PAPER PLAINE

Fresh research, simply explained. Updates twice daily.

When Does Authorization End? Effect Closure at Provider Boundaries

When does a permission actually stop working, even after you revoke it?

When you revoke someone's permission to do something, that permission might still let them act through work already in progress—even after the revocation succeeds. Researchers built a tool called EFFECTBOUND that can check whether a system truly blocks all these hidden paths, and found real vulnerabilities in GitHub, Kubernetes, NATS, and Kafka where revoked permissions could still take effect.

Permission systems are the backbone of security in cloud platforms and distributed software. If revoking access doesn't actually stop all paths to action—like a merge happening with the wrong code, or a message publishing after removal—attackers can exploit the gap between when you think something is locked down and when it actually is. The fixes tested on Kafka show that proper closure checking can block these risks without slowing down legitimate operations.

Authority-Inference Separation in Agentic Finance: First-Line Control, Blockchain Enforcement, and Replayable Assurance

Keeping AI financial agents from acting without explicit human approval.

When AI agents make financial decisions, they shouldn't be able to execute trades just because they can think them up. Researchers built a system called Authority-Inference Separation that forces a separate human-controlled approval step before any AI-proposed trade can run—checking the agent's identity, the owner's account limits, the specific risk policy, and exact transaction details. In tests against 36 simulated attacks that fooled baseline systems, the new approach blocked all attacks while still approving legitimate trades.

AI-driven trading and financial services are growing, but if an AI agent can both decide and execute a trade, a single bug or adversarial prompt could drain an account or lock up client money before anyone notices. This system creates an enforced separation: the AI proposes, but humans and pre-set rules decide whether the proposal actually runs. Banks and fintech firms adopting this approach get an auditable record of *why* each trade was approved or blocked, reducing rogue-agent risk and making it possible to prove later who was responsible for any losses.

Scaling Near-Optimal SFT-RL Annotation Budget Allocation from Small to Large LLMs

Finding the sweet spot for training data without expensive trial and error

When training large language models, teams must split their annotation budget between two techniques: supervised fine-tuning (SFT) and reinforcement learning (RL). Rather than hunting for one perfect ratio, this work identifies a "near-optimal region"—a wide range of allocations that all perform nearly as well. The key finding: this region reliably transfers from small experimental models to large production models, so teams can run cheap small-scale experiments to figure out a good allocation without expensive large-model testing.

Training large language models is expensive, and knowing how to divide limited annotation resources between SFT and RL can save significant cost without sacrificing performance. This approach lets teams run quick experiments on small models to confidently set their budget split for large models, avoiding wasteful full-scale trial-and-error. The method also adapts when the cost difference between SFT and RL data changes, making it practical for real-world budget constraints.

Generalized Semi-Infinite Programming for Robust Optimal Control with Decision-Dependent Uncertainty

Solving control problems where danger zones shift based on your actions

A new mathematical method solves a class of control problems where the constraints or risks depend on what the system is currently doing — a situation that has stumped existing approaches. The method converts these tricky problems into a form that standard optimization software can handle, and the authors proved it reliably finds good solutions even for nonlinear systems like tumbling satellites.

Many real control systems face uncertainty that changes with their own state or decisions — a robot's collision risk depends on where it is, a satellite's tumbling depends on its spin rate. Previous methods either couldn't handle this, required custom solvers that didn't scale up, or only worked for simple cases. This approach uses standard software and applies broadly, making it practical to design safer, more robust controllers for aerospace, robotics, and other safety-critical applications.

Analog-DB: An Agent-First Analog Integrated Circuit Database, From Blocks to Systems

A shareable library that lets AI design analog circuits from reusable pieces

Researchers created an open-source database that stores analog circuit designs in a format that can be shared freely, retargeted to different manufacturing processes, and automatically discovered by AI agents. When tested on voltage regulators, AI using the database caught design flaws—including missing circuit components—that a conventional sizing-only approach missed, and fixed failing circuits in one to three iterations.

Analog circuit design currently requires extensive trial-and-error and knowledge locked behind non-disclosure agreements, slowing innovation and limiting who can participate. This database removes those barriers by making proven designs reusable and machine-readable, enabling AI tools to find and adapt existing solutions automatically. For companies and researchers, that means faster design cycles and fewer errors; for the field, it means knowledge can accumulate and compound rather than staying trapped in individual labs.

The Structure of Quantization Damage in LLMs: Why the Next Bit Should Be Spent Globally

How to spend extra precision budget when shrinking AI models

When AI models are compressed to run faster and cheaper, the damage isn't concentrated in a few critical layers—it spreads across roughly half the model's layers. Counterintuitively, applying finer-grained compression uniformly across the entire model recovers accuracy better than surgically fixing the layers that seem most broken, outperforming targeted repairs by 21–52 percentage points.

As companies deploy larger language models on phones, servers, and edge devices, quantization compression is essential to cut costs and latency. This finding changes how engineers should allocate limited precision budgets: instead of hunting for problem layers, spreading improvements evenly across the model works better in practice and is simpler to implement. This could reduce the engineering overhead of tuning quantization for each new model.

On the Reliability of Generative Augmentation: A Wasserstein-Based Theoretical and Empirical Study

When synthetic data helps machine learning, and when it doesn't

Researchers created a mathematical framework to predict when artificially generated data actually improves classification accuracy on imbalanced datasets. They found that higher-quality synthetic data doesn't always lead to better predictions—what matters is how closely the generated data matches the real data's distribution, measured by a metric called Wasserstein discrepancy.

Machine learning teams routinely use synthetic data to fix imbalanced datasets, but have lacked clear guidance on which generation methods work best. This framework provides a principled way to evaluate synthetic data quality before deploying it, potentially saving teams from investing time in high-fidelity generators that won't improve actual performance. It also shows that simpler oversampling methods are sometimes more reliable than complex generative models—a finding that could reshape how practitioners choose their augmentation strategy.

Benchmarking Peptide-Protein Affinity Prediction Across Peptide and Target Shifts

Testing whether AI can predict drug-like peptide binding when it sees new targets

Researchers tested ten different methods for predicting how strongly peptides bind to proteins, using 11,349 binding measurements split into three realistic scenarios: recognizing patterns in similar peptides, making predictions within known targets, and predicting binding to entirely new target proteins. The best method changed depending on the scenario—fingerprints worked best for familiar targets, but a model called HELM-BERT performed better when targets were completely new. Performance dropped significantly (from 0.67 to 0.53 correlation) when moving from known to unknown targets, showing that current methods struggle with genuine generalization.

Drug discovery relies on predicting how experimental molecules will bind their targets before expensive testing begins. This work exposes a critical gap: most peptide-binding models are benchmarked in unrealistic conditions and would fail in the real world, where researchers must predict binding to new disease targets they've never seen before. The findings demand that future benchmarks test what actually matters—whether methods can handle unfamiliar targets—and reveal which representation strategies hold up under that harder test.

BLOOM-WILT: Logit Tilting for Behaviour Elicitation in Automated LLM Auditing

Finding hidden safety failures in AI models through smarter questioning

Researchers developed BLOOM-WILT, a system that finds rare problematic behaviours in language models far more efficiently than existing auditing methods. By strategically adjusting how the model generates text and adapting its questioning approach across multiple conversation turns, the system increased detection of harmful outputs from 51% to 100% in some cases—without requiring expensive model retraining.

Language models deployed to millions of users encounter rare failure modes that standard testing never catches. BLOOM-WILT makes it cheap and practical to continuously hunt for these hidden safety problems after deployment, meaning developers can catch and fix harms that would otherwise slip through to real users. The system's rankings also revealed that some models previously thought safer than others actually weren't—a correction that affects which systems get deployed.

Quantum Simulation of Markovian and Non-Markovian Open Quantum Dynamics in Heavy-Ion Collisions

Using quantum computers to model how particles remember their past in collisions

Physicists have developed a method to run quantum computers that simulate how particles behave in extreme collisions, including cases where particles remember their history—something previous simulations couldn't capture. The approach works by adding a special helper system that tracks this memory and then removing it to recover the full behavior, and it cleanly transitions to simpler models when memory effects become negligible.

Heavy-ion collisions at facilities like the Large Hadron Collider create extreme conditions that reveal fundamental physics, but are hard to simulate because particles don't forget their past interactions instantly. This framework opens the door to using next-generation quantum computers to model these collisions more accurately, potentially unlocking new insights into how matter behaves under the most violent conditions in nature.

Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning

How the way you ask an AI coder to work shapes whether it gets hacked

The way developers ask AI coding agents to do work—what task, how detailed the instructions, what rules to follow—dramatically changes whether poisoned code repositories can attack those agents. A new benchmark of 1,920 test cases found that certain task types create silent vulnerabilities where malicious code runs undetected, while unclear or rambling prompts can accidentally protect against attacks by making the poison harder to activate.

As companies increasingly hand off coding work to AI agents pulling from repositories they don't fully control, understanding how simple invocation choices affect safety is critical. A developer asking for test execution instead of general setup could expose their system to attack 4.5 times more, and they'd likely never notice. This work gives teams concrete guidance on safer ways to phrase their requests and which tasks pose the highest risk.

A Model with No Head and Many Thoughts

Letting AI think in continuous space instead of forcing words at every step

Researchers found that large language models can reason more effectively when they skip the expensive step of converting thoughts into words during intermediate reasoning. By working directly in continuous mathematical space during chain-of-thought steps—and only converting to words at the end—the method improved reasoning accuracy while cutting computational cost per step.

Language models spend enormous compute power converting every intermediate thought into discrete tokens, even though these internal reasoning steps are never seen by users. This work shows those internal steps don't need to be tokenized at all, potentially making AI systems faster and cheaper to run while improving their ability to solve hard problems.