AI Research Radar

May 19–25: 1 frontier paper out of 1,580 read.

1 frontier47 cleared1,580 papers read

Frontier

Papers rated as moving the field

Hallucination as Exploit

“A HACR audit on 500 stratified task keys shows that unsupported action-critical claims reach unsafe execution for naive agents (100.0%) and prompt-only defenses (49.6%), but not for ECA.”

The authors, in the abstract

Evidence-Carrying Multimodal Agents

arXiv PDF

The week by field

May 19–25: 47 cleared, 1 frontier

The week’s papers have not been sorted into fields yet.

Models under test

Papers this week that name the model

GPT-5.44
Gemini 3 Flash3
Claude Opus 4.63
Claude Sonnet 4.52
GPT-52
GPT-4o mini2
Gemini 3.1 Pro2
GPT-4o2

Labs publishing

Papers this week with an author at the lab

Amazon3
Microsoft2
Google1
Meta1

Also cleared

46 papers

Robust LLM Watermarking with Minimal Semantic Distortion for IP ProtectionMicrosoft
XWind: A Cross-site Router for Large Language Model Inference Serving at Renewable Energy FarmsMicrosoft
SCI-Defense: Defending Manipulation Attacks from Generative Engine OptimizationAmazon
Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial ContributionsMeta
The Illusion of Intervention: Your LLM-Simulated Experiment is an Observational StudyGoogle
DECOR: Auditing LLM Deception via Information Manipulation TheoryAmazon
Library Drift: Diagnosing and Fixing a Silent Failure Mode in Self-Evolving LLM Skill LibrariesAmazon
LLM Agents Already Know When to Call Tools -- Even Without ReasoningCode
Behavior Cue Reasoning: Monitorable Reasoning Improves Efficiency and Safety through OversightCode
Conditional Equivalence of DPO and RLHF: Implicit Assumption, Failure Modes, and Provable AlignmentCode
AgentWall: A Runtime Safety Layer for Local AI AgentsCode
Codec-Robust Attacks on Audio LLMs

All 46 papers

Is Capability a Liability? More Capable Language Models Make Worse Forecasts When It Matters Most
ObjectCache: Layerwise Object-Storage Retrieval for KV Cache Reuse
How Far Will They Go? Red-Teaming Online Influence with Large Language Models
When AI Takes Sides on Questions of Faith: Persistent Asymmetries in AI-Mediated Faith Guidance
Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs
Are Frontier LLMs Ready for Cybersecurity? Evidence for Vertical Foundation Models from Dual-Mode Vulnerability Benchmarks
Cultural Adaptation in Large Language Models for Political Discourse
MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection
Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs
What Counts as AI Sycophancy? A Taxonomy and Expert Survey of a Fragmented Construct
On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation
Evaluating Large Language Models as Live Strategic Agents: Provider Performance, Hybrid Decomposition, and Operational Gaps in Timed Risk Play
Benchmarking Autonomous Agents against Temporal, Spatial, and Semantic Evasions
Compiling Agentic Workflows into LLM Weights: Near-Frontier Quality at Two Orders of Magnitude Less Cost
Can AI Make Conflicts Worse? An Alignment Failure in LLM Deployment Across Conflict Contexts
HealthCraft: A Reinforcement Learning Safety Environment for Emergency Medicine
CR4T: Rewrite-Based Guardrails for Adolescent LLM Safety
Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems
Boundary-targeted Membership Inference Attacks on Safety Classifiers
Evaluating Commercial AI Chatbots as News Intermediaries
The Impact of AI Search on the Online Content Ecosystem: Evidence from Google and Reddit
Conformal Selective Acting: Anytime-Valid Risk Control for RLVR-Trained LLMs
Mechanistic Interpretability for Learning Assurance of a Vision-Based Landing System
Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs
REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak
Decoupling Communication from Policy: Robust MARL under Bandwidth Constraints
roto 2.0: The Robot Tactile Olympiad
PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems
Prompt2Fingerprint: Plug-and-Play LLM Fingerprinting via Text-to-Weight Generation
UCCI: Calibrated Uncertainty for Cost-Optimal LLM Cascade Routing
Benchmarking Commercial ASR Systems on Code-Switching Speech: Arabic, Persian, and German
Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents
GoLongRL: Capability-Oriented Long Context Reinforcement Learning with Multitask Alignment
Auditing Privacy in Multi-Tenant RAG under Account Collusion

SIGNIFICANT ON THE BOARDS

MODEL TRACKER2,647 new benchmark results across 174 models this week DEAL FLOW$158.1B disclosed AI funding this week across 62 rounds POLICY126 policy events tracked across 7 days