranked factorized forward head, however, increases loss substantially more. At half rank in the larger model, the backward-only loss increase is 0.0586 (95% CI [0.0167, 0.1005]), while the factorized forward head increases loss by 0.1795 ([0.1547, 0.2042]). The vocabulary-space residual also contributes to the ordinary LM-head update, and removing that contribution is harmful. Additional controls show that repeated-
token failures are confounded by the number of independently sampled symbols, that adding never-target output classes does not impair learning, and that projection diagnostics do not reliably predict progress in our runs. Tested auxiliary feedback routes do not beat tuned backpropagation. These results confirm strong
geometric compression but do not establish that it is a harmful optimization bottleneck.
Read the full abstract ▾
Computation and Language
PCA-guided Activation Scaling for Monotonic Bidirectional Control over LLM Sycophancy
Zheng Chen, Zhaoxin Feng, Yip Tin Po et al. (+3 more)
Large
language models (LLMs) exhibit sycophancy, a tendency to agree with user beliefs regardless of factual accuracy. This can reinforce misconceptions, but eliminating it entirely risks over-correction against valid opinions. Effective control must therefore both reduce and increase sycophancy with predictable and gradual effect. Yet, existing methods fail to ensure a bidirectional and monotonic relationship between steering strength and behavioral outcome across models and
datasets. We introduce PCA-guided Activation Scaling (PAS), an activation steering framework that decomposes residual stream activations into a PCA-identified sycophancy-honesty subspace and an orthogonal residual, then applies distinct scaling exponents to achieve monotonic, bidirectional control. Across three LLMs and three
datasets, PAS achieves strong monotonicity (Spearman $\rho$ = +0.92) and an average shift of 15.4% per direction, compared with 8.7% for the baselines. Ablation studies confirm that the decomposition, asymmetric exponents, and layer selection are each essential for maintaining monotonic control. The data and code are available at https://github.com/Bellafc/PCS.
Read the full abstract ▾
All authors Zheng Chen, Zhaoxin Feng, Yip Tin Po, Jianfei Ma, Emmanuele Chersoni, Bo Li
Computation and Language
Every Coin Has Two Sides: On the Dual Nature of Generalization in On-Policy Distillation of Large Language Models
Zhaoyi Li, Deyang Kong, Yuan Wei et al. (+13 more)
On-policy
distillation (OPD) transfers teacher capabilities by supervising trajectories sampled from the student's own policy, yet its generalization behavior remains poorly understood, as most studies evaluate OPD on a single domain and on
benchmarks close to the training data. We present a controlled study that varies one generalization factor at a time, from in-domain distribution shifts to cross-domain transfer and the multi-teacher setting. We find that OPD transfers a teacher's
reasoning behavior rather than its answers to particular problems: training difficulty barely matters, and even problems the teacher never solves are useful. Transfer depends strongly on the origin relationship between teacher and student: same-origin pairs bring the student close to the teacher across
languages,
reasoning horizons, and even other domains, whereas cross-origin pairs mostly fit the trained distribution. This broad reach is a double-edged sword: since routing
prompts to domain experts cannot confine each teacher's influence, combining them yields a mixture-dependent seesaw among their capabilities. These results clarify when OPD generalizes and offer a useful perspective for diagnosing multi-teacher OPD.
Read the full abstract ▾
All authors Zhaoyi Li, Deyang Kong, Yuan Wei, Evan Yang, Ranran Shen, Mahardika Krisna Ihsani, Ming Yang, Wei Zhang, Chuan Hao, Jian Yang, Ran Tao, Bryan Dai, Shikun Zhang, Wei Ye, Ying Wei, Defu Lian
Computation and Language · Cross-listed from cs.AI
Reconstruction: A Blind Benchmark for Recovering Research Ideas from Pre-Publication Bibliographies
Shaolong Chen, Yanlin Fei, Nazhou Liu et al. (+7 more)
Can a
language model recover the true research idea of a published paper when given only that paper's pre-publication bibliography? We introduce Reconstruction, a blind idea-recovery
benchmark that withholds the seed paper and all contemporaneous or future literature, and asks models to propose hypotheses that an independent large
language model judge matches against the held-out ground-truth idea. A strict anti-leakage protocol-temporal citation cutoff, anonymous reference IDs, and frozen per-paper bibliographies, which prevents
prompt-time leakage of the seed idea. Across six scientific domains and 643 evaluated papers, seven frontier models achieve only modest Match rates (approx. 3-15%). We then evaluate a reference-only multi-
agent (top 4) pipeline that combines cross-model review with a Swiss tournament over aligned hypothesis slots, without external web search. Cross-model review plus tournament selection raises Match rates to approx. 23-42% across all six domains, which is an observed approx. 2.4x lift over the best single-model baseline. This draft reports the protocol, anti-leakage design, and current results as an arXiv timestamp.
