arXiv subjects

Li Lu

Publications and source records attributed to Li Lu.

At least 19 recordsLinked to original sources

arXiv2026

Evaluating Scaffolding-Oriented Multi-Agent Large Language Model System for Clinical Interview Training

Clinical education must prepare medical students to conduct safe and coherent patient interviews under conditions of uncertainty. Traditional standardized patient (SP) training is resource-intensive and difficult to scale. We developed a scaffolding-oriented multi-agent Large Language Model (LLM) AI Standardized Patient (AI-SP) training platform1. The system includes a patient agent for simulated dialog, a tutor agent providing Socratic prompts without disclosing diagnostic information, and a turn-level evaluator agent that monitors clinical progress without revealing summative scores. In a randomized controlled study (N = 100 medical students), participants were assigned to either a multi-agent (MA) scaffolding condition or a control condition. All students completed two learning sessions under their assigned condition followed by an examination conducted in a patient only environment. Performance was assessed using a standardized Objective Structured Clinical Examination (OSCE) based rubric. While no significant difference was observed in final diagnostic accuracy between groups, the multi-agent AI standardized patient system improved final examination scores compared to the control group utilizing structured progressive information disclosure; the most substantial and consistent improvements were observed in communication, the expression of empathy, and specific history-taking behaviors. These findings suggest that specialized LLM agents enhance the process quality of simulated clinical interviews without artificially inflating examination outcomes. To support future research, we release a multi-expert annotated dataset comprising transcripts, checklist annotations, turn-level evaluations, and OSCE-aligned scoring outcomes. This resource aims to facilitate the development of pedagogically grounded AI-SP systems and advance research on AI-supported clinical reasoning training.

cs.MA↗

arXiv2026

Bulk Ising superconductivity in an intercalated TaSe2 bilayer structure

Ising spin-orbit coupling in bulk systems has drawn considerable interest for its ability to conveniently construct spin-orbit environments and enable exotic quantum phenomena. In this work, we synthesize intercalated 2Hb-TaSe$_2$ bilayers with noncentrosymmetric structure and, through multifaceted analysis, present multiple lines of evidence for the emergence of bulk Ising superconductivity. Resistivity measurements reveal anisotropic superconducting behavior, with a remarkably large in-plane upper critical field $B_{c2}^{\|}$ that exceeds the Pauli limit $B_{p}$. Band structure calculations further show band splitting accompanied by out-of-plane spin polarization. Collectively, these observations point to the presence of Ising superconductivity. Additional measurements of the thickness-dependent ratio $B_{c2}^{\|}$/$B_{p}$ and the superconducting diode effect not only further support the Ising superconducting nature of this material, but also reveal additional features of bulk Ising superconductivity evolving with thickness. Our findings provide valuable insights that may contribute to the search for bulk Ising superconductors.

cond-mat.supr-con↗

arXiv2026

Neuro-Symbolic Reasoning for Vulnerability Detection

Ask a large language model (LLM) whether a pointer dereference is safe, and it can often produce a plausible justification for ``yes''. The difficulty is that a fluent justification is not a proof. This gap is precisely where automated vulnerability detection lives: deciding, for a given operation in source code, whether a memory safety defect such as a null dereference, use-after-free, or double free can actually occur. We trace the unreliability of LLM-based vulnerability detection to a mechanism, the premature discharge of safety obligations, and argue that the remedy is not better prompting but a separation of roles: the component that interprets the code must not also be the one that decides a safety obligation is met. In this paper, we present LeanGuard, a neuro-symbolic framework that assigns each act to the side equipped for it. On the neural side, an LLM serves strictly as a semantic filter over candidate facts extracted from the abstract syntax tree (AST): it prunes spurious facts and keeps the real ones, but never discharges an obligation or decides the verdict on its own. On the symbolic side, the surviving facts are compiled into a verification model in Lean 4 (a formal proof assistant whose kernel accepts a conclusion only when it is formally proved), where every dangerous operation must be matched by a guard that provably covers it in scope; absent such a guard, the obligation stays open rather than being argued away. Because a function rarely arrives with full context, this symbolic model is necessarily partial: an unproved obligation is not yet a defect. An evidence-aware adjudicator therefore weighs the symbolic and neural verdicts by the quality of each. We instantiate the framework on five CWE classes to ask how far this division of labor can be pushed.

