Your paper timeline
Scroll AI takes the way you would scroll a great paper aggregator: quick signal first, deeper critique when something earns your attention, and challenges when a claim feels off.
1579 papers
Trending mixes fresh papers with community signal.
0
cs.CL Dor Tsur, Maor Ashkenazi, Maximilian Golub et al. · Oct 22, 2026

Speculative decoding draft models face severe KV cache bottlenecks during long-output generation, but standard prefill-based compression methods lose relevance as decoding progresses. This paper identifies that "decode staleness" phenomenon and proposes RIFT, a family of selection-based KV compression strategies that balance important prefill tokens with a recent-token sliding window, plus adaptive decode-time refresh and a complementary compression-aware distillation training phase. The core claim is that these methods allow small external drafters to retain over 96% of their full-cache acceptance length under tight memory budgets.

Speculative decoding is a popular decode acceleration method. As such, it is particularly relevant to long-output generation, which requires an increasingly large KV cache. KV cache compression offers a way to constrain costs in long-context drafting. However, compression methods that focus on prefill information can lose relevance as the output length grows. We term this phenomenon decode staleness and show that it degrades draft model accuracy under selection-based KV cache compression. We introduce RIFT, a family of selection-based KV cache compression strategies that balance prefill information and recent generated tokens. We show that refreshing the KV cache selection during token generation significantly improves the drafter's quality at the cost of additional decode latency. To alleviate the refresh costs, we propose an adaptive KV refresh strategy that reduces the number of score calculations while retaining the drafter's quality. We further demonstrate how a compressibility-driven drafter training phase, based on sparse attention masks, can improve the drafter's quality under a compressed KV cache. Combined with compressibility training, RIFT enables Qwen3.5-4B, drafting for Qwen3.5-122B, to retain over 98% of its full-cache acceptance length on 32K-token inputs, 4K-token outputs, and an 8K-token KV cache budget.
0
math.NAcs.LGcs.NA Edison V\'azquez, Yingdong Lu, Tomasz Nowicki · Oct 22, 2026

This paper tackles certified neural approximation of the Dirichlet Monge--Amp\`ere equation, a fully nonlinear PDE whose solutions must be convex. The authors study implicit-depth equilibrium networks built from softplus units with nonnegative weights, proving that a resolvent--curvature cancellation improves the Hessian growth bound from $(1-q)^{-3}$ to the sharp exponent $(1-q)^{-2}$. They then derive residual-based a posteriori estimates and validate them with interval-arithmetic certificates on trained models, yielding rigorous uniform evaluation guarantees for implicit neural PDE solvers.

Equilibrium neural networks define their hidden state as the fixed point of a contraction, so their effective depth is set at evaluation time rather than by the architecture. Using them for fully nonlinear PDEs raises two issues that explicit networks avoid: second derivatives may grow with the effective depth, and the potential is only ever evaluated approximately. We study nonnegative softplus equilibrium networks with contraction factor $q<1$, a convex class suited to the Monge--Amp\`ere equation. A positivity cancellation in the resolvent shows that the Hessian grows at most like $(1-q)^{-2}$, rather than the $(1-q)^{-3}$ of a direct estimate, and an explicit one-neuron family shows that this exponent is sharp; third derivatives satisfy a sharp $(1-q)^{-3}$ bound. Residual-based a posteriori estimates then control the state, its input derivatives and, in two dimensions, the Hessian determinant at an approximate equilibrium. Combined with interval arithmetic on complete covers of the domain, they yield rigorous uniform bounds on the Monge--Amp\`ere residual and, through a comparison argument, on the solution error of a fixed trained network. On two manufactured Dirichlet problems on the unit disk, all six trained models are certified with residual below $0.25$ and boundary error below $0.01$. Adaptive stopping halves float64 evaluation time at best, whereas certified adaptive evaluation remains costlier than fixed depth.
0
cs.CVcs.CL Pengfeng Song, Shaozhong Zhang, Pengfei Shao · Oct 22, 2026

Fine-grained image-text retrieval requires aligning local semantics such as objects, attributes, and relations, yet fixed patches and tokens often produce fragmented matching units. This paper proposes HFCMA, a framework that dynamically aggregates low-level patches and tokens into adaptive visual regions and textual phrases, and then aligns these sets with entropy-regularized optimal transport under a frozen CLIP dual-encoder architecture. By making semantic unit construction an explicit learnable step and enforcing globally consistent matching via a transport plan, HFCMA aims to improve discrimination of subtle differences without sacrificing retrieval scalability.