Read the full abstract ▾
All authors Shaolong Chen, Yanlin Fei, Nazhou Liu, Xinmiao Yu, Lei Li, Rahul Thapa, Madalina Ciobanu, Navan Preet Singh, Qingqing Mao, Ritankar Das
Computation and Language
Toward Better Assessment of LLMs' Performance in Clinical Error Detection
Yifan Zhang and Rahmatollah Beheshti
Automated detection of errors in clinical documentation is a promising application of large
language models (LLMs), yet decisions to deploy such models rest on
benchmarks that evaluate each clinical note in isolation. Error-detection
benchmarks are typically constructed by injecting errors into notes, such that each erroneous note has a natural counterpart. Aggregate discriminative metrics (e.g., balanced accuracy or F1) do not exploit this structure. We show that this omission is consequential. In particular, evaluating 15 diverse LLMs on 4 standardized clinical error-detection test sets across 3
languages, we find that 13 of 15 models fall below the level of random pairwise discrimination, even while achieving F1 scores that standard practice would read as moderate. We also observe that the underlying bias patterns differ across
languages: the same model can default to "no error" on one
language and over-flag errors on another. To diagnose where discrimination breaks down, we further introduce a procedure to score the evidence models cite in their outputs. We find that while models consistently locate error-relevant content, they fail to produce the corresponding correct verdict on the clean counterpart. Finally, we show that F1 and pairwise accuracy are driven in opposite directions by the same underlying bias, so that ranking models by F1 may systematically promote the weakest discriminators. For safety-critical clinical NLP applications, we advocate for supplementing aggregate metrics with paired evaluations in
benchmark reporting. Code and analysis scripts are available at https://github.com/healthylaife/paired-clinical-eval.
Read the full abstract ▾
Computation and Language
When Do Explanations Help In-Context Learning? A Comparative Study of Natural Language Explanation Types and Faithfulness
Mahdi Dhaini, Adam Dejl, Juraj Vladika et al. (+3 more)
Natural
language explanations (NLEs) are increasingly used as inputs, for example, as few-shot rationales that influence model behavior in in-context learning (ICL). However, it remains unclear how different types of NLEs compare in their effects on downstream model performance in explanation-augmented prompting. Therefore, we provide a comparative evaluation across six
benchmarks and four instruction-tuned models, studying how NLE source (human-written when available, self-generated explanations, generated by an external LLM) and NLE selection (random vs faithfulness-based filtering) affect downstream utility of NLEs when used in ICL settings. Our extensive evaluation shows that, on classification-style
benchmarks, adding NLEs to few-shot
prompts often improves accuracy over few-shot prompting without explanations; among NLE sources, externally generated LLM-NLEs often provide strong downstream utility and remain competitive with human rationales where both are available, whereas self-NLEs are more sensitive to the selection strategy. On math
reasoning, the effects are more model- and source-dependent. We further show that faithfulness-based selection of self-NLEs yields small average gains overall, but can improve or reduce performance depending on the metric, task, and model. Different faithfulness metrics can disagree substantially, affecting which self-NLE examples are selected and their downstream predictive utility. Robustness tests with randomly swapped and out-of-distribution rationales indicate partial robustness, suggesting that semantic
alignment contributes to performance gains. Overall, our results provide insights for selecting and reporting explanations that influence model behavior in practical prompting pipelines.
Read the full abstract ▾
All authors Mahdi Dhaini, Adam Dejl, Juraj Vladika, Volkan Özer, Barbara Plank, Gjergji Kasneci
Computation and Language
Palmyra x6 Technical Report: An Agentic, Tool-Use Model Post-Trained via Anchored Supervised Fine-Tuning
Peng Du, Kiran Kamble, Rakshith Vasudev et al. (+5 more)
Palmyra x6 is a large
language model optimized for use with enterprise-oriented agentic tasks. The model was built by post-training a Mixture-of-Experts base model with Anchored Supervised Fine-Tuning on a compact corpus of verified, synthetic tool-use trajectories, optimized with a
Muon + Adam hybrid. The recipe is deliberately conservative and deliberately controlled: 626 trajectories, a single epoch, a low learning rate, and a KL anchor to the frozen base. The model shows substantial gains over the previous default model for Writer
Agent, and compares favorably with several recent models on public
benchmarks, scoring the highest on BFCL Core at $0.785$ and posts the highest six-
benchmark mean of the cohort. Furthermore, the model has shown itself to be competitive or leading relative to comparators in our bias and safety evaluations.
