Hidden in Memory
“Crucially, among successful retrievals, poisoned memories cause attacker-intended agentic actions in 60-89% of evaluations across models.”
The authors, in the abstract
Sleeper Memory Poisoning in LLM Agents
AI Research Radar
May 13–19: 4 frontier papers out of 1,622 read.
Frontier
Papers rated as moving the field
How we chooseMetis
“By replacing redundant exploration with directed optimization, Metis reduces token costs by an average of 8.2x and up to 11.4x.”
Judge Circuits
“We find that judgments across structured understanding and open-ended preference tasks share a sparse, generalized Latent Evaluator sub-graph in the mid-to-late multi-layer perceptrons (MLPs); zero-ablating it collapses judgment while preserving world knowledge in architecturally modular models.”
TMPO
The week by field
May 13–19: 53 cleared, 4 frontier
The week’s papers have not been sorted into fields yet.
Models under test
Papers this week that name the model
Labs publishing
Papers this week with an author at the lab
Also cleared
49 papers
- Positive Alignment: Artificial Intelligence for Human FlourishingGoogle, OpenAI, Anthropic
- Training on Documents About Monitoring Leads to CoT ObfuscationGoogle
- Breaking the Reward Barrier: Accelerating Tree-of-Thought Reasoning via Speculative ExplorationByteDance
- IndustryBench: Probing the Industrial Knowledge Boundaries of LLMsAlibaba
- Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and MitigationIBM
- TextSeal: A Localized LLM Watermark for Provenance & Distillation ProtectionMeta
- AgentWall: A Runtime Safety Layer for Local AI AgentsCode
- AgentStop: Terminating Local AI Agents Early to Save Energy in Consumer DevicesCode
- SaaS-Bench: Can Computer-Use Agents Leverage Real-World SaaS to Solve Professional Workflows?Code
- AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent SkillsCode
- Known By Their Actions: Fingerprinting LLM Browser Agents via UI TracesCode
- SDOF: Taming the Alignment Tax in Multi-Agent Orchestration with State-Constrained Dispatch
All 49 papers
- Fair outputs, Biased Internals: Causal Potency and Asymmetry of Latent Bias in LLMs for High-Stakes Decisions
- Is Agentic AI Ready for Real-World Hardware Engineering? A Deep Dive with Phoenix-bench
- GQLA: Group-Query Latent Attention for Hardware-Adaptive Large Language Model Decoding
- Transformer Scalability Crisis: The First Comprehensive Empirical Analysis of Performance Walls in Modern Language Models
- STS: Efficient Sparse Attention with Speculative Token Sparsity
- On the Fragility of Data Attribution When Learning Is Distributed
- Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systems
- Fully Open Meditron: An Auditable Pipeline for Clinical LLMs
- Invisible Orchestrators Suppress Protective Behavior and Dissociate Power-Holders: Safety Risks in Multi-Agent LLM Systems
- Measuring Google AI Overviews: Activation, Source Quality, Claim Fidelity, and Publisher Impact
- ROK-FORTRESS: Measuring the Effect of Geopolitical Transcreation for National Security and Public Safety
- ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents
- Grounded Continuation: A Linear-Time Runtime Verifier for LLM Conversations
- Good to Go: The LOOP Skill Engine That Hits 99% Success and Slashes Token Usage by 99% via One-Shot Recording and Deterministic Replay
- The Great Pretender: A Stochasticity Problem in LLM Jailbreak
- MemLineage: Lineage-Guided Enforcement for LLM Agent Memory
- Sycophancy is an Educational Safety Risk: Why LLM Tutors Need Sycophancy Benchmarks
- Falkor-IRAC: Graph-Constrained Generation for Verified Legal Reasoning in Indian Judicial AI
- Mechanical Enforcement for LLM Governance:Evidence of Governance-Task Decoupling in Financial Decision Systems
- Quantifying and Mitigating Premature Closure in Frontier LLMs
- AI Knows When It's Being Watched: Functional Strategic Action and Contextual Register Modulation in Large Language Models
- Mistletoe: Stealthy Acceleration-Collapse Attacks on Speculative Decoding
- Reinforcement Learning with Semantic Rewards Enables Low-Resource Language Expansion without Alignment Tax
- FrontierSmith: Synthesizing Open-Ended Coding Problems at Scale
- XFP: Quality-Targeted Adaptive Codebook Quantization with Sparse Outlier Separation for LLM Inference
- Forgetting That Sticks: Quantization-Permanent Unlearning via Circuit Attribution
- Widening the Gap: Exploiting LLM Quantization via Outlier Injection
- VERA-MH: Validation of Ethical and Responsible AI in Mental Health
- jina-embeddings-v5-omni: Geometry-preserving Embeddings via Locked Aligned Towers
- AgentShield: Deception-based Compromise Detection for Tool-using LLM Agents
- Leveraging RAG for Training-Free Alignment of LLMs
- Drop the Act: Probe-Filtered RL for Faithful Chain-of-Thought Reasoning
- The Evaluation Differential: When Frontier AI Models Recognise They Are Being Tested
- GeomHerd: A Forward-looking Herding Quantification via Ricci Flow Geometry on Agent Interactive Simulations
- Correcting Selection Bias in Sparse User Feedback for Large Language Model Quality Estimation: A Multi-Agent Hierarchical Bayesian Approach
- Reconstruction of Personally Identifiable Information from Supervised Finetuned Models
- Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries