Your paper timeline
Scroll AI takes the way you would scroll a great paper aggregator: quick signal first, deeper critique when something earns your attention, and challenges when a claim feels off.
797 papers in cs.LG
Trending mixes fresh papers with community signal.
0
math.OCcs.LG Linxuan Pan, Junchi Yang · Oct 1, 2026

Pan and Yang study stochastic nonconvex–strongly-convex bilevel optimization when only unbiased stochastic gradient estimates are available. They propose MRT-FD, a single-loop algorithm that simultaneously tracks the upper-level variable, lower-level solution, and an auxiliary response variable, using order-$p$ finite differences to reconstruct hypergradient actions from first-order queries. For lower-level objectives with order-$p$ smoothness, the method achieves $\mathcal{O}(\varepsilon^{-4-2/p})$ oracle complexity, and the authors prove a matching $\Omega(\varepsilon^{-4-2/p})$ lower bound, settling the optimal $\varepsilon$-dependence for any fixed finite $p$.

We study nonconvex--strongly-convex bilevel optimization under a stochastic first-order oracle. We introduce MRT-FD, a single-loop first-order method that simultaneously tracks the upper-level variable, the lower-level solution, and the auxiliary response arising from implicit differentiation of the hyperobjective. MRT-FD performs one update of each variable per iteration and approximates the second-order derivative actions using order-$p$ finite differences. For any fixed finite smoothness order $p\ge1$ in the lower-level variable, MRT-FD finds an $\varepsilon$-stationary point using $\mathcal{O}(\varepsilon^{-4-2/p})$ stochastic gradient queries. We also prove a matching $\Omega(\varepsilon^{-4-2/p})$ oracle lower bound. The lower-bound construction starts from a hard nonconvex minimization chain with a stronger stochastic oracle, and lifts it to a bilevel problem through a sinusoidal coupling with a scalar lower-level variable. Consequently, the dependence on $\varepsilon$ is optimal for every fixed finite $p$, closing the upper--lower complexity gap in this stochastic first-order oracle setting.
0
physics.ao-phcs.LG Alberto Pennino, Francesco Zanetta, Michele Cattaneo et al. · Oct 1, 2026

Varda-single-1.0 is a deterministic, data-driven weather forecasting system built for the Alpine domain, delivering hourly forecasts at 1 km resolution via a stretched-grid Graph Transformer architecture. It combines a 6-hourly autoregressive forecaster with a temporal downscaler to balance forecast horizon and temporal fidelity. The work demonstrates that machine learning models can match or exceed operational numerical weather prediction baselines in complex topography, and it openly releases model weights and software to enable operational adoption and downstream research.

We present Varda-single-1.0, a medium-range data-driven weather prediction system built for the Alpine domain. It provides hourly deterministic regional forecasts on a mesh of 1 km resolution and global forecasts on a 31 km mesh. The system comprises two independently trained stretched-grid Graph Transformer models with encoder-processor-decoder architecture, developed in the Anemoi framework: a 6-hourly autoregressive forecaster and a temporal downscaler reconstructing hourly forecasts between the forecaster's steps. Its training curriculum includes pre-training on ERA5 reanalysis data, followed by training on a 20-year kilometre-scale regional reanalysis, and finally fine-tuning on operational kilometre-scale analyses. Verified over one year against operational analyses and surface station observations, Varda-single is competitive with or improves on MeteoSwiss' operational numerical weather prediction baselines for most headline scores and variables. It broadly matches the skill of the high-resolution 1 km ICON-CH1-EPS control at lead times up to +33 h and generally outperforms the 2 km ICON-CH2-EPS control at lead times up to +120 h. Despite competitive aggregate scores, Varda-single underestimates some local wind maxima and produces overly smooth convective precipitation fields, consistent with the smoothing associated with squared-error training. To gain insight into the model's behaviour, we investigate three case studies beyond the aggregated headline scores, and find particular weaknesses in Varda-single's representation of local winds over complex terrain. Varda-single represents an important step in the development of high-resolution ML forecasting over complex terrain, in complementing the operational regional numerical weather prediction models of MeteoSwiss with data-driven models and in providing a pretrained model for researchers and user-specific applications.
0
cs.LG Sibylle Marcotte, Joan Bruna · Oct 1, 2026

This paper asks whether deep self-attention networks can exactly interpolate arbitrary finite datasets using only depth, without adapting parameters to the task. The authors prove that universal interpolation is possible with as few as two frozen Gaussian-initialized single-head residual attention blocks, composed with data-dependent signs, durations, and ordering. They also characterize when causal masking prevents interpolation. The results matter because they provide a theoretical foundation for looped and recurrent-depth transformers that share parameters across layers.

Universal approximation is a necessary qualitative property of learning architectures to benefit from scaling laws. While it is generically verified on a variety of neural architectures and random feature models, it typically involves infinite width limits. In this work, we focus on deep self-attention models and consider instead the `dual' regime, where approximation power is enabled entirely by depth, and featuring strong parameter sharing across layers, motivated by recent models such as the Looped Transformers. More specifically, we ask whether one can find a predefined finite set of parameters, each defining an attention block, such that the resulting finite set of transformations can map any collection of $N$ sequences of $n$ tokens to any other collection of $N$ sequences of $n$ tokens. Crucially, these transformations are \emph{fixed independently of the input and output} collections: only the order in which the blocks are applied, their signs, and their durations depend on the particular interpolation task. Our main result establishes it for residual softmax attention using only two frozen single-head blocks with Gaussian-initialized projection matrices. The result holds at both continuous and finite depth. We also characterize the restrictions imposed by causal masking and establish corresponding universal interpolation guarantees.
0
math.OCcs.LG Wei Jiang, Yibo Wang, Wenhao Yang et al. · Oct 1, 2026

STORM is a single-sample stochastic recursive momentum method that avoids periodic full-gradient checkpoints. Prior analyses required a stronger average smoothness assumption and produced suboptimal or logarithmically degraded rates. This paper shows that the original STORM recursion alone achieves the optimal $O(T^{-1/4})$ nonconvex rate, $O(\sigma R/\sqrt{T})$ convex rate, and $O(\sigma^2/(\lambda T))$ strongly convex rate under standard smoothness, by introducing auxiliary sequences and shifted iterates to cancel the estimator bias.

Stochastic recursive momentum (STORM) achieves fast convergence for nonconvex optimization via the variance reduction effect, but existing analyses rely on the strong average smoothness assumption. In this paper, we study the convergence of STORM for different objectives without average smoothness. We first revisit the results under average smoothness, obtaining the $O(T^{-1/3})$ bound for nonconvex objectives and the $O(\sigma^2/(\mu T))$ bound for last-iterate output under the $\mu$-Polyak--\L{}ojasiewicz~(PL) condition. Without average smoothness, we design an auxiliary sequence and compare the STORM update with it in the analysis. With the help of this sequence, we prove that STORM still attains an $O(T^{-1/4})$ rate for nonconvex objectives, which is optimal under standard smoothness. For convex and $\lambda$-strongly convex objectives, we further prove averaged and last-iterate bounds with optimal rates of $O(\sigma R/\sqrt T)$ and $O(\sigma^2/(\lambda T))$, respectively. All the obtained results use the same STORM recursion with different hyperparameter choices.
0
cs.AIcs.LG Yaodong Yang, Hongyao Tang, Yi Ma et al. · Oct 1, 2026

Judgment models that return option probabilities without reasoning text are attractive as fast agent policies, but their competence boundary is unclear. This paper argues that such models excel at evaluation (judging given options against described criteria) yet fail at simulation (predicting missing consequences like opponent moves or physical dynamics). By cleanly separating the two, the authors show that supplying simulated outcomes via code restores strong performance across matrix games, text adventures, and robot control. The result is a sharp diagnostic of where fast judgment models can be trusted and a principled architecture for combining them with external simulators.

Judgment models such as \jev{} return, in a single call and without reasoning text, a probability for each described option. This makes them attractive as an agent's action-selection layer, but it is unclear which decisions they can be trusted with. We test \jev{} on reflection tests, one-shot matrix games, the text game ALFWorld and robot control, and find a sharp boundary. \jev{} succeeds when the right option can be judged from what the input describes, which we call \emph{evaluation}. Specifically, it solves 99\% of the counterintuitive Cognitive Reflection Test questions. However, it fails when the right option depends on \emph{simulation} (i.e., predicting something not in the input), such as the opponent's action or the subgoal that must come first. In games, \jev{} plays suboptimally as if its rational opponent acted at random, because the opponent's action is not given. In ALFWorld, \jev{} favors commands that mention an object or place named in the task description. For example, given the task ``put a clean knife in the drawer'', \jev{} carries an unwashed knife straight to the drawer instead of first washing it at the sink. Surprisingly, many of these failures are not due to a lack of knowledge. Asked separately what the opponent will do, \jev{} usually answers correctly, and it responds well given the opponent's action. It fails when one call must both perform the simulation and evaluate based on it. This suggests letting code make the prediction or simulation. When code supplies it, such as a lookahead in ALFWorld and physics simulation in robot control, \jev{} becomes an expert controller through its general evaluation ability.
0
cs.LGcs.AI Qijia He, Ruinan Jin, Jun Luo et al. · Oct 1, 2026

