Peer Revenue Past citations are no guarantee of future returns

Papers

Fresh from arXiv, typeset properly. Highlighted words trade on the market.

All of arXiv

Friday 9 October

Quantum Physics

Finite-Size Limits of Adaptive Pauli Prediction

Can quantum data reliably answer questions chosen from earlier results? We prove that $M$ adaptive Pauli predictions on $n$ qubits require $\Omega(\sqrt{\min\{n,M\}})$ copies at fixed accuracy. Published upper bounds make this tight for $M\le n$. Thus $n$ adaptive predictions cost $\Theta(\sqrt n)$ copies, whereas a fixed list costs only $O(\log n)$. The lower bound uses diagonal states and commuting observables, identifying a statistical cost of adaptation. We also quantify how this cost increases with precision.
Read the full abstract

All authors Luofei Wang, Boyu Liu, Zihe Wang, Zhangqi Yin

Cryptography and Security

ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary

Large language models (LLMs) are increasingly deployed as agents that interact with external software through tools, with an orchestration layer translating model outputs into structured tool invocations. This architecture creates an LLM-orchestrator-tool trust boundary where tool semantics may go unenforced and LLM-generated arguments may be incorrectly treated as trusted. We present ToFu, a tool-aware framework that automatically derives semantic security checks for LLM tools from their existing metadata and a CWE-guided sanitizer corpus. ToFu specializes these checks to individual tools and automatically generates fuzzing harnesses and semantic oracles using runtime introspection and outcome sanitization. We evaluated ToFu across 273 MCP servers containing 3405 tools and identified verified bugs corresponding to CWE weakness classes in 343 tools across 118 of the servers. Our findings show that real-world tools frequently fail to enforce their documented input semantics, making it unsafe to treat LLM-generated arguments as trusted.
Read the full abstract

All authors Md Nazmul Islam Ananto, Pierre Prevost-Avenel, Colin Smith, Kyungtae Kim, Taegyu Kim, Arslan Khan

2610.13651 · 9 Oct · 33 pages, 4 figures, 16 tables. Evaluates 273 open-source MCP servers (3405 tools); 253 verified semantic security bugs in 118 servers. Appendices include a case study, a Repeat-After-Me transcript on LangGraph, the full sanitizer corpus, the list of evaluated repositories, and the verbatim LLM prompts

Computational Geometry

A Bicriteria Approximation Scheme for the Minimum Well-Separated Pair Decomposition

A well-separated pair decomposition (WSPD) of a set $P$ of $n$ points covers all $\binom{n}{2}$ pairs of points by a family of dumbbells $\{X,Y\}$, each covering the pairs of $X\times Y$, such that the diameters of $X$ and $Y$ are at most an $\varepsilon$-fraction of their distance. In $\mathbb{R}^d$, WSPDs with $O(n/\varepsilon^d)$ dumbbells always exist, but many inputs admit much smaller ones. However, computing a WSPD of minimum size is NP-hard in the plane. For $d\ge2$, the only known approximation that preserves the separation has a factor of $2^{O(d)}$, and Buchin et al. (ESA 2026) asked whether a $(1+\delta)$-approximation exists. We give a bicriteria approximation scheme: for fixed $d$ and $\delta\in(0,1]$, we compute in $f(d,\delta)\cdot n^{6}$ time a $(1+\delta)\varepsilon$-WSPD whose size is at most $(1+\delta)$ times the minimum size of an $\varepsilon$-WSPD. The same holds in metric spaces of bounded doubling dimension. The algorithm combines shifting over scales with the local-growth technique of Nieberg, Hurink, and Kern, applied to a graph whose vertices are the pairs of points. In contrast, we show that in general metric spaces, relaxing the separation by a factor below $2$ keeps the problem hard: for every fixed rational $\varepsilon\le1/4$, it is NP-hard to compute such a relaxed WSPD whose size is within a factor $n^c$ of the minimum, for every $c<2/3$.
Read the full abstract

Chemical Physics

Electron-Density-Informed Molecular Property Prediction Using Surrogate Functionals

Machine learning methods are increasingly used to predict chemical properties directly from the molecular structure to bypass the often prohibitive cost of quantum mechanical calculations. Recent work has shown that including the ground-state electron density as input to the machine learning model can improve accuracy in this setting. This work employs the recent surrogate functional framework originally developed for orbital-free density functional theory and extends it to predicting molecular properties. We show that passing the ground-state density as input to the model, while simultaneously enforcing it to be the minimum of the surrogate functional, surpasses state-of-the-art performance for six out of seven extensive properties of the QM9 dataset. Additionally, the approach shows improved generalization to larger molecules taken from the QM40 dataset. On all extensive properties of both datasets, our approach outperforms models that are informed by the ground-state density but do not enforce the surrogate functional constraints.
Read the full abstract

All authors Manuel V. Klockow, Simon Wagner, Roman Remme, Dominic Plein, Fred A. Hamprecht

