AI papers — 2026-06-07
Jump to one of 17 papers
- Code2LoRA: Hypernetwork-Generated Adapters for Code Language Models under Software Evolution
- The Road Ahead in Autonomous Driving: The KITScenes Multimodal Dataset
- Dream.exe: Can Video Generation Models Dream Executable Robot Manipulation?
- MAOAM: Unified Object and Material Selection with Vision-Language Models
- AffordanceVLA: A Vision-Language-Action Model Empowering Action Generation through Affordance-Aware Understanding
- Trust Region Q Adjoint Matching
- The Shape of Addition: Geometric Structures of Arithmetic in Large Language Models
- Learning Geometric Representations from Videos for Spatial Intelligent Multimodal Large Language Models
- Benchmark Everything Everywhere All at Once
- Revising Context, Shifting Simulated Stance: Auditing LLM-Based Stance Simulation in Online Discussions
- Absorbing Complexity: An Interaction-Native Knowledge Harness for Financial LLM Agents
- Regret Minimization with Adaptive Opponents in Repeated Games
- LLM Anonymization Against Agentic Re-Identification
- AURA: Intent-Directed Probing for Implicit-Need Surfacing in Situated LLM Agents
- BRepCLIP: Contrastive Multimodal Pretraining on BRep Primitives for CAD Understanding
- SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
- ForeSci: Evaluating LLM Agents for Forward-Looking AI Research Judgment
Code2LoRA: Hypernetwork-Generated Adapters for Code Language Models under Software Evolution →
Technical breakdown
Problem: Code language models need repository-level context to resolve imports and APIs, but existing approaches either inject long inputs with high inference cost or require costly per-repository fine-tuning that breaks under evolving codebases.
Method: Code2LoRA is a hypernetwork framework with two variants: Code2LoRA-Static maps a single repository snapshot (via frozen Qwen3-Embedding-0.6B encoder aggregating file embeddings) through a 2-layer MLP trunk to generate rank-16 LoRA adapters for all 7 projection types (q, k, v, o, gate, up, down) shared across 28 transformer layers, using tanh·exp scaling with learned log-scales. Code2LoRA-Evo prepends a 1-layer GRU that processes chronological code diffs sequentially with truncated BPTT (K=16) and LayerNorm preprocessing, enabling adapter trajectory tracking across commits. Both variants are trained with AdamW and cosine schedule on assertion-completion cross-entropy loss against a Qwen2.5-Coder-1.5B backbone.
Key results:
- Code2LoRA-Static: 63.8% cross-repo EM and 66.2% in-repo EM on RepoPeftBench Static Track, vs. FFT+RAG baseline at 53.9% (+9.9 pp)
- Matches per-repository LoRA upper bound (64.0%) without any per-repo training
- Code2LoRA-Evo: 60.3% cross-repo EM, 64.5% in-repo EM; exceeds single shared LoRA (55.1%) by +5.2 pp
- OOD temporal holdout (92 post-cutoff repos): 74.1% EM, leading next-best fine-tuned adapter by ~1.8 pp
- Evaluated on 604 Python repositories (512 in-distribution, 92 OOD)
Why it matters / caveats: The work demonstrates that parametric adaptation via hypernetworks outperforms context injection at zero inference-time token overhead, and that recurrent aggregation over diffs can track repository-specific adapters under continuous software evolution. Evaluation is currently limited to Python repositories, a single backbone (Qwen2.5-Coder-1.5B), and one downstream task (assertion completion), and surface-level metrics may miss functional equivalence.
The Road Ahead in Autonomous Driving: The KITScenes Multimodal Dataset →
Technical breakdown
Problem: Existing autonomous driving datasets lack the combination of high-fidelity sensor data, complete HD maps, and geographic diversity needed to benchmark spatial reasoning in complex European urban environments.