Asynchronous LLM post-training mixes stale rollouts from earlier policies, making GRPO-style optimization unstable. This paper derives a convergence bound that exposes a second-moment versus bias tradeoff, then proposes Group-Mass Capping GRPO (GMC-GRPO), which rescales groups when their average importance ratio exceeds a cap. The result is tighter delay dependence than per-trajectory clipping and stronger empirical robustness under large rollout delays on Qwen3 models.

Asynchronous reinforcement learning (RL) improves the efficiency of large language model post-training but introduces stale rollouts generated by earlier policies. Theoretical understanding of how this staleness affects convergence and how to mitigate its impact remains limited. We derive a convergence bound for GRPO-style algorithms that explicitly characterizes the tradeoff between the gradient estimator's second moment and bias. For trajectory-level importance-weighted estimators, our analysis shows that once the second moment is uniformly controlled, delay enters the bound through the bias introduced by clipping or rescaling. Guided by this insight, we propose a novel group mass capping GRPO (GMC-GRPO) method, which minimizes a ratio-based bias bound within a class of weighted estimators sharing a common second-moment guarantee. We establish convergence guarantees for asynchronous GMC-GRPO and show that, compared with TIC-GRPO, it improves the threshold dependence of the fourth-order delay term from $O(\epsilon^{-4})$ to $O(\epsilon^{-2})$ as $\epsilon\to0$, where $1+\epsilon$ is the ratio threshold. Under local policy overlap, the delay-dependent term decreases as $G^{-2/5}$ after tuning the step size, where $G$ is the group size. For fixed behavior and current policies, the bias introduced by group rescaling also vanishes as $G\to\infty$, whereas the bias from trajectory-wise clipping can persist. Experiments across Qwen3 models and reasoning benchmarks demonstrate improved robustness to stale rollouts, with GMC-GRPO achieving the best performance among stable baselines under large rollout delays.
0
cs.LG Michael Fore, James Mason Inder, Mrishika Nair et al. · Oct 1, 2026

This paper dissects the group attention mechanism in the time series foundation model Chronos-2, which is advertised to serve both multivariate (MV) and in-context learning (ICL) forecasting. The authors decompose attention into its value/output ($V$/$O$) pooling pathway and its query/key ($Q$/$K$) learned weighting pathway by editing the attention matrix $\alpha$ at inference time. Their core finding is that uniform pooling helps nearly all tested configurations, while learned $Q$/$K$ weighting helps MV forecasting but systematically degrades ICL—sometimes leaving forecasts worse than univariate inference. The work matters because it identifies a cheap, retraining-free fix: forcing $\alpha$ uniform in block 0 alone fully recovers ICL performance across every configuration tested.

Group attention, introduced by the time series forecasting model Chronos-2, attends over the variates of a group at a fixed patch index and serves both multivariate (MV) and in-context learning (ICL) forecasting. Rather than evaluating this cross-variate attention design as a whole, we ask which part of the mechanism earns the benefit and probe its applicability to both MV and ICL regimes. By editing the attention matrix $\alpha$ at inference we separate the two pathways a head comprises: V/O, which projects a weighted summary of the group, and Q/K, which decides the weights. Uniform pooling (V/O without any Q/K weighting) is positive on 18 of our 20 sensor-network configurations, while the learned weighting (Q/K) splits by group type: its contribution is positive or negligible for MV, but materially degrades 8 of the 10 sensor-network ICL configurations, leaving 4 of them worse than univariate inference. By isolating the impact of different layers, we find that uniforming $\alpha$ in the first block alone improves every ICL configuration we test.
0
cs.LGcs.CL Xinjian Zhao, Yaoyao Xu, Xuemin Chen et al. · Oct 1, 2026

This paper asks how continuous latent reasoning in chemistry can be improved by training thoughts to anticipate future outcomes without verbalizing every intermediate step. The authors introduce Latent-JEPA, which augments a recurrent latent reasoner with joint-embedding prediction of both textual continuations and molecular structures using pretrained encoders. Evaluated on ChemCoTBench, the framework shows the strongest task gains in molecular optimization and yields latent representations that are more chemically structured.

Large language models offer a promising foundation for chemical reasoning, bringing together chemical knowledge and multistep problem solving. Chemical intuition can provide an initial sense of plausible outcomes before the details of a solution are fully worked out. Inspired by how such expectations complement explicit analysis, we study how continuous latent thoughts can be trained to anticipate informative aspects of future solutions without verbalizing every intermediate step. We introduce Latent JEPA, a framework that combines autoregressive learning with joint-embedding prediction of one or more future views. For chemical reasoning, we develop textual and molecular prediction objectives that connect latent thoughts to both subsequent reasoning and molecular outcomes. Experiments on ChemCoTBench show gains in molecular optimization and on several editing and reaction metrics. Representation analyses show that future prediction makes latent thoughts more informative about molecular outcomes and strengthens their correspondence with chemical structure. These findings support abstract future prediction as a learning principle for connecting continuous latent reasoning with scientific outcomes.
0
cs.LG Kevin Tirta Wijaya, Alston Lo, Michael Sun et al. · Oct 1, 2026

This paper tackles validation congestion in scientific discovery, where enormous virtual libraries overwhelm scarce experimental capacity. Instead of relying on data-hungry regressors, it proposes PRISMS, a framework that curates candidates using multi-fidelity pairwise rankings aggregated through a regularized Bradley-Terry model, escalating queries to expensive experts via a Fisher-information criterion. The central claim is that comparative judgments from heterogeneous experts can slash the number of slow experimental rounds needed to find top-performing designs.

Modern computational methods can now propose candidate molecules, materials, and other scientific designs at an unprecedented scale, creating a validation congestion where candidates are abundant, but experimental capacity to physically evaluate them remains scarce. Discovering novel scientific designs has therefore become increasingly dependent on curation: selecting a small set of promising designs for slow and costly experiments. Existing curation methods typically rely on data-driven regression models that predict absolute scores, but training these models requires substantial experimental data to begin with. Yet, useful curation signals do not have to take the form of absolute measurements, as scientific design discovery is often comparative in nature. Here, we propose that curation can instead be primarily driven by expert pairwise rankings, which are substantially easier to gather. The expertise can come from computational tools or human input of multiple levels of fidelity, ranging from empirical rules of thumb to agentic workflows and experienced scientists. We introduce PRISMS, a framework that uses pairwise rankings from one or more experts, potentially spanning multiple levels of expertise, to identify the most promising candidates without relying on data-hungry regressors. When experts differ in fidelity and cost, PRISMS escalates pairwise queries from lower- to higher-fidelity rankers based on a Fisher-information criterion. In iterative screening that selects designs from fixed drug discovery libraries, PRISMS achieves 50% top-10 discovery recall in ~42% fewer rounds than regression-only active learning, and in ~15% fewer rounds than the ranking-based method with no selective escalation. In optimization that generates new designs without restriction to a predefined library, PRISMS achieves ~18.8% higher hypervolume than the Bayesian optimization baseline.
0
cs.CLcs.LG Alessandro Turrin, Patrik Okanovic, Torsten Hoefler et al. · Oct 1, 2026

Selecting the best large language model for a live stream of prompts is difficult because benchmark scores are only coarse proxies for real-world performance and oracle annotations are costly. This paper proposes Online LLM Picker, the first active model selection framework designed specifically for LLMs in streaming settings: it uses an Exponential Weights posterior and an adaptive query probability based on hypothetical response variance scaled by posterior entropy to decide which prompts are worth annotating. Evaluated across over 130 models and 10 datasets spanning question answering, dialogue, grammar correction, and math, the method claims to cut annotation cost by up to 71.67% and reduce regret by up to 2.51× compared to baselines.

Large Language Models (LLMs) are increasingly applied to process streaming data, with practitioners relying on benchmarks to select the best model even though these signals only approximate real performance. While oracle annotations can provide reliable feedback, they are often costly and difficult to obtain at scale. To address this challenge, we propose ONLINE LLM PICKER, the first framework for active model selection for LLMs in online settings. Given an arbitrary stream of queries and a limited annotation budget, ONLINE LLM PICKER selects the most informative prompts for annotation to identify the best LLM among candidate models. Across multiple tasks including 10 datasets, for over 130 language models, we show that ONLINE LLM PICKER saves annotation cost by up to 71.67% while reliably identifying the best or near-best model for the stream. We also show that using the returned model for sequential generation on unannotated prompts across the stream reduces regret by up to a factor of 2.51x, indicating that ONLINE LLM PICKER can identify the best or near-best model well before processing all streaming prompts.
0
cs.LGcs.CV Yuan Huang, Zihan Chen, Runbin Zhang et al. · Oct 1, 2026

Continual learners that keep a task-specific adapter in every ViT block accumulate parameters linearly in the number of tasks. This paper asks which blocks should specialize, showing that exhaustive placement search traces an inverted-U curve peaking at intermediate depth, while cheap internal criteria systematically favor the deep but suboptimal layers. To sidestep expensive search, the authors propose LS-B, which observes the first few tasks through a frozen fMRI encoding model of human visual cortex and commits task-specific capacity to the blocks whose brain readouts vary most across tasks relative to their stable structure.

