Your paper timeline
Scroll AI takes the way you would scroll a great paper aggregator: quick signal first, deeper critique when something earns your attention, and challenges when a claim feels off.
698 papers in cs.AI
Trending mixes fresh papers with community signal.
0
cs.LGcs.AI Kai Ruan, Jinghao Lin, Tao Chen et al. · Oct 14, 2026

This paper studies policy optimization for long-horizon software-engineering agents that learn from sparse binary test outcomes. The core idea is a training recipe—dubbed SPO++—that combines the Muon optimizer with single-rollout asynchronous updates, truncated importance sampling (TIS), token-averaged loss, and auxiliary length/tool-error penalties. The authors claim this combination achieves higher training success than SPO baselines on repository-level issue resolution for two model families, suggesting Muon is critical for long-horizon RL.

Long-horizon agents must coordinate reasoning, tool use, and environment feedback over extended interactions. Learning from sparse outcome rewards requires weighting trajectories of different lengths and updating the policy while rollouts are still being collected. We examine a single-rollout asynchronous recipe combining Muon, token-averaged loss, truncated importance sampling, and auxiliary length and tool-error penalties. Single-rollout sampling allows asynchronous learning without waiting for multiple trajectories for the same issue. We study optimizer choices and recipe components for repository-level issue resolution across two model families. The evaluated training runs show higher training success with the full recipe than with the baselines.
0
cs.SEcs.AI Yuyao Ge, Shenghua Liu, Peizhong Gao et al. · Oct 14, 2026

Doc2Harness evaluates whether frontier LLMs can engineer a coding-agent harness from scratch, a capability that existing SWE benchmarks ignore by holding the harness fixed. The benchmark asks a build model to generate a complete harness from a development document and an interface-only skeleton, then evaluates it deterministically with a scripted mock model across $328$ black-box test cases. The results reveal a $26$-point performance gap between the best and worst models, with even the strongest scoring only $53.05\%$, suggesting substantial room for improvement in long-horizon infrastructure construction.

Agents driven by large language models are increasingly deployed on long-horizon tasks, where they use tools and modify real workspaces. How well they perform depends as much on the harness around the model as on the model itself. Existing benchmarks measure downstream task success under a fixed harness, leaving harness engineering itself unexplored. We propose Doc2Harness, a two-stage benchmark that evaluates long-horizon harness engineering directly. In Stage 1, a build model operating inside a fixed builder harness receives an interface-only contract skeleton and a development document that consolidates behavior across twelve frontier harnesses, and then constructs a complete candidate harness in an isolated container. In Stage 2, the frozen candidate harness runs in containers separate from the construction environment, one per test case, and is driven end to end by a scripted mock model. We score each test case using four observable channels, namely the requests sent to the model, the files on disk, the process exit code, and the command output; positive controls rule out vacuous passes. Across nineteen frontier models, each evaluated with three independent builds on 328 test cases, GPT-6 Astra achieves the highest pass rate at 53.05%, while the weakest model reaches 27.44%, a gap of roughly twenty-six percentage points. Even the strongest model fails nearly half of the test cases, and failures cluster around how cross-cutting functionality is split across modules. To our knowledge, Doc2Harness provides the first deterministic benchmark for measuring long-horizon harness engineering.
0
cs.CVcs.AI Yuheng Chen, Yufan Chen, Zhuojun Cai et al. · Oct 14, 2026

Document understanding has been evaluated through isolated silos—layout detection, OCR, reading order, and image captioning—making it impossible to audit whether a single coherent page parse exists. This paper proposes Read-Parse-Describe, a unified benchmark built from 2,402 ACM scientific documents that forces models to jointly output bounding boxes, semantic labels, reading order, recognized text, caption links, and alternative-text descriptions for visual elements. To combat spatial drift in compressed vision-language tokens, the authors introduce SARA, a lightweight residual adapter that re-injects crop-aligned multi-layer visual features into frozen VLMs.