Method: KITScenes provides a sensor suite of seven 1550 nm lidar sensors, nine synchronized global-shutter cameras (72.5 Mpx total), three 4D imaging radars, and redundant GNSS/INS. HD maps are in Lanelet2 format with 29 road-feature classes, 120 traffic-sign classes, and 3D traffic lights/signs/poles. Baselines evaluated include MapTRv2, SDTagNet, MapQR-Topo (MapQR with GNN topology head), UniAD, DMAD, SSR, Epona, and ReconDrive across four benchmark tracks: online HD map construction, long-range monocular depth estimation, novel view synthesis, and end-to-end driving.
Key results:
- Dataset: 1,007 scenarios, 5.7 hours, 162 km across three German cities
- Online HD map construction: MapTRv2 AP 5.1–18.0; MapQR-Topo topology score 16.4
- Long-range monocular depth (0–100 m): MapAnything AbsRel 0.149, δ₁ 83.04%; (>200 m): all methods degrade severely (UniDAC AbsRel 0.540)
- Novel view synthesis (ReconDrive at ±3 m lateral offset): 81.2–86.1% recall loss
- End-to-end driving (Epona, 3 s horizon): FDE 3.99 m, ADE 1.97 m, drivable survival 78.6%, collision-free 98.3%
Why it matters / caveats: KITScenes provides the most complete public HD maps with validated autonomous driving compatibility, raising the bar on sensor fidelity and geospatial benchmarking. The current release lacks 3D bounding boxes, tracks, or instance segmentation, and at 5.7 hours it is substantially smaller than nuPlan (~120 h); evaluation is open-loop only.
Dream.exe: Can Video Generation Models Dream Executable Robot Manipulation? →
Technical breakdown
Problem: It is unknown whether video generation models have internalized physical laws sufficiently to produce manipulation videos whose implied trajectories are actually executable by robots.
Method: The evaluation pipeline has four stages: (1) video generation from initial scene images and task prompts using eight models (Hailuo 2.3, Kling 3.0, Wan 2.7, SeedDance 2.0, Veo 3.1, Wan 2.2, LTX 2.3, Cosmos Policy); (2) VLM-based visual quality scoring (Gemini 3 Pro, Qwen3-VL-Plus) across robot stability, physical plausibility, and task adherence; (3) video-to-trajectory extraction via 2D point tracking (CoTracker) → depth estimation (DVD model with LoRA adaptation) → 3D lifting → end-effector trajectory extraction with Kabsch alignment → gripper action recognition; (4) closed-loop robot execution in MuJoCo/robosuite with checkpoint-based error correction.
Key results:
- Level 1 task success: CosmosPolicy-BenchCam 20.8% SR-B; SeedDance 2.0 15.1%
- Level 2: SeedDance 2.0 and Wan 2.7 reached 21.4% SR-B
- Level 3: Only Kling 3.0 achieved non-zero success at 6.2% SR-B
- Checkpoint executability (E-SR): 0.40–0.75 across models; CosmosPolicy-DefaultCam highest at 0.750
- Reference bounds: rollout video 60.4% SR-B; rollout video with GT depth 99.1% SR-B
- Pearson r = −0.03 between physical plausibility scores and task success
Why it matters / caveats: This work establishes that visual quality is a poor predictor of physical executability (r ≈ 0), exposing a critical gap between standard video benchmarks and actual robot usability. Depth estimation remains the main bottleneck, and in-domain fine-tuning improves appearance but not physics.
MAOAM: Unified Object and Material Selection with Vision-Language Models →
Technical breakdown
Problem: Existing segmentation methods support only object-centric selection through single interaction modalities, lacking the ability to select materials via both click- and text-based interactions within a single unified framework.
Method: MAOAM uses a vision-language model backbone (CLIP encoder + LLM) with a special [SEG] token that bottlenecks selection specifications (intent, visual attributes, spatial relations); an MLP projects the [SEG] embedding from text to visual feature space; a SAM-based mask decoder generates 1024×1024 resolution masks; and a star overlay visualizes click locations for VLM grounding. Training uses a multi-task objective (λ₁ℒ_click + λ₂ℒ_ref + λ₃ℒ_vqa) combining binary cross-entropy and DICE loss on ~104K material annotations (RealMat, SynMat, SAMa) and ~190K object annotations; material descriptions are generated via Set-of-Marks prompting with Qwen3-VL-235B.
