Research

Digests of notable academic papers, primarily from arXiv

212 articles · page 4 of 5

Safety & Evals

Financial agents can cite rules while still attempting prohibited trades

Luo and colleagues built a controlled financial-compliance environment and a monitoring benchmark to test whether language-model agents ground their actions in executable rules. Across experiments with DeepSeek V4 Pro and Gemini 3.5 Flash, displaying rules reduced but did not eliminate rejected orders, while independent monitors could be misled by trader rationales when enforcement evidence was withheld.

23 Aug·2 min
Agent Harnesses

Selecting complementary LLM skills improves success while reducing context use

Chen et al. formulate the choice of reusable skill documents for LLM agents as a budget-constrained optimization problem rather than an independent relevance-ranking task. Their Best Prefix Selection algorithm achieved 0.73 task success on a contamination-controlled BigCodeBench variant, compared with 0.20–0.52 for existing selection methods, while using fewer tokens than the strongest released router.

23 Aug·2 min
AI & ML

A 2.8-trillion-parameter open MoE model approaches frontier performance.

Kimi Team introduces Kimi K3, a 2.8T parameter Mixture-of-Experts model with 104B activated parameters, native vision, and a 1M-token context window. The authors demonstrate that innovations in attention (Kimi Delta Attention, Attention Residuals) and routing (Stable LatentMoE) yield roughly 2.5× scaling efficiency improvement over Kimi K2, enabling frontier-level performance across long-horizon coding, agentic, reasoning, and vision tasks.

28 July·2 min
Multi-Agent Systems

World state registers enable consistent multi-agent video generation across views

The authors propose WorldWeaver, a streaming multi-agent video diffusion model that augments autoregressive rollout with cross-agent world state registers: learnable tokens that maintain shared world information, track individual agent status, and are updated after each generated chunk. The registers are grounded with supervision from agent status, global bird's-eye views, and scene text. Experiments in two-agent Minecraft show that explicit world-state modeling improves logical consistency and generation quality over baselines that only carry forward observation history.

24 July·3 min
RL for Agents

New framework lets you train AI agents inside the same harness systems they use at inference

The authors present OpenForgeRL, an open-source framework that trains stateful, harness-based AI agents end-to-end using standard reinforcement learning libraries. It wraps the harness's model calls via a proxy for data recording and orchestrates rollouts in remote Kubernetes containers, yielding competitive results on tool-use, browser, and computer-use benchmarks with relatively few training tasks.

24 July·2 min
Agent Harnesses

Python objects become AI agents in new NVIDIA framework

The authors introduce NVIDIA Object-Oriented Agents (NOOA), a model-agnostic Python framework where any Python object can act as an AI agent: methods define available actions, fields store state, docstrings serve as prompts, and type annotations act as contracts. Methods whose body consists only of '...' are completed at runtime by an LLM-driven loop, while normal methods remain deterministic. The framework is demonstrated on SWE-bench Verified, Terminal-Bench 2.0, and ARC-AGI-3, showing that current models use this interface effectively.

23 July·2 min
RL for Agents

Dense credit assignment from gold-answer log-probabilities improves long-horizon agent RL

The authors propose TRACE, a credit-assignment method for long-horizon agentic RL that derives per-action rewards from the log-probability of the gold answer under a frozen reference model, using temporal-difference learning. On the closed-web BrowseComp-Plus benchmark, TRACE raises Qwen3-4B from 7.2 to 35.6 and Qwen3-30B-A3B from 8.4 to 42.6, and enables pure RL training without cold-start supervised fine-tuning or live-web data.

16 July·2 min
Tools & MCP

Open-source image model rivals closed systems on minimal budget

The authors introduce Boogu-Image-0.1, a family of open-source multimodal models that unify understanding and generation. By strengthening the system's understanding capability through a better multimodal encoder, agentic prompt rewriting, and inference-time scaling, the model matches or surpasses existing open-source models and approaches closed-source systems, all with a theoretical training cost of roughly $400K.

15 July·1 min
Agent Harnesses

Re-evaluation shows harness evolution for agents may not outperform simple test-time scaling

Wang et al. revisit the evaluation of automatic harness evolution for LLM agents, comparing it with simple test-time scaling and discovery baselines under matched feedback and inference budgets. They find that harness evolution does not consistently outperform these baselines on Terminal-Bench 2.1 and shows limited generalization to held-out tasks, raising concerns about overfitting and the effectiveness of the approach.

14 July·2 min
Safety & Evals

Probabilistic scoring unlocks verification as a new scaling axis for LLMs

The authors introduce LLM-as-a-Verifier, a general-purpose verification framework that extracts continuous scores from LLMs by taking expectations over scoring token logits. This approach achieves state-of-the-art results on four benchmarks—Terminal-Bench V2 (86.5%), SWE-Bench Verified (78.2%), RoboRewardBench (87.4%), and MedAgentBench (73.3%)—and provides fine-grained feedback that can be used for reinforcement learning and progress monitoring.

