Think in 360°
PanoVideoReasoner reaches 55.7% on PanoVideoBench, improving its backbone by 12.5 points and the previous SOTA by 2.6.
Benchmarking and Bootstrapping Panoramic Video Reasoning
AI Research Radar
October 27 – November 2: 15 frontier papers out of 2,333 read.
Frontier
Papers rated as moving the field
How we chooseSpaceAct
Across 10 frontier MLLMs on the 44 hardest instances, scores span 4.8-79.1, with seven solving at most 27.3% of 6-DoF tasks.
Agentic Backdoors via Pretraining Poisoning
Poisoning 0.1% of the pretraining corpus implants a remote code execution backdoor in Qwen3 CLI agents, reaching roughly 92% ASR at 4B scale.
Nemotron 3.5 Super and Lightning
Nemotron 3.5 Super achieves 51.78% on SWE-bench Pro, surpassing Nemotron 3 Ultra with approximately 4.6x fewer active parameters.
Scaling Lean Theorem Proving for Real-World Code Verification
EasyProver proves 52.7% of 2,000 sampled Aegis statements within a 30-minute budget per statement.
Movens-Zero
Movens-Zero shows consistent gains across text, speech, music, and video when scaling execution-verified data and action-expert capacity.
Safin-1.5
Safin-1.5, trained through recursive safety improvement with a formal reasoning harness, outperforms frontier models in safety and reasoning.
SPARSEBLEED
SparseBleed bypasses state-of-the-art privacy defenses, inferring Sex with 66.39% accuracy and Surgical Procedure with 99.8% accuracy on Texas-100X from a single query.
Follow the Gradient
Filtering the 20% most gradient-aligned examples with SimpleLoRIF reduces GCG attack success rate by up to 22% across Qwen, Llama, and Olmo.
HuGe
HuGe achieves state-of-the-art on the simulation benchmark HumanoidArena and improves pick-and-drop success on the Unitree G1 with visually adapted egocentric demonstrations.
Towards Understanding Score-Seeking in LLMs
Leaked graders in agentic environments show GPT models score-seek, violating instructions at similar rates regardless of score use.
Skillful and realistic precipitation forecasting with reinforced diffusion
The reinforced diffusion model FitzRoy matches or exceeds state-of-the-art precipitation forecasts over the continental United States while preserving structural realism and capturing extreme events.
Timestral
Timestral foundation models set a new state of the art on GIFT-Eval, TIME, and fev-bench, taking the top two places on every metric.
Alignment via Generalization
Aligned-PAC learning reduces alignment to generalization, showing how independent evaluation can provide rigorous evidence of alignment.
I-HITL
Ten frontier models autonomously harvest one-time passcodes to bypass HITL guardrails on an agentic wallet platform.
The week by field
Oct 27 – Nov 2: 245 cleared, 15 frontier
- Security94◆ 2
- Safety40◆ 5
- Agents31
- Society22
- Robotics18◆ 2
- 4 moreTraining, ML, Science, Reasoning16◆ 4
- Vision11◆ 2
- Inference7
- Language6
- Security94◆ 2
- 8 moreRobotics, Vision, Inference, Language, Training, ML, Science, Reasoning58◆ 8
- Safety40◆ 5
- Agents31
- Society22
Size: cleared papers◆ and tint: frontier papers
Models under test
Papers this week that name the model
Labs publishing
Papers this week with an author at the lab
Also cleared
230 papers, by field
Security & privacy92
- SecPO: Principled Adversarial Training for Prompt Injection SecurityAnthropic, GoogleCode
- SEMA-Auto: Sighted and Efficient Multi-Turn Attack with AutonomyMicrosoftCode
- PrivacyFlow: Privacy in AI Agents through Information Flow Analysis and Consequence-Aware Risk ManagementGoogle
- CoFiBreak: A Coarse-to-Fine Diversity Reward for Effective Multi-Turn JailbreakMicrosoft
- AgentShield: Fortifying Web Applications Against AI Agents and Agentic BrowsersAmazon
All 92 papers in Security & privacy
- Post-Training Large Language Models with LLMONIBM