Key results:
- Material selection (text): RealMat 74.0% mIoU / 79.8% F₁; SynMat 60.8% / 66.9%; SAMa 68.5% / 75.4%
- Material selection (click): RealMat 80.8% / 86.8%; SynMat 76.6% / 83.5%; SAMa 74.7% / 82.3%
- Object selection (text): RefCOCO 80.9% / 89.5%; RefCOCO+ 74.4% / 85.3%; RefCOCOg 77.8% / 87.5%
- Outperforms Sa2VA by 67.5% average mIoU on material selection; outperforms Materialistic by 35.5% on click-based material selection
- VQA accuracy: RealMat 85.8% (Q1), 97.4% (Q2)
Why it matters / caveats: MAOAM enables joint reasoning over objects and materials in a single model, supporting real-world editing workflows and exhibiting emergent multimodal capability (combining text and clicks despite uni-modal training). Limitations include difficulty distinguishing visually similar materials and coarse VLM image encoder resolution affecting segmentation accuracy.
AffordanceVLA: A Vision-Language-Action Model Empowering Action Generation through Affordance-Aware Understanding →
Technical breakdown
Problem: Vision-language-action models suffer from a structural mismatch between VLM semantic spaces and the 3D physical requirements of embodied robotic manipulation, leading to representation collapse during end-to-end training.
Method: AffordanceVLA uses a Mixture-of-Transformer (MoT) architecture with three specialized experts: an Understanding Expert (fuses visual observations and language instructions), an Affordance Generation Expert (predicts structured affordance representations), and an Action Expert (generates robot control actions). The affordance module decomposes into Which2Act (object-centric grounding via visual latent prediction using Flux VAE), Where2Act (2D interaction localization via affordance heatmap estimation with BCE loss), and How2Act (3D geometric reasoning via shape generation with diffusion and spatial layout regression). Training follows a three-stage progressive curriculum: Stage I general affordance grounding pre-training on VQA datasets, Stage II affordance-augmented robotic data co-training on InternData-A1, and Stage III target task post-training with annealed affordance weighting.
Key results:
- LIBERO benchmark: 95.8% average success rate (Spatial 98.6%, Object 98.4%, Goal 96.2%, Long 89.8%)
- CALVIN ABC→D: average chain length 4.33 vs. 3.84 for Pi0; 5/5 task completion 75.9%
- Real-world: basic tasks 88.3%; complex tasks 82.9% vs. 44.8% for Pi0 baseline
- Data efficiency: achieves 92% LIBERO performance with 40% of fine-tuning data
Why it matters / caveats: The paper shows that structured affordance supervision preserves VLM backbone fidelity and prevents representation collapse, and that representation quality and data quality are mutually amplifying rather than substitutable through scaling. Performance narrows on LIBERO-Long (89.8%), suggesting extremely long-horizon tasks would benefit from explicit long-term memory.
Trust Region Q Adjoint Matching →
Technical breakdown
Problem: Off-policy fine-tuning of pretrained flow policies is unstable because small critic errors are exponentially amplified into large policy deviations through critic-guided improvement.
Method: Trust Region Q-Adjoint Matching (TRQAM) introduces an adaptive trust-region parameter λ internalized in stochastic optimal control (SOC) sampling dynamics by scaling the diffusion coefficient by √λ, making the path-space KL divergence an explicit closed-form function of λ via Girsanov's theorem. A projected dual descent algorithm adapts λ to enforce a prescribed KL bound (ε_KL) at the sampling level: λ_{n+1} ← max{0, λ_n + η_λ(D̄_n − ε_KL)}.
Key results:
- OGBench (50 tasks, 1M steps): TRQAM 68% offline RL success rate vs. QAM 35%, QAM-E 45%, DSRL 46%
- Robomimic: TRQAM maintains stability where QAM/QAM-E collapse to near-zero success with adjoint loss exceeding 10²⁰
Why it matters / caveats: This provides the first principled trust-region mechanism for critic-guided flow policy fine-tuning, addressing a fundamental fragility unresolved in prior work. The VJP cost through the velocity field at each backward ODE step scales with model size, making the approach computationally expensive for large models.
