arXiv subjects

Cong Chen

Publications and source records attributed to Cong Chen.

At least 19 recordsLinked to original sources

arXiv2026

Streaming Communication in Multi-Agent Reasoning

Multi-agent reasoning systems adopt a generate-then-transfer paradigm that forces end-to-end latency to scale linearly with pipeline depth. We introduce StreamMA, a multi-agent reasoning system that streams each reasoning step to downstream agents as soon as it is generated, pipelining adjacent agents and thus reducing latency. Surprisingly, this pipelining also improves effectiveness: because multi-step reasoning quality is non-uniform and early steps are more reliable than later ones, working with these reliable early steps instead of the full chain prevents error-prone late steps from misleading downstream agents. We formalize both advantages with the first closed-form joint analysis of stream, serial, and single protocols, deriving the effectiveness ordering, speedup upper bound, and cost ratio. Across eight reasoning benchmarks spanning mathematics, science, and code, three frontier LLMs (Claude Opus 4.6, GPT-5.4, and GLM-5.2), and three topologies (Chain, Tree, Graph), StreamMA outperforms both baselines (avg.+7.3pp, max +22.4pp on HMMT2026; Claude Opus 4.6-High). Beyond these contributions, we discover a step-level scaling law: increasing per-agent steps consistently improves both effectiveness and efficiency, a new scaling dimension orthogonal to and composable with agent-count scaling.

cs.CL↗

arXiv2026

How Do Hardware Faults Manifest Differently in LLM Agents?

We present the first systematic study of the resilience of large language model (LLM) agents to random hardware-induced faults. Prior work on hardware fault resilience in LLMs focuses on model-level outcomes, such as incorrect outputs or generation failures. Yet LLM agents repeatedly interact with tools and environments, creating loops that can change how hardware faults manifest. We conduct an extensive evaluation across three agent benchmarks, comprising 6,814 agent executions: 2,400+ clean runs and 4,300+ fault-injected runs with independently sampled random two-bit weight faults. We trace how these faults propagate through agent execution. Unlike prior studies, we find that agentic execution transforms model-level corruption into distinct system-level outcomes: (1) agents can recover from faulty model outputs and still complete tasks correctly; (2) this recovery increases computational and execution costs; (3) a few faults cause subtle but semantically meaningful errors while the agent otherwise behaves normally; and (4) for some models and scenarios, faults can alter security and alignment behavior.

cs.MA↗

arXiv2026

PerturBot: Breaking Shortcut Priors in Vision-Language-Action Models with Perturbative Training

A vision--language--action (VLA) policy can complete complex tasks while ignoring the evidence that should determine its actions. An object held near the wrist camera can displace the instructed target. Language and action show the same pattern: a familiar noun can trigger the operation it was paired with in training even after the verb changes, and a gripper that closed on nothing may lift anyway. We call these dependencies modality shortcuts: regularities in successful demonstrations make visual, lexical, or motor cues sufficient to predict expert actions without the task evidence needed for the underlying decision. More demonstrations of the same kind can raise task success while leaving these shortcuts intact. We propose Perturbot which makes task-relevant evidence easier to use and shortcuts insufficient on their own: it applies task-preserving wrist-view perturbations, enriches instructions with decision-relevant captions, and adds random and failed trajectory segments relabeled with the behavior they contain. It complements scaling by changing what is scaled, and leaves inference unchanged. Moreover, we propose GroundingFscore, an offline score that diagnoses how severely a policy relies on modality shortcuts. Task success rate shows whether a policy improves, while GroundingFscore reveals whether the policy scales healthily, relying on task evidence rather than shortcuts. Together, Perturbot and GroundingFscore provide a training-and-evaluation framework for disentangling VLA decisions from shortcut priors while preserving responsiveness to task-relevant evidence.

cs.RO↗

arXiv2026

MLCommons Jailbreak Benchmark v1.0

Modern AI systems are designed to refuse hazardous requests. A jailbreak is a prompt crafted to bypass those safeguards and elicit outputs that the system would normally refuse to provide. The MLCommons Jailbreak Benchmark v1.0 provides an end-to-end methodology for evaluating the robustness of large language models to single-turn, text-based jailbreak attacks. It combines criteria-driven system and attack selection, paired baseline and adversarial evaluation, human annotation, automated evaluator calibration, scoring, grading, and risk-calibrated disclosure within a single benchmarking pipeline. The benchmark evaluates eight open-weight systems using 264 seed prompts spanning eleven hazard categories and representative attacks drawn from the MLCommons Jailbreak Taxonomy. Responses are assessed using the AILuminate Assessment Standard v1.4, and robustness is measured through the Resilience Gap: the change in safety performance between baseline and adversarial conditions. Across all evaluated systems and attacks, the unsafe-response rate increased from 11.08% under baseline conditions to 18.65% under jailbreak conditions, producing an average Resilience Gap of 7.57%. Accessible systems showed a larger mean gap, while attack effectiveness varied substantially across attack categories and hazards. The benchmark also examines evaluator reliability and sources of measurement error. Beyond reporting results, Jailbreak Benchmark v1.0 establishes a reproducible methodological foundation for comparative jailbreak evaluation and for future expansion across systems, attacks, hazards, and evaluation methods.

cs.AI↗

arXiv2026

Three-Dimensional Topology from Stacking-Controlled Umklapp Scattering in Large-Angle Twisted Graphite

Large-angle twisted graphene lies beyond the local-stacking description of conventional moiré systems: inequivalent rotation centers define distinct commensurate interfaces whose low-energy interlayer hybridization is governed by intervalley Umklapp tunneling. For three-dimensional twisted graphite assembled from interfaces with different crystalline symmetries, a symmetry-constrained effective model reveals that competition between nonchiral and chiral tunneling produces one-ring and two-ring nodal-line phases and a $C_3$-protected higher-order topological insulator in the presence of sublattice (chiral) symmetry. The nodal rings carry integer winding numbers, allowing oppositely wound rings to annihilate into the gapped phase. We further examine how sublattice-symmetry breaking modifies these phases. Density functional theory (DFT) and atomistic calculations for $21.8^\circ$ twisted graphite identify the equilibrium structure as a higher-order topological insulator, while compression drives it into a topological Weyl semimetal phase. These findings establish the stacking sequence of symmetry-inequivalent interfaces as a means of engineering band topology in three-dimensional twisted structures.

cond-mat.mtrl-sci↗

arXiv2026

SV2V-RSim: A Comprehensive Benchmark for Self-Selective V2V Cooperative Perception with Near-Realistic Data

Vehicle-to-Vehicle (V2V) cooperative perception enhances autonomous driving by enabling vehicles to share information beyond their direct line of sight. However, existing V2V datasets are limited by a small number of participating agents, static collaborator selection strategies, and a significant domain gap between simulated and real-world environments. To overcome these challenges, we introduce SV2V-RSim, a large-scale, multi-modal, near-realistic simulation dataset engineered to elevate agent diversity and realism. Additionally, we present the Select Vehicles Adaptively (SVA) module, which optimizes collaborator selection to balance perception performance against communication bandwidth constraints. Our dataset is generated using the Unreal Engine 5-based simulator that integrates high-fidelity 3D assets, diverse environments, and intricate traffic scenarios. All vehicles within a specified range of the ego vehicle are equipped with sensor suites, enabling dynamic and adaptive collaborator selection. SV2V-RSim encompasses four maps, four weather conditions, six time periods from sunrise to night, 203K LiDAR frames, 402K RGB frames, and 788K annotated 3D bounding boxes across 17 object classes, supporting a range of cooperative perception tasks such as 3D object detection, segmentation, and depth estimation. Benchmarking on recent cooperative perception algorithms demonstrates that SVA achieves a superior performance-bandwidth trade-off, while sim-to-real experiments and No-Reference Image Quality Assessment validate the dataset's high realism and practical effectiveness. Our dataset and code will be publicly available.

cs.CV↗

arXiv2026

Cost-Informed Learning for Aggregating Building HVAC Flexibility

This paper develops a cost-informed aggregation framework that learns an aggregate flexibility set of building heating, ventilation, and air-conditioning (HVAC) loads to minimize the aggregator's dispatch cost. Existing aggregation methods mainly use volume-oriented objectives and treat flexibility aggregation and downstream utilization as separate stages. Consequently, the resulting aggregate set may fail to preserve the flexibility most valuable for reducing downstream dispatch costs. To address this limitation, we represent aggregate HVAC flexibility using a parameterized storage-form surrogate and jointly learn the surrogate parameters and the inner-approximation objective from downstream dispatch-cost feedback. This cost-informed feedback allocates the surrogate's limited representation capacity to cost-relevant regions of the aggregate flexibility set. To account for electricity-price uncertainty, we formulate a distributionally robust conditional value-at-risk (DR-CVaR) downstream problem that captures both distributional ambiguity and tail risk. For efficient learning, we reformulate the DR-CVaR problem as a convex second-order cone program. We estimate cost gradients using randomized smoothing and a score-function estimator, avoiding differentiation through large-scale building-level optimization problems. Case studies using NYISO price data show that the proposed framework reduces dispatch costs relative to a volume-oriented aggregation benchmark and that suitable risk and ambiguity settings can lower the out-of-sample CVaR of dispatch costs.