Document understanding systems are typically evaluated as separate components via layout analysis, optical text recognition, reading-order prediction, and image captioning. This separation leaves scientific figures, captions, and visual semantics weakly connected, and fails to measure whether a model can produce a single page-level parse that is both structurally faithful and semantically accessible. We introduce Read-Parse-Describe, a unified dataset for document parsing with visual element description generation. Given a page image, models are required to output an ordered list of layout elements containing bounding boxes, semantic labels, reading-order indices, recognized textual content, and alternative text descriptions for visual elements. The benchmark is built from 2,402 documents, comprising 18,163 continuous pages, 125,218 layout elements, and 11,338 visual instances. Besides, we further propose a plug-and-play space-awareness enhancer that reuses multi-layer visual features and injects grid-aware spatial guidance into vision-language tokens for layout-aware generation. Experiments across end-to-end VLMs and pipeline parsers show that existing systems still struggle to jointly recover reading order and visual semantics, while our enhanced model achieves strong joint performance. These results highlight the need to move beyond isolated document parsing modules toward unified models that jointly read, parse, and describe complex documents. The new dataset and code will be made publicly available at https://github.com/yufanchen96/RPD
0
cs.CLcs.AIcs.SI Caixin Kang, Ke Wang, Yuchuan Wu et al. · Oct 14, 2026

Current social agent benchmarks reward fluent conversation but ignore whether agents actually reach valid plans that respect hidden constraints. This paper introduces HICO-Bench, a benchmark where two agents with private information must coordinate verifiable outcomes, and PaCPO, a reinforcement learning method that redistributes terminal rewards across turns by checking tentative plans against paired worlds. The work matters because it reveals that high LLM-judged conversation ratings frequently mask infeasible or unsupported agreements, and provides a concrete credit-assignment mechanism to train agents on verified social outcomes rather than just dialogue style.

Effective social interaction requires more than fluent responses: agents must reach plans that fit the participants' needs and circumstances. Existing evaluations of social agents mainly rely on LLM judges that rate the conversation, without checking the resulting plan. We introduce HICO-Bench, a benchmark of 180 everyday coordination scenarios, such as resource allocation, scheduling, and authorization, in which two agents with private information converse and then independently record the plan they agreed on. A program checks Feasibility (the two records match and satisfy both participants' private conditions), and an LLM judge checks Integrity (the conversation supports the recorded plan); passing both is a Verified Success. Each scenario has two versions that share the same public context but differ in one private condition, so the correct plan differs between them. Across thirteen LLMs, 36% of conversations rated highly for goal completion fail Verified Success. To learn from outcomes that arrive only at the end of a conversation, we propose Paired-Credit Policy Optimization (PaCPO). After each turn, PaCPO asks the agent for a tentative plan, checks it in both versions of the scenario, and rewards the turns after which the tentative plans fit their respective versions. PaCPO raises Qwen3-8B's Verified Success from 20.4% to 28.3%.
0
cs.LGcs.AI Mohamed Bouadi, Nassim Bouarour, Aditya Tanna et al. · Oct 14, 2026

Tabular foundation models learn to predict from in-context examples without task-specific fine-tuning, but dense architectures apply the same computation to every feature regardless of statistical context. OrionMoE-Small attacks this limitation by inserting a dataset-conditioned mixture-of-experts layer along the feature axis of a dual-axis Transformer, allowing the model to route different features to different expert networks based on both local token content and a global dataset register. If the sparse design truly helps, it could offer a principled way to scale tabular models by allocating computation heterogeneously; however, the paper never proves the MoE itself is responsible for the gains.

Tabular foundation models enable in-context learning by predicting unseen observations from a labeled support table without task-specific parameter updates. Despite recent advances, most existing approaches rely on dense architectures that apply the same transformations across features and datasets. We introduce OrionMoE-Small, a compact tabular foundation model that combines distribution-aware representations with dataset-conditioned sparse mixture-of-experts computation. Built on a dual-axis Transformer architecture, OrionMoE-Small selectively activates experts along the feature axis, with routing decisions informed by both individual feature representations and the broader dataset context. This design enables adaptive allocation of computation across heterogeneous tabular problems while retaining a shared computational pathway across tasks. OrionMoE-Small is pretrained entirely on synthetic classification tasks generated from a structured causal prior and performs downstream prediction without gradient-based adaptation. Experiments across multiple tabular benchmarks demonstrate competitive performance against substantially larger foundation models, with particularly strong results on small-context and high-dimensional datasets. Further analysis reveals favorable relative performance under class imbalance and highlights the importance of feature composition.
0
cs.LGcs.AI Yajie Zhao, Yingjun Mo, Zhiyong Wang et al. · Oct 14, 2026

The paper studies how much context a Transformer must retain to perform in-context temporal-difference (TD) policy evaluation without parameter updates. Existing theoretical constructions store the full trajectory, costing Θ(Nd) memory. The authors prove the intrinsic limit is the Krylov dimension k_L, construct a fixed-parameter attention network that compresses raw transitions to Θ(nk_L) registers, and give tight worst-case approximation error Θ(γ^m max{1,1/(m(1−γ))}) when the context falls below k_L.