- Where You Inject Matters: The Trust Region Effect in LLM AgentsMicrosoft
- TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless RacesMeta
- Watermark Basins: Black-Box Detection of Distilled LLMsMeta
- Prevented is Not Protected: What Attack Success Rate Hides about RAGCode
- PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AICode
- From Training Exposure to Membership Evidence: A Controlled Study of OLMo 2Code
- How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call TracesCode
- Appreciation Teaches Unauthorized Execution: Self-Evolution Degrades the Robustness of Personal Agents to Indirect Prompt InjectionCode
- Systematic Evaluation of Adversarial Jailbreaking Attacks and Defenses Across Seven Large Language ModelsCode
- Revisiting Privacy Risks in Quantized Deep Neural NetworksCode
- CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN
- ChatGPT as a Surveillance Assistant? An Exploratory Case Study of AI-Assisted Surveillance Risks
- Adaptive Dynamic Security for Operational Technology Against AI-Powered Attacks
- Language Models Show Conformity Bias in RAG: When the Majority Endorses a Poisoned Claim
- Characterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMs
- LanG 2.0: Energy-Efficient Agentic AI for Semi-Automated Security Operations at Scale
- ANGLER: Verifier-Grounded Benchmarking with an Adaptive Attacker for Web Agents
- When Safety Checks Become Privacy Risks: A Privacy-Preserving Paradigm for LLM Agent Safety Auditing
- From Representation to Readout: Mechanistic Analysis of Membership Signals in Language Models
- NormDetect: Anchored Calibration for Low-False-Positive Detection of Machine-Generated Web Text
- What Should LLMs Forget: Reinforcement Unlearning of Knowledge Associations
- What Standard Evaluations Hide About Detectors of Hijacked LLM Agents: Rare Attacks, Unseen Tools and Benchmark Transfer
- GhostPrefix: Synchronization-Free Universal Prefix Attacks for ASR Manipulation
- Beyond Smart Homes: Characterizing IoT Vulnerabilities Across Sectors, Vendors, and Products
- Poisoned Skills: Propagating Jailbreaks Through Agent Markdown Files
- Where Can We Fool the Model's Mind? Response-Guided Semantic Probing and Adaptive Routing for Transferable Attacks on Black-Box MLLMs
- Jailbreak Connectivity: Towards Diverse, Transferable, and Universal Multimodal Large Language Model Jailbreak
- Answer-Only Disclosure: Private-Context LLM Assistance over Web APIs with a Leakage Ledger
- Is it my preference? Role Grounding Attack against Agent's Memory via Social Interaction
- WebMaze: Defending Against LLM-Powered Web Scanners with Functionality-Coupled Deception
- A Minimally Informed Black-Box Fake-Report Attack on DRL Traffic-Signal Control
- Session-Bound Behavioral Watermarking for Autonomous LLM Agents
- Discovering Jailbreaks via Curriculum of Models
- FlipJev: Fast Black-Box Red Teaming Finds Universal Adversarial Suffixes for Typed Decision Models
- PCM: A Proof-Carrying Message Protocol for Verifiable Multi-Agent Communication
- REALM: Identifying Minimal Task Assets for LLM Agents
- CLaW: Codec-Guided Adaptive Latent Watermarking for Traceable Diffusion Image Generation
- Provably Secure Diffusion Watermarking Against Removal Adversaries with Batched Detector Access
- Judging Before Propagation: Task-Graph Contextual Integrity for Multi-Agent Privacy
- SEAL: Sealed Queries for Local Sanitization against Indirect Prompt Injection
- InferD: A Honeypot Framework for AI Inference Infrastructure
- PASA-KV: Attacking Action-Facing Visual Routes in World Action Models
- Understanding and Mitigating Role Spoofing in LLMs
- Preserving Utility in Continual LLM Unlearning via Orthogonal Projections
- The Privacy and Security Risks of Edge LLM Optimization
- Log-To-Leak: Prompt Injection Attacks on Tool-Using LLM Agents via the Model Context Protocol
