arXiv AI Submissions

{
  "url": "https://arxiv.org/abs/2607.26998v1",
  "title": "AgentSnare: Learning to Delay, Divert, and Defuse Autonomous Penetration Agents",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.26998",
  "version": "1",
  "abstract": "Large language model (LLM) agents automate penetration testing through an observation-action loop, selecting actions based on observations returned by tools. This dependence allows defenders to inject deceptive observations that can mislead the agent's decision-making process. However, existing defenses rely heavily on static, isolated artifacts planted in the environment prior to an attack. Advanced agents can progressively recognize and bypass these artifacts, ultimately refocusing their exploitation attempts on the real target. To address this issue, we introduce AgentSnare, a trajectory-adaptive deception system that dynamically unfolds a decoy environment to continually steer the penetration agent away from the real target. Specifically, AgentSnare employs an artifact-construction policy model that constructs candidate artifacts conditioned on the agent's interaction history and decoy state. AgentSnare then validates these candidates and incrementally incorporates valid artifacts into a factually consistent decoy environment, thereby delaying the attack by absorbing its tool calls, diverting its post-entry trajectory within the decoy, and defusing it by inducing completion rep",
  "arxiv_id": "2607.26998",
  "categories": [
    "cs.CR",
    "cs.CL",
    "cs.LG"
  ],
  "published_at": "2026-07-29T14:56:31.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27022v1",
  "title": "Evaluating Regional Bias in LLMs From Abstract Stereotype to Concrete Social Decision-Making",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27022",
  "version": "1",
  "abstract": "Regional bias in large language models (LLMs) may shape both perceptions of regional groups and decisions about individuals from different regions. Yet existing studies often examine these manifestations separately, leaving their structure and consequences unclear. We introduce Stereotypes-to-Decisions (S2D), a systematic framework evaluating regional bias from abstract stereotypes to concrete social decisions. Covering all 34 provincial-level administrative regions of China, S2D evaluates six LLMs using stereotype ratings of Warmth (perceived friendliness and trustworthiness) and Competence (perceived capability and intelligence), along with paired-choice tasks across Education, Occupation, and Social Interaction. Results reveal substantial regional differences in regional scores, with considerable agreement across models, especially for Competence and Occupation decisions. Furthermore, these patterns are associated with regional economic and digital development indicators and display mixed human-like stereotypes, with some regions rated highly on one dimension but poorly on the other. They also remain largely stable across Chinese and English prompts. Overall, our findings show t",
  "arxiv_id": "2607.27022",
  "categories": [
    "cs.CL"
  ],
  "published_at": "2026-07-29T15:20:36.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27023v1",
  "title": "BayesAME: Bayesian Active Model Evaluation",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27023",
  "version": "1",
  "abstract": "Evaluating large generative models across benchmarks is time-consuming and computationally expensive. This drives the need for methods that can estimate full benchmark performance by evaluating models on only a subset of items, known as a coreset. Current literature mostly requires the practitioner to input a coreset size. However, when reliable performance estimation takes priority over efficiency, an evaluation method should also be capable of automatically determining a coreset size that reflects this priority. We introduce BayesAME, a sequential Bayesian framework specifically targeting automatic determination of the coreset size. BayesAME models performance as a random variable by defining a latent ability for each group of items sharing the same historical model performances, with a joint prior distribution encoding the belief that the target model behaves similarly to these historical models. The posterior distribution over these abilities is used to derive performance estimators, quantify performance uncertainty, and select items to add to the coreset via an information-gain criterion. The coreset is iteratively augmented until the performance estimate fluctuation and the p",
  "arxiv_id": "2607.27023",
  "categories": [
    "cs.LG",
    "cs.AI",
    "stat.ML"
  ],
  "published_at": "2026-07-29T15:20:39.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27054v1",
  "title": "CoCaRS: Correlation Calibration-Based Redundancy Suppression for Heterogeneous Knowledge Distillation",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27054",
  "version": "1",