eess.SY↗

arXiv2026

Minimizing Bid Cost Recovery for Energy Storage with Uniform Pricing

We study in-market uniform pricing and out-of-market bid cost recovery (BCR) payments in rolling-window dispatch for real-time power system operations with energy storage resources (ESRs). Due to intertemporal state-of-charge (SOC) constraints, ESR operations are temporally coupled, and existing in-market locational marginal pricing (LMP) may fail to compensate ESR's intertemporal opportunity costs, thereby triggering out-of-market BCR payments. We show that positive BCR is unavoidable when dispatched generators or ESRs have supply-side bids higher than the demand-side bid. We further identify an intertemporal coupling indicator associated with binding SOC constraints and demonstrate empirically that positive BCR arises only when this indicator is active, revealing that BCR is fundamentally driven by intertemporal coupling. In the simulation, we compare a BCR-minimizing uniform pricing scheme (UP-BCR) with existing real-time pricing methods under forecast uncertainty and show that UP-BCR substantially reduces BCR and demand payments relative to LMP while maintaining zero merchandising surplus in a copper-plate model.

eess.SY↗

arXiv2026

Risk-Aware Allocation of Transmission Capacity for Large Loads

Rapid growth in data centers and other large loads is straining transmission grid interconnection processes. This paper develops a framework to quantify firm transmission grid capacity and additional risk-aware flexible capacity that can be unlocked when large loads accept a predefined level of interruption risk. We design a normalized unmet-request objective to serve large load requests. We prove that, in radial networks, every minimizer of this objective also maximizes aggregate interconnected capacity, and we show numerically that this property nearly holds on meshed networks. To allocate the firm and flexible transmission capacities among competing large loads, we use a simultaneous ascending auction (SAA) over products differentiated by {\em capacity, risk level, and bus location}. When large loads have additive, symmetric concave, unit-demand, and $K_b$-demand valuations of the firm and flexible capacity products, we show that the gross substitutes property holds, which supports SAA convergence to a competitive equilibrium. A numerical study on the IEEE 73-bus system shows that, at a 1\% risk setting, flexible capacity increases the total network capacity by 44.3\% relative to the firm capacity baseline, while the SAA reaches a competitive equilibrium.

eess.SY↗

arXiv2026

Reachable-Set Decomposition for Real-Time Aggregation of Multi-Zone HVAC Fleets

Aggregating building heating, ventilation, and air-conditioning (HVAC) fleets can provide substantial real-time flexibility to power systems. However, practical deployment requires scalable characterization of multi-zone, multi-period flexibility and guaranteed feasible disaggregation as temperature states and exogenous inputs are revealed sequentially. This paper develops an offline-online reachable-set decomposition framework that combines offline temporal decomposition with a scalable online fleet coordination policy. Offline, backward reachable sets encode remaining-horizon feasibility as per-period state constraints, while tailored polytopic inner approximations provide tractable representations of these sets for thermally coupled multi-zone buildings. Online, aggregate flexibility is computed through parallel, single-period building-level linear programs followed by the fleet-level closed-form Minkowski summation of power intervals, thereby avoiding operations on high-dimensional full-horizon sets. The resulting endpoint profiles enable a closed-form, time-causal policy that disaggregates any aggregate HVAC power command within the reported interval while preserving recursive feasibility. Case studies show that, relative to the considered fixed full-horizon baselines, the proposed framework captures greater aggregate flexibility by recomputing per-period intervals using the latest state and exogenous information, while maintaining feasible disaggregation under sequentially revealed uncertainty. Its building-separable computation further enables scalable implementation for large fleets of multi-zone buildings.