Transformers can perform in-context reinforcement learning without parameter updates. However, existing theoretical constructions often require context sizes that grow with the number of sampled transitions, leading to increasing memory costs in large-scale problems. This raises a fundamental scalability question: how much context is intrinsically necessary to carry out such learning? We answer this question for fixed-policy TD evaluation. We show that, with a shared linear decoder, the minimum context dimension required to exactly reproduce the first $L$ TD iterates is the Krylov dimension induced by the sampled transitions. When the available context dimension $m$ falls below this threshold, exact reproduction is no longer possible. In this regime, we characterize the optimal approximation error and show that it decays as $\Theta(\gamma^m\max\{1,1/(m(1-\gamma))\})$ where $\gamma$ is the discounting factor. Moving from representation complexity to actual memory cost, we characterize the optimal retained memory for exact continuous representations as $\Theta(nk_L)$ and show experimentally that on a sampled task whose exact rank is full but whose numerical rank is small, a context accurate to $10^{-2}$ is $88.7\%$ smaller than the sparse sufficient statistics of TD. Finally, we establish the learnability of the shared executor through pretraining by proving global convergence of an auxiliary objective over effective attention parameters under suitable task diversity. Experiments across diverse TD evaluation problems validate parameter recovery and the predicted context--accuracy tradeoff.
0
cs.CLcs.AI Jiahong Qian · Oct 14, 2026

LLM entity extraction from full-length documents is widely deployed but its failures are poorly diagnosed. This paper runs a preregistered audit of two low-cost LLMs and a flagship control on 315 real-world cyber-threat-intelligence reports, finding that most false positives are background mentions rather than hallucinations, and that confidence signals can rank outputs for human review but cannot verify truth against relation-level counterfactuals. The results set a concrete deployment boundary for any high-stakes pipeline that triages extraction by confidence.

Audits of large language model (LLM) extraction from full-length documents report severe unreliability, leaving two questions open: what the failures actually consist of, and whether confidence signals can turn unreliable output into usable output. We run a preregistered, fully frozen evaluation of two new-generation low-cost LLMs (DeepSeek-V4-Flash, GLM-5.3-Flash) with a flagship-tier control (GPT-6.1-Sol) on a public corpus of 354 incident campaigns (315 unique reports, 630 model-report evaluations), scoring extraction quality against gold, confidence calibration, and robustness to single-sentence perturbations. Three findings emerge. (1) Unreliability persists across tiers: micro precision is 0.03-0.34 and verbalized calibration error (ECE) 0.53-0.94 across both splits; the gap does not close at the flagship tier. (2) The dominant failure is not hallucination: a full mention census plus a three-tier annotation of 360 sampled candidates (two independent LLM annotators from vendors outside the evaluated set, Cohen's kappa = 0.79 on the preregistered acceptance line, fully disclosed) back-projects to 65.6% background mentions and 19.9% gold-scope gaps, with only 1.2% unsupported candidates. (3) Confidence ranks but does not verify: zero-cost self-consistency-frequency tiering passes a preregistered top-30% precision-gain bar in all six test-split model-type cells (4/6 on train), the zero-cost text-frequency x SC frequency combination wins 3, ties 2, loses 1 across cells, yet relation-level counterfactuals on all 45 targets show that a single misattribution sentence flips high-confidence judgments in 95.6-100% of cases, and even a background sentence explicitly marked as unrelated still binds a fake vulnerability in up to 26.7% of them. We conclude with a deployment boundary: confidence tiering may set review priorities, never truth.
0
cs.ROcs.AI Xiangyi Wei, Hanzhe Yao, Jingwen Shang et al. · Oct 14, 2026

MUCO proposes manipulation units (MUs) to decompose long-horizon robot manipulation into reusable, verifiable sub-operations. Each MU carries a local goal, an initiation condition, and observable success/failure criteria; the MUCO framework matches MUs to specialist policy executors from a frozen capability registry, enables local retry and fallback, and avoids replaying already-verified prefixes. The conceptual goal is to reduce data-collection costs, enable cross-task reuse, and contain failures without joint training or shared backbones. The critical caveat is that the submitted preprint contains almost no quantitative results.