cs.SE↗

arXiv2026

Supermoir\'e Chern mosaic in helical trilayer WSe2

Helically twisted multilayers offer access to moir\'e physics beyond the single-superlattice paradigm, yet their correlated and topological transport properties remain largely unexplored in semiconductor moir\'e materials. Here we report magnetotransport measurements of helical trilayer WSe2, in which two coupled moir\'e patterns relax into a supermoir\'e landscape composed of inequivalent local topological domains with distinct electronic structures and unequal spatial areas. By electrostatic tuning, we identify a trilayer-hybridized regime where interactions and real-space reconstruction combine to generate a plethora of magnetic and topological states absent in the twisted bilayers. At moir\'e filling factor $\nu$ = -1, we observe a ferromagnetic insulating state that is robust against magnetic field and accompanied by a non-quantized anomalous Hall response ~-4 kOhms. This behaviour is consistent with a time-reversal-symmetry-breaking supermoir\'e Chern mosaic, in which the Hall response arises from the non-cancelling contributions of local domains with opposite Chern character arranged by the relaxed structure. Under strong magnetic fields, a symmetry-broken Chern insulating state (C = 1) emerges near $\nu$ = -2/3, displaying a much larger positive Hall response together with strongly enhanced longitudinal resistance, suggestive of field-reconstructed topological minibands and domain-boundary scattering. These results establish relaxed supermoir\'e semiconductor trilayers as a platform for spatially organized magnetism and topology beyond the bilayer limit.

cond-mat.str-el↗

arXiv2026

Beyond Content: A Comprehensive Speech Toxicity Dataset and Detection Framework Incorporating Paralinguistic Cues

Toxic speech detection has become a crucial challenge in maintaining safe online communication environments. However, existing approaches to toxic speech detection often neglect the contribution of paralinguistic cues, such as emotion, intonation, and speech rate, which are key to detecting speech toxicity. Moreover, current toxic speech datasets are predominantly text-based, limiting the development of models that can capture paralinguistic cues.To address these challenges, we present ToxiAlert-Bench, a large-scale audio dataset comprising over 30,000 audio clips annotated with seven major toxic categories and twenty fine-grained toxic labels. Uniquely, our dataset annotates toxicity sources -- distinguishing between textual content and paralinguistic origins -- for comprehensive toxic speech analysis.Furthermore, we propose a dual-head neural network with a multi-stage training strategy tailored for toxic speech detection. This architecture features two task-specific classification headers: one for identifying the source of sensitivity (textual or paralinguistic), and the other for categorizing the specific toxic type. The training process involves independent head training followed by joint fine-tuning to reduce task interference. To mitigate data class imbalance, we incorporate class-balanced sampling and weighted loss functions.Our experimental results show that leveraging paralinguistic features significantly improves detection performance. Our method consistently outperforms existing baselines across multiple evaluation metrics, with a 21.1% relative improvement in Macro-F1 score and a 13.0% relative gain in accuracy over the strongest baseline, highlighting its enhanced effectiveness and practical applicability.

cs.SD↗

arXiv2026

Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection

Modern Large audio-language models (LALMs) power intelligent voice interactions by tightly integrating audio and text. This integration, however, expands the attack surface beyond text and introduces vulnerabilities in the continuous, high-dimensional audio channel. While prior work studied audio jailbreaks, the security risks of malicious audio injection and downstream behavior manipulation remain underexamined. In this work, we reveal a previously overlooked threat, auditory prompt injection, under realistic constraints of audio data-only access and strong perceptual stealth. To systematically analyze this threat, we propose \textit{AudioHijack}, a general framework that generates context-agnostic and imperceptible adversarial audio to hijack LALMs. \textit{AudioHijack} employs sampling-based gradient estimation for end-to-end optimization across diverse models, bypassing non-differentiable audio tokenization. Through attention supervision and multi-context training, it steers model attention toward adversarial audio and generalizes to unseen user contexts. We also design a convolutional blending method that modulates perturbations into natural reverberation, making them highly imperceptible to users. Extensive experiments on 13 state-of-the-art LALMs show consistent hijacking across 6 misbehavior categories, achieving average success rates of 79\%-96\% on unseen user contexts with high acoustic fidelity. Real-world studies demonstrate that commercial voice agents from Mistral AI and Microsoft Azure can be induced to execute unauthorized actions on behalf of users. These findings expose critical vulnerabilities in LALMs and highlight the urgent need for dedicated defense.

cs.CR↗

arXiv2026

Joule heating and electronic Gurzhi effect in hydrodynamic differential transport in an electron liquid

We perform a differential resistance study in the hydrodynamic regime of electron liquid in GaAs/AlGaAs quantum wells. At zero magnetic field ($B$) a Lorentzian profile occurs in the nonlinear transport driven by a U-turn (ac) current loop, in (ac + dc) measurements a minimum deepens with the external dc current bias ($j_{dc}$). Our analysis shows that the observed electronic transport valley induced by $j_{dc}$ is attributed to Joule heating effect on the electron temperature ($T_{e}$) of electron liquid. Quantitatively, we demonstrate that the viscosity resistivity ($\Delta \rho$) is proportional to $T^{-2}$ and is consistent with the dc-current induced electronic Gurzhi effect in various configurations of measurement.