eess.SY↗

arXiv2026

Optimal Uniform Pricing for Multi-Interval Dispatch without Make-Whole Uplifts

In a network with ramp-limited generators and inaccurate net-demand forecasts, practical rolling-window dispatch can drive locational marginal prices (LMPs) below generators' bid-in offers. In such cases, out-of-market (OOM) settlements are used to compensate generators and maintain dispatch-following incentives, but OOM can have negative consequences, including nontransparent real-time price signals, discriminatory compensation, and incentives for untruthful bidding. This paper presents an optimal uniform pricing rule that minimizes demand payments, eliminates OOM make-whole payments, preserves LMP-based congestion charges, and ensures revenue adequacy. We derive the proposed pricing rule in closed form and relate it to existing pricing schemes. Numerical comparisons demonstrate favorable generator profits and reduced price volatility. However, higher generator profits are accompanied by increased demand payments, reflecting the in-market, uniform allocation of ramping costs while preserving the LMP-based congestion charges widely used in real-time market settlements. The numerical results also show that, under LMP with OOM settlement, a price-taking generator has an incentive to inflate its offer, whereas this incentive is absent under the proposed pricing rule within the tested bid range.

eess.SY↗

arXiv2026

Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environments

GUI agents often encounter dynamic anomalies when deployed on Android devices, from unexpected pop-ups to action misuse, yet existing benchmarks lack systematic evaluation of agent robustness against runtime anomalies. We introduce AnTrap, a comprehensive benchmark that injects dynamic perturbations into agent execution trajectories. We propose a taxonomy organizing real-world anomalies into four layers (State, Thinking, Action and Round) with ten fine-grained subcategories, and develop a construction pipeline that preserves task solvability while introducing realistic adversarial conditions. Evaluating 16 leading GUI models, we reveal universal vulnerability to dynamic anomalies, with even the strongest models suffering significant performance degradation. Furthermore, we conduct GRPO training in both original and adversarial environments to validate our benchmark, separating environment-learnable anomalies from reasoning-bottlenecked ones. Our findings show that while single-step traps at state and action layers are largely addressable through adversarial reinforcement learning, deep contextual traps, like state deadlock, expose intrinsic limitations that cannot be resolved by training in environments with traps alone.

cs.AI↗

arXiv2026

Multi-Task Consistency-based Detection of Adversarial Attacks

Deep Neural Networks (DNNs) have found successful deployment in numerous vision perception systems. However, their susceptibility to adversarial attacks has prompted concerns regarding their practical applications, specifically in the context of autonomous driving. Existing defenses often suffer from cost inefficiency, rendering their deployment impractical for resource-constrained applications. In this work, we propose an efficient and effective adversarial attack detection scheme leveraging the multi-task perception within a complex vision system. Adversarial perturbations are detected by the inconsistencies between the inference outputs of multiple vision tasks, e.g., object detection and instance segmentation. To this end, we developed a consistency score metric to measure the inconsistency between vision tasks. Next, we designed an approach to select the best model pairs for detecting inconsistencies effectively. Finally, we evaluated our defense against PGD attacks across multiple vision models on the BDD100k validation dataset. The experimental results demonstrated that our defense achieved a ROC-AUC performance of 99.9% detection within the considered attacker model.

cs.CV↗

arXiv2026

Wave Scattering at temporal interfaces with spatial-translation-symmetry mismatch

Temporal interfaces enable wave manipulation through broken time-translation symmetry, but conventional formulations generally assume that spatial-translation symmetry is preserved across the interface. Here we consider temporal interfaces between periodic media with mismatched spatial symmetries. It is discovered that the reciprocal-lattice vectors of the pre- and post-switching media enter a generalized quasi-momentum-matching condition, giving rise to reciprocal-lattice-assisted wave-vector conversion. We then develop a multichannel temporal-scattering theory and validate it in one- and two-dimensional elastic lattices. A single incident Bloch mode can thereby excite multiple post-interface Bloch modes with distinct wave vectors and frequencies, a response inaccessible at conventional temporal interfaces. These results establish symmetry mismatch as a new degree of freedom for simultaneous control of wave vector and frequency in time-modulated periodic media.

physics.class-ph↗

arXiv2026

Can Large Language Models Execute Parent Orders?