Learning and executing long-horizon robot manipulation as complete task trajectories raises data-collection costs, lim?its capability reuse, and causes local failures to cascade into later task stages. We introduce manipulation units (MUs) as reusable operations, each defined by a local goal, an initi?ation condition, and observable success and failure criteria. MUs are learned and verified individually. During execution, consecutive MUs remain coupled through shared environ?ment dynamics. We formulate MU-Structured Manipulation (MUSM) and realize it through MU-Centric Orchestration (MUCO). Given language and vision, MUCO constructs an MU sequence, matches each MU to compatible policy models in a frozen capability registry, and dispatches the model with the highest calibrated success rate. Visual verification checks MU outcomes against success and failure criteria and governs transitions, enabling retry or fallback to another model from the current state without re-executing verified MUs. Canonical keys enable checkpoint reuse for equivalent MUs across tasks without new demonstrations or updates. We evaluate MUCO on RLBench, RoboTwin 2.0, and five real-world tasks. MUCO achieves higher complete-task success and verified progress, stronger failure containment, and lower error propagation than baselines. Results demonstrate cross-task MU reuse and het?erogeneous policy composition without joint training, shared backbones, or common action representations.
0
cs.CLcs.AI Palvika Bansal, Rittika Jindal, Ruichong Wang · Oct 14, 2026

This paper studies how to convert U.S. state legislative PDFs into exact, schema-constrained XML. The authors test the hypothesis that exact reproduction relies more on harness engineering (tools, orchestration, deterministic constraints around a model) than on model scale. They cross three Claude models with three harness tiers (zero-shot, single-agent with tools, and decomposed multi-agent pipeline) on 153 gold bills. The headline finding is striking: the weakest model in the full pipeline outperforms the strongest model zero-shot ($0.948$ vs $0.806$), and the model spread collapses from $0.68$–$0.81$ to $0.95$ under full scaffolding.

Legal-content reproduction requires matching the source exactly in section hierarchy, verbatim text, citations, and amendment spans; a dropped citation or mislabeled amendment carries into the products lawyers rely on. We report an industrial pipeline converting U.S. state legislation into strict, schema-constrained XML, and hypothesize that its accuracy comes from harness engineering, the deterministic tooling built around a model, more than the model itself. Our controlled ablation crosses three harnesses (zero-shot, a single tool-using agent, and a decomposed multi-agent pipeline) with three Claude models on 153 gold bills from two jurisdictions. The harness narrows the model gap: the weakest model in the full pipeline beats the strongest model alone (0.948 versus 0.806, paired bootstrap p less than 0.001). Because the two agentic harnesses share identical tools, their gap comes from orchestration: decomposition plus the persisted state and per-agent context it brings. Across four scored dimensions, the model spread at zero-shot (0.68 to 0.81) narrows to 0.95 at the full pipeline; the residual sits almost entirely in citation normalization, where the canonical identifier is retrieved from an external authority rather than generated from the weights, so a deterministic lookup tool supplies the exactness that a larger model does not.
0
cs.AIcs.LG Tianyu Liu, Davide Belli, Bence Major et al. · Oct 14, 2026

Explorer-Zero tackles the data-curation bottleneck for agentic RL by training a learned proposer to explore stateful environments, compose multi-step tasks from demonstrated transitions, and record intermediate environment states as verifiable checkpoints. These checkpoints supply fine-grained rewards $R^{\text{subgoal}}$ that prevent group-normalized advantages from collapsing when the solver fails, while alternating proposer–solver training adapts the curriculum automatically. On ALFWorld, ScienceWorld, and AppWorld, the approach outperforms strong self-play baselines and narrows the gap to human-data RL.

Training LLM agents on long-horizon interactive tasks with reinforcement learning typically relies on human-annotated tasks and reliable verification, both expensive to construct for stateful environments. Self-play offers an alternative, but must generate achievable, compositional tasks and provide feedback beyond binary outcomes. We propose Explorer-Zero, a self-play framework that jointly generates tasks and fine-grained, verifiable rewards through environment interaction. A learned proposer explores the environment, constructs tasks, and records intermediate and final states as verification targets. These checkpoints reward partial completion, while alternating proposer--solver training adapts the generated curriculum. We show theoretically that subtask rewards reduce collapse among unsuccessful rollouts when they complete different numbers of subtasks. Without human-annotated training tasks, Explorer-Zero outperforms the evaluated self-play baselines across ALFWorld, ScienceWorld, and AppWorld; on AppWorld, our 30B agent reaches 59.67% task success, approaching 62.65% for RL on human-annotated tasks. Further analyses support task-relevant composition and benefits on complex tasks, while self-play initialization improves subsequent human-data RL across all three benchmarks.
0
cs.CVcs.AIcs.LG Taha Sabir, Alberto Montero Molina, Thinh Quang Ly et al. · Oct 14, 2026

