Skip to content
VECTOR WIREAI INTELLIGENCE
UTC

AI Research Radar

Today: 20 papers cleared of 181 scanned, led by LIBERO-Pro2.0. Qwen3 is the literature’s most-referenced model (8 papers in the loaded window).
UPDATED 1M AGO
MON 24 AUG — 299 scanned · 34 cleared · 1 frontier — click to open this editionTUE 25 AUG — 636 scanned · 68 cleared · 3 frontier — click to open this editionWED 26 AUG — 345 scanned · 28 cleared · 0 frontier — click to open this editionTHU 27 AUG — 344 scanned · 27 cleared · 2 frontier — click to open this editionFRI 28 AUG — 407 scanned · 51 cleared · 3 frontier — click to open this editionMON 31 AUG — 296 scanned · 24 cleared · 1 frontier — click to open this editionTUE 01 SEP — 773 scanned · 73 cleared · 5 frontier — click to open this editionWED 02 SEP — 463 scanned · 41 cleared · 2 frontier — click to open this editionTHU 03 SEP — 322 scanned · 37 cleared · 2 frontier — click to open this editionFRI 04 SEP — 326 scanned · 20 cleared · 1 frontier — click to open this editionMON 07 SEP — 348 scanned · 37 cleared · 3 frontier — click to open this editionWED 09 SEP — 920 scanned · 80 cleared · 7 frontier — click to open this editionTHU 10 SEP — 296 scanned · 30 cleared · 1 frontier — click to open this editionFRI 11 SEP — 265 scanned · 36 cleared · 2 frontier — click to open this editionSAT 12 SEP — 46 scanned · 5 cleared · 1 frontier — click to open this editionMON 14 SEP — 295 scanned · 18 cleared · 0 frontier — click to open this editionTUE 15 SEP — 709 scanned · 77 cleared · 7 frontier — click to open this editionWED 16 SEP — 362 scanned · 38 cleared · 1 frontier — click to open this editionTHU 17 SEP — 423 scanned · 34 cleared · 3 frontier — click to open this editionFRI 18 SEP — 425 scanned · 32 cleared · 3 frontier — click to open this editionMON 21 SEP — 327 scanned · 31 cleared · 1 frontier — click to open this editionTUE 22 SEP — 797 scanned · 62 cleared · 3 frontier — click to open this editionWED 23 SEP — 451 scanned · 31 cleared · 4 frontier — click to open this editionTHU 24 SEP — 330 scanned · 43 cleared · 5 frontier — click to open this editionFRI 25 SEP — 448 scanned · 50 cleared · 5 frontier — click to open this editionMON 28 SEP — 385 scanned · 37 cleared · 2 frontier — click to open this editionTUE 29 SEP — 1,559 scanned · 109 cleared · 7 frontier — click to open this editionWED 30 SEP — 824 scanned · 93 cleared · 4 frontier — click to open this editionTHU 01 OCT — 669 scanned · 77 cleared · 5 frontier — click to open this editionFRI 02 OCT — 673 scanned · 57 cleared · 1 frontier — click to open this editionMON 05 OCT — 441 scanned · 51 cleared · 1 frontier — click to open this editionTUE 06 OCT — 932 scanned · 83 cleared · 8 frontier — click to open this editionWED 07 OCT — 573 scanned · 49 cleared · 6 frontier — click to open this editionTHU 08 OCT — 532 scanned · 34 cleared · 3 frontier — click to open this editionFRI 09 OCT — 565 scanned · 63 cleared · 6 frontier — click to open this editionMON 12 OCT — 374 scanned · 26 cleared · 3 frontier — click to open this editionWED 14 OCT — 1,450 scanned · 173 cleared · 14 frontier — click to open this editionTHU 15 OCT — 499 scanned · 39 cleared · 6 frontier — click to open this editionFRI 16 OCT — 536 scanned · 48 cleared · 3 frontier — click to open this editionMON 19 OCT — 371 scanned · 44 cleared · 3 frontier — click to open this editionTUE 20 OCT — 181 scanned · 20 cleared · 5 frontier — click to open this editionAUGSEPOCT
60 DAYS · 21,217 SCANNED
2,010 CLEARED · 143 ◆
TODAY — TUE 20 OCT 202620 cleared of 181 · 5 FRONTIER
◆ FRONTIER·INDUSTRY IMPACT
LIBERO-Pro2.0: A Benchmark for Evaluating the Robustness of Embodied Foundation Models
LIBERO has emerged as a widely adopted benchmark for evaluating robotic manipulation policies. However, strong performance on LIBERO does not necessarily indicate robust embodied capabilities, as models may exploit benchmark-specific regularities rather than generalize to diverse operating conditions. In this work, we introduce LIBERO-Pro2.0, a comprehensive benchmark for systematically evaluating the robustness of e…
embodied-airobotics-benchmarkdistribution-shiftrobustness-evaluation
Xueyang Zhou, Yangming Xu, Qianjiang Li, et al. (10)cs.ROarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
Mitigating Reward Hacking in Preference Reward Models with Evolving Penalties
Reinforcement learning for language models has moved from preference reward models to verifiable rewards, which sustain much longer optimization. Preference models are prone to reward hacking: the policy raises their score without improving response quality, or even while degrading it. Yet for open-ended tasks, where quality can neither be verified nor fully written down as rubrics, they remain valuable. We introduce…
reward-hackingpreference-reward-modelsrlhfonline-mitigation
Afonso Baldo, Ant\'onio Farinhas, Marcos Treviso, et al. (5)cs.CL · cs.AIarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
ContactBench 1.0: A Benchmark for Everyday Contact-Rich Robotic Manipulation
Contact-rich manipulation is essential to everyday activities, yet evaluating robots' ability to perform these activities remains challenging because of their diverse contact behaviors and the difficulty of reproducing tasks across laboratories. Drawing on observations of everyday human manipulation, we identify eight recurring skill categories that provide a practical framework for studying these capabilities. We in…
robotic-manipulationcontact-richbenchmarkevaluation-framework
Jingyi Xiang, Yixuan Wang, Jeannette Bohg, et al. (4)cs.ROarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
Compression Precedes, Content Decides: Emergent Misalignment in Reward Models
Emergent Misalignment - the out of domain generalization of narrow harmful fine-tuning first shown by Betley et al. [2025] has been widely studied in language models but not in reward models that supervise them. In this paper, we fine-tune two state-of-the-art reward models, Skywork-Reward-V2-Llama-3.1-8B and Skywork-Reward-V2-Qwen3-8B [Liu et al., 2025] and show that narrow fine-tuning reward models to prefer harm i…
reward-modelsemergent-misalignmentout-of-domain-generalizationalignment-safety
Dhruv Puri, Nikhil Prakashcs.AIarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
Training Natural Schemers: RL Can Amplify Oversight-Conditional Behavior
One of the central concerns for the safety of advanced AI is scheming: when a model strategically complies under oversight but pursues its own goals when unobserved. Current demonstrations, such as Anthropic's Alignment Faking work, depend on design choices that make them less convincing: explicit test-time prompting, handcrafted backdoors, or training data that demonstrates or hints at the target behavior. Model org…
schemingstrategic-deceptionreinforcement-learningoversight-conditional-behavior
GoogleBart Jaworski, Nathaniel Mitrani, Fred Bruford, et al. (4)cs.AI · cs.LGarXiv ↗PDF ↗
THE INDEX — 15 MORE CLEARED
●How exposed is work to robotics? Occupational, industry, and geographic measurescs.RO · cs.CY
●Multiple Turns, Short Horizons: Measuring Effective-Horizon Compression in Jailbreakscs.AI
●Structured Authority Injection: Persistent Human Control for LLM Agents via Typed MCP Overridescs.AI
●S-GAP: Stealthy Graph Attack Primitives for Graph Large Language Modelscs.AI
●Refuse the Harm, Complete the Task via Graph-of-Rules Planning for LLM-Enabled Robotscs.RO
●T(R,O) Grasp++: Cross-Embodiment Dexterous Grasping in Cluttered Environments at Scalecs.RO
●TokenGate: Adapting LLMs for Fast and Memory-Efficient Prefill with Learned Token Pruningcs.CL · cs.AI
●HandsOn: A Large-Scale Simulation Benchmark for Generalizable Dexterous Manipulationcs.RO
●RoboValue: A Fine-Grained Sim-and-Real Benchmark for Unified Evaluation of Robotic Value Modelscs.RO
●LEMON: Equivariant Learning over Attention Maps for Zero-Shot Misbehavior Monitoring on New LLMsNVIDIAcs.AI
●OpenVLHarness: Real World Visual Agentic Tool-Use with Multimodal Memorycs.CL · cs.AI
●Concerns in Benchmarking Jailbreaks: An Empirical Study of Attack Success Ratescs.LG · cs.AI
●ShadowFPT: Backdooring Federated Prompt Tuning via Shadow TriggersAlibabacs.AI
●When Better Policies Leave Harder Failures: Coverage Shift in VLM Success Monitoringcs.RO
●The Bitter Lesson Comes to Roboticscs.RO
MON 19 OCT 202644 cleared of 371 · 3 FRONTIER
◆ FRONTIER·INDUSTRY IMPACT
Progressive Misalignment Can Emerge from Benign Recursive Self-Distillation
Training models on their own outputs has attracted widespread attention as a possible route to advance AI capabilities. One prominent approach is self-distillation, where a model is trained to match the token-level predictions it would have produced when given access to additional context, such as a cue, feedback, or instruction. However, the safety properties of this training procedure are poorly understood. In this…
self-distillationrecursive-trainingmisalignmentalignment-safety
Karim Abdel Sadek, Federico Di Gennaro, Fanny Yangcs.LG · cs.AI · cs.CLarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
Model-as-a-Trojan: Self-Activating Covert DNS Exfiltration Baked Into the Weights of an LLM Agent
Open-weight models are downloaded from public hubs and run inside agent harnesses that grant them tools, most powerfully, a shell, under the assumption that a sandbox contains whatever the model might do. This paper demonstrates that the assumption has a blind spot: the weights themselves can be the malware, and the sandbox's last open door, DNS, is enough. We fine-tune an open-weight LLM so that a single covert beha…
llm-agentsmodel-backdoordns-exfiltrationsupply-chain-security
Barak Haryati, Shaked Zychlinskics.CRarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
Has GPT-6-Astra Achieved Embodied Intelligence?
GPT-6-Astra demonstrates a level of competence in robotic manipulation and navigation that challenges the conventional paradigm of building specialized models for individual tasks and embodiments. In this report, we ask not only how capable GPT-6-Astra is, but what its capabilities imply for the field. First, we probe the limits of standalone GPT-6-Astra. We conduct a large-scale evaluation across 12 representative b…
embodied-intelligenceroboticsmanipulationnavigation
SenseNova, Joint Research Team, :, et al. (10)cs.RO · cs.CV · cs.LGarXiv ↗PDF ↗
THE INDEX — 41 MORE CLEARED
●The LLM-Attacker: A Unified Red-Team Framework for Privacy Evaluation of Split and Distributed LLM Systemscs.CR · cs.DC
●A Plausible Explanation Is Enough to Mislead Multimodal Judgescs.CL · cs.AI
●Video Diffusion Avatars: Taming Video Diffusion Models into Controllable 3D Avatarscs.CV
●RedDarwin: Evolving Jailbreak Skills against Frontier LLMscs.CR · cs.CL
●SemPurify: Semantics-Aware Data Purification for Black-box Backdoor Defensecs.CV
●DriveWorld3D Evidence Constrained 3D World Modeling and Generative Simulation for Real-World Autonomous Drivingcs.RO · cs.AI
●Same Person, Different Advice: Auditing LLM Financial Advice with Repeated Risk-Tolerance Responsescs.CL · cs.CY
●Behavioral Couplings: From Formation to Behavioral Emergence in Language ModelsIBMcs.CL · cs.AI
●Surprise Masking: Private Data Filtering with Model LikelihoodsOpenAIcs.CR
●Provable Authority: A Protocol for Verifiable Authority Resolution and Control Across Human, Organizational, and Agentic Transactionscs.CR · cs.MA
●Ignored, Not Refused: What Low Prompt-Injection Success Rates Hide in Small Tool-Using Agentscs.CL · cs.CR
●Disentangling Language Effects on Tool Admission and Post-Retrieval Safetycs.CL
●HardEval: An Execution-Verified Benchmark for AI-Driven Security Hardening and Compliance Remediationcs.CR · cs.LG
●DLite: History-free Speculative Decoding for Agentic AIcs.CL
●MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injectioncs.CR · cs.AI
●EnterpriseSynth: Zero-Execution SFT and Evaluation Data from OpenAPI Specscs.SE
●Exploring The Empirical Privacy Landscape of Synthetic DataOpenAIcs.CR · cs.CL
●The Model Knows Better: Defending Medical Multi-Agent Systems Against Prompt Injectioncs.CL
●Before Retrieval Begins: Safety and Tool-Use Decisions in LLM Agentscs.CL
●SAFETYEDIT: Sparse Internal Targets with Prompt-Wide Control for LLM Jailbreak Backdoorscs.CL
●Prune the Leaky Neurons: Mitigating Private Data Leakage in Fine-Tuned LLMs via Joint-Embedding-Guided Pruningcs.CL · cs.AI
●Monitor-Validity Failures: LLM Safety Evidence Paths at Evolving Framework Boundariescs.AI · cs.CR
●HexaShell: A Thin Harness for Exploring the Limits of VLM Agents as Robot Coding Agentscs.RO
●Stealthy Poisoning Attacks via Reused KV Cache of Reasoningcs.CR
●Enhancing Visual Task-Redirection Attacks on Vision-Language-Action Models via Closed-Loop Optimizationcs.RO
●Anytime Contracts for AI Servicescs.GT · cs.LG
●Generative AI Produces and Transmits Beauty Biascs.CY · cs.CV
●Scaling Online Exploration for Robot AgentsNVIDIAcs.RO
●Xiaomi-Lens-0 Technical Reportcs.CV
●I2V-DETACH: Source Grounding Detachment for Unauthorized Image-to-Video Generationcs.CV
●TokenEconomizer: Experience-Driven Black-Box Cost Control for Coding AgentsMicrosoftcs.CL
●Veil-Then-Reveal: Protecting PII Privacy via Reversible Pseudo-Anonymization in Zero-Trust User--LLM Interactioncs.CR · cs.CL
●How language model agents reshape price competitioncs.GT · cs.LG
●ECHO: Replacing the Compliance Proxy with Response Harmfulness in Optimization-Based Jailbreak Attackcs.CR · cs.CL
●What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semanticscs.CR
●MOSS-Image Technical Reportcs.CV
●GRAD: Graph-Structured Antibody Defense for LLM Agentscs.CR
●Everyone's a little bit racist: a novel ML backdoor attack in black-box modecs.CR
●SAFE-Mem: Secure Agentic Memory with Fine-Grained Authority and Governance-Aware Retrievalcs.CR · cs.CL
●Humanity's Last Choice: A Common Evaluation Standard for Generative Engine OptimizationGooglecs.IR
●Refusal Is Not Robustness: Measuring Harmful Reachability in Autoregressive Language Modelscs.LG · cs.LO
FRI 16 OCT 202648 cleared of 536 · 3 FRONTIER
◆ FRONTIER·INDUSTRY IMPACT
Multi-Reward Hacking: From Aggregation-Induced Drift to Trust-Anchored Defense
To improve task performance while encouraging desirable response properties, LLM post-training often combines a primary reward (e.g., correctness) with auxiliary rewards (e.g., brevity or efficiency). However, how these rewards are aggregated can critically affect training outcomes. We show that symmetric aggregation, which treats reward channels equally, can induce a failure where aggregate reward improves while pri…
reward-hackingmulti-reward-rlrlhfaggregation-drift
AmazonYushu Li, Jiin Woo, Xiaoxiao Li, et al. (4)cs.LG · cs.AIarXiv ↗PDF ↗
◆ FRONTIER·INDUSTRY IMPACT
From Research Goals to Scientific Closure: Evaluating Agents Through Evidence-Supported Physics Research
Can AI agents organize scientific investigations that lead to well-supported conclusions? To evaluate this capability, we introduce PhysClosureBench, a benchmark of 50 expert-verified, goal-specified research tasks spanning strong-field, attosecond, and neighboring physics areas. Each task specifies the research objective and essential scientific constraints, while leaving the agent to organize the investigation and…
agent-evaluationscientific-reasoningphysics-benchmarkevidence-based
Yijia Mao, Song Dai, Tao Chen, et al. (10)cs.AIarXiv ↗PDF ↗
THE INDEX — 34 MORE CLEARED
●My Credentials, Please: Detecting Filesystem Capability Laundering in MCP Servers at Scalecs.CR
●Poisoning the corpora of protein design systems during pre-training and retrievalcs.LG · q-bio.QM
●CodeHealth Predicts the Token Cost of Agentic Code Review: A Pre-Registered Study of 465 Agent-Authored Pull Requestscs.SE · cs.AI
●BiShield-TEE: On the (In-)Security of Unilateral Weight Obfuscation in On-Device TEE-Shielded LLM Partitioncs.CR · cs.AI
●Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorizationcs.CR · cs.AI
●FAOPs: Normal Forms and an Algebra for AI Agent Workflowscs.AI · cs.DB
●Trigger Value Selection in Clean-Label Malware Backdoors: An Effectiveness-Detectability Analysiscs.CR
●A team of Gemini 4 Argon agents beats MinecraftGooglecs.AI
●Making every stage of medical device document assessment with large language models deterministiccs.CL · cs.IR
●Fast-VLA: You Only Think Once for Robot Manipulationcs.RO
●Architecting for Hardware Diversity: Meta's End-to-End Co-Design for High-Performance AI Training on AMD GPUsMetacs.DC · cs.AR
●Poisoning the Neighborhood: A Topology-Aware Topic-Level Attack on Large-Scale HNSW-based RAG Systemscs.CR
●MSP: Modality Self-Play for Training Multimodal LLMs Without Paired Cross-Modal DataAmazoncs.AI · cs.CV
●What Should We Remove? Evaluating the Reliability and Costs of RLVR Data Decontaminationcs.CL · cs.LG
●LEASH: Uncertainty-Aware Weak-to-Strong Escalation and Oversight for Computer-Use Agentscs.AI
●Time to Fake It: Continual Machine Learning Intensifies Unfairness in Deepfake Detectioncs.LG · cs.AI
●Encoded but Exposed: Language Embeddings can Reveal More Than They Should in Recommender Systemscs.CR · cs.AI
●TRACER: Trajectory-Aware Tool Retrieval for LLM AgentsMicrosoftcs.CL · cs.AI
●Spark-0: Scaling Spatially Aligned Tactile Pretraining for Robot Dexterous Manipulationcs.RO
●Whole-Body DexterityAmazoncs.RO · cs.AI
●PAGE404: Breaking GPU Isolation Through Hardware-assisted Page Migrationcs.CR · cs.AR
●Resisting Harmful Instructions through Training-Free Weight Editingcs.LG
●MindEval2: Clinically Grounded Patients and Rubrics for Evaluating Language Models in Mental Health SupportNVIDIAcs.CL
●PocketTSLM: Deploying an On-Device Soft-Prompt Time-Series Language Model for Privacy-Preserving Smartphone Reasoningcs.LG · cs.CL
●Open Benchmark of AI Impact on Humans (ImpactBench): an expert-guided, open platform for the holistic evaluation of AI impact on humanscs.HC · cs.AI
●When Reasoning Is Not Enough: Proactive Inquiry for Cross-Modal Safety in Multimodal Large Language Modelscs.AI
●What do AI chatbots do after users decline therapeutic redirection for suicide thoughts?cs.HC · cs.AI
●Can Autonomous Vehicles Keep Their Cool? A Survey of Thermal Side-Channel and Perception Attackscs.CR
●INFUSE: A Unified Surface Benchmark for Indirect Prompt Injection in Agentic Systemscs.CR · cs.AI
●What Survives Self-Evolution: Provenance Marks in Copied Agent Harnessescs.CR
●A Multi-Tiered AI Accessibility Model (MAIAM): Proportionate Access and Capability Limits for Comprehensive Frontier AI Safetycs.AI · cs.MA
●From Detection to Decision: Calibration and Deferral for Prompt-Injection Detectioncs.CR
●Private Retrieval Augmented Generation via Random Projectioncs.AI · cs.CR
●Disagreement-Guided Weak-to-Strong Routingcs.AI
loading earlier editions…
THE FIELD — 19,462 · 30D
cs.AI5,295
cs.LG4,549
cs.CL2,734
cs.CV2,316
cs.RO2,171
cs.CR770
every indexed paper — the whole wire, not just what cleared
IN THE LITERATURE
models referenced in the loaded window · click to pivot
FROM INSIDE THE LABS
papers with a frontier-lab author · click to pivot
Research — every claim one click from the paperarXiv continuous index · FRONTIER ◆ leads each edition