Continual learners that keep a task-specific adapter in every block of a pre-trained vision transformer accumulate storage linearly with the number of tasks; keeping task-specific adapters in only a few blocks curbs this growth but raises the question of where to place them. We investigate this question from two perspectives. Algorithmically, training all contiguous four-block placements yields an inverted U: final accuracy peaks at intermediate depth and varies by up to 3.5 percentage points (pp), while inexpensive criteria based on weight spectra or activation statistics favor the deepest blocks. From neuroscience, the hierarchical organization and intermediate-stage plasticity of the visual cortex motivate us to ask whether a measurement taken outside the learner can guide layer specialization without placement search. LS-B observes the first tasks through a frozen fMRI encoding model of twelve human visual areas and commits task-specific capacity once to the blocks whose readouts vary most across tasks relative to their stable structure. Across three ViT-B/16 backbones, LS-B yields stable, backbone-specific allocations. On the two backbones with placement search, AugReg and iBOT, the selected blocks overlap the intermediate-depth region identified by search. Under matched storage and observation budgets, the selected blocks outperform the shallowest and deepest four-block configurations. On Split ImageNet-R, LS-B uses 60% of full-BiLoRA adapter storage while remaining within 1.5 pp of its final accuracy. The allocation requires no labels or backpropagation, adds under 0.6% runtime, and exhibits backbone-specific cortical signatures.
0
cs.AIcs.LGcs.LO Lu-Chin Chang, Suguman Bansal · Oct 1, 2026

Reinforcement learning for reachability specifications has been limited to model-based methods that explicitly estimate transition probabilities. This paper introduces Quasar, a model-free Q-learning variant that provably converges to optimal reachability policies on MDPs without non-terminal maximal end components, using only $O(|S||A|)$ memory. By replacing the missing discount factor with an intrinsic expected hitting time, the authors obtain a weighted contraction and demonstrate orders-of-magnitude sample improvements over the state of the art.

Reinforcement learning (RL) for reachability specifications is fundamental to sequential decision-making. Prior work establishes asymptotic convergence to optimal policies, but only through model-based methods that must explicitly estimate the transition probabilities of the underlying Markov Decision Process (MDP). We present Quasar, the first model-free algorithm with asymptotic guarantees for reachability on the fragment of MDPs free of non-terminal maximal end components (MECs), a building block to which every MDP reduces by the standard MEC quotient. Our algorithm follows the classical Q-learning approach, using temporal-difference updates to converge to an optimal policy without ever learning the transition probabilities. The resulting learner reduces the memory footprint from the O(|S|^2|A|) that model-based methods require to O(|S||A|). On the standardized Quantitative Verification Benchmark Set, our algorithm converges to the optimal policy with orders of magnitude fewer samples than the previous model-based state-of-the-art. Together these results are a concrete step toward the practical deployment of reachability learning and, with it, of specification-guided RL.
0
cs.LGeess.IVq-bio.NC Emmanuelle Renauld, Philippe Poulin, Hugo Larochelle et al. · Oct 1, 2026

Iterative tractography must reconcile noisy local diffusion signals with globally plausible fiber pathways, yet standard deep learning models optimize only a local next-step loss. This paper tackles that gap by systematically evaluating RNN and Transformer architectures and introducing a generation-validation (GV) phase that supervises training at the streamline level via connectivity scores. It reports top scores on the ISMRM 2015 phantom and provides open-source models, while also arguing that current phantoms and in vivo evaluation tools are too limited for definitive benchmarking.