Medical image parsing requires a single model to produce heterogeneous outputs—categorical labels, bounding boxes, counts, numeric estimates, and free-text reports—across disparate imaging modalities. This work studies task-specific adaptation of a shared 4-bit Qwen3.5-9B backbone using lightweight LoRA adapters, where a question-only GLiClass router selects the adapter, image budget, and prompt for each case on the FLARE 2026 Task 3 benchmark. The core finding is that adaptation recipes should vary by task—rank, resolution, and prompts allocated according to demand—rather than applied uniformly.

Adapting a single vision-language model to medical image parsing requires training choices that reflect the demands of each task. We study task-specific adaptation with Qwen3.5-9B for FLARE 2026 Task 3, covering six task families and seven imaging modalities. Our system couples a shared, frozen 4-bit backbone with LoRA adapters selected from the input question. We customize adapter ranks and prompts, rebalance rare classification targets, and supplement regression training with dermatology classification examples. On the fixed internal holdout, the task-specific adapters achieve a dataset-macro balanced accuracy of 0.7791 for classification, a dataset-macro micro-F1 of 0.6286 for multi-label classification, a counting mean absolute error (MAE) of 11.73, a dataset-macro detection F1 of 0.8914, a dataset-macro regression MAE of 9.78, and a report-generation CRIMSON score of 0.8204. On the organizer's 1,703-example hidden-validation set, the submitted system achieves 0.8496 classification balanced accuracy, 0.5338 sample-averaged multi-label F1, and 14.5950 regression MAE. The final 30.1 GB container averages 3.1 seconds per case, including model loading, and produces identical outputs across repeated verification runs. The benefits vary across tasks, supporting the use of task-specific adapter configurations and image budgets within a shared medical vision-language model. Code is available at https://github.com/TahaSabir0/FLARE26-Hexapus.
0
cs.LGcs.AI Yongtao Wu, Mahdi Mansouri, Zhenyu Zhu · Oct 14, 2026

This paper studies the implicit bias of the Muon optimizer when its idealized spectral-norm steepest-descent update is replaced by the standard practical implementation: finite Newton–Schulz iterations with a positive stabilization constant. The authors prove that, contrary to the spectral max-margin behavior established for idealized Muon, the practical variant instead converges in direction to the Frobenius max-margin separator—effectively recovering the implicit bias of ordinary gradient descent. They further characterize how the iteration count, stabilization, and polynomial choice interact, and provide conditions (logarithmically growing iterations) under which spectral bias can be recovered.

Prior work on implicit bias shows that gradient descent selects the Frobenius max-margin direction on linearly separable problems, whereas Fan et al. (2025) established spectral max-margin behavior for spectral-norm steepest descent methods, including idealized Muon with exact orthogonalization. In practice, however, Muon approximates orthogonalization using finite Newton-Schulz iterations and a positive stabilization constant. We prove that these implementation choices cause Muon to select the Frobenius rather than the spectral max-margin direction in linear classification with separable data. We also establish this behavior for both exponential moving average and Nesterov-style momentum. The key technical ingredient is a summable perturbation argument showing that the resulting parameter trajectories remain at bounded distance from those of gradient descent. We then disentangle the roles of Newton-Schulz iteration count, the stabilization constant, and the Newton-Schulz polynomial, revealing distinct asymptotic behaviors, including directions that achieve neither Frobenius nor spectral max-margin. Finally, we show that Muon can recover its spectral max-margin bias with Newton-Schulz iterations growing logarithmically over training.
0
cs.AI Anton Korznikov, Alexey Dontsov, Elena Tutubalina · Oct 14, 2026

The paper introduces Sparse Transformer (ST), a 5-layer language model trained on TinyStories that enforces exact activation sparsity in its MLPs via a TopK gate. By allowing only K neurons to fire per token, the model creates a known reference basis that serves as ground truth for evaluating mechanistic interpretability methods. The authors use this testbed to compare feature-recovery techniques (SAEs vs. Transcoders) and to study how compression induces polysemanticity, releasing all 35 trained models and checkpoints to support future research.

