AI Research Radar

Pistis Technical Report

“Experiments demonstrate that PAH enhances the model performance without updating the model parameters or increasing the interaction budget.”

Hunyuan-A13B Technical Report

“Evaluations show competitive performance across mathematics, science, programming, general language understanding, and agent tasks, often approaching that of much larger models.”

APort Vault

“The zero spans 790 source sessions, giving a per-session upper bound of 0.38%.”

Instrumental Monitor Evasion Emerges Under Ordinary Task Pressure

“Across our evaluations, best-of-3 evasion attempt rates reach up to 98% and success rates up to 88%, with substantial variance across models.”

Your Model Is Leaking

“Across eleven models from seven architecture families, our evaluation shows 91--100% recovery on nine models with KL divergence 0.001--0.007, while evaluated activation-level detectors remain close to random guessing (AUC <= 0.56).”

FrontierMath Erdős

“One (GPT-6 Astra) scored 3%, and all others scored 0%.”

Evaluating Coding Agents on Kernel Exploit Generation

“With a reference PoC, the strongest configuration solves 31 of 45 tasks (68.9%).”

Qwen3.8-Omni

“Extensive evaluations demonstrate that Qwen3.8-Omni-Flash achieves strong performance across multimodal understanding, reasoning, long-horizon agentic execution, and video productivity tasks.”

Beyond Task Completion

“Starting from Qwen3.5-9B, SCOPE-RL achieves a 54.17% task success rate on OSWorld and a 64.30% attack-avoidance rate on OS-BLIND, yielding the best aggregate capability--safety score of 58.80% among the evaluated agents.”

Euston

“Median response length also falls from 19,217 to 18,296 tokens and the truncation rate from 25.8% to 8.3%, so the improvement does not come from thinking longer.”

Control-Token Injection Suppresses Chain-of-Thought and Defeats Reasoning-Based Oversight in Tool-Using Agents

“We show the suppression can be delivered indirectly and characterize its dependence on the chat template across two more reasoning models, and we evaluate input sanitization, parser hardening, and empty-reasoning detection as defenses; flagging an absent trace catches the basic attack but not an adaptive benign decoy.”

Codetta

LLM Agents Can Easily Tamper With Their Own Traces

“We show that local LLM agents such as Claude Code, Codex, Antigravity, Open Code and Grok Build fail to enforce this boundary.”

InternW0

Delegated Misalignment

“We show that this assumption breaks down: \emph{individual safety alignment fails to transfer to multi-agent settings}.”

Optimizing the Score, Losing Sight of the Task: Reward Hacking Across Weights, Selection, and Prompts

OPBackdoor