Machine learning (ML) has emerged as a promising approach for improving diffusion MRI (dMRI) tractography, a task that remains limited by the intrinsic tension between local diffusion information and global anatomical plausibility. In this work, we systematically evaluate recurrent neural networks (RNNs) and Transformer models for iterative tractography, with particular attention to training strategies, input representations (including convolutional neural network (CNN)-based embeddings and end-of-sequence (EOS) tokens), and hyperparameter selection. We introduce a generation-validation phase enabling supervision at the streamline level during training, allowing supervision despite the mismatch between local loss functions and global streamline quality. Using the ISMRM2015 tractography challenge dataset, our models achieve the highest reported performance to date. Through controlled experiments, we quantify the impact of missing bundles, noisy or imperfect training streamlines, and invalid fibers in the training set. Finally, we demonstrate the applicability of our best-performing models for in vivo data from the Tractoinferno database. Overall, our results highlight both the potential and the limits of sequence-based deep learning models such as Transformers and RNNs for tractography, and emphasize the need for improved phantoms and evaluation methods for in vivo validation. We provide takeaways and recommendations for future researchers training and validating sequence-based supervised methods for tractography.
0
cs.NEcs.LG Eleni Nisioti, Andrea Cossu, Kathrin Korte et al. · Oct 1, 2026

Continual reinforcement learning demands a delicate balance between plasticity (learning new tasks) and stability (not forgetting old ones). This paper argues that neuroevolution—specifically evolution strategies (ES) and genetic algorithms (GAs)—offers a compelling alternative to gradient-based policy-gradient methods, which tend to lose plasticity as tasks change. Across a broad sweep of environments and task-shift types, the authors show that ES consistently achieves the best stability-plasticity trade-off, and they propose a clear mechanism: parameter-space exploration produces wider "neighborhoods" of robust solutions that overlap across sequential tasks. The work matters because it challenges the prevailing focus on fixing gradient-based RL and instead revives a classic optimization paradigm with strong empirical and conceptual justification.

Despite many studies about causes and remedies of plasticity loss in Reinforcement Learning (RL) under continual task changes, no RL method has yet consistently achieved a good balance between adaptation and forgetting. Here we turn to an alternative optimization paradigm, neuroevolution (NE): algorithms that search directly in weight space through mutation and selection over a population of neural networks. Across a wide array of environments and environmental changes, with policies ranging from a few hundred parameters to million-parameter networks, we compare evolution strategies (ES) and genetic algorithms (GAs) against state-of-the-art continual RL variants and population-based RL. ES most consistently achieves a good stability-plasticity trade-off, while the GA is the most plastic method but forgets more than ES. To explain this, we study the return landscape around each method's solutions. ES finds the widest neighborhoods, i.e.\ regions of weight space in which perturbed policies still solve the task, and the size of the overlap between the neighborhoods of consecutive tasks correlates with a method's stability-plasticity trade-off. Rewarding behavioral diversity in a GA through novelty search makes the population even more plastic, at the cost of forgetting. Finally, symptoms of plasticity loss commonly reported in RL do not transfer to NE. Overall, these results establish NE as a competitive alternative to RL under continual task changes, and suggest that training under perturbations in weight space may be a useful mechanism for continual learning more broadly.
0
cs.CRcs.AIcs.LG Emmanuela Andam, Rana Shaaban, Emanuel Grant et al. · Oct 1, 2026

This paper addresses multi-class ransomware family classification by repurposing the Structured State Space Sequence (S4) model—designed for natural sequences—on static PE metadata. The authors reshape 71 tabular features into pseudo-sequences of length 32 and jointly train for binary detection and family classification, claiming S4 captures long-range dependencies in malware execution flow. They benchmark against CNN, LSTM, GRU, Transformer, and MLP baselines on the Ransomware Dataset 2024, reporting strong aggregate F1-scores. However, the study is limited to a single public dataset and single-run metrics, so its broader validity for IoT security remains unproven.

By 2030, Internet of Things (IoT) devices are projected to reach 40 billion, with fast-paced technological advancements in fields such as industry, healthcare, agriculture, automobiles, and building/home automation systems. This expansion has created a large attack surface for cybercrime, as the majority of these devices open the door for cybercriminals to exploit vulnerabilities, as they lack adequate built-in security. Cybercriminals launch malware attacks to compromise systems or steal sensitive data, and once a system is compromised, a ransom is typically demanded for its release. Current cybersecurity measures in place are being outpaced by the rapid growth of the IoT, which is accompanied by a subsequent growth in malware variants being created per day. Recognizing this pitfall, this research examines and proposes a novel approach to malware detection and classification to safeguard devices from further attacks and make IoT systems more robust and secure. The framework proposed utilizes a Structured State Space Sequence (S4) model, which discretizes sequences of malware samples in a sequence and captures long-range dependencies, essentially identifying the "cause" and "effect" hidden within malware execution flow. This study presents two novel contributions: the first empirical application of the S4 model for malware analysis, and a comprehensive comparison of its performance against other deep learning architectures, laying the stepping stone for future research in this new paradigm.
0
cs.LGcs.AI Loys Masquelier, Etienne Le Naour · Oct 1, 2026