- Program-Level Adversarial Co-Adaptive Self-Play for Robotic Security
- SpecGuard: Detecting Multi-Turn LLM Jailbreaks via Specification-Based Runtime Monitoring
- Detecting and Mitigating Query-Based System Prompt Leakage Attacks
- Spiking Neural Networks Are Harder to Steal: A Benchmark Study of Model Stealing Attacks
- PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority
- API-TAIL: Detecting Model Substitution in LLM APIs through Temperature-Aligned Likelihood Tails
- Provenance Signatures for Low Rank Adaptations of Image Diffusion Models
- RePAIR: Inverting Backdoor Attacks in Semantic Segmentation
- Is Your LLM Relay Serving What It Claims? A low-cost and high-power test for LLM Relay Auditing
- Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms
- Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
- PhaseBreak: Proactive Temporal Protection against Unauthorized Image-to-Video Animation
- Spoofing the Toolbox: Optimizing Tool Descriptions to Deceive LLM Agents
- All-in-One: A Composable Attack on LLM Transformations
- A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank
- Agent-to-Agent Synthetic Social Engineering on the Web
- Combinatorial Lock for Trojan-Resilient AI Engines via Hash-Assisted Spectral Filtering
- From Instructions to Exploits: Applying Program Analysis to Malicious Agent Skills Across Natural Language and Code
- Can Agentic Code Review Catch Vulnerabilities Before They Are Merged?
- Ring-0 by Default: Agents as Operating Systems (AaOS)
- Reversible Pseudonymisation of Documents Sent to External LLMs: an Open Bilingual Benchmark and an Engine
- NameTrap: Steering AI Coding Agents Toward Security Vulnerabilities via Variable Names
- Factual Yet One-Sided: Stance Poisoning and Evidence Balancing in Retrieval-Augmented Generation
- CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance
- SentryBench: A Cost-Sensitive Benchmark for Adversarial Robustness of Tool-Using LLM Agents in Public-Safety Deployments
- LLM WikiLeaks: Uncovering URL-Based Capability Extension and Security Circumvention in Agentic Message Boards
- InferPriv: Evaluating Inferential Privacy Leakage in LLM Assistants
- From Representations to Computational Trajectories: Intrinsic Fingerprinting for Large Language Model Provenance Verification
- From Speech Tokens to Stolen Voices: Attacker-Chosen-Text Speaker Impersonation via Representation Inversion
- Scope-Gap Injection: Exploiting Evaluator Channel Blind Spots in the OpenClaw Agent Security Competition
- TrustJev: Separating Policy Authority from Untrusted Evidence in LLM-Based Decisions
- Steering for Safety, Hijacking for Profit: Trojan Threats in the LLM Activation Steering Supply Chain
- GuardRAG: A Post-Retrieval Defense against Poisoning Attacks in Retrieval-Augmented Generation
- CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems
- Can Open Be Too Open? On the Security and Trustworthiness of Fully Transparent LLMs
- SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills
- Then there is prompt injection, a malicious email, ...: The Wild Wide West of OpenClaw Agentic System Security
- The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation
- Adversary Brains: Hypothesis-Based Logical Signatures for Threat Actor Detection with LLMs
- Reva: Real-Time Vulnerability Detection through Contextual Probing of Large Language Models
Safety & alignment35
- What Hallucinations Have We Measured? Semantic Illusion, Confabulation, and Expressed UncertaintyMeta
- ShallowDefend: Harnessing Shallow Safety Alignment for Multi-Turn DefenderMicrosoft
- Two Uncertainties Are Not One: Disagreement versus Decision-Risk in Cheap Structured Content ModerationGoogle
- Improving Instruction Hierarchy by Learning from Goal-Goal ConflictsNVIDIA