7 July·3 min
Safety & Evals

Masking untrusted web content to secure agents against prompt injection

The authors introduce Untrusted Content Masking (UCM), a defense that prevents prompt injection attacks on web agents by masking untrusted content in the Document Object Model (DOM) before the agent processes it. They show that the DOM structure alone can distinguish trusted from untrusted page regions without reading their content, enabling agents to observe and interact safely with web pages while remaining isolated from adversarial content.

7 July·3 min
Safety & Evals

Persistent-codebase AI agents vulnerable to distributed, gradual attacks

Hills et al. introduce Iterative VibeCoding, a benchmark for AI control in persistent codebases, and demonstrate that gradual attacks—distributing a covert side task across multiple pull requests—achieve high evasion (≥65%) across several attack models. They find that no single monitor is robust against both gradual and non-gradual attack strategies, but a stateful link-tracker monitor combined with trajectory monitors in a four-monitor ensemble reduces gradual-attack evasion from 93% under the weakest diff monitor to 47%.

3 July·3 min
Safety & Evals

Automated safety testing reveals 93.9% attack success rate across four agent frameworks

Feng et al. present Vera, an end-to-end automated safety testing framework for LLM agents that uses a three-stage pipeline to discover risks, compose executable safety cases, and execute them in sandboxed environments with evidence-grounded verification. Evaluating on four production agent frameworks (OpenClaw, Hermes, Codex, and Claude Code), they find average attack success rates of 93.9% under multi-channel attacks, and release Vera-Bench with 1600 safety cases spanning 124 risk categories.

2 July·3 min
Memory & Planning

Skill evolution improves agent performance in image generation workflows

The authors introduce COMFYCLAW, an agentic harness that controls ComfyUI workflows for image generation. By representing workflow construction as typed graph editing, reverting invalid edits, and using a region-level vision-language model (VLM) verifier to provide actionable repair suggestions, COMFYCLAW evolves a skill library from past trajectories, errors, and verifier feedback. Across four benchmark splits, three agent models, and two image backbones, COMFYCLAW achieves the best average evaluation score in all six agent configurations, and human annotators prefer its outputs over variants without skill evolution.

2 July·3 min
Memory & Planning

Treating memory management as a trainable cognitive skill boosts LLM performance 2x–4x in long-horizon tasks

The authors introduce AutoMem, a framework that treats memory management as a learnable skill for LLMs by promoting file-system operations to first-class actions. By automating the optimization of memory structure (prompts, schemas, action vocabulary) and model proficiency (training on good memory decisions), AutoMem improved base agent performance by approximately 2x to 4x across three long-horizon games without altering task-action behavior.

2 July·2 min
Memory & Planning

Three-stage training instills world model planning into LLM agents

Zhang et al. propose a training paradigm that equips LLM agents with an internal world model for prospective reasoning. By first injecting predictive capabilities through a world model mid-training stage, then eliciting structured foresight via supervised fine-tuning, and finally calibrating with reinforcement learning, the authors demonstrate significant improvements on search and mathematical reasoning tasks over standard fine-tuning approaches.

26 June·2 min
Creative Agents

An agentic framework that fills in missing context for real-world image generation

The authors propose Qwen-Image-Agent to address the context gap where user requests for image generation are often underspecified, implicit, or depend on up-to-date knowledge. The framework uses Context-Aware Planning to identify missing details and Context Grounding to acquire them from reasoning, search, memory, and feedback. On the newly introduced IA-Bench benchmark and two other datasets, it achieves state-of-the-art performance against strong baselines.

25 June·2 min
Agent Harnesses

Agent framework auto-tunes video diffusion for 2x speedup

The authors present Sol Video Inference Engine, a training-free framework that uses parallel agent modules to optimize cache, sparse attention, token pruning, quantization, and kernel fusion for a given model-hardware-configuration triplet. Across three models (64B Cosmos3-Super, 22B LTX-2.3, 2B SANA-Video), the full stack achieves over 2x end-to-end acceleration while maintaining near-lossless VBench quality, with minimal human effort.

22 June·2 min
Multi-Agent Systems

Latent communication across different LLMs matches or beats text-based transfer at lower compute.

The authors investigate whether heterogeneous LLMs can be aligned to directly transfer latent representations (KV-caches) between them, bypassing costly text decoding and re-encoding. They propose a method using a cross-model transformation and two-phase training (reconstruction then generation), achieving performance comparable to or better than text communication in context-aware settings at 2-3x lower compute, and remaining effective in context-unaware settings where prior heterogeneous methods collapsed.

12 June·2 min