Spatial climate downscaling aims to recover fine-grained meteorological fields from coarse-resolution inputs, but standard pixel-level metrics such as MAE can hide critical failures in variability or spatial structure. This paper benchmarks five downscaling methods—from a residual U-Net to optimal-transport and contrastive-retrieval approaches—using five complementary criteria that disentangle pointwise accuracy, spectral fidelity, spatial alignment, distribution match, and gradient sharpness. The central finding is that no single method dominates across all measures, and method rankings systematically reverse depending on whether the evaluator rewards smooth alignment or realistic fine-scale variability. This motivates the core message: robust climate downscaling assessment must be explicitly multi-metric and application-aware.

Climate downscaling aims to reconstruct fine scale spatial fields from coarse resolution inputs. Evaluating the quality of these reconstructions is challenging: low pointwise error can come at the cost of fine scale variability, while realistic spatial variability can be achieved with inaccurate local structures. The evaluation metric can therefore change which method appears to perform best. This work presents a multi metric benchmark comparing five spatial downscaling methods on ERA5 temperature, wind, and precipitation fields. Five criteria assess complementary properties: pointwise error, structural similarity, distribution error, spectral error, and gradient error. The results reveal a systematic trade off between spatial fidelity and fine scale variability. Some methods perform best on pointwise and spatially aligned metrics, but lose high frequency content, while others preserve substantially more spectral variability at the cost of less accurately positioned local structures. Consequently, method rankings change across metrics and variables. These results show that there is no single best downscaling method. Multi metric evaluation is therefore essential for assessing which properties of a climate field are preserved.
0
cs.CRcs.LG Alessandro Pegoraro, Daryan Merx, Phillip Rieger et al. · Oct 1, 2026

LLMLeak demonstrates a covert channel where malware on a network-restricted device embeds secrets into URLs within fake error messages. When users paste these traces into LLM coding assistants, the model's legitimate web-fetching tool exfiltrates the secret via DNS or HTTP requests to attacker-controlled servers. The work challenges the assumption that local LLM deployment or prompt-injection defenses alone prevent data leakage to third parties.

With the increasing capabilities of Large-Language-Models (LLMs) and LLM-based agents, users are increasingly using them to solve everyday problems, such as answering e-mails or providing programming support. Existing work has extensively investigated security and privacy risks, such as prompt injections and the disclosure of sensitive data to chatbot providers. While various solutions were developed to address these risks, including input structuring to prevent prompt injections or deploying local LLMs to avoid sharing confidential data with chatbot operators, LLMs also pose the risk of leaking confidential data to third parties. In this paper, we demonstrate with LLMLeak a novel attack vector where malicious software that runs locally but cannot communicate directly with the internet abuses LLMs to establish a covert channel. While inputs that instruct the LLM to send data directly via generated code are easy to detect and network libraries are typically restricted, LLMLeak relies only on the LLM's tool to fetch websites for further information. A malicious software component on the client side embeds a secret into a URL. It presents the referenced website as providing information required for a benign task, such as migrating a software library. When the LLM accesses the URL, the attacker receives the encoded secret through an attacker-controlled DNS or web server. We perform an extensive evaluation on eleven open-parameter models, observe an attack success rate of 79.7%, and also conduct a case study on real-world chatbots, demonstrating the relevance of LLMLeak.
0
cs.LGcs.AI Feiyu Gavin Zhu, Xiaoyu Zhu, Jiqi Yang et al. · Oct 1, 2026

Multimodal search agents traditionally interleave observations, freeform reasoning, and actions, but small models often waste inference budget generating lengthy reasoning traces that provide little actionable guidance. This paper introduces Selection-based Structured Reasoning (SSR), which replaces open-ended reasoning generation with a discrete selection among a small set of reusable natural-language reasoning candidates. By scoring all candidates in parallel via teacher-forced prefill with a shared KV cache, SSR cuts per-turn reasoning latency by over 90% while maintaining competitive task performance across seven benchmarks with 2B and 4B models.