Fine-grained image-text retrieval requires a model not only to assess global semantic consistency between an image and a text, but also to model visual evidence for local textual semantics, including objects, attributes, quantities, actions, and relations, so as to distinguish semantically similar candidates. Existing methods commonly use fixed image patches, detected regions, or text tokens as the basic matching units and then aggregate local interactions through max pooling, cross attention, or similarity accumulation. Such strategies remain limited in semantic unit construction and global matching consistency. This paper proposes a hierarchical fine-grained cross-modal alignment framework, termed HFCMA. The framework progressively transforms low-level patch and token representations into adaptive visual regions and textual phrases, and then performs structured region-phrase matching within a global retrieval scoring process. Specifically, HFCMA first adopts dynamic granularity discovery (DGD) to aggregate raw patches and tokens into semantically compact visual regions and textual phrases. It then formulates region-phrase matching as an entropy-regularized optimal transport problem, thereby estimating a structured alignment matrix under global marginal constraints. To reduce background noise and local semantic drift, HFCMA further introduces background debiasing, textual importance weighting, and prototype consistency regularization. Experiments on Flickr30K and MS-COCO show that HFCMA effectively combines dynamic semantic unit construction with OT-based structured matching under a dual-encoder retrieval framework. The resulting fine-grained score provides structured local alignment information for candidate ranking and improves the discrimination of subtle semantic differences.
0
cs.CL Viet-Thanh Pham, Thuy-Trang Vu, Junae Kim et al. · Oct 22, 2026

Guardrails for LLMs typically fail when the same safety case appears across different interfaces—prompts, responses, agent traces, or policy-conditioned inputs. UniGuard reframes guardrail training as multi-view representation learning, where prompts, conversations, and agent trajectories are treated as semantically aligned views of an underlying safety case. A compact 0.6B model is trained with supervised classification, contrastive alignment, and asymmetric confidence calibration, showing large F1 and calibration gains on unseen-interface benchmarks while remaining competitive with proprietary models.

Guardrail models are increasingly used as safety layers for LLMs and agentic systems, but most are trained on fixed prompt or response interfaces and become unreliable when the same safety case appears as a conversation, agent trajectory, multi-agent trace, or policy-conditioned input. We propose UniGuard, a training framework that learns interface-invariant safety representations from multiple semantically aligned views of the same safety case. We also construct the UniGuard-FT dataset by transforming 1,000 public safety cases into prompt, response, multi-turn conversation, agent-trace, and multi-agent-trace views, and train UniGuard-0.6B with classification, supervised contrastive learning, and asymmetric confidence calibration losses. Across unseen-interface benchmarks ATBench, PolicyGuardBench, and DynaBench, UniGuard-0.6B improves over its pretrained guardrail by 45.12 F1 points on average and reduces expected calibration error by 35.41 points, while remaining competitive with much larger guardrails such as Claude-Sonnet-4.5 and GPT-5.2 - despite being a 0.6B model and trained only with synthetic data.
0
cs.AI Ziyi Jiao, Heng Zhang, Drishti Regmi et al. · Oct 22, 2026

DuoCook evaluates whether a single vision-language model can centrally coordinate two cooking agents in Unreal Engine kitchens inspired by Overcooked. The benchmark spans 20 maps across five categories—basic, shared equipment, dynamic terrain, combined dynamic/shared, and separated workspaces—requiring the model to assign high-level actions from top-down visual observations while the engine handles low-level navigation. A memory ablation tests the value of a shared, self-authored belief notebook. Performance is far from saturated even with heavy scaffolding, suggesting current VLMs remain poor at real-time centralized coordination, though the task interface provides substantial structured assistance.

Coordinating two players in a cooking task requires a vision-language agent to track changing scene states, sequence recipe steps, and allocate shared resources under a time budget. We introduce an Overcooked-inspired benchmark for evaluating these capabilities in Unreal Engine environments constructed using coding agents. A single vision-language model controls both players from top-down visual observations, selecting high-level actions while the engine executes navigation. The benchmark contains 20 maps in five categories. These categories support evaluation of centralized coordination under equipment contention, changing terrain, and handoff dependencies. A prop legend and pot ingredient-count indicators provide explicit visual cues, while grid-based destinations support spatial grounding. The evaluation compares four VLMs on all 20 maps, measuring task score, order completion, delivery precision, action acceptance rate, and model API expenditure. A memory ablation on the same 20 maps examines the effect of a shared, self-authored notebook while retaining six-response action history in both conditions. The strongest evaluated model, \texttt{gpt-6-astra}, achieves 26.2\% mean order completion. Notebook memory has mixed score effects across models, with positive mean differences for Claude and Qwen and negative differences for GPT and Gemini.
0
cs.LGcs.CL Arvid Frydenlund, FuTe Wong, Katherine Lambert et al. · Oct 22, 2026