  "abstract": "Knowledge distillation (KD) enables a compact student model to learn from a powerful teacher and has become an effective paradigm for model compression. The emergence of diverse model architectures has extended KD from homogeneous to heterogeneous settings. However, differences in architectural inductive biases between the teacher and student models often result in substantial representation discrepancies, limiting the effectiveness of direct knowledge transfer. Recently, redundancy suppression has offered a new perspective on heterogeneous KD by preserving cross-architecture invariance and reducing feature redundancy through decorrelation of teacher-student feature correlations. Nevertheless, this formulation may weaken useful structural information through uniform decorrelation, while a fixed coefficient may make the effective contribution of redundancy suppression sensitive to teacher-student pairs and training stages. To address these problems, Correlation Calibration-based Redundancy Suppression (CoCaRS) is proposed to better retain structural information while suppressing redundancy and reduce sensitivity to coefficient settings across teacher-student pairs and training stage",
  "arxiv_id": "2607.27054",
  "categories": [
    "cs.LG",
    "cs.AI"
  ],
  "published_at": "2026-07-29T15:47:11.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27056v1",
  "title": "Setoka: A Benchmark for Hierarchical User Understanding in Personalized Agents over Heterogeneous Data",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27056",
  "version": "1",
  "abstract": "Personalized agents are increasingly applied to assist users across a wide range of tasks. Effective personalized assistance requires not only retrieving explicit facts from past interactions stored in agent memory, but also inferring abstract personal characteristics. However, existing memory benchmarks primarily evaluate whether an agent can retrieve information explicitly stated in conversational histories, failing to provide an effective assessment of deeper user understanding. In this work, we propose Setoka, a benchmark for evaluating memory-augmented personalized agents with hierarchical user understanding from heterogeneous data. Grounded in theories from cognitive and personality psychology, Setoka defines four levels of user understanding, i.e., semantic memory, episodic memory, behavior pattern, and personality trait. Moreover, to enable realistic yet privacy-preserving evaluation, we design a psychometrics-based pipeline that synthesizes diverse, coherent heterogeneous user data and queries at scale. Finally, we leverage Setoka to evaluate 3 language models combined with 5 memory systems for 10 synthetic users. Our comprehensive evaluation reveals that while existing sy",
  "arxiv_id": "2607.27056",
  "categories": [
    "cs.AI",
    "cs.CL"
  ],
  "published_at": "2026-07-29T15:47:40.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27065v1",
  "title": "ScratchSim: A Procedural Synthetic Data Pipeline for Surface Scratch Detection",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27065",
  "version": "1",
  "abstract": "While automated defect detection such as the detection of surface scratched is an important aspect in industrial quality control, the scarcity of annotated defect data make this task challenging. This paper presents a procedural rendering pipeline that generates large-scale annotated synthetic training data using BlenderProc, with configurable material appearance, camera modes, and domain randomization, producing automatic COCO-format annotations. To show the potential of our approach, we evaluate four training strategies, namely synthetic-only, real-only, mixed, and fine-tuning from synthetic weights, across two objects with different material properties and three lightweight edge-deployable detectors, YOLOX, YOLO26, and LW-DETR. Our evaluation show that fine-tuning from synthetic weights consistently outperforms real-only training, and that mixed training effectively recovers performance under scarce real-data conditions, with findings validated across both convolutional and transformer-based architectures. The proposed approach enables scalable defect detection without the burden of large real annotated datasets, making it practical for on-device industrial inspection. The pipel",
  "arxiv_id": "2607.27065",
  "categories": [
    "cs.CV",
    "cs.AI"
  ],
  "published_at": "2026-07-29T15:54:01.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27066v1",
  "title": "SciFigAlign: Scoring Scientific Figures by Fine-tuned Alignment of Visuals with Manuscript Evidence",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27066",
  "version": "1",
  "abstract": "Scientific figure assessment in peer review differs fundamentally from general image quality evaluation: a figure must be visually legible, faithfully support the manuscript's claims, and communicate evidence with a clear visual hierarchy. However, if we apply traditional image assessment methods to scientific figure quality assessment, limitations emerge: classic IQA models capture perceptual quality or aesthetics but cannot judge whether a figure serves the paper's scientific argument; CLIP-based methods assess generic image-text correspondence, yet lack understanding of manuscript context; and zero-shot LLM/VLM judges, when repurposed for figure scoring, often yield overly concentrated scores with limited fusion of visual and textual evidence. We introduce an annotated dataset of 3,857 scientific figures from peer-reviewed conference papers, each rated along four peer-review-oriented dimensions: Clarity, Relevance, Informativeness, and Structure. We propose SciFigAlign, a fine-tuned multimodal scorer that grounds figure quality assessment in manuscript evidence. Given a figure crop, caption, citing paragraphs, and light paper context, SciFigAlign fine-tunes CLIP and SciBERT end-",