Multimodal agents commonly generate free-form reasoning before each action. For small models, limited model capacity can result in lengthy reasoning that provides little useful guidance for action generation while incurring substantial inference cost. To address this challenge, we introduce Selection-based Structured Reasoning (SSR), a framework that reformulates reasoning as selection instead of open-ended generation. SSR represents recurring high-level reasoning as pre-specified, reusable natural-language candidates. At each turn, the model selects from these reasoning candidates based on their likelihoods given the current context, without requiring an auxiliary task head. Using pre-specified reasoning traces enables parallel scoring, where teacher-forced prefilling computes token likelihoods concurrently within and across candidates using a shared context KV cache. We evaluate SSR on seven multimodal search benchmarks using 2B and 4B models. Across multiple reinforcement learning objectives and supervised fine-tuning, SSR delivers significant efficiency gains without sacrificing task performance. SSR achieves an average success rate competitive with leading search agents of the same scale, while reducing per-turn reasoning latency by over 90% and total per-question model inference latency by 28-54%. Project page: https://zfy0314.github.io/ssr-webpage/.
0
cs.LG Haoyang Jiang, Zhengui Wang, Shenghan Gao et al. · Oct 1, 2026

Open-boundary hydrologic graphs such as river networks and coastal meshes exchange fluxes with unobserved exteriors, making long-horizon forecasting unstable because boundary forcing is unavailable at prediction time. This work proposes PRSOBG, which learns ghost-node proxies to approximate missing external forcing and applies local and global physics refiners to suppress error amplification during autoregressive rollout. Evaluated on the Danube river system and Chesapeake Bay, the framework cuts RMSE by up to 51% over a vanilla STGNN backbone with only about 8% training-time overhead.

Spatiotemporal forecasting on hydrologic graphs is especially prone to instability in open-boundary systems, where the forecast domain exchanges fluxes with an unobserved exterior. In such systems, boundary nodes receive external forcing, e.g., upstream inflows in rivers or tidal signals in coastal regions, that is typically unavailable at prediction time. The absence of this information can compound errors as forecasts unfold in an autoregressive fashion, leading to inferior long-horizon performance. This paper dissects this instability issue by exploring two questions. 1) What boundary forcing enters the forecast domain when information beyond the boundary is missing? 2) How should this forcing propagate through the domain without incurring error amplification under autoregressive rollout? To address both, we propose a new computing framework comprising two key components. First, to compensate for the boundary forcing, our framework learns ghost node proxies from the boundary and interior nodes, striving to approximate unobserved external inputs. Second, to control error accumulation from these learned proxies, we leverage two physics refiners. In particular, one refiner enforces local consistency by aligning ghost proxies with their two-hop neighbors (i.e., boundary nodes and their immediate interiors). The other refiner enhances global stability by correcting the model forecasts through a physics-guided graph neural operator, reducing long-horizon numerical drift. Two real-world hydrologic graphs are employed for empirical evaluation. Comparative results show that our proposal enjoys higher prediction accuracy and long-horizon stability over both learning-based and physics-informed model competitors.
0
cs.LG Yifan Guo · Oct 1, 2026

Modern adaptive model development loops propose challengers against a moving incumbent: once a model is adopted, it becomes the reference for future candidates, meaning an unsupported replacement propagates into later hypotheses.

This paper introduces Evidence-Gated Research (EGR), a statistical adoption layer that freezes each challenger before its decision evidence is observed, constructs anytime-valid e-processes across predeclared environments under predictable routing, composes a persistent candidate e-value via an intersection–union minimum, and passes it to an online FDR controller.

The framework matters because it formally separates flexible proposal generation from the validity of state-changing adoptions and empirically demonstrates that naive development-only or single-environment validation can incur massive persistent false-discovery rates in closed-loop search.

Adaptive model search is path dependent: once a challenger is adopted, it becomes the reference from which later candidates are generated. A statistically unsupported replacement can therefore alter hypotheses that have not yet been proposed. We introduce Evidence-Gated Research (EGR), a statistical adoption layer for moving-incumbent search. EGR freezes each challenger before decision evidence is revealed, builds anytime-valid evidence across a predeclared set of environments, routes evidence predictably toward unresolved components, composes a persistent candidate e-value, and passes that e-value to an online controller. Under explicit conditional-validity and predictability conditions, the resulting procedure controls false discovery rate for the declared all-environment adoption target even though earlier adoptions change later challengers. In a 5,000-trajectory closed-loop benchmark, development-only e-LOND attains persistent FDR 0.621, whereas no persistent false-adoption path is observed for the audited EGR variants in that finite run. In matched replay over 600 challenger--incumbent pairs, Stagewise EGR preserves fixed-anytime alternative crossing decisions while using 56.1% less decision evidence at the representative threshold. A three-environment public-data study and a 40,000-sample controlled neural benchmark reproduce the evidence-efficiency pattern. These results identify model replacement as a distinct statistical control point in adaptive model development.