Parent-order execution is a core problem in algorithmic trading, where the goal is to split a large order into smaller orders while reducing execution costs. Existing approaches either rely on pre-specified market assumptions that may not hold in practice, or require task-specific training that limits adaptability to new settings. To overcome these limitations, we present the first systematic study of large language models (LLMs) for parent-order execution. This extends the use of LLMs in finance from what to trade to how to execute. We propose PACE (Plan-Ahead Controlled Execution), a hierarchical framework that decomposes parent-order execution into long-horizon planning and short-horizon execution, requiring neither explicit market assumptions nor task-specific training. Experiments on Shenzhen Stock Exchange Level-1 data show that PACE outperforms TWAP, Almgren-Chriss, and learning-based baselines, exceeding the strongest baseline by 0.65 bps. Behavioral analysis reveals that LLMs make execution decisions differently from human investors: higher model confidence predicts better performance rather than worse returns, and the model trades earlier rather than procrastinating toward the deadline. These findings suggest that LLMs can complement human traders in execution decisions.

cs.CE↗

arXiv2026

Linking effective Ratner equidistribution to the semicircle law for skew-shift matrices

We consider large Hermitian matrices whose entries are defined by evaluating the exponential function along orbits of the skew-shift $\frac{j(j-1)}{2}ω+ jy + x \mod 1$ for irrational $ω$. We establish a rigorous connection between the effective Ratner equidistribution theorem for unipotent orbits in $\SL(3,\R)/\SL(3,\Z)$ and the global semicircle law for such deterministic matrices. For frequency sequences satisfying a Diophantine condition, we prove that the empirical spectral distribution of these matrices converges to the Wigner semicircle law with optimal polynomial rate $O(N^{-1})$; for rectangular matrices the corresponding Marchenko--Pastur law is obtained. The proof uses a multi-parameter effective mixing property derived from the effective Ratner equidistribution theorem, combined with a graph-theoretic expansion of the moments. Our results evidence the quasirandom nature of the skew-shift dynamics observed in other contexts by Bourgain, Goldstein and Schlag, and Rudnick, Sarnak and Zaharescu, and provide a dynamical systems proof of the semicircle law with an improved convergence rate.

math.DS↗

arXiv2026

MemDreamer: Decoupling Perception and Reasoning for Long Video Understanding via Hierarchical Graph Memory and Agentic Retrieval Mechanism

Current Vision-Language Models struggle with hours-long videos because processing full-length visual sequences induces prohibitive token explosion and attention dilution. To overcome this, we introduce MemDreamer to decouple perception and reasoning, shifting long-video understanding into an agentic exploration process. As a plug-and-play framework, it incrementally streams videos to construct a Hierarchical Graph Memory, a top-down three-tier architecture for semantic abstraction, anchored by a foundational graph capturing spatiotemporal and causal relations. During inference, the reasoning model employs agentic tool-augmented retrieval, navigating hierarchies, searching nodes, and traversing logical edges via an Observation-Reason-Action loop. Experiments show MemDreamer achieves SOTA results across four mainstream benchmarks, narrowing the gap with human experts to only 3.7 points. It constrains the reasoning context window to merely 2% of full-context ingestion while delivering a 12.5 point absolute accuracy gain. Furthermore, statistical analysis uncovers a strong positive linear correlation between an VLM's performance on logic reasoning and long-video understanding benchmarks, establishing agentic capability scaling as a new paradigm for multimodal comprehension.

cs.CV↗

arXiv2026

Ramping Procurement and Bid-Cost Recovery in Real-Time Market

We study ramping procurement co-optimized with economic dispatch under net-demand uncertainty. We examine two flexible ramp product designs implemented by grid operators: single-interval and multi-interval co-optimization. Both rely on rolling-window stochastic optimization with binding and advisory interval decisions. We develop analytical frameworks to evaluate generator profits, consumer payments, bid cost recovery (BCR), and operational efficiency. In particular, net-demand uncertainty may lead to generator under-compensation, requiring discriminatory BCR. While operational efficiency is invariant to energy and ramp prices, producer profits and consumer payments depend critically on pricing. We examine locational marginal pricing (LMP) and two uniform pricing: maximum dispatch cost pricing (MDCP) and maximum temporal locational marginal pricing (MTLMP). With out-of-market BCR, LMP yields discriminatory energy prices, whereas MDCP eliminates BCR and MTLMP does so in most cases. This property enables us to establish truthful bidding incentives for price-taking generators under MDCP. Our analysis highlights trade-offs between single- and multi-interval co-optimization and pricing designs: single-interval energy-ramp co-optimization is advantageous under high forecast uncertainty and moderate ramping requirements, whereas multi-interval co-optimization is superior when net-demand forecasts are relatively accurate and ramp needs are challenging. Empirical results on CAISO and ERCOT data show that MDCP and MTLMP increase producer profits with negligible BCR, albeit at the expense of higher consumer payments relative to LMP.

eess.SY↗