Information Retrieval

SPARQL-LLM in the TEXT2SPARQL 2026 Challenge

Querying distributed data represented as Knowledge Graphs (KGs) via SPARQL remains a difficult task, requiring fluency in query syntax, endpoint specifications, and schema details. Knowledge Graph Question Answering (KGQA) systems address this by automatically translating natural language into SPARQL, and recent advances in Large Language Models (LLMs) have made this translation increasingly feasible. In this paper, we describe SPARQL-LLM, our open-source KGQA system, in the context of the TEXT2SPARQL 2026 challenge. In this challenge, SPARQL-LLM ranks first overall among eight competing approaches across all datasets, achieving up to 59% higher accuracy than the second-best approach and supporting multilingual question answering in English, German, and Spanish. SPARQL-LLM is publicly released at https://github.com/sib-swiss/sparql-llm and deployed in production over decentralized bioinformatics KGs at https://www.expasy.org/chat.
Read the full abstract

All authors Panayiotis Smeros, Vincent Emonet, Ruijie Wang, Ana-Claudia Sima, Tarcisio Mendes de Farias

Software Engineering

A-SAW: The Agentic Software Architecture Workflow

AI assistance in software engineering focuses on implementation and verification, leaving the design phase, and in particular the maintenance of architecture documentation, comparatively underserved. Architecture as Code makes architectural artifacts versionable, diffable, and machine-readable, but it does not reduce the effort of keeping them updated, so design documentation still ends up as a fragmented, author-dependent, and only partially trusted record of why a system looks the way it does. In this paper we introduce the Agentic Software Architecture Workflow (A-SAW), a process-level artifact that extends Architecture as Code with a persistent agent layer: an IDE-integrated agent drafts architecture documents from a version-controlled C4 model, a typed element catalog, and instrumented templates. Every draft passes a mandatory human review gate before it is accepted. We evaluate it in a large industrial organization along two tracks: a rubric assessment of 45 architecture documents including 13 matched source-regeneration pairs, and 13 task-anchored practitioner interviews. Our results show that the workflow collapses the between-author variance that made quality unpredictable. Intrinsic quality also rises, by a median of +19 points across the matched pair. The cohort has a mean of 58% and 89% bundle templates, catalog, agent, and a richer regeneration context. So they bound the agent's contribution from above rather than isolating it. In the agent-generated documents, completeness (100%), consistency (93%), and machine-readability (99%) reach or approach the rubric maximum, while traceability reaches 79%. Eleven of the 13 participants rejected agent output that no human had reviewed, and one warned that polished output may lead reviewers to skip the review. Our work supports keeping human review mandatory and concentrating it where the agent must infer beyond the repository.
Read the full abstract

Operator Algebras

Actions of Fell bundles, II: tensor products and Fourier-Stieltjes algebras

In the context of Fell bundles over discrete groups, we introduce and analyze suitable notions of direct sum and tensor product of actions of Fell bundles on Hilbert bundles. For $C^*$-dynamical systems, where actions arise from equivariant representations, we discuss how the tensor product of two such actions is related to the action associated with the tensor product of the underlying equivariant representations. Likewise, since any action gives rise to a $C^*$-correspondence between the full cross-sectional $C^*$-algebras of the involved Fell bundles, we examine the connection between the $C^*$-correspondence associated with the tensor product of two given actions and the tensor product of the associated $C^*$-correspondences. We also discuss how the tensor product of actions naturally appears in Rieffel-like induction processes. Finally we present related results on the Fourier-Stieltjes and Fourier algebras of a Fell bundle.
Read the full abstract

Geometric Topology

Finding the Birman-Series set

By a celebrated result of Birman and Series, the set of simple complete geodesics form a nowhere dense subset of a hyperbolic surface. We show that a segment of finite length is in a (small) neighborhood of this set if it can be "extended simply" in both directions for long enough. We deduce that, for large enough genus $g$, there exist surfaces with a Birman-Series set that is roughly $\frac{1}{g^{\sfrac{2}{3}}}$-dense.
Read the full abstract

Machine Learning

SelectArena: A Modern Benchmark for Feature Selection on Real-world Tabular Data

Selecting a subset of features (columns) from a tabular dataset is a ubiquitous challenge in real-world applications. Industry experts seek to minimize model training costs, climate scientists require an interpretable subset of factors to understand extreme weather events, and clinicians need to choose among diagnostic tests due to financial and time constraints. When looking at the scientific literature to determine which feature selection method to use, practitioners across domains face an unrepresentative landscape of benchmarking. Despite extensive research, existing feature selection benchmarks provide limited guidance because they rely on outdated models, ad hoc evaluation protocols, or artificially generated data that do not reflect real-world problems. To close the gap between scientific benchmarking and real-world applications, we introduce SelectArena, a modern benchmark for feature selection. We compare 15 widely used feature selection methods on 71 manually curated real-world tabular datasets, covering classification and regression problems, using standardized evaluation protocols and state-of-the-art tabular (foundation) models. Our results reveal clear trade-offs across predictive performance, runtime, stability, and validity. Tree-based methods, CART and RFImportance, along with F-Test are Pareto-optimal when taking into account predictive performance and runtime. F-Test, information-theory-, and distance-based methods lead on stability and validity, with F-Test emerging as a balanced choice across our metrics. Search-based methods are slow, unstable and achieve low performance. SelectArena turns these findings into practical guidance and, as an extensible platform, supports future feature selection research.
Read the full abstract