Read the full abstract ▾
All authors Peng Du, Kiran Kamble, Rakshith Vasudev, Zhizhuo Yang, Rohith Nadimpally, Arjun Krishna, Waseem Alshikh, Daniel M. Bikel
Computation and Language
BabelSteering: Multilingual Safety Alignment via English Steering Vectors
Emma V. Stein, Dominik Meier, Terry Ruas et al. (+2 more)
Large
language models (LLMs) are deployed globally in high-stakes settings, yet most safety research and
alignment efforts remain concentrated on English. Thus, users interacting with LLMs in other
languages may encounter weaker safeguards despite relying on the same systems for similarly sensitive tasks. In this work, we investigate whether safety signals learned from a high-resource
language, like English, can improve
multilingual safety. We propose BabelSteering, an activation steering method that acts as a lightweight inference- time intervention, using refusal directions derived from English safety supervision to generalize across
languages. Our evaluation includes eight
languages and jointly measures refusal of harmful requests, over-refusal, and general task utility. The results show that BabelSteering increases the refusal of harmful requests across
languages, with only a marginal to no reduction in task utility but with some increase in refusal of pseudo-harmful
prompts. For example, for Gemma 7B, we see an average increase in the refusal of harmful
prompts across
languages of 11 percentage points (pp), with individual
languages like Bengali seeing an increase of 17 pp, with no loss of utility on Global MMLU, while pseudo-harmful refusals increase by 13 pp on average. We also introduce a
multilingual translation-and-evaluation pipeline to facilitate future work on cross-lingual safety interventions. Overall, our findings suggest that activation steering may provide a practical, low- cost mechanism for extending English-derived safety signals to other
languages. Warning: this paper contains examples with unsafe content
Read the full abstract ▾
All authors Emma V. Stein, Dominik Meier, Terry Ruas, Jan Philip Wahle, Bela Gipp
Computation and Language
Ask, Condition or Abstain: Reinforcement Learning for Missing-Premise Reasoning
Yongqi Tong, Zhenyu Zhang, Zimi Liu et al. (+8 more)
Answer-only reinforcement learning (RL) trains
reasoning models to solve fully specified problems, but many realistic queries omit a premise needed for a unique answer. In this setting, the useful response is not always refusal: the model should ask for the missing premise, condition its answer on the unknown quantity, or abstain when no informative conditional response is available. We present Ask-Condition-Abstain Reinforcement Learning (ACA-RL), a data-augmented RL framework for this setting. Its
reasoning-graph-guided pipeline converts well-posed problems into missing-premise training instances with localized gap annotations; ACA-RL then trains on these instances with a structured reward over five observable response behaviors. We also introduce the Missing-Premise
Benchmark (MPB), a 274-instance human-verified
benchmark spanning mathematical, logical, and real-world word problems. Across Qwen3 and Llama models, ACA-RL consistently improves on MPB while preserving competitive performance on well-posed
reasoning tasks. Together with the released code, MPB, and training data, this work supports a new mission for NLP evaluation: measuring whether models can recognize when a task is underdetermined and handle uncertainty, not only whether they can answer fully specified questions.
Read the full abstract ▾
All authors Yongqi Tong, Zhenyu Zhang, Zimi Liu, Kewei Fu, Mingli Song, Haofei Zhang, Junshao Zhang, Hong Zhu, Jiang-Ming Yang, Xin Zhang, Jianshe Li
Computation and Language
STAGE: Controlled Objective Admission for Multi-Preference LLM Alignment
Yongqi Tong, Zhenyu Zhang, Ruirui Wang et al. (+6 more)
Multi-preference
alignment is often framed as scalarization: combine reward dimensions, then optimize. This leaves a temporal decision underspecified: when should each preference dimension enter policy optimization? We propose \methodname, a stability-guided active-set controller for controlled objective admission. \methodname starts from a small active set, retains admitted objectives, and expands when reward-deviation gates indicate low recent deviation or a patience budget is exhausted. A probing phase estimates a hard-to-easy order, and adaptive weighting emphasizes underperforming active dimensions. Automatic evaluations with 15 training preferences and 16 held-out
benchmark columns show that \methodname obtains higher averages than simultaneous scalarization and shared-budget adapted baselines. Component ablations and expansion dynamics further support cumulative retention, gated admission, and probing-derived ordering as useful design choices in this setting. These results position objective-entry timing as a concrete control variable in reward-vector RLHF.
Read the full abstract ▾
All authors Yongqi Tong, Zhenyu Zhang, Ruirui Wang, Kewei Fu, Shaoqing Lin, Sijie Dong, Jiang-Ming Yang, Xin Zhang, Jianshe Li
Computation and Language · Cross-listed from cs.SD
Listen, Reason, and Segment: Aligning LALMs with Editorial Judgment for Media Chapterization
Tony Alex, Wish Suharitdamrong, Sara Atito et al. (+5 more)
Large Audio
Language Models (LALMs) have made rapid progress on standardized
benchmarks, yet their deployment in practical media workflows, curation, archival indexing, and content distribution remains largely unrealized. We identify automated audio chapterization, the task of segmenting continuous audio streams into thematically coherent chapters, as a demanding and commercially consequential setting that exposes this gap. Chapterization is challenging because boundaries are defined less by objective acoustic events than by subjective editorial judgment, requiring models to reason sequentially over long acoustic contexts and approximate creator-authored boundary decisions. We present AudioChaps, a post-training framework for aligning end-to-end LALMs for this task via Group Relative Policy Optimization (GRPO) guided by Chain-of-Thought (CoT)
reasoning. To support training and evaluation, we curate three
datasets: AudioChaps-
Alignment, derived from creator-annotated chapter boundaries on YouTube; AudioChaps-CoT, which provides structured supervision for well-formatted, high-quality, and evidence-grounded boundary
reasoning; and AudioChaps-Eval, a held-out
benchmark for audio chapterization. Applying GRPO directly without a Supervised Fine-Tuning (SFT) cold start, AudioChaps-R1-Zero already improves average F1 by 33 points over the state-of-the-art LALM Audio-Flamingo-3-Think. The AudioChaps framework produces our final aligned LALM, AudioChaps-R1, which improves average F1 by 49 points. These results demonstrate that GRPO-trained LALMs can reliably transform unstructured auditory streams into navigable, structured media. Our code, models, and
dataset resources will be released upon acceptance at https://github.com/ta012/AudioChaps.
Read the full abstract ▾
All authors Tony Alex, Wish Suharitdamrong, Sara Atito, Armin Mustafa, Muhammad Awais, Philip J. B. Jackson, Jiankang Deng, Ismail Elezi
Computation and Language · Cross-listed from cs.CR
DSPrompt: Dynamic Soft Prompt Defense Against M-RAG Corruption
Chang Liu, Yuni Lai, Mingyue Cui et al. (+5 more)
Multimodal Retrieval Augmented Generation (M-RAG) is increasingly vulnerable to
adversarial attacks where malicious data are crafted to produce
embeddings that align with benign entries in the vector space, deceiving
retrieval and inducing harmful outputs. Existing defenses primarily operate at query time, relying on auxiliary detectors, similarity re-ranking, or feature-consistency checks. However, these approaches suffer from non-trivial inference overhead, generalize poorly to unseen attack strategies, and often assume specific attack distributions. To address this, we propose DSPrompt, a Dynamic Soft
Prompt defense framework that directly reshapes the retriever's
embedding semantics, without modifying the
retrieval pipeline. It inserts few learnable soft
prompts into each layer of the visual and textual encoders of a frozen retriever, utilizing a shallow-to-deep length schedule that is adaptive to the capacity in the model layers. These
prompts are trained under a dynamic min-max scheme: an online
multimodal attacker continually crafts hard
adversarial documents against the current retriever, while the defender is updated to push such documents out of the top-k while preserving the ranking and diversity of benign evidence. Because the defended encoder can be pre-computed and indexed exactly as in standard dense
retrieval, DSPrompt incurs no additional per-query optimization and introduces fewer than 1% additional parameters. Extensive experiments across four
benchmarks and three representative poisoning attacks show that DSPrompt substantially reduces the attack success rate and poison
retrieval rate while maintaining near-lossless
retrieval utility and generation fidelity, consistently outperforming existing defense baselines at a fraction of their computational cost.
Read the full abstract ▾
All authors Chang Liu, Yuni Lai, Mingyue Cui, Cong Tian, Yunyan Zhang, Xian Wu, Kai Zhou, Bin Xiao
Computation and Language
When Context Misleads: Intent-Guided Decoding for Robust Retrieval-Augmented Generation
Haolin Jin, Pengyue Yang and Huaming Chen
Retrieval-augmented generation (RAG) improves large
language models by grounding generation in external evidence, but it also introduces a source trust problem: retrieved context may be useful, irrelevant, or even misleading. Existing RAG systems often apply a fixed trust policy toward retrieved evidence, which can either over-trust incorrect context or underuse context when the user explicitly asks for context-following behavior. Therefore, we propose Intent-Guided Decoding (IGD), a framework that arbitrates between retrieved context and parametric
memory according to user intent. IGD uses answer-level filtering and
token-level correction to steer the final decoding trajectory between retrieved context and parametric
memory. We evaluate IGD on three faithful QA
benchmarks and three factual-conflict
benchmarks across five LLMs, IGD substantially improves factual recovery, achieving gains of up to 65.4 percentage points on factual-conflict
benchmarks over Direct RAG, while preserving or improving strict context-following behavior, this findings highlight the importance of balancing factuality and faithfulness in RAG.
Read the full abstract ▾