  "arxiv_id": "2607.27066",
  "categories": [
    "cs.CV",
    "cs.AI"
  ],
  "published_at": "2026-07-29T15:54:14.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27069v1",
  "title": "Visual Credit Audit for Multimodal Spatial Reasoning",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27069",
  "version": "1",
  "abstract": "Closed yes/no spatial benchmarks can reward a correct answer even when the image adds little support beyond no-image contexts. Under a fixed forced-choice interface, Visual Credit Audit (VCA) separates two estimands: whether the benchmark image gives the model's declared decision more support than text-only and blank controls, and whether the model responds to relation-specific visual evidence. The first audit is training- and label-free and does not require an answer flip. Applying labels yields dependence-credited correctness (D-CC); on correct items, it equals same-control gold-aligned positive gain, while prediction alignment extends the audit to errors. Across four open MLLMs and two spatial benchmarks, 12.73-26.25% of decisions are correct yet uncredited. Matched same-split image permutation reduces D-CC by 21.25-47.80 points, with every paired 95% interval above zero. Fixed-pixel relation contrasts and a 3x3 evidence-source factorial show why null controls cannot identify relation response. Among controlled correct-but-uncredited agreement decisions, response to relation reversal spans 81.57-100.00%, while 32.11% pooled change answer. Independently audited outcomes on 108 ge",
  "arxiv_id": "2607.27069",
  "categories": [
    "cs.CV",
    "cs.AI"
  ],
  "published_at": "2026-07-29T15:55:31.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27073v1",
  "title": "Parameter-Free Dynamic Regret for Online Convex Optimization under Heavy-Tailed Noise",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27073",
  "version": "1",
  "abstract": "We study online convex optimization (OCO) in non-stationary environments under heavy-tailed noise, where the stochastic gradient oracle admits only a finite $p$-th central moment for some $p \\in (1, 2]$. While static regret is well-understood, achieving universal dynamic regret in a parameter-free manner remains an open challenge. We resolve this by proposing \\textbf{HT-PAder}, a parameter-free algorithm combining restarted AdaGrad experts over a geometric pool of block lengths with a pathwise meta-algorithm, \\textbf{AdaGrad-Hedge}, which requires no moment conditions on meta-losses. For a domain of diameter $D$, Lipschitz constant $G$, noise level $σ$, and comparator path length $P_T$, HT-PAder achieves an expected universal dynamic regret of \\[ \\widetilde O\\left( GD\\sqrt{T(1+P_T/D)} + σD T^{1/p}(1+P_T/D)^{(p-1)/p} \\right). \\] The algorithm does not require prior knowledge of any of these problem parameters. Even in the special case of finite variance ($p=2$), HT-PAder provides the first parameter-free minimax universal dynamic regret guarantee. We also prove a matching lower bound, establishing the optimality of the path-length exponent.",
  "arxiv_id": "2607.27073",
  "categories": [
    "cs.LG",
    "cs.AI",
    "math.OC"
  ],
  "published_at": "2026-07-29T15:58:18.000Z"
}

{
  "url": "https://arxiv.org/abs/2607.27080v1",
  "title": "MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair",
  "source": "arxiv",
  "pdf_url": "https://arxiv.org/pdf/2607.27080",
  "version": "1",
  "abstract": "Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist. A malicious instruction crafted by an attacker may be stored in long-term memory, recalled much later, and quietly shape a real action. Recent benchmarks increasingly examine agent memory security, yet few trace the same malicious semantics across persistence, downstream consequences, and selective repair under diverse memory-backend comparisons. To address this gap, we introduce MemSecBench, a task-grounded benchmark for the lifecycle security of agent memory systems. It contains 310 cases drawn from 48 realistic contexts across code and science, daily life, and office work. Each case follows a controlled Write--Execute--Forget protocol in an isolated runtime under an exact agent configuration, defined by an agent harness, a memory backend, and an LLM backend. Evidence-based adjudication combines a deterministic write check, checkpoint-specific judge-model evaluations, and programmatic gates across seven lifecycle checkpoints. The experimental design spans a 24-configuration matrix of two agent harnesses, four memory backends, and three LLM backends.",
  "arxiv_id": "2607.27080",
  "categories": [
    "cs.CR",
    "cs.AI"
  ],
  "published_at": "2026-07-29T16:06:54.000Z"
}