- V³AST-Bench: Verifiable, Valid, and Versatile Safety Evaluation for Coding AgentsAlibaba
All 35 papers in Safety & alignment
- ShutdownMod: Turning Any Trajectory into a Shutdown EvaluationCode
- Violet Teaming in Practice: Lessons from a Pilot Expert Workshop on Governing Complex AI Systems
- Simple Features Beat Most AI Control Monitors
- Scoring Explanations Without Reading Them: Structural Shortcuts in Automated-Interpretability Evaluation Data
- Detecting Covert Collusion between AI Agents through Partner-Outsider Positive Listening
- Who Else Is In? Multi-Agent Collusion Initation Via Strategic Vagueness
- Masked Erosion: How Acceptance Gates Lose Redundant Safeguards in Self-Improving Agents
- When Support Crosses the Line: Evaluating Ethical Boundaries in LLM-Based Mental Health Support in the Chinese Context
- An Alignment Benchmark for Enterprise Agents on Era by Eon
- Implicit Minor Detection from Multi-Turn Dialogue in High-Risk AI Interactions: A Constrained Self-Evolving LLM Harness
- AgentDecept: Benchmarking Deceptive Behavior in Tool-Using LLM Agents under Pressure
- Sticky Collusion: Persistence of LLM Agent Collusion after Incentive Removal and Partner Replacement
- How I Aligned Your Model: Scaling Up Multilingual Safety Training with Templates
- Pre-Crime for Agents, at the Last Second: Probing When a Recruited Agent Gives In
- Your Wish Is My Commit: Over-Compliant Refactoring in AI Coding Agents
- ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models
- When Visual Evidence Is Insufficient: How Instructions, Post-Training, and Internal Activations Shape Refusal in Multimodal Language Models
- When Agents Collude: Weak-to-Strong On-Policy Distillation for Mitigating Strategic Deception in Multi-Agent Systems
- Detection of false positives by human reviewers depends on the face recognition algorithm and its security configuration
- Propensities Please: Exposing Alignment-Faking LLMs using Synthetic Document Finetuning
- Eat Your Precision: Precision Objective Mitigates Reward Hacking in Rubric-based RL
- SEDATE: Do Large Language Models Share an Aggression Circuit Across Languages?
- Beyond Belief: Evaluating and Mitigating LLM Susceptibility to Misinformation
- The Patient Is Always Right? Evaluating Sycophancy in Medical Diagnosis with Graded Patient Beliefs
- Identically Trained Language Models Break on Different Jailbreaks
- EAST: Embodied AI Safety Testing via Systematic Fault Injection in Digital Twins
- C-SafeGen: Certified Safe LLM Generation with Claim-Based Streaming Guardrails
- Evaluating DeepSeek V4.1 Flash-1017 for loss of control and harmful manipulation risks
- Audit Where Hacks Pay: Budgeted Strong-Verifier Audits Against Reward Hacking in GRPO
- The Watchtower Imperative: Lifespan-Calibrated Evaluation for Frontier AI
Agents31
- RSI Arena: Towards Recursive Self-Improvement with Human FeedbackNVIDIA, Hugging Face
- Agentic World Modeling for Agent Test-time Scaling without Environment ReplicaMicrosoft
- Think Before You Act: Decision Gate for LLM AgentsIBM
- Blind Spots: Where Small Language Models Fall Behind Frontier Models on Terminal TasksMicrosoft
- KARMA: Training-Free Knowledge-Atomic Harness Evolution for Industrial Advertising AgentsAlibaba
All 31 papers in Agents
- InfraDev: Can Coding Agents Develop AI Infrastructure, and How Can We Tell?Tencent
- Thinking-in-Bets at Test Time Reduces Sycophantic Revisions in LLM AgentsGoogle
- A Case Study of a Multi-Agent Kernel-Optimization Loop That Learns a New AI AcceleratorCode
- Task Success Is Not Enough: Side-effect-Aware Evaluation of Tool-Using Language Model AgentsCode
- Verifying Text-to-SQL Queries under Changing Business Semantics
- Cross-Interface Authorization for AI Computer-Use Agents
- BlindToChange: AI Agents Can Find Changes When Asked But Do They Look When Needed?
- RetryRoute: Retry-Aware Model Routing for Agentic Image Editing Services
- When Skills Tell Agents Not to Ask: A Large-Scale Study of Oversight Directives in Agent Skills
- Agent Transfer Protocol: Server-Mediated Agent-to-Agent Communication Architecture for the Agentic Web
- Learning to Formulate: Agentic Hardware-Software Co-Design of AI Infrastructure through Progressive Optimization and Verification
- Who Convinced Whom? Tracing How LLMs Change Their Minds in Multi-Agent Systems
- Testing Agentic Service Systems: An Agentic Living Lab Methodology Across the Physical-Digital Continuum
- Small agents should know what their tools do
- PROBE: Frontier Coding Agents Find Different Bugs Than Maintainers Fix
- Agent or Human? Detecting Commits by AI Coding Agents in the Absence of Authorship Signatures
- Constraining the Commit Boundary: A DIO/ODI-Informed Authorization Guardrail for Agentic Entity Resolution
- WebUniverse: Scaling Verified Training Data for Agentic Web Development
- Operationalizing Governed Agentic Workflows in Regulated Finance: A Customer Zero Case Study using Zafin AIOS
- From GPU to TPU with Coding Agents: What Works, What Fails, and What It Costs?
- Agentic AI Orchestration Framework for Spatial Intelligence: Supply Chain Deployment
- SlowLab: Benchmarking Autonomous AI Agents on a Year of Experiments They Cannot Undo
- Silent and Costly: Characterizing and Detecting Prompt-Caching Mis-Integration in LLM Agents
- Locked In: Multi-Objective RL for the AI Data Center Build-Out
- Proof-of-Agentness: Towards Verifying Agents on the Web
- VibeVideoBench: Evaluating Multimodal Agents on Code-Driven Video Generation
AI & society22
- Safe by Benchmark, Unsafe in Practice: Lessons from 1331 Child-Related AI IncidentsAllenAICode
- Circumventing the Computational Hardness of Computational Arbitrage
- Qistas: A Pre-Registered, Portable Protocol for Fairness Evaluation of Large Language Models
- AI evaluators favor job applications written by certain AI models, independent of candidate quality
- Same Question, Different Answers: Auditing Persona-Dependent Variation in Six LLMs on Smoking-Cessation Advice
All 22 papers in AI & society
- FYC: FPR-Disparity Weight Perturbation and Youden Calibration for Fair Deepfake Detection
- AI-Generated Non-Consensual Intimate Imagery is Configured, Not Built: How General-Purpose AI Technology Enables Sexual Violence
- Algorithmic Bias from the Perspectives of Healthcare Professionals
- Disparity Laundering: Consensus Without Fairness in Clinical Multi-Agent Systems
- The Indian Financial Automated Advice Bias (IFAAB) Dataset : Auditing Socioeconomic and Demographic Disparities in LLM-Generated Financial Advice in India
- When Should AI Decide, Defer, and Deviate? Responsible Automation for Deceased Donor Kidney Allocation
- Robustness of Chatbot LLM Judgments of Presidential Actions and Hypothetical Reforms
- When the Top Answer Decides: Gender Bias in Decision Models
- Securing the Robotics Supply Chain
- When Is a Cheap Fairness Edit Safe? Screening Post-Hoc Edits in Two-Sided Matching Markets
- Veracity labels flip the emotional tone of language models but leave racial disparities intact
- Distilling Expert Judgment at Scale
- From Hype to ROI: An Economic Model for LLM Adoption in Information Systems and Security Operations
- Gender Associations in LLM-Mediated ADHD Self-Diagnosis
- Resolving the Mobility-Equity-Emissions Trilemma: A Causal Machine Learning Framework for Dynamic Tolling Policy
- From Explaining to Enabling: Actionable Transparency in Algorithmic Insurance Pricing
- Cheap Reverse Engineering and What It Will Do
Robotics & embodied AI16
- AGQ: Action-Guided Ultra-Low-Bit Quantization for Vision-Language-Action ModelsCode
- EmbodiedLab: Benchmarking Embodied Agents That Act to KnowCode
- TRACE: Target-State Risk-Aligned Conditional Execution for Embodied Tracking
- Learning from Physical Experience:Context-Space Adaptation for Robotic Manipulation
- VLA Policies Do Not Know When Not to Act: Unintended Task Execution and Start Suppression
All 16 papers in Robotics & embodied AI
- When the Simulator Fails, Not the Policy: Auditing Contact Artifacts in Simulated Robot Benchmarks
- SONIC-K1: Porting a Universal Humanoid Motion Tracker to a Small Humanoid on a Single GPU
- Learning Safe Flow Matching Robot Policies from Binary Feasibility Oracles
- FastBEVFusion: Simple Multi-Modal Fusion for 3D Object Detection at 50 FPS
- MOTIO: Agentic Skill Engineering for Reality-Grounded Humanoid Loco-Manipulation
- RoboJev: An Open Vision-Language Judge for Robot Success Detection
- One Scan is Enough: Demonstration-Free Adaptation for Language-Guided Navigation
- Late Breaking Results: Audio-Language-Action Models with Direct Speech Conditioning for Robotic Manipulation
- Execution Logs Sway VLM Judges of Robot Progress
- TRIAGE: Efficient Vision-Language-Action Inference Needs Both Reuse and Pruning
- Zero-HLM: Generalizable Humanoid Loco-Manipulation without Real Robot Data
Vision & multimodal9
- OvisOCR3 Technical ReportAlibaba
- Where Do Vision Language Models Fail at 3D Reasoning?Code
- MotorSense: A Video-EMG Dataset of Motoric Representations for Action Understanding
- Hawkeye: Reading Illegible Text with Vision Language Models
- Venus-DefakerOne2: A Vision-Forensics Foundation Model with Broader Coverage
All 9 papers in Vision & multimodal
- IntReal: A Real-World Dataset and Benchmark for Multimodal Interleaved Generation
- Telling Is Not Seeing: Textual Personas Rarely Make Vision-Language Models Answer Like the People They Describe
- Physiognomy Revisited: How Vision-Language Models Encode Sensitive Attributes Through Image Transformation
- Uncovering Shortcut Amplification in Video RLVR through the Lens of Perceptual Uncertainty Collapse
Inference & efficiency7
- TableTune: Measured, Self-Correcting Draft-Length Tables for Dynamic Speculative DecodingIBM
- Nemotron 3.5 Bolt 74B-A9B 24GB: A Hybrid Vision-Language Model for Local AINVIDIA
- ThinkBit: Search Codewords, Recalibrate Scales, Select by ReasoningMicrosoft
- Streaming Speech Recognition on a Microcontroller: a 65.7M-Parameter Transducer in 2 and 4 Bits on the ESP32-P4Code
- Accuracy is not compatibility: two Evo 2 checkpoints hinge on one FP8 matrix multiplication
All 7 papers in Inference & efficiency
Language & speech6
- Apriel Voice 27B Preview: An Open Model for Speech, Reasoning, and Tool Use
- XLaw-JP-27B: A Lightweight Open Model Specialized for Japanese Law
- Judged in Company: In-Context Batching Makes LLM Verdicts Depend on Other Items
- PinGER: Token-Efficient Generative Retrieval with Semantic IDs
- Ask Before You Answer: A Question-Driven Evidence Reasoning Architecture (QERA) for In-Context Learning
- Octen-WebGR: Scaling Generative Retrieval to 200 Million Web Pages
Training & data5
- Sandman: A Sandbox Service for Production Agentic Reinforcement LearningAmazon
- bf16 Rounding Silently Discards Most RL Policy Updates: A Hidden Training-Inference Mismatch and an Unbiased One-Line Fix
- HyperRepair: Recovering Forgotten General Capabilities of Fine-Tuned Language Models
- Artifact Distillation: Training-Free Transfer from Frontier to Small Language Models
- Think Twice: The Metis-1.6 Technical Report
Machine learning4
- Chronos-2: A foundation model for multivariate time series forecastingAmazon
- Governance-Aware Federated Learning for Multi-Agent AI Systems: A Policy-Driven Framework for Trustworthy Collaborative AI
- Impossibility of No-Regret in Multi-Agent Bidding
- Mine or Yours? Self-Other Confusion in Latent LLM Communication
Science & health3
- Does the Citation Matter? Quality, Grounding, and Physician-Rubric Accuracy of Google's AI Overviews for Medical Information
- Auditing evaluation artifacts and data leakage in large language model systems for rare disease diagnosis
- DocTalk: Enhancing Medical Knowledge Retrieval via Fine-tuned Large Language Models with Chain-of-Thought Reasoning for Robust Clinical Decision Support