All authors Bastian Schäfer, Dominika Matus, Lennart Purucker, Ricardo Knauer, Erik Rodner, Frank Hutter, Anton Sokolov, Arnaud Liefooghe

Robotics

DexBioLab: Benchmarking Dexterous Manipulation with Dynamic Experimental Phenomena in Realistic Laboratories

Automating biological laboratories requires robots to perform dexterous tool interactions under realistic visual conditions while handling dynamic experimental phenomena, presenting significant challenges for robotic manipulation. To enable systematic evaluation under these conditions, we introduce DexBioLab, a simulation benchmark and framework for dexterous manipulation in realistic biological laboratory environments. DexBioLab comprises 14 tasks across 4 robot embodiments, spanning functional tool use, precision manipulation, language-conditioned visual grounding, and instrument operation. We introduce controllable dynamic experimental phenomena, including flames, vapor, and bubbles, to capture the evolving visual conditions of laboratory procedures. To further enhance environmental realism, we develop a hybrid rendering pipeline that integrates interactive simulated foreground objects with Gaussian-splatting backgrounds reconstructed from 6 real laboratory scenes. For efficient large-scale data generation and evaluation, we further build a parallel simulation framework on top of mjlab, proposing Parallel Finite-State Machine (PFSM) and integrating batched rendering with decoupled trajectory replay for demonstration generation and model-independent closed-loop policy evaluation. Our evaluation reveals substantial variation in policy performance across tasks, exposing distinct strengths and weaknesses of current manipulation policies. Real-world experiments further demonstrate a reduced sim-to-real gap, supporting the validity of AutoBio+ for realistic manipulation evaluation. Supplementary materials are available at https://cumulusalpha.github.io/DexBioLabWebPage.
Read the full abstract

All authors Xuanye Wu, Yue Shi, Yongcan Yang, Yiqun Wang, Zhaoqi Wan, Dayu Xia, Yanming Shao, Jiezhang Cao, Xiangfei Li, Yao Mu, Guangtao Zhai

Statistical Methodology

Interval-valued circular time series: A toroidal score-driven approach with an application to wind direction

Circular data recorded over time, such as wind direction, are increasingly observed in intervals rather than as single point-valued observations, yet no existing framework accommodates data that are simultaneously circular, interval-valued, and temporally dependent. Time series models for point-valued circular data, including recently proposed score-driven approaches, assume that each observation is a single angle. This paper addresses this gap by proposing a dynamic conditional score framework for interval-valued circular time series. The lower and upper boundary sequences of the observed intervals are treated as circular time series governed by score-driven dynamics, which preserves the periodicity of the circular domain and the dependency of boundaries, in which the boundaries are coupled through a toroidal distribution and a jointly derived score. Maximum likelihood estimation is discussed, and their finite-sample performance is evaluated through simulation. An application to interval-valued wind direction data illustrates the practical value of retaining the interval structure within a fully rotationally invariant circular framework.
Read the full abstract

All authors Thasmika Mohan, Najmeh Nakhaei Rad, Sphiwe Skhosana, Yaser Samadi

Earth and Planetary Astrophysics

How long could volcanic plumes persist in the Venus atmosphere?

Resolving the ambiguity surrounding current Venusian volcanism is a primary objective for upcoming missions like EnVision and VERITAS. This study uses the Venus Planetary Climate Model to simulate the dispersal and detectability of volcanic plumes containing water vapour (H2O), hydrogen chloride (HCl), carbon monoxide (CO), and carbonyl sulphide (OCS) within a three-dimensional atmospheric environment. We model localised gas enhancements at altitudes probed by nightside spectral windows (8.62, 20.91, and 35.45 km above surface). Results indicate that plumes persist longest in the deep atmosphere (8.62 km) at equatorial latitudes, where H2O enhancements remain distinguishable from low background variability for up to 100 hours, forming distinct downstream streaks. In contrast, at 35 km, high intrinsic variability in chemically active species (CO and OCS) driven by atmospheric dynamics obscures plume signatures and chemically inert species disperse within 0.5-2 Earth days. Plumes at high latitudes disperse more rapidly than at low latitudes at all altitudes. We perform sensitivity tests with trace gas increases of 50%, 40%, 30%, 20%, 10%, and 3% above baseline and plume injection times of 6, 12, 28, 38, and 126 hours at all three altitudes and two latitudes. We conclude that observing inert gases, in particular H2O, at low altitudes and latitudes offers the best opportunity for successful plume detection.
Read the full abstract

All authors Maureen Cohen, James Holmes, Joanna Egan, Stephen Lewis, Manish R. Patel

Artificial Intelligence

Learning Size Independent Constraint Models from Input Data and Positive and Negative Example Solutions

In this paper we describe a Constraint Acquisition Tool that generates size independent constraint programs from input data and positive and negative example solutions of multiple problem instances. The system finds size specific models based on typical constraint patterns over global and binary constraints, then generalizes the models to a size independent model that can be run on unseen input data. The system produces MiniZinc code as well as a textual description of the model. We evaluate the tool on the example problems of the PTHG21 Challenge and show the feasibility of the approach.
Read the full abstract

Quantitative Methods

RetroTAC: Learning Route-Derived Synthetic Accessibility for PROTACs

Proteolysis-targeting chimeras (PROTACs) enable targeted protein degradation, expanding therapeutic opportunities beyond conventional inhibition. However, assembling their large, multifunctional structures creates synthetic challenges that hinder their discovery. Traditional synthetic-accessibility scores can overestimate this difficulty by penalizing PROTACs' molecular complexity while overlooking modular assembly from accessible building blocks. In contrast, retrosynthesis planning tools provide explicit routes but are computationally expensive, particularly for large molecules. Here, we introduce a human-interpretable, PROTAC-oriented route-derived score that rewards short synthetic depth and balanced joining of molecular fragments, and RetroTAC, a machine-learning surrogate that predicts this score directly from molecular structures. RetroTAC combines complementary models in an ensemble, achieving a root mean squared error of 0.13 and an $R^2$ of 0.65 on held-out molecules. We further evaluate its utility on PROTACs enumerated by recombining warheads, linkers, and E3-ligase ligands, followed by retrosynthetic planning and route analysis. Candidates selected for high predicted scores achieve a mean route-derived synthesizability of 0.73, compared with 0.31 for low-score candidates; 98.75% versus 51.00% are fully resolved under the tested search settings. These results support RetroTAC as a fast prioritization tool for virtual PROTAC libraries, connecting molecular screening with interpretable route characteristics while reserving explicit planning for selected candidates.
Read the full abstract

All authors Stefano Ribes, Jia Xin Zhu Zhu, Tingting Mo, Lukáš Hudec, Kostas Papadopoulos, Atanas Patronov, Rocío Mercado

Mesoscale and Nanoscale Physics

Parametric Glassiness in Graphene-based Electronic Lévy Glass

Complex disordered conductors can display highly structured and parameter-sensitive transport even in the absence of a thermodynamically stable glass phase. Overlap distributions originally developed for replica symmetry breaking (RSB) provide a useful diagnostic of this organization, provided that their interpretation is distinguished from the equilibrium Parisi construction. In this study, we report RSB-like overlap phenomenology and parametric mesoscopic glassiness in a graphene-based electronic Lévy glass, a device that mimics optical phenomena via electronic processes. By tuning the Fermi energy, we can control the number of propagating wave modes and observe reentrant changes from narrowly centered to broad or bimodal overlap distributions. The phenomenology is observed in both graphene-based and conventional two-dimensional electron-gas electronic Lévy glasses, indicating its generality. Sample-resolved overlap distributions show that the effect is intrinsic to each disorder landscape, whereas the normalized conductance variance shows that the growth of the absolute variance is mainly caused by the increasing mean conductance. We therefore interpret the overlap as a measure of correlation among hierarchically organized transport pathways and the reentrant behavior as evidence of pinning, parameter-induced reorganizations, and mesoscopic chaos in coherent transport.
Read the full abstract

All authors Caue N. da Silva, Diego B. Fonseca, Adauto J. F. de Souza, Antônio M. S. Macêdo, Luiz Felipe C. Pereira, Anderson L. R. Barbosa

Image and Video Processing

Model-agnostic Knowledge Augmented Machine Learning for Weakly Annotated Bioimaging Data

Machine learning models are increasingly used for automated feature extraction from weakly annotated bioimaging data, such as microscopy and cytomorphology images. Due to the sole dependency of automated feature extraction, existing methods yield inconsistent classification performance across weakly annotated datasets. Here, we propose a model-agnostic knowledge augmentation method that enables ML models to exploit domain knowledge beyond what automated feature extraction can capture. The proposed approach improves classification performance across seven ML architectures. When integrated with masked autoencoder-based self-supervised learning, our method achieves the strongest overall performance, improving precision by 2.9% over the next-best method on three in-house microscopy datasets and by an average of 6.8% across three public cytomorphology benchmarks. We perform nucleus-level classification based on mislocalization of TAR DNA-binding protein 43 (TDP-43) from the nucleus to the cytoplasm, a phenotype linked to Amyotrophic Lateral Sclerosis (ALS), using three independent microscopy datasets of motor neurons derived from human induced pluripotent stem cells. Accurate quantification of this phenotype at scale remains challenging and may contribute to inconsistencies across studies. Application of the best-performing model to these microscopy datasets reveals biological interpretations related to ALS, including dose-dependent effects of the proteasomal stressor, MG132, and the oxidative stressor, sodium arsenite (SA), on TDP-43 mislocalization, variable pathology in motor neurons from sporadic and familial ALS donors, and a lack of protection of the pharmacological compounds, edaravone and niclosamide, against SA-induced TDP-43 mislocalization. Together, our pipeline enables in-vitro cellular image analysis to advance understanding of ALS-associated pathology and potential treatments.
Read the full abstract

All authors Jayanie Bogahawatte, Sachith Seneviratne, Simon Maksour, Dzung Do-Ha, Elizabeth Qian, Samuel Brennan, Matthew Keon, Lezanne Ooi, Saman Halgamuge

Computer Vision

Benchmarking Answer-Grounding Consistency in Remote Sensing Visual Question Answering

In grounded remote sensing visual question answering, a model produces a textual answer and identifies relevant objects in the image as grounding evidence. Existing evaluations measure answer correctness and localization quality, but do not directly assess answer-grounding consistency. We propose the Answer-Evidence Support Protocol (AESP) to assess this consistency through evidence support: whether the grounding evidence supports the model's own answer. AESP applies task-specific rules to existence, counting, and comparison questions. We further construct the Grounded Remote Sensing Visual Question Answering (G-RSVQA) benchmark, containing 15,027 samples with questions, reference answers, and all related object-level annotations. Experiments on seven grounded vision–language models reveal failures of evidence support across all three question types. Up to 50.82% of correct answers in the evidence evaluation subset are not supported by the provided grounding evidence.
Read the full abstract

All authors Ping Guo, Zhiqi Huang, Xinran Li, Linkun Yu, Jingyin Pei, Kamata Seiichiro

Machine Learning

PANDA: Prior-guided Attentional Dual-path Architecture

Hypergraph Neural Networks (HNNs), designed to model higher-order relations beyond pairwise interactions, typically rely either on fixed structural weights or on normalised attention. Fixed weights can propagate misleading information in heterophilic settings, while normalisation makes attention coefficients competitive, in the sense that, in a message-passing framework, increasing the weight of one sender must reduce the weight of others in the same aggregation set. Our main contribution is the introduction of PANDA (Prior-guided AttentioNal Dual-path Architecture), a plug-in for two-stage message passing HNNs applicable to both undirected and directed settings. The main path interpolates between learned receiver-normalised attention and structural incidence priors, while a non-competitive (not normalised) auxiliary path lets each sender contribute its own transformed information. We also show that, with fixed structural coefficients, PANDA recovers a certain complex-valued convolution operator adopted in previous works. Across four HNNs spanning spatial and spectral methods in both directed and undirected settings, plugging PANDA in yields an average improvement of 5.18 percentage points across eight real-world benchmark datasets. The code is available at https://github.com/jainris/panda.
Read the full abstract

All authors Rishabh Jain, Federico Belotti, Stefano Coniglio, Pietro Lio, Stefano Fiorini

High Energy Physics (Experiment)

A machine-learning method for the estimation of the background from jets misidentified as hadronic tau lepton decays

Backgrounds arising from quark- and gluon-initiated jets misidentified as hadronically decaying tau leptons constitute a major experimental challenge for analyses involving tau leptons. The MUltivariate Fake-Factor INference (MUFFIN) approach, a machine-learning-based method for estimating this background directly from observed events, is presented. Boosted decision tree reweighting is used to learn multidimensional, per-object correction factors directly from observed data, thereby modelling the jet to hadronic tau lepton misidentification probability across the kinematic and topological phase space without relying on low-dimensional parametrisations. Performance studies are presented using proton-proton collision data collected by the CMS experiment at the CERN LHC at $\sqrt{s}$ = 13.6 TeV, corresponding to an integrated luminosity of 62.4 fb$^{-1}$. Compared to low-dimensional parametrisation methods, improved modelling of key kinematic observables is achieved, particularly in regions of high $p_\mathrm{T}$. The improved modelling leads to a reduction of up to 70% in the systematic uncertainty associated with jets being misidentified as hadronically decaying tau leptons. The MUFFIN method provides a robust and scalable method for background estimation in precision measurements and searches for beyond-the-standard-model physics involving tau lepton final states.
Read the full abstract