The Shape of Addition: Geometric Structures of Arithmetic in Large Language Models →
Technical breakdown
Problem: LLMs exhibit paradoxical fragility in multi-digit arithmetic despite encoding correct information internally, creating a disconnect between internal computation and discrete token output.
Method: The paper uses UMAP dimensionality reduction (cosine distance, 2560-dimensional final-layer activations) and lightweight probes (logistic regression, MLPs) on hidden states to decode arithmetic variables, then introduces a Noisy Quantization Model positing that models estimate a continuous "Carry Potential" (Φ) corrupted by Gaussian noise (σ ≈ 0.05) and discretized via a floor operation. Iso-Raw-Sum Trajectories (IRST) connect states with identical raw sums across digit basins. At inference time, a dual-stream consistency protocol uses separate probes for local raw sum and global carry potential to detect and correct errors.
Key results:
- Probing accuracies (final layer, position p=4): Model Output 98.81%, Raw Sum (mod 10) 98.60%, Input Carry 96.84%, Ground Truth 94.85%, Carry Potential 92.08%, Correctness 82.41%
- Noisy Quantization Model fit: R² = 0.80 (theoretical bathtub curve vs. empirical data)
- Inference-time correction (δ=0.1): 89.56% token accuracy vs. baseline 86.26% (+3.3 pp); true positive correction rate 30.46%, false positive preservation 98.13%
Why it matters / caveats: The work mechanistically explains arithmetic failures as quantization noise crossing discrete thresholds of a correct continuous internal representation, unifying probe versatility, off-by-one errors, and error distributions. Analysis focuses on single-digit tokenization models; evidence for BPE-based models is speculative, and circuit-level localization remains incomplete.
Learning Geometric Representations from Videos for Spatial Intelligent Multimodal Large Language Models →
Technical breakdown
Problem: MLLMs excel at 2D semantic understanding but lack intrinsic 3D awareness, failing to maintain geometric and spatial consistency across video frames.
Method: GeoVR uses a Qwen3-VL-2B-Instruct backbone with VGGT-1B as a frozen 3D foundation teacher. During training (not inference), four auxiliary objectives are added: camera pose estimation via learnable camera tokens regressing 9D parameters (translation, rotation quaternion, field of view) with weighted L₁ loss; dense depth prediction via a Dense Prediction Transformer head fed multi-scale MLLM hidden states with confidence weighting; metric scale calibration via a single learnable scale token in logarithmic space; and geometric representation alignment distilling features from VGGT across layers {5, 12, 18, 24} using cosine similarity with spatial interpolation. All auxiliary heads and the 3D teacher are discarded at inference. Training uses VSI-590K + VLM-3R, 1 epoch, batch size 32, learning rate 2×10⁻⁵.
Key results:
- VSI-Bench average: GeoVR-2B 69.1 vs. baseline Qwen3-VL-2B 50.3 (+18.8 points)
- Outperforms GPT-5 (55.0), LLaVA-OneVision-72B (40.2), VLM-3R-7B (60.9), Cambrian-S-7B (67.5)
- Matches SpaceMind-8B (69.6) at 2B parameters with zero inference overhead
- Per-task: Object Count 67.7, Absolute Distance 54.5, Object Size 73.9, Room Size 72.3, Relative Direction 80.7, Approach Order 86.7
Why it matters / caveats: GeoVR achieves state-of-the-art spatial reasoning with no additional architectural overhead at inference by restructuring the MLLM latent space via training-time geometric constraints rather than superficial feature fusion. Future scaling to larger architectures and more complex spatial tasks is identified as needed.
Benchmark Everything Everywhere All at Once →
Technical breakdown
Problem: Creating evaluation benchmarks is labor-intensive and unsustainable, and existing benchmarks quickly saturate, failing to discriminate between state-of-the-art models.
