Large language model (LLM) agents often receive access to more files, accounts, and services than a task requires. Prompt injection turns this excess access into an opportunity to redirect execution toward unrelated resources. Applying least privilege therefore requires identifying the assets needed by a task, includin...
Dangerous-capability evaluations often test an AI agent from prepared states at ordered milestones. A clean sheet records no successes. What it certifies about a campaign of $B$ attempts depends on what a failed attempt erases. We model the task as a chain of $k$ milestones divided into checkpoint segments and ask how...
Rohith Yanambaka Venkata, Don McBride, Tiago Sequeira et al.· 0 citations
Self-evolving personal agents act for users and learn from user feedback. However, if an agent obeys an instruction that an untrusted third party hides in content, the third party gains control of the agent. Such indirect prompt injection (IPI) poses severe risks. We investigate whether self-evolution degrades the robu...
Xinyan Wang, Xiaogeng Liu, Jun Shao et al.· 0 citations
LatentDiff is proposed, a novel unified latent generative framework for TSP, which reformulates knowledge graph completion as latent space graph generation and introduces an observation-anchored latent graph diffusion model.
Jia-Qi Wang, Yi-Sen Gao, Hua-Yang Shi et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
When one AI agent tells another that "the tests passed" or "a person approved this refund", the receiver has only the sender's word. A2A and MCP authenticate the channel, but the sender is the party in doubt, so a prompt-injected agent can launder fabricated facts and authority through a multi-agent system. We present...
This work introduces Critic-Guided Synthetic Experience (CGSE) generation in world models, using the world model as a local transition generator, leveraging critic guidance to choose actions inside that model to generate synthetic experiences offline.
Jorge Penim de Freitas, Christos Ziakas, Alessandra Russo· 0 citations
Tactus is presented, a textile-integrated sensing glove that co-optimizes three design pillars: a thin, conformal 3D-knit form factor, strategically placed capacitive tactile sensors at manipulation-relevant regions informed by empirical contact studies, and IMU-fused pose tracking that maintains accuracy through the h...
Li Guan, Rachael Granberry, Sahar A. Aseeri et al.· 0 citations
Large language model agents have begun to carry out laboratory measurements, but their scientific conclusions are useful only if they hold up under scrutiny. Demonstrating this requires controlled studies because models are stochastic and the context a model is given steers its conclusions. Here we introduce HERA, an a...
Zachary W. Gomez, N. Bittner, Jordan T. McCourt et al.· 0 citations
Reinforcement fine-tuning has become an effective post-training paradigm for improving the reasoning ability of large language models, but it remains sample-inefficient when the training distribution is mismatched to the model's current capability. In group-relative objectives such as Group Relative Policy Optimization...
Balatro, a 2024 roguelike deckbuilder, presents three difficulties that have historically derailed reinforcement learning methods: a 3,000-action state-dependent action space, horizons of several hundred decisions with sparse rewards, and pervasive stochasticity in both card draws and shop generation. Published RL resu...
What computational role does overparameterisation play during learning? Information-plane analyses suggest that neural networks can traverse representations substantially more complex than those required by their final predictors. We explore when this transient complexity serves a computational purpose by comparing the...
Ryan Singh, Miguel De Llanza, Christopher L. Buckley· 0 citations
On-policy distillation (OPD) is increasingly adopted in the post-training of large language models. However, a stronger teacher may fail to improve the student. Prior work attributes this to a lack of new knowledge, but what that knowledge is remains unclear. We show that OPD learns not only \textit{how to branch}, i.e...
Shiping Yang, Chuanqi Tang, Hossein Hajimirsadeghi et al.· 0 citations