Mechanistic interpretability aims to decompose neural network computations into human-understandable features, yet progress is limited by the absence of ground-truth units to evaluate against. We address this with a Sparse Transformer (ST): a 5-layer language model trained on TinyStories whose wide, TopK-sparse MLP forces neuron specialization. We show that ST neurons are highly interpretable: they outperform a loss-matched dense transformer by 43% on AutoInterp, and circuits of a median of 12 neurons suffice to reproduce individual model predictions. This testbed allows us to directly compare feature learning methods: Transcoder, which approximates the MLP input-output mapping, recovers ST's neuron vectors with 52.6% higher cosine similarity than Sparse Autoencoder, which only reconstructs outputs. Furthermore, the ST enables a controlled study of polysemanticity: distilling its sparse MLP into a dense counterpart reveals how compression leads to feature superposition. These results show how a known reference basis sharpens evaluation and understanding, a role we hope the ST can serve for the field.
0
cs.LGcs.AI Mario Mallea, Angela Nebot, Franscisco Mugica · Oct 14, 2026

Sequence models usually require costly backpropagation and large datasets, leaving open the question of how far simple random reservoirs can go in few-shot settings. This paper systematically tests Echo State Network variants on the STREAM benchmark of synthetic seq2seq tasks, showing that orthonormal input initialization preserves a quasi-linear memory regime and that a proposed data-dependent gate (G-ESN) together with shared deep readouts pushes the solvable frontier toward structural tasks like adding and bracket matching. By benchmarking these cheap reservoir models against gradient-based SOTA, the study offers a practical map of when random features suffice and when fully trained models remain necessary.

Efficient sequence modeling remains a fundamental challenge in machine learning. Despite the success of Transformers, recurrent neural networks (RNNs) have recently re-emerged as efficient alternatives. Particularly, Echo State Networks (ESNs) offer a compelling framework of randomized RNNs that have been extensively studied for time-series forecasting and dynamical systems. This paper presents an empirical analysis of distributional, architectural, and optimization variants of ESNs evaluated on few-shot sequence-to-sequence (seq2seq) pattern tasks. These synthetic tasks utilize discrete symbol sequences, characterized by delays, inactive phases, and triggered markers to isolate and evaluate memory and pattern recognition capabilities. The minimality of these tasks is crucial to understand the strengths and limitations of machine learning models. Furthermore, when the input signal utilizes a one-hot encoding, ESN dynamics are governed strictly by their weight distributions, offering an ideal lens through which to study reservoir computing. Our findings map the performance boundaries of ESNs relative to state-of-the-art (SOTA) models. We show that preserving a linear state regime is vital for memory tasks, such as pattern completion or simple copy. We propose a data-dependent modulation mechanism for nonlinear input injection into the reservoir (G-ESN). G-ESN functions as a statistical filter capable of solving tasks that conventional ESNs cannot (the adding problem and bracket matching). Finally, for Deep ESNs, we evaluate a shared readout mechanism across layers that outperforms conventional concatenated readouts on structural tasks, including selective copy, sorting problem, and bracket matching.
0
cs.CRcs.AI Qichen Zhao, Shengfang Zhai, Qingni Shen et al. · Oct 14, 2026

Agent ecosystems rely on reusable skills that compose into complex workflows. CoRedSkill decomposes a legitimate workflow into interdependent skills and injects distributed attack operations via AST rewriting, preserving original utility while connecting malicious steps through intermediate artifacts. On a 150-case benchmark spanning exfiltration, tampering, and privilege violation, it achieves 98.0% attack success and 90.7% joint success against both skill-package and runtime auditors. The work exposes a severe gap: skill compositions can simultaneously complete legitimate tasks and carry out stealthy unauthorized operations.

Agents extend their capabilities through reusable skills that package instructions, executable code, and resources. Composing these skills enables complex task workflows, but their dependencies can also connect malicious operations across skills, making their combined intent difficult to identify through individual-package auditing. We introduce CoRedSkill, a compositional red-teaming method that forms stealthy attacks through cooperating skills while preserving their original utility. CoRedSkill decomposes an existing workflow into interdependent skills and embeds attack operations in task functions through abstract syntax tree (AST) rewriting, with skill instructions guiding the agent to autonomously select and invoke the relevant skills, and workflow dependencies and intermediate artifacts connecting the injected operations during task execution. We construct a benchmark of 150 cases covering 50 tasks and three attack objectives to evaluate attack success, task completion, and audit detection. In the main evaluation, CoRedSkill achieves 98.0% attack success and 95.3% task success with a 3.3% detection rate, and a joint success rate of 90.7% (attack success, task completion, and audit evasion in the same case) compared with 6.7--42.7% for the four baselines. Skill compositions can therefore complete legitimate tasks while carrying out unauthorized operations that evade auditing.
0
cs.AI Qiuyu Chen, Qi Wang, Liang Xu et al. · Oct 14, 2026

Long-horizon multi-agent mathematical research suffers from fragmented context, unsupported claim propagation, and opaque reasoning trails that are difficult for humans to inspect. Euler tackles this by representing the research process as persistent, shared research graphs—recording obligations, candidate routes, blockers, and evidence—that both agents and researchers manipulate through a unified workbench. The goal is to make extended mathematical investigations traceable, resumable, and open to focused human intervention at any step.

Mathematical research drives scientific discovery, and recent advances in AI for mathematics have shown that language-model agents can solve challenging problems and develop substantial mathematical proofs. Yet much of today's AI-for-mathematics work centers on obtaining a final answer. This emphasis leaves the exploration behind a result difficult for researchers to understand, while long-running investigations face fragmented context and the risk of unsupported claims propagating across reasoning steps. We present Euler, a human-centered mathematical research system built around a shared, structured representation of the research process. Euler organizes mathematical statements, assumptions, proof dependencies, alternative approaches, failed attempts, and verification evidence into connected research graphs. This representation allows researchers to trace how results are developed and supplies agents with persistent, task-relevant knowledge for planning, collaboration, and verification across sessions. Researchers can also select a graph node linked to a saved team state, revisit the agents' earlier reasoning, and explore alternative directions through continued interaction. We illustrate Euler's capabilities through three mathematical research case studies and describe the implemented system and its software validation.
0
cs.AI Ridong Zhang, Shuxian Liang, Chaoqun Wan et al. · Oct 14, 2026

GUI agents are increasingly deployed to automate mobile tasks, but most benchmarks only measure whether a task finishes, not whether the execution path was stable. GraceBench fills this gap by representing each app's reachable interaction space as a UI Transition Graph (UTG) and aligning video-recorded trajectories to it, enabling step-level diagnosis of deviation, looping, and recovery. The authors evaluate eleven models on 169 tasks across ten Android apps and show that success metrics hide serious instability: over half of successful trajectories still contain a deviation or loop, and even the highest-success model recovers poorly. The work matters because it provides a concrete framework for measuring process-level reliability, which is essential for testing and real-world deployment.

As GUI agents are increasingly deployed for mobile task automation, their reliability depends not only on final task outcomes, but also on whether they reach these outcomes through stable interaction trajectories. In automation workflows, unnecessary actions, detours, and execution errors can add noise to collected data, introduce irreversible side effects, or undermine trust, even when the agent eventually completes the task. It is therefore important to systematically diagnose the execution stability, including whether an agent deviates from a feasible path, enters a loop, becomes stagnant, or recovers from unstable actions. Existing benchmarks, however, primarily assess final task success or a small set of intermediate milestones, leaving step-level execution behavior unclear. To bridge this gap, we introduce GraceBench, an online evaluation framework that represents the reachable interaction space of mobile applications as UI Transition Graphs (UTGs), providing a structural reference for step-level execution diagnosis. To support reliable alignment between dynamic UI observations and graph states, GraceBench uses video-grounded trajectory evaluation over this graph-aligned representation, assessing process stability beyond final success with metrics such as deviation rate, loop burden rate, and recovery ability. GraceBench contains 169 tasks spanning 10 applications and constructs 10 UTGs with 2,909 canonical GUI states and 3,116 observed transitions. Across 3,718 trajectories, GraceBench shows that outcome scores hide execution instability: GPT-5.6 Sol achieves the highest success rate (SR) but the lowest recovery ability, 51.24% of successful runs still contain a deviation or loop, and trajectories with the same success rate (SR) and completion rate (CR) can differ substantially in recovery behavior. Code and data will be released on https://iaie-physicalai.github.io/GraceBench.
0
cs.CRcs.AI Yuanbo Xie, Mingli Zhu, Tianyun Liu et al. · Oct 14, 2026

Typed decision models route requests or select tools from predefined categorical options, using fallbacks such as "Other" or "Defer" to handle out-of-scope inputs. This paper introduces the Paired Fallback Robustness (PFR) Test to check whether models correctly switch to fallback when required and whether they remain consistent under logically equivalent rule descriptions such as Union versus Complement definitions. The authors find that fallback mechanisms frequently fail silently: Intern's accuracy on TREC50 collapses from 97.9% to 23.1% on correctly classified inputs when reassigned to fallback, and equivalent definitions can flip individual decisions without changing aggregate accuracy. These results matter because fallback options, intended as reliability safeguards in production routing and delegation systems, can themselves become a source of error.