Method: A Benchmark Agent with a dual-component design inspired by brain-cerebellum architecture: a Benchmark Planner (Design Agent for task decomposition, Grounding Agent for dataset validation, Allocation Agent for resource optimization) and a Benchmark Executor (performing sample-level realization via orchestration-execution mechanisms and quality control verification) using a combination of LLM-based and non-LLM tools (synthesis and programmatic transformers).
Key results:
- Human acceptance rates: 96–98% across generated benchmarks
- LLM-as-Judge User-Intention Alignment scores: 68.54–81.48
- Format and Schema Quality: 87.93–99.70
- Qwen3.5 scaling: 71.06–87.23 (Multi-Perspective), 40.96–56.38 (Art-Reasoning)
- Cost: 0.3 min/sample (audio) vs. 6 min/sample for human annotation
Why it matters / caveats: The system addresses benchmark sustainability by enabling rapid, customized benchmark generation across modalities without extensive human labor. Generated benchmarks are validated on representative tasks only and are bounded by available tool coverage; light human review remains useful.
Revising Context, Shifting Simulated Stance: Auditing LLM-Based Stance Simulation in Online Discussions →
Technical breakdown
Problem: LLM-based simulations of social media users may exhibit excessive sensitivity to contextual changes that shouldn't semantically alter stated positions, undermining their reliability for studying online opinion dynamics.
Method: The paper uses counterfactual context revision as an auditing framework for LLM-based stance simulation, implementing text-only revision strategies alongside a multimodal strategy incorporating meme-based context, and measuring effectiveness via average directional stance shift and stance transition rate metrics.
Key results:
- Not stated.
Why it matters / caveats: The work exposes both the promise and risk of deploying LLMs to simulate online opinion dynamics, contributing an evaluation framework for understanding context sensitivity. Excessive context sensitivity could undermine reliability when using such systems to model real user behavior.
Absorbing Complexity: An Interaction-Native Knowledge Harness for Financial LLM Agents →
Technical breakdown
Problem: Financial AI systems suffer from "financial cognition friction" because users must repeatedly restate fragmented information and risk preferences while agents forget context between turns, causing latency, repeated errors, and weak traceability.
Method: The Interaction-Native Knowledge Harness (InKH) integrates event-stream processing of user/market/tool updates, a bounded working context buffer assembled via passive knowledge injection (rather than agent-driven search), a temporal knowledge graph as low-latency retrieval substrate, a Wiki audit surface for human-readable governance, and background processes including extraction, maturity transitions, decay modeling, and write-time invalidation. Utility scoring combines relevance, structural alignment, maturity, freshness, regime compatibility, and trust signals.
Key results:
- InKH task quality: 0.815 at 900 ms latency across 7,680 workflows per baseline (46,080 total evaluations)
- vs. Wiki-Walk: 82.95% latency reduction, 82.29% token cost reduction, +0.108 quality improvement, 96.58% stale-knowledge reduction, +0.461 traceability gain
- vs. KH-NoInv (no invalidation): +0.050 quality improvement, 96.58% stale-memory suppression
- High-risk workflows: quality 0.822, stale usage 0.018, traceability 0.999
Why it matters / caveats: Results demonstrate that governance-based filtering via write-time invalidation—not sheer storage volume—drives improvement in financial decision quality. The benchmark is a controlled synthetic simulation, not live trading validation, and quality metrics are simulator-defined rather than human-labeled.
Regret Minimization with Adaptive Opponents in Repeated Games →
Technical breakdown
Problem: Classical external regret metrics fail to capture strategic interactions in repeated games where opponents can adaptively respond to historical play.
Method: The paper introduces Repeated Policy Regret (RP-Regret) comparing realized versus best-in-hindsight accumulated utility when all players respond to play history, Local Repeated Policy Regret (LRP-Regret) as a convexified surrogate enabling projected gradient descent updates, and a Markov Game reformulation converting bounded-memory repeated games into induced Markov games with occupancy-measure-based regret minimization and online convex optimization with time-varying constraints.