High Energy Physics (Phenomenology)

nCTEQ26 nuclear parton distribution functions

We present the new release of nuclear parton distribution functions (nPDFs) from the nCTEQ collaboration: nCTEQ26. In this global analysis, we combine our recent, more selective studies of different experimental measurements and extend them to determine a modern set of nPDFs based on the largest selection of data considered to date. This selection includes neutral- and charged-current deep-inelastic scattering (DIS), fixed-target Drell-Yan, and a large variety of collider data from RHIC and LHC Runs I and II. On the theoretical side, we match this considerably extended kinematic range with a new nPDF parametrization that combines a flexible functional form of the x-dependence with a quadratic logarithmic nuclear A-dependence as well as target-mass and deuteron corrections for the reliable inclusion of high-x DIS data. Following our previous successful work, we partially employ a data-driven approach that allows us to not only include open heavy-quark data, but also quarkonium data. In addition, we establish the consistency of this approach by comparing it to an alternative fit based on perturbative predictions of open heavy-quark data alone. We determine the uncertainties of our nCTEQ26 nPDFs with a Hessian error analysis, test their reliability by comparing our nPDFs to other, similar recent analyses, and make predictions for current and future experimental measurements that have not been included in the analysis.
Read the full abstract

All authors nCTEQ Collaboration, K. Greve, T. Ježo, A. Kusina, J. Wissmann, M. Klasen, K. Kovařík, C. Léger, J.G. Morfín, F.I. Olness, P. Risse, I. Schienbein, J.Y. Yu

Artificial Intelligence

Humanize Olympiad Agents: A Multi-Session Workflow for Olympiad Problem Solving with Solve, Review, Wiki, Verify

Large language model (LLM) agents are rapidly improving on long-horizon scientific and olympiad tasks. Recent systems have produced a Lean-formalized resolution of the Navier–Stokes problem and autonomous solutions to four open questions in the Erdős Conjectures database. Yet neither system releases both its underlying model and complete inference stack. More broadly, a single agent session remains brittle on difficult problems: early errors can propagate, missing domain knowledge can stall progress, and apparent success can mask a misinterpretation or weakening of the original task. We introduce HOA (Humanize Olympiads Agent), an open, flow-level framework that coordinates multiple agent sessions through three complementary feedback channels. First, an independent reviewer evaluates each candidate and provides actionable feedback. Second, a structured wiki supplies task-specific knowledge that may be missing or unreliable in model pretraining. Third, a verifier checks generated Lean proofs against trusted challenge statements. With GPT-5.6 Sol, HOA achieves perfect scores on the IMO, IPhO, and IOI 2026, near-full marks on the IChO 2026 problem set, and solves all 672 problems (100%) on PutnamBench. On the Lean-Eval leaderboard, HOA ranks first, solving 251 of 304 problems (82.6%). We further evaluate HOA with open models. Using Kimi-K3, HOA achieves full scores on the IMO, IPhO, and IOI, and a gold-level score of 97.1% on the IChO. These results closely match the closed-source GPT-5.6 Sol + /Goal baseline on the IMO and IPhO, while exceeding it on the IChO and IOI, demonstrating that systematic feedback can help bridge substantial differences in base-model capability.
Read the full abstract

All authors Zhengyang Zhang, Jing Xiong, Hongzhou Lin, Juihui Chung, Zijian Zhang, Song Han, Sihao Liu, Ligeng Zhu

Machine Learning

Private and Distributionally Robust Federated Multiclass Classification

Fault diagnosis in asset-intensive industries requires multiclass models trained on noisy, sensitive data collected across geographically distributed client sites. Federated learning enables collaborative training without centralizing data, but most approaches do not provide formal privacy guarantees for individual records stored at client sites and can degrade under label noise. To address these limitations, we develop a differentially private, distributionally robust framework for federated multiclass classification that provides sample-level privacy for records stored at each client. We build on a federated Wasserstein distributionally robust multiclass objective with the Crammer-Singer loss, solved using an Alternating Direction Method of Multipliers (ADMM)-based algorithm. To protect the released client updates, our method injects calibrated Gaussian noise into the proximal linearized client updates of both the local model and the local distributionally robust variable before aggregation at the central server, and we quantify the cumulative privacy loss using the moments accountant. We provide per-round sample-level $(\epsilon,\delta)$-differential privacy guarantees and an overall composed privacy guarantee across all training rounds, together with convergence results and an explicit privacy-utility tradeoff. Experiments on simulated industrial fault data and UCI benchmark datasets show that our method outperforms differentially private federated empirical risk minimization and stochastic gradient descent baselines in most tested settings, with the largest gains under strong privacy-induced noise.
Read the full abstract

Computation and Language

Multi-Stream Attention Residuals

Attention Residuals (AttnRes) enables content-dependent retrieval over network depth, which can be viewed as single-stream softmax attention along the depth axis. Inspired by the success of multi-head attention along the sequence axis, we introduce Multi-Stream Attention Residuals (MSAR), an extension of AttnRes that generalizes this mechanism to multi-head depth attention, yielding substantial performance gains with minimal additional overhead. MSAR draws stream diversity from sequence context through multi-scale causal convolutions, allowing different heads to retrieve historical representations through distinct contextual views while preserving the integrity of the hidden representation. The retrieved streams are combined through lightweight adaptive mixing to generate the single-stream layer input. By retaining single-stream sources and expanding them on demand, MSAR supports multi-stream computation without requiring persistent multi-stream storage or communication. Across all 12 downstream benchmarks at the 18B and 28B MoE scales, MSAR consistently outperforms prior residual variants, including standard residual connections, manifold-constrained Hyper-Connections (mHC), and AttnRes. Scaling-law experiments yield an iso-loss compute speedup of $1.58\times$ over the standard residual baseline, compared with $1.35\times$ for AttnRes and $1.30\times$ for mHC. These results make MSAR a promising residual architecture for large-scale pre-training.
Read the full abstract

All authors Xiaohan Qin, Xiangdong Zhang, Tuo Dai, Sunan Zou, Huaijin Wu, Yebin Yang, Zhuo Xia, Lin Yao, Yuliang Liu, Junchi Yan

Analysis of PDEs

An inverse spectral problem for the wave equation with a varying Robin parameter at the boundary

An inverse spectral problem for a $(1+1)$-dimensional wave equation with wave speed $c(x)$ is considered. The spectral data consist of the eigenvalues of the Neumann–Dirichlet problem for the operator $-c^2(x)\partial_x^2$ together with their derivatives with respect to a Robin parameter at the boundary. We propose a two-step recovery procedure. In the first step, the Neumann-to-Dirichlet map $\Lambda$ is reconstructed from the spectral data using the results of arXiv/0406582. In the second step, the reconstructed $\Lambda$ is used within the regularization strategy for the boundary control method presented in arXiv:1509.04478. As an improvement, the regularization of the control problems employs a weighted combination of $L^2$ and $H^1$ penalty terms, and we prove a uniform convergence result for the family of optimal controls, thereby allowing the regularization parameters to be tuned simultaneously. We also prove that the forward spectral map, which assigns to a wave speed its spectral data, is Lipschitz continuous, and that the inverse spectral map underlying the reconstruction procedure is Hölder continuous on a subclass of wave speeds. The method is implemented numerically and validated on both smooth and piecewise smooth wave speed profiles. Numerical experiments demonstrate that the recovery of the wave speed exhibits high accuracy and robustness.
Read the full abstract

All authors Antti Hannukainen, Petr Kulikov, Matti Lassas, Lauri Oksanen

Robotics

JitterVLA: A Replay Benchmark for Motion Quality in VLA-Driven Human-Robot Manipulation

Vision-language-action (VLA) policies issue sparse targets whose arrival at the robot controller is delayed and irregular, so a reasonable predicted action can still produce abrupt motion near people. Remedies are evaluated on different streams, delays and metrics. JitterVLA replays identical commands and arrival traces through alternative controllers, isolating the controller's effect. We apply it to synthetic reaches, hand trajectories from 20 people, three open VLA pipelines (838 episodes) and a physical UR3. Interpolation lowered modeled p99 jerk for every source, by 83% (615 to 106 m/s^3) on human motion with 200 ms delay, at a 2.0 cm tracking cost, and the effect replicated on 598 new episodes; jerk-limited generation lowered jerk further at a larger cost. Entropy-discontinuity associations had opposite, replicated signs in two pipelines, and entropy gating helped in one but not the other. On the UR3, interpolation lowered accelerometer-derived jerk by 3.0-14.0% in all six exploratory pairs, while a position-derived metric did not resolve the contrast. JitterVLA supports screening before human-centred studies; code and data will be released.
Read the full abstract

All authors Faith Ogunwoye, Didar Seyidov, Konstantin Gubernatorov, Dzmitry Tsetserukou

Computation and Language

AMLworld-Compact: Importance-Weighted Downsampling for Cost-Effective LLM Evaluation and Error Diagnosis

Evaluating large language models (LLMs) on AMLworld's smallest test splits is costly because each of over a million targets requires a separate graph prompt. Sampling reduces this cost, but small balanced subsets change unweighted precision and F1. We introduce AMLworld-Compact, an evaluation set that retains every illicit test transaction and samples benign transactions from supervised-score strata. Its HT-Coreset protocol reduces evaluation targets by 271x and 611x on HI-Small and LI-Small. Horvitz-Thompson weights give unbiased full-test confusion-count estimates for fixed predictions; recall is exact, while precision and F1 are ratio estimates. In a held-out study using Graph Feature Preprocessor (GFP) features, one boosted-tree family defines strata for evaluating the other over 500 draws per configuration. At the released sizes, F1 RMSE is 0.00-2.58 percentage points versus 4.44-7.41 for uniform sampling with HT weights; conservative intervals remain broad. Under the evaluated graph prompts, seven open-weight LLMs have weighted precision near the predict-all-illicit baseline. In an outcome-stratified audit of 1,000 HI-Small few-shot outputs from one run per model, lexical checks pass for 84.5% of correct and 56.2% of incorrect binary verdicts, so these markers do not establish correctness. We release the evaluation sets, construction code, and audit tools at https://huggingface.co/datasets/typhoon-ai/AMLworldCompactEval and https://github.com/nat-nischw/AMLworld-Compact.
Read the full abstract

All authors Natapong Nitarach, Phume Ngampornsukswadi, Pittawat Taveekitworachai, Surapon Nonesung, Warit Sirichotedumrong, Kunat Pipatanakul

Software Engineering

SWE-DeceptionBench: Benchmarking Deceptive Behaviors of LLMs Across the Software Development Lifecycle

Large Language Models (LLMs) are increasingly used throughout the software development lifecycle. This growing reliance on LLMs raises concerns about their trustworthiness, with deception posing a particularly important risk. Deceptive behavior takes the form of misleading responses or assistance in fabricating, concealing, or distorting information. To study this behavior, we introduce SWE-DeceptionBench, a benchmark for evaluating LLM deception in software engineering. The benchmark covers six lifecycle stages and two deception triggers: Active Deception, where models recognize infeasible or conflicting requirements but still present them as achievable, and Passive Deception, where models help fulfill explicit user requests to mislead others. We further introduce Neutral, Reward, and Pressure conditions to study the effect of external inducements, resulting in 720 test instances in Chinese and English. Evaluating seven mainstream LLMs, we find substantial deception even under the Neutral condition, with aggregate rates of 49.88% for Active Deception and 64.29% for Passive Deception. Deception rates vary across lifecycle stages, and external inducements affect Active and Passive Deception to different extents. We also evaluate lightweight defenses, finding that guard models miss many deceptive requests, and Self-Reminder reduces but does not eliminate deceptive responses. These findings highlight the need for more effective deception detection and mitigation methods to support trustworthy LLM-based software engineering.
Read the full abstract

All authors Xiting Liu, Lin Yang, Yitong Zhang, Jia Li, Shi-Min Hu

Statistical Methodology

Kernel-based External Validity of Experimental Studies

The external validity of a study is the extent to which its findings generalize to unseen experimental conditions, such as datasets. We formalize the results of a study together with its research question, and define external validity as the probability that two independent and same-sized replications of the study produce results whose maximum mean discrepancy (MMD) is below a given tolerance. This approach, centered on the choice of a space of results and of an appropriate reproducing kernel for the MMD, is flexible enough to be deployed on multiple different types of results and research questions. Additionally, we establish an asymptotic power-law relation between the size of a study and the quantiles of the MMD, which we use to estimate the desired size of an externally valid study from a small-scale preliminary study. We deploy our framework to rankings with ties and discuss kernels suited to different research questions. Experiments on existing case studies and on a simulated newly designed study illustrate the applicability of the framework. We release our code as part of the genexpy Python module.
Read the full abstract

Numerical Analysis

Energy conserving compatible space–time FEM for deterministic and stochastic rotating shallow water

We present a fully discrete energy conserving discretisation of the rotating shallow water equations with arbitrary order in space and time. A space time finite element discretisation is used, built from compatible finite element methods in space and continuous Petrov-Galerkin schemes in time. Projected auxiliary variables for Hamiltonian derivatives are necessary for exact energy conservation. We provide an iterative solver approach based on monolithic patch smoothers, which allows us to efficiently converge a Newton method sufficiently that energy errors due to the solver are very small. We extend this construction to the energy conserving Stochastic Forcing by Lie Transport formulation. Then we demonstrate the convergence, conservation and robustness in numerical tests.
Read the full abstract

Cryptography and Security

APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces

Professional agents increasingly work through command-line interfaces and multiple tools over shared workspaces containing files, messages, and business applications. These environments create safety risks that are difficult to capture with attacks placed at a single, known read location. We introduce APEX-Harm, a benchmark for evaluating prompt and script injection against long-horizon agents performing finance, consulting, and legal tasks in large workspaces. Each task contains 115 to 328 files, together with email, calendar, chat, document, spreadsheet, PDF, and code-execution tools exposed through MCP servers. The benchmark includes six attack categories covering static and dynamic injections, task-specific script replacement, and attacker-provided generic scripts, and evaluates attack success, exposure, and task performance. We evaluate 12 frontier models on 180 task instances per model. Opus 5 and Sonnet 5 have the lowest overall attack success rates (8% and 20%), while task-specific script replacement and attacker-provided generic script attacks remain substantially more effective, averaging 81-84% and 73% attack success, respectively. Gemini 3.8 Flash achieves the highest mean task score (0.877) while still exhibiting a 33% attack success rate. These results show that completing the requested task is not sufficient evidence of safe behavior: an agent can produce a correct deliverable while also performing an unauthorized action in the workspace.
Read the full abstract

All authors Ziyi Yang, Adel Bibi, Guohao Li, Bernard Ghanem, Carlos Hinojosa