Language models fail to learn shortest-path search on unseen symbolic graphs as graphs scale beyond about 50 nodes, a wall this paper diagnoses and breaks through. The authors show that next-token prediction provides too little and too skewed supervision, while standard tokenization introduces routing and permutation artifacts. By combining multi-token prediction—which densely supervises all sub-paths and implicitly mixes hop lengths—with structural annotation (STAN) and a node list (+NN), they stably train small transformers on graphs up to 125 nodes with far lower variance. The work makes a strong case that objective design and input formatting matter more than model size for latent multi-hop reasoning.

Given an unseen graph, a start node, $s$, and an end node, $t$, can a language model generate the shortest path from $s$ to $t$? Prior work has found that models fail to learn this task as the graphs scale. We show that this failure has two causes: the supervision signal and the tokenization. First, we theoretically establish and empirically demonstrate the effectiveness of multi-token prediction (MTP), and show that the benefits of MTP are topologically agnostic. Second, we introduce alternative tokenizations and show that the two causes are orthogonal. Using these methods, we break through the scaling wall observed by prior work, consistently and stably learning to solve the task at scales far beyond previous limits.
0
cs.CLcs.IR Yuning Bian, Lele Xu, Yifan Yuan et al. · Oct 22, 2026

The paper studies how much embedding work is wasted when documents in a RAG knowledge base are revised, comparing fixed-size, recursive paragraph-first, and content-defined chunking on 120 adjacent Wikipedia revision pairs in Chinese and English. It finds that fixed-size windows force the most re-embedding (57–68\% of the embedding-input workload), while content-aware methods cut this by double-digit percentage points. Surprisingly, the extra recomputation buys almost no retrieval recall advantage under a fixed 2048-token budget. The authors argue that update cost, measured under byte-identical reuse, should be reported alongside static retrieval metrics when choosing a chunker for an evolving knowledge base.

Chunking strategies for retrieval-augmented generation are almost always evaluated on a static snapshot, yet the documents underlying a knowledge base continue to change. Because chunks are embedded independently, a boundary that moves after an edit forces unchanged text to be re-embedded. We measure this update cost on 120 pairs of adjacent Chinese and English Wikipedia revisions for three stateless chunkers (non-overlapping fixed-size, recursive paragraph-first, and content-defined chunking) under a strict byte-identical reuse rule and a frozen dense encoder. On the 116-article common-success pool, with frozen, length-calibrated parameters, fixed-size chunking recomputes 57-68% of its full new-version embedding-input workload, recursive chunking 38-56%, and content-defined chunking 43-54% (it failed on 4 of 62 Chinese articles), while at these parameters mean evidence recall under a fixed 2048-token retrieval budget differs by less than two percentage points within either language. A cost-only parameter grid shows that the ranking of the two content-aware chunkers changes with chunk-length settings, whereas non-overlapping fixed-size chunking has the highest recomputation cost in every length-matched condition. Controlled edits and a verbatim-presence diagnostic support boundary drift as one contributor to recomputation of text already present in the previous version. Update cost is therefore a substantial, parameter-sensitive dimension that static retrieval evaluations do not expose and that should be reported alongside retrieval quality.
0
cs.CL Hongcan Guo, Yian Zhao, Feng Wang et al. · Oct 22, 2026

Hierarchical language models split semantic planning from token generation, but prior work leaves the latent space and decoder mismatched. Cola2 co-trains a dynamic compression VAE and a masked-diffusion decoder so that token-prediction gradients shape the encoder while a separate DiT fits the latent prior via stop-gradient. The result is a compact continuous representation that stays aligned with the actual text during block-wise inference, and scaling experiments up to about 210B tokens show competitive, unsaturated curves. A 346B-source-token checkpoint reaches a 60.10 eight-task average, though the model remains far from converged.