Key results:
- LRP-Regret bound: R_T^local / T ≤ Õ(|A|^(m+1) √(P_T/T) + C_m^γ) where C_m^γ = (2N+1)^(m+1) γ^(m+1)
- SPCCE approximation: achieves O(1/T_0^(2/7))-approximate equilibrium within T_0 iterations
- Memory requirement: logarithmic in accuracy (M = O(log(1/ε)))
- Iterated Prisoner's Dilemma: tit-for-tat via RP-Regret yields utility 0.6 vs. 0.2 with external regret
Why it matters / caveats: Provides the first principled framework for finding cooperative equilibria in repeated strategic interactions. The approach has exponential dependence on action space size, non-convex optimization challenges, and restrictive conditions on opponent adaptivity.
LLM Anonymization Against Agentic Re-Identification →
Technical breakdown
Problem: Existing anonymization methods fail to adequately protect against re-identification attacks by agentic LLMs with web search capabilities, which can exploit contextual details that also provide analytical value.
Method: AURA (Anonymization with Utility-Retention Adaptation) is an LLM-powered mask-reconstruct framework that decouples privacy localization from utility-preserving reconstruction and selects candidates using adversarial privacy and utility-retention checks. Evaluation uses real-user interview transcripts with web-search agent re-identification attacks; utility is assessed via interviewee-profile facts, codebook facts, and a joint contextual utility grid.
Key results:
- Not stated.
Why it matters / caveats: The work directly targets an emerging threat from web-capable AI agents that existing defenses—explicit identifier removal, text perturbation, or non-web inference model testing—do not adequately address. The paper is limited to interview transcript data and the full evaluation results were not available in the abstract.
AURA: Intent-Directed Probing for Implicit-Need Surfacing in Situated LLM Agents →
Technical breakdown
Problem: LLM agents answer literal user queries while missing implicit information needs, such as when a user asks "where is Lin Wei?" but actually wants to know "is she free to chat?"
Method: AURA introduces an IntentFrame component that sits between scene perception and tool use, producing a gap score (0–1) representing the distance between literal and implicit needs, recommended probe tools, and a confidence estimate. The gap score deterministically maps to a probe budget ceiling B(g) ∈ {0, 1, 2, 3, 5} governing bounded proactive probing before answer generation, using either an LLM backend (structured JSON output with few-shot calibration) or a heuristic backend.
Key results:
- Implicit-need coverage (100 queries, 4 scenes, 3 seeds): AURA 0.804 vs. ReAct-style NoIntent 0.733 (Δ=+0.071, p=1.0×10⁻⁶)
- Per-subcategory gains: availability +0.29, appropriateness +0.11, mood +0.07
- Factual accuracy: GapRouted 0.696 at 1.40 probes/query vs. Fixed-Probe 0.766 at 8.00 probes/query (82% probe reduction)
- Privacy-sensitive slice: 0% forbidden-tool violations vs. Plan-and-Solve 78.9%
- Cross-backbone: Claude-haiku-4.5 Δ=+0.086 (p=0.0037); Qwen-plus Δ=+0.25 [CI +0.14, +0.37]
- Human evaluation (8 raters, 50 scenarios): environmental awareness Δ=+1.86 (p=0.017); 74% rater consensus for AURA
Why it matters / caveats: AURA demonstrates a privacy-preserving Pareto improvement in access-controlled multi-agent systems by explicitly modeling the gap between surface queries and implicit needs. Few-shot examples are load-bearing; removing them reduces significance. Transfer to external benchmarks (FANToM, GAIA, LoCoMo) shows null or negative results, limiting generalizability.
BRepCLIP: Contrastive Multimodal Pretraining on BRep Primitives for CAD Understanding →
Technical breakdown
Problem: Existing 3D representation learning methods use point clouds, which discard native boundary representation (BRep) structure of CAD models and lose critical engineering semantics like surface types, curve primitives, and topological information.