cond-mat.mes-hall↗

arXiv2026

STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling

With the widespread deployment of deep-learning-based speech models in security-critical applications, backdoor attacks have emerged as a serious threat: an adversary who poisons a small fraction of training data can implant a hidden trigger that controls the model's output while preserving normal behavior on clean inputs. Existing inference-time defenses are not well suited to the audio domain, as they either rely on trigger over-robustness assumptions that fail on transformation-based and semantic triggers, or depend on properties specific to image or text modalities. In this paper, we propose STEP (Stability-based Trigger Exposure Profiling), a black-box, retraining-free backdoor detector that operates under hard-label-only access. Its core idea is to exploit a characteristic dual anomaly of backdoor triggers: anomalous label stability under semantic-breaking perturbations, and anomalous label fragility under semantic-preserving perturbations. STEP profiles each test sample with two complementary perturbation branches that target these two properties respectively, scores the resulting stability features with one-class anomaly detectors trained on benign references, and fuses the two scores via unsupervised weighting. Extensive experiments across seven backdoor attacks show that STEP achieves an average AUROC of 97.92% and EER of 4.54%, substantially outperforming state-of-the-art baselines, and generalizes across model architectures, speech tasks, an open-set verification scenario, and over-the-air physical-world settings.

cs.CR↗

arXiv2026

Double-Carrier Fitting of Hall Resistance Assisted by Gate-Induced Shubnikov-de Haas Oscillations in Possible Excitonic Insulator Ta2Pd3Te5

Hall effect is an important phenomenon when a magnetic field is applied to materials. From the curve depicting the Hall resistance versus the magnetic field, crucial information such as carrier concentration can be extracted. If the curve exhibits a linear dependence up to rather high magnetic fields, it indicates that charge transport involves only a single type of carrier, and if a non-linear curve is measured, then the double-carrier model should be considered for fitting. However, this model involves four unknown parameters, including the concentration and mobility of the two carriers, resulting in that such fitting is usually non-unique, which significantly reduces the reliability and accuracy. In this work, a double-carrier platform was constructed on a probable excitonic insulator Ta2Pd3Te5, and the four-parameter fitting based on the double-carrier model was simplified to a single-parameter fitting by employing methods such as analyzing the shape of the Hall resistance curve and generating gate-induced Shubnikov-de Haas oscillations. Thus, we provide a reliable method for double-carrier fitting of Hall resistance and a new evidence for the existence of excitonic-insulator state in Ta2Pd3Te5.

cond-mat.mes-hall↗

arXiv2026

Observation of sequential quantum oscillations induced by mini-Landau bands in a three-dimensional Dirac semiconductor

Quantum oscillations, the oscillatory behavior of electrical and thermodynamic properties, are typically observed in metals and vanish in the quantum limit under strong magnetic fields1. Phenomena such as the fractional quantum Hall effect2, the Hofstadter butterfly3,4, and recent observations of quantum oscillations in exotic insulators are notable exceptions5-12. The narrow-gap Dirac semiconductor ZrTe5, a less exotic material without strong correlations or artificially engineered superlattices, nevertheless exhibits resistance oscillations in the quantum limit13 but can be interpreted within a simple Zeeman-effect-based picture14,15, which remains conventional quantum oscillations without exotic properties. Here, we report the observation of unexpected mini-oscillations superimposed on Zeeman-effect-induced main oscillations in the quantum limit. The subtracted mini-oscillations are periodic in 1/B with the highest frequency equal to 2.1% of the first Brillouin zone and have extremely heavy effective mass ~ 2me, which is unexpected in ZrTe5 given its ultralow carrier density. Additionally, the mini-oscillations exhibit sequential features that are synchronized with the main oscillations, suggesting an internal structure of the Landau bands. However, they appear incompatible with the Hofstadter butterfly due to the highly anisotropic/three-dimensional crystal structure. These sequential mini-oscillations correlate with the commensurability resonance effect with subunity fractions observed in angular magnetoresistance, relating to the formation of mini-Landau bands. Our results present solid experimental evidence of exotic quantum oscillations in the quantum limit beyond currently available mechanisms, and establish ZrTe5, a prototypical Dirac semiconductor, as a simple platform parallel to correlated insulators for exploring exotic oscillations.

cond-mat.mes-hall↗

arXiv2026

Emergence of a symmetry-broken Chern insulator near a moir\'e Kondo breakdown

Moir\'e semiconductors built on angle-aligned transition metal dichalcogenide (TMD) heterobilayers provide a physical realization of the Kondo lattice model, in which one TMD layer is prepared in a Mott insulating state supporting a lattice of local magnetic moments and the other layer in a metallic state supporting itinerant carriers. The artificial Kondo lattice enables the exploration of exotic states of matter near a continuously tunable Kondo breakdown. Here we report the emergence of a symmetry-broken Chern insulator at a moir\'e hole filling factor 4/3 in angle-aligned MoTe2/WSe2 moir\'e bilayers, which realize a chiral Kondo lattice. The symmetry-broken Chern insulator, which exhibits integer quantized Hall conductance at a fractional moir\'e filling, breaks the translational symmetry of the lattice spontaneously; it also appears only near a magnetic field-induced Kondo breakdown in the mixed-valence regime of the material. We further demonstrate that the magnetic field required to induce the Kondo breakdown and to stabilize the symmetry-broken Chern insulator is twist angle dependent. The results present new opportunities for exploring the subtle interplay between topology and Kondo interactions in moir\'e semiconductors.

cