Sigil, a server-enforced watermarking framework for U-SFL, defines a secret watermark constraint in the server-visible activation space and embeds the watermark into client-side models by injecting a watermark gradient into the gradients returned during training.
Zhengchunmin Dai, Jia-Xiong Tang, Peng Sun et al.· 0 citations
A paper appearing in CSF 2018, entitled ``Assuming You Know: Epistemic Semantics of Relational Annotations for Expressive Flow Policies'', attempted to provide a unifying framework, but the formalization was sketchy and a correction was announced during the conference presentation.
This paper proposes a blockchain-enabled layered architecture for regulatory agent collaboration, comprising an agent layer, an off-chain computation layer, and an on-chain anchoring layer that establishes a systematic foundation for trustworthy, resilient, and scalable regulatory mechanisms in large-scale agent ecosys...
It is argued that a more realistic threat model includes further training with reinforcement learning after distillation, and it is shown that simple attacks can steal reasoning capabilities from existing closed-source language models using data easily obtainable from current APIs, yielding reasoning improvements equiv...
S. Javaheri, Alexander Panfilov, O. Britton et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
This work introduces SEABench, a benchmark for studying endogenous misalignment arising from agent self-evolution, with 48 longitudinal task sequences that span multiple evolution surfaces, task domains, and harm types in a rich personal-assistant environment and shows that qualitatively different safety behaviors emer...
Saswat Das, Parvati Viswanathan, Daniel Donnelly et al.· 1 citation
The compiler must read modules a physics-based solver cannot build without; the coding agent must not read that intellectual property. The harness does not ship that rule. We classified fifteen read routes against a container, permission rules and a sandbox. None of the three can tell which program is reading.
This work measures trace occurrence, withdrawn-item recovery, trace position, and required-content retention in LLM interactions, and proposes an output-side filter that sharply reduces recovery with little loss of required content.
Ya-Ge Zhang, Yu-Kun Jiang, Yang Zhang· 0 citations
LLM agents solve complex tasks by iteratively changing files, invoking local tools, and interacting with remote services, which modifies state across their local environment and remote services. Today, agents and users must manage these changes explicitly, whether reverting exploratory actions or recovering from errone...
Jin-Nan Guo, H. Chen, K. Vaswani et al.· 0 citations
Visual token compression reduces the inference cost of Large Vision-Language Models (LVLMs). However, aggregate robustness measures do not reveal whether a particular adversarial failure is induced by compression or inherited from the underlying model. We define a compression-specific failure (CSF) as an adversarial in...
Qian-Kun Li, Yuechen Zhang, Bo-Wen Chen et al.· 1 citation
This work evaluates Jev, a decision model that instead selects directly from a declared set of candidates and returns a probability for each, against six open-weight autoregressive models and a frontier proprietary model, and builds JevVibe, a diagnosis-guided repair agent that uses predicted CWE labels to repair code...
Arshak Rezvani, Sasha Behrouzi, Ahmad Sadeghi· 0 citations
Findings show that task utility does not imply privacy or authorization compliance and that authorization in community settings remains an unresolved security challenge for persistent LLM agents.
Hao Chen, Wen-Hui Dong, Ye Chen et al.· 0 citations
This work forms attack and defense as partially observed state control in SEAD, deriving their design requirements from this shared execution process and constructs an environment-verifiable dataset integrating controlled initial states, replayable tool environments, and task-specific executable checks.
Xin-Jie Shen, Jun-Ran Wang, Rong-Zhe Wei et al.· 0 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.