Hierarchical language generation separates continuous semantic modeling from discrete text realization, but its effectiveness depends on what the latent space compresses and how the discrete generator uses it. We propose Cola2, a framework that jointly studies continuous semantic compression, the balance between reconstruction and generation, and continuous-discrete co-adaptation. Cola2 dynamically segments text into semantic spans, controls the compression rate through auxiliary-loss-free negative feedback, and combines reconstruction and generation supervision to learn compact, predictive latent representations. A block-causal masked diffusion decoder is trained with clean, noisy, and dropped latent conditions, while classifier-free guidance adjusts the balance between semantic reconstruction and autonomous generation. Token-prediction gradients update the encoder through the latents, whereas Flow Matching prior learning is decoupled from representation learning by stop-gradient. During inference, generated text is re-encoded under a fixed span layout to keep the latent history consistent with the actual text context. Experiments on five downstream tasks with about 210 billion training tokens validate the core designs and show competitive, unsaturated scaling. With 346.03 billion source tokens, an unconverged checkpoint reaches a 60.10 average across eight tasks and surpasses Llama-3-8B on HellaSwag and StoryCloze despite its reported pretraining budget being over 43 times larger. These results demonstrate the potential of continuous-latent hierarchical language generation.
0
cs.CVcs.LG Yue Zhou, Shujun Zhao, Xue Yang et al. · Oct 22, 2026

This survey argues that the central bottleneck for advancing remote sensing vision-language models has shifted from architectural innovation to data curation. It introduces GeoChef, an end-to-end framework that maps dataset taxonomy, construction pipelines, fine-tuning recipes, and evaluation protocols onto a culinary metaphor. By cataloging over 120 datasets and launching a community-driven warehouse, the authors aim to turn small academic teams into proactive data chefs rather than passive consumers of foundation models.

During the deep learning era, innovations in remote sensing (RS) vision models primarily focused on optimizing network architectures for specific tasks and conducting end-to-end training. However, with the advent of the Vision-Language Models (VLMs) era, constrained by substantial computational resource demands, the mainstream research paradigm has shifted towards adapting general-purpose VLMs using RS vertical domain data for fine-tuning, rather than modifying their core architectures. This transition marks a change in the innovation pathway from model-centric to data-centric. Despite the increasing importance of data, the academic community still lacks a systematic, data-centric survey to guide researchers in constructing high-quality RS vision-language datasets for various application scenarios and in conducting effective model fine-tuning and performance evaluation based on these datasets. To address this gap, this paper presents a systematic review of the development status of RS datasets tailored for VLMs. It further provides a comprehensive practical guide for RS researchers in the large model era, covering the entire pipeline from data construction to fine-tuning and evaluation. This paper aims to encourage the academic community to build more diverse and higher-quality vision-language datasets for specialized RS sub-fields. Ultimately, the goal is to converge these efforts into a comprehensive RS vision-language corpus that offers extensive task coverage and a wide geographical distribution, thereby laying a solid data foundation for advancing towards general artificial intelligence in RS.
0
cs.CRcs.CLcs.LG Ehsan Saleh, Roozbeh Nahavandi, Sama Salarian et al. · Oct 22, 2026

LLM agents with persistent external memory often leave derived artifacts—such as summaries—intact after a user deletes a source record, creating a gap between storage-level deletion and behavioral privacy. AfterDeleteBench introduces a paired behavioral audit that compares an exposed-then-deleted agent against a never-exposed twin to attribute post-deletion secret recovery to the original exposure. The paper shows that exact reconstruction can persist even when no verbatim copy of the secret survives, and that the response interface itself is part of the measurement system, making the benchmark a useful narrow probe into a broader agent-memory privacy problem.

Many LLM agents maintain external persistent memory and derive additional state from past interactions, such as summaries. Deleting an original memory record therefore need not remove information carried by its descendants. We introduce AfterDeleteBench, a controlled behavioral audit for this failure mode in fixed-weight LLM agents. For each synthetic secret, we compare an exposed-then-deleted agent with an otherwise matched agent that was never exposed to the secret, allowing post-deletion recovery to be attributed to the original exposure. In our primary setting, a single query recovers the deleted secret from Qwen2.5-7B-Instruct in roughly two thirds of cases, while matched never-exposed controls have zero recovery. Crucially, recovery does not require a surviving verbatim copy: when the complete secret string is absent and only separately stored components remain under a public composition rule, exact reconstruction succeeds in 62-99% of cases across Qwen, Mistral, and Phi-3. We also show that the response interface is part of the measurement system: target-bearing replies can be scored as failures when the requested format and parser are misaligned. Finally, we separate reconstruction from write-back and fresh-session recall. Provenance-aware closure eliminates observed recovery in the tested positive-baseline settings, whereas an exact-literal write filter blocks reinsertion but cannot erase information already present. Together, these results show that source deletion should be evaluated behaviorally at the level of the agent and its memory system, not only as a storage operation.
0
cond-mat.str-elcond-mat.stat-mechcs.LG Ali Rayat, Acacia Lee, Gia-Wei Chern · Oct 22, 2026

Collective ordering in correlated electron systems produces emergent, non-Markovian dynamics that cannot be closed at the level of coarse-grained observables alone. This paper proposes a graph-recurrent neural network (GRNN) that fuses gated recurrent memory with graph message passing to learn finite-time evolution maps directly from trajectories, bypassing repeated microscopic force evaluations. Site-resolved hidden states encode unresolved history and communicate across neighboring sites via graph-coupled hidden messages, giving a scalable, translationally invariant update rule. The authors demonstrate the approach on charge-density-wave domain coarsening in the semiclassical Holstein model, showing quantitative agreement with kernel-polynomial-method reference dynamics.

Collective ordering in correlated electron systems emerges from microscopic dynamics, yet the evolution of observable textures need not admit a closed, memoryless description. We introduce a graph-recurrent neural network (GRNN) framework that learns such emergent dynamics directly from trajectories without specifying microscopic equations of motion. The framework integrates gated recurrent memory with graph message passing: local hidden states encode information beyond the instantaneous observables, while spatial coupling allows this information to propagate between sites. The observable and hidden fields evolve jointly through a shared local rule, providing a scalable representation of dynamics with spatial interactions and temporal memory. We demonstrate this framework on the emergent dynamics of charge-density-wave order in the semiclassical Holstein model, successfully reproducing temporal and spatial correlations and dynamical scaling during domain coarsening. By learning finite-time evolution directly, the GRNN offers a route to efficient, data-driven descriptions of collective dynamics with unresolved microscopic degrees of freedom.
0
cs.CL Kento Haneda, Yosuke Kishinami, Ryo Fujii et al. · Oct 22, 2026

Existing cultural bias benchmarks rely on costly manual annotation by native speakers, which limits multilingual scalability and introduces subjectivity. WikiOriginQA tackles this by using Wikipedia article creation dates across 342 language editions as an objective proxy for knowledge origin, then automatically generating short-answer QA pairs with LLMs. The resulting dataset supports the claim that LLMs are skewed toward Anglophone knowledge and that propagation into English Wikipedia is a key predictor of model performance.

Existing datasets on cultural knowledge have been typically created by human annotators familiar with each culture. However, the process requires considerable human effort, presenting a significant challenge to scalability. To address this challenge, we introduce WikiOriginQA, a QA dataset automatically constructed by objectively representing the origins of knowledge through the creation dates of different Wikipedia language editions. Experimental results with the created dataset confirm that LLM performance tends to be biased toward Anglophone cultures. Furthermore, the results suggest the importance of knowledge propagation into the Anglosphere. These findings demonstrate the validity of our automated approach, enabling cultural bias evaluations with superior scalability across diverse languages without extensive manual annotation.
0
cs.LGcs.CL Zhizhuo Kou, Sizai Hou, Long Chen et al. · Oct 22, 2026

The paper challenges the widespread assumption that reinforcement learning (RL) invents the reflection marker "wait" in reasoning models. Using historical-linguistics-inspired "grammaticalization" tracking, the authors trace the word through 120 open-model checkpoints and find it almost always arrives from training data—mid-training, fine-tuning on reasoning traces, or reasoning-rich pretraining—while zero-RL alone rarely coins it.

Reinforcement learning (RL) is credited with teaching reasoning models to write {wait} before reconsidering a step, yet large RL accuracy gains do not require the word. This view can confuse what RL discovers with what a model inherits from its training data. We trace the word through open models' training histories, reading it with label-free indices of frequency, position, form and usage and an injected-error test, all computed from sampled outputs. We find that zero-RL almost never coins the marker: on bases that lack the word, RL raises MATH-500 accuracy substantially while {wait} stays near absent. It arrives with training data: mid-training in OLMo-3, and fine-tuning on reasoning traces installs it in most models whose base lacks it. Where the base already uses it, both released RL-Zero recipes (OLMo-3, MiMo) multiply it, whereas KL-free GRPO from the same base does not; OLMo-3's recipe wears down its form and makes it a more sensitive but more liberal alarm; RL after supervised fine-tuning barely changes it, and our GRPO recipe erases a marker seeded by fine-tuning. Finally, we show that marker frequency alone does not indicate RL-induced reasoning and caution against LLM-as-a-judge revision metrics, as automated judges can reverse human-labelled trends.
0
cs.CL Abhishek Barali, Aayush Paudel · Oct 22, 2026

Extraction pipelines often ask language models to return JSON matching a schema that sets a minimum list length. This paper shows that when real documents contain fewer items than that minimum, open-weight models pad their lists---mostly with real text from the document that evades simple source checks. The authors preregister a design with 558 documents, eight GPU models, and paired contrasts, finding that an unenforced minimum raises over-counting from 34.5% to 55.4% and that common fixes fail or trade recall for precision. The work matters because schema-driven extraction is ubiquitous, and the padding is hard to catch without ground-truth answer lists.

Extraction pipelines ask language models for JSON that follows a schema, and the schema can set a minimum number of list entries. We ask what models do when the document holds fewer items than that minimum. Under a preregistered plan, we test eight open-weight models on 558 real documents from nine annotated datasets, with six more models on hosted services as a reference. Three findings stand out. First, models treat the count as a target: a minimum shown in the schema, but not enforced, raises the share of lists longer than the true count from 34.5% to 55.4%. Second, the padding is hard to catch, because most added entries are real text taken from the document; about half of them pass a check that each entry occurs in the source. Third, common fixes help only partly: a line saying fewer items are fine removes the effect on average but misses more true items, a count in prose (&#34;up to k&#34;) also raises over-counting, an &#34;N/A&#34; option under an enforced minimum still leaves half the lists padded, and re-asking with the validation error makes padding far more common. We release the code, answer lists and run records at https://github.com/AbhishekBarali/padding-to-k
0
cs.LG Yen-Ku Liu, Hongjie Chen, Franck Dernoncourt et al. · Oct 22, 2026

Time-series dataset similarity is task-dependent: no single metric reliably predicts downstream transfer error across models and protocols. This paper proposes DISC, a learnable aggregation framework that calibrates a base mixture of standardized similarity metrics with a rank-based prior gate. On a shared 46-dataset split, DISC raises the average source-wise Pearson correlation with forecasting error by about 10% over the best single metric, supporting the claim that learned integration is a stronger proxy for transfer behavior than manual metric selection.

The growth of time-series datasets and foundation models has made dataset comparison a central part of time-series workflows. Assessing source-target transfer before model adaptation requires similarity estimates that can summarize transfer-related dataset relationships without exhaustive source-target evaluation over every candidate pair. Many metrics have been proposed for measuring similarity between time-series datasets, but they capture different dataset relationships and vary in how well they align with downstream utility across tasks. We evaluate this gap by measuring the correlation between source-target similarity scores and downstream forecasting errors in out-of-distribution and transfer-learning settings. We propose Domain-Integrated Similarity Cost (DISC), a learnable aggregation framework that uses calibration transfer observations to select, weight, and combine similarity metrics for different downstream tasks. By integrating complementary metric values, DISC better distinguishes source-target dataset differences that matter for downstream behavior. After calibration, DISC scores source-target pairs using only their similarity-metric values and yields higher alignment than single-metric references on the reported split. These results show that time-series dataset similarity is task-dependent, and that learned metric integration provides a stronger proxy for downstream transfer behavior than manually selecting one similarity metric.
0
cs.LGcs.CL Khouloud Saadi, Di Wang · Oct 22, 2026

On-policy self-distillation improves reasoning by training a model on its own trajectories with dense token-level guidance from a reference-conditioned teacher. The authors identify a critical flaw: because any single reference is just one valid realization of reasoning, conditioning the teacher on the full reference makes the target distribution overly sensitive to that specific solution's wording, ordering, and path. They propose Monte Carlo Privileged Distillation (MCPD), which averages the teacher's next-token distributions over multiple randomly masked partial views of the same reference to produce a more stable marginal target. Across math and science benchmarks, MCPD consistently outperforms standard full-reference distillation.