Typed decision models (TDMs) are increasingly used in applications such as request routing and model selection, making reliable decisions critical to system performance. Fallback options accommodate categories outside regular choices, enabling deferral to human experts or more capable models. While recent works have examined adversarial vulnerabilities in TDMs, their ability to follow fallback rules in non-adversarial settings remains underexplored. We introduce the Paired Fallback Robustness (PFR) Test to evaluate two aspects of fallback reliability: whether models correctly switch between regular and fallback options, and whether they make consistent decisions under logically equivalent definitions of the same rule. We evaluate open-source decision models on three benchmarks, with controlled comparisons across architectures and parameter counts. We find that correct recognition does not reliably transfer to correct fallback options, and errors persist even when the correct category is explicitly supplied.Moreover, logically equivalent formulations of the same fallback rule can also produce substantial disagreement in model decisions. These findings reveal a crucial reliability gap in current TDMs: fallback mechanisms designed to improve reliability can instead introduce errors. It highlights faithful execution of fallback rules and consistency under equivalent definitions as essential requirements for reliable typed decision-making.
0
cs.AIcs.MA Austin W. Hanjie, Carlos E. Jimenez, Zirui Wang et al. · Oct 14, 2026

Current agentic systems are built by single developers with full control, which limits scalability. This paper proposes multi-developer agentic systems (MDAs) as a new scaling axis, where independent developers contribute specialized agents that are composed via task decomposition and routing. On the diverse GAIA benchmark, the authors show that a coalition of specialists—none exceeding 35% accuracy alone—reaches 70% when combined in an MDA, while a narrow-domain SealQA experiment reveals overhead costs can erase gains. A Tullock-contest theory of developers further argues that MDAs incentivize specialization, whereas single-developer routing pushes generalism.

Today's agentic systems are typically designed, built, and deployed by single developers with full control over all participating agents. While this simplifies development, it limits the potential scale of agentic systems. We study multi-developer agentic systems (MDAs) which enable developers to collaboratively build agentic systems to push frontier capability beyond what any individual developer could achieve alone. We construct empirical and theoretical models of developers to compare MDAs with single-developer agentic systems (SDAs). On GAIA, a general assistant benchmark, a population of specialized developers whose individual agents do not exceed 35% accuracy reaches 70% when their agents are combined in an MDA. This MDA performs 12 percentage points above the median general-purpose SDA built with several times each specialist's development budget. Our theoretical models show how MDAs can incentivize specialization and encourage more efficient use of aggregated developer resources. Put together, our results make a preliminary case for MDAs as a new scaling axis by enabling developers with diverse capabilities and resources to advance agentic AI collaboratively.
0
cs.AI Huaisheng Zhu, Hangfan Zhang, Teng Xiao et al. · Oct 14, 2026

Long-horizon agent benchmarks like SWE-bench Verified can cost thousands of dollars and days of compute per evaluation run. This paper asks whether LLM agents can automatically construct cheaper proxy benchmarks that preserve the rankings and score distributions of expensive reference evaluations. The authors propose EvalBuilder, a meta-evaluation framework that assesses generated benchmarks along fidelity, efficiency, and robustness, with explicit tests for generalization to held-out models and freshly collected responses. The goal is to reduce the human effort and computational bottleneck of manual benchmark design.

Large language model (LLM) agents are increasingly used for long-horizon research and engineering, yet evaluating these capabilities remains expensive, time-consuming, and heavily dependent on human expertise. This motivates a natural question: can LLM agents themselves construct efficient benchmarks that preserve the conclusions of costly reference evaluations? We study this capability by formulating automatic benchmark development as a meta-evaluation problem, where an agent is given a task and an expensive reference benchmark and requested to construct a lower-cost proxy benchmark that faithfully distinguishes among candidate models and solutions. Based on this formulation, we introduce EvalBuilder, a framework for evaluating such benchmark-generation capabilities along three key dimensions: fidelity, efficiency, and robustness. Specifically, we assess whether generated benchmarks preserve model rankings, generalize to held-out models and freshly collected responses, and provide well-calibrated and discriminative scores while substantially reducing evaluation cost. We further provide an iterative environment in which agents can refine their benchmarks under a fixed time budget. Our framework provides a systematic testbed and benchmark for understanding when current LLM agents can develop useful evaluators and how benchmark construction itself can be increasingly automated.