Method: BRepCLIP employs hybrid dual-dVAE tokenization with separate discrete autoencoders for faces (8192-token codebook) and edges (2048-token codebook); structure-aware BRep encoding via a transformer with modality, spatial, and semantic descriptors; and multimodal contrastive alignment using symmetric InfoNCE losses between BRep embeddings and a frozen OpenCLIP ViT-bigG-14 encoder for both text and image modalities. Trained on 400K ABC dataset samples, batch size 200, for 38 epochs.
Key results:
- Text-to-CAD retrieval (Top-1): ABC 8.59 (+40.4% over OpenShape), CADParser 5.00 (+22.0%), Automate 9.42 (+23.9%)
- Chamfer Distance: ABC 0.058, CADParser 0.035, Automate 0.060
- Zero-shot classification (FabWave): 38.62 Top-1 accuracy vs. 33.58 for OpenShape
- BRepCLIP-Score sensitivity: drops 104.17% under full semantic mismatch vs. 25% for CLIP score
Why it matters / caveats: Establishes native BRep structure as foundational for multimodal CAD understanding, addressing a largely open problem in engineering design workflows. Fixed geometric resolution may be insufficient for complex models with dense primitives, and semantic descriptors are limited to a predefined primitive taxonomy.
SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces →
Technical breakdown
Problem: LLM-based coding agents deployed in realistic project environments lack adequate safety evaluation, as existing benchmarks test refusal behavior but miss harmful actions arising from multi-step execution in stateful workspaces.
Method: SABER places models in Docker-sandboxed project workspaces and evaluates safety through three complementary scenarios: (A) embedded injection in project artifacts, (B) risky self-selection among execution paths, and (C) contextual warnings requiring environment awareness. Evaluation uses a layered outcome taxonomy combining rule-based harmfulness detection with LLM-assisted semantic judging to categorize violations by causal origin under a unified ReAct harness across 13 models.
Key results:
- 716 executable tasks across 13 models
- Best-performing model Claude Opus 4.6: 54.7% harmful safety-violation rate (HSR)
- GPT-5.4: 63.9% HSR
- Open models: 70–84.7% HSR range
- Scenario A (embedded injection) compositional harm rate: 23.0%
- Scenario C (contextual warnings): 82.5% HSR, 24.1% compositional harm rate
Why it matters / caveats: Demonstrates that current alignment is insufficient for realistic project-environment operation, and that models require safe execution planning beyond refusal capability. The benchmark uses a unified ReAct harness rather than vendor-specific agent frameworks, evaluates without real network access, and relies on Docker sandboxes rather than production environments.
ForeSci: Evaluating LLM Agents for Forward-Looking AI Research Judgment →
Technical breakdown
Problem: It is unknown whether LLM agents can make valid forward-looking research judgments from historical evidence alone, without access to future papers or hindsight bias.
Method: ForeSci is a temporally controlled benchmark built with TaxoAdapt-induced temporal taxonomies of research subdirections, node evidence records linking subdirections to pre-cutoff literature with method-development and bottleneck signals, and four task families: direction forecasting, bottleneck-opportunity discovery, strategic research planning, and venue-conditioned positioning. Five approaches are tested: native LLM, Hybrid RAG (sparse+dense retrieval), and three agentic adaptations (CoI-style, ResearchAgent-style, ARIS-style), evaluated on factuality, future-target alignment (FTA), traceability, and reviewer persuasiveness.
Key results:
- Native LLM: Factuality ~0.54–0.62, FTA ~0.61–0.63, Persuasiveness ~0.67–0.85
- Hybrid RAG: Factuality ~0.52–0.61, Traceability ~0.41–0.43
- Agentic methods: Factuality ~0.54–0.64, Traceability ~0.46–0.63
- Agents consistently improve traceability but show no uniform best metric across task families
Why it matters / caveats: The benchmark identifies "evidence-decision decoupling"—agents cite relevant evidence while selecting wrong research objects, causal roles, or time horizons—revealing a previously unmeasured failure mode beyond factuality. The benchmark is limited to four fast-moving AI domains and tasks cannot capture tacit community knowledge or unpublished work.