On-policy self-distillation (OPSD) improves reasoning by training a model on its own trajectories with dense token-level supervision from a privileged copy conditioned on a reference solution. Existing methods typically use a single teacher distribution conditioned on the complete reference. We identify a limitation of this formulation: a reference is only one realization of the reasoning process. Although it provides evidence about the answer, it also encodes an ordering, phrasing, and solution path. Full-reference conditioning can therefore produce correct targets that depend excessively on information unavailable to the student at inference. We show that replacing one valid reference with another, while holding the problem and student state fixed, can substantially alter the teacher distribution, a phenomenon we call reference-induced target instability. To address this instability, we introduce Monte Carlo Privileged Distillation (MCPD), which models privileged context as a distribution over partial reference views and distills the marginal teacher distribution. MCPD evaluates the teacher under multiple views and averages the resulting next-token distributions. We show that this probability-space average is the exact target induced by minimizing the expected teacher-to-student KL divergence over privileged views. Across mathematical and scientific reasoning benchmarks, we show that MCPD produces more reference-consistent supervision and consistently improves over full-reference OPSD.
0
cs.ROcs.LG Mateusz Odrowaz-Sypniewski, Michael Amir, Jasmine Bayrooti et al. · Oct 22, 2026

This paper asks whether robot learning must rely on embodied data by training in-context action predictors entirely on procedurally generated, non-robotic mathematical abstractions—tabular MDPs, contextual bandits, and linear dynamical systems. Using a Prior-Data Fitted Network framework, the authors show that these synthetic control priors achieve non-trivial zero-shot action prediction on held-out simulated and real-world robots, including manipulators, wheeled vehicles, quadrupeds, and aerial platforms. The work matters because it cheaply decouples structural prior acquisition from expensive physical data collection, offering a scalable complement to embodied foundation model pipelines.

Real robot data, rich across tasks and morphologies, is often treated as the bottleneck for training robot learning models, including embodied foundation models that aim for zero-shot physical transfer. In this paper, we investigate the degree to which such models can acquire necessary structure using data from systems without embodiment. To this end, we test if inexpensive, procedurally generated synthetic data can yield useful priors before a model observes any real-world behavior. We study this through robot action prediction, a natural pretraining objective and a direct test of whether structure learned from arbitrary synthetic tasks transfers to embodied settings. We introduce three data generation pipelines that model mathematical abstractions of robotic control, and use them as pretraining priors for a Transformer. We demonstrate that a model trained purely on this non-robotic data attains non-trivial zero-shot prediction performance on unseen physical robot tasks via an in-context learning mechanism, and that our specialized control priors notably improve upon generic causal priors. We also compare against a compute-matched baseline trained on real robot data, and find that it outperforms our model but only on the datasets it was trained on. These findings suggest that procedurally generated, mathematical abstractions can yield useful robotic priors, offering a potential complement to expensive embodied data collection.
0
cs.ETcs.LG Rodion Novkin, Hussam Amrouch · Oct 22, 2026

This paper proposes replacing the physics-based BSIM-CMG compact model with tiny MLPs (8–16 neurons) to predict drain current and charges for a 3 nm nanosheet, then embedding them in Verilog-A to perform a full standard cell library characterization and subsequent static timing analysis on industrial-scale circuits. The authors claim sub-percent delay and power errors alongside up to 8× faster library characterization, positioning the approach as a viable alternative to equation-based transistor models in modern EDA flows.

Neural network (NN)-based transistor models have proven to be a promising solution to accelerate device modeling. Although these models demonstrated remarkable speedup in circuit simulations, they were not rigorously tested in complex tasks within standard EDA tool flows for chip design, which require very high transistor model precision to provide accurate results and converge properly. To investigate their full potential and promise, we develop NN-based transistor models that accurately predict the drain current and various charges for a 3nm nanosheet, and employ the models for a standard cell library characterization. This enables us to evaluate the accuracy and speedup under a very wide range of SPICE simulations, benchmarking our models against an industry-standard implementation. Since standard cell library characterization involves thousands of SPICE simulations, it serves as a great benchmark for transistor model quality and consistency. To further evaluate model accuracy, we also perform analog- and digital-level simulations for various complex circuits. Our experiments reveal that NN-based models are a valid alternative to existing transistor compact models, capable of producing accurate delay and power estimates with a much higher speed and convergence time compared to the conventional Verilog-A-based industry-standard (BSIM-CMG) transistor compact model. Our NNs achieve sub-0.11% and 0.76% errors for delay and total power evaluation on a wide range of circuits, while taking up to 8 times less time during the standard cell library characterization. Additionally, we provide comprehensive information and guidance on NN accuracy, unveiling the relationship between NN size and its effect on circuit simulation precision.
0
cs.CRcs.LG Mrityunjay Shukla, Shubham Roy, Biswabandan Panda · Oct 22, 2026

Large language models rely on just-in-time compilers like Triton to generate optimized GPU kernels, caching the results for reuse. This paper asks whether a Rowhammer-induced bit-flip can silently degrade inference efficiency without harming output correctness, and answers affirmatively with LLVMhammer. By corrupting a target-independent optimization pass in Triton, the attack forces emission of a suboptimal kernel that raises latency by 4–16%, while the on-disk cache makes the slowdown persist across restarts.

Large language models (LLMs) achieve high inference efficiency using optimized GPU kernels generated by just-in-time (JIT) compilation frameworks such as Triton. Triton compiles GPU kernels through an MLIR/LLVM-based pipeline. We investigate whether a Rowhammer-induced bit-flip in the CPU's DRAM can degrade GPU-based LLM inference performance while preserving output correctness. We present LLVMhammer, the first Rowhammer attack that causes LLM inference slowdown by inducing a bit-flip in Triton's compilation pipeline. A bit-flip in a performance-critical optimization pass causes Triton to generate a functionally identical but suboptimal GPU kernel. Since Triton caches the generated kernel on disk, a single successful bit-flip causes persistent slowdown across subsequent inference executions. Triton's target-independent stages are shared across GPU vendors, which makes our attack GPU vendor-agnostic. To identify exploitable bit-flip locations without manual inspection, we build Karnage, a tool that isolates useful bit-flip locations in Triton's target-independent compilation pipeline. We evaluate LLVMHammer across a diverse set of LLMs, including Qwen2.5-7B-Instruct, Llama-3.1-8B-Instruct, Mistral-7B-Instruct-v0.3, and Deepseek-llm-7B-chat, across NVIDIA RTX 4090 and AMD RX 7900 XTX GPUs. LLVMhammer increases inference latency of an LLM inference server running on a single GPU by 4-16\%, which, in turn, can translate into additional annual operating costs at the scale of multi-GPU deployments. We further show that LLVMhammer can also corrupt LLM outputs across different GPU vendors, reducing BERTScore to as low as 25\%, illustrating the broader security implications of bit-flips in Triton's compilation pipeline.
0
cs.LGcs.CRcs.DS Gautam Kamath, Mahbod Majid, Ankur Moitra et al. · Oct 22, 2026

Learning discrete distributions from batched user data under person-level privacy is a fundamental problem in federated analytics. This paper develops the first polynomial-time pure-DP algorithm that matches the information-theoretic sample complexity up to logarithmic factors, via a new degree-6 sum-of-squares certificate based on a trace-bounded diagonal majorizer for multinomial covariance. It also proves a statistical-query lower bound suggesting the gap between efficient and optimal robust rates may be inherent.

We study learning a discrete distribution under person-level differential privacy in the batched setting. Given $n$ users, each contributing $m$ i.i.d. samples from an unknown distribution $\mu$ over $[k]$, we seek an estimate of $\mu$ with total-variation error $\alpha$. We give polynomial-time algorithms under both pure and approximate differential privacy. Under pure $(\varepsilon,0)$-DP, we achieve $n = \widetilde O(k/(\alpha^2 m)+k/(\alpha\sqrt{m}\varepsilon)+k/\varepsilon)$, the first polynomial-time pure-DP guarantee matching the information-theoretic optimum up to logarithmic factors. Under approximate $(\varepsilon,\delta)$-DP, we achieve $n = \widetilde O(k/(\alpha^2 m)+k/(\alpha\sqrt{m}\varepsilon)+k+\log(1/\delta)/\varepsilon)$. At $\delta=2^{-\Theta(k)}$, this is $\widetilde O(k)$ for fixed $\alpha,\varepsilon,m$ and failure probability. Our algorithms use a new degree-6 sum-of-squares estimator for learning from untrusted batches. Its key ingredient is a trace-bounded diagonal majorizer for the difference between the empirical covariance of the repaired batch averages and the multinomial covariance predicted by their mean. We prove that clean data admit this certificate through semidefinite-programming duality and a new application of the stronger symmetric form of Grothendieck's inequality due to Friedland and Lim. The certificate preserves the mean-dependent variance of multinomial batch averages, yielding the near-optimal robust rate $O(\eta\sqrt{\log(1/\eta)/m})$ and providing the score required by the privacy reduction. We also prove a statistical query lower bound ruling out a uniformly smaller order of error under fixed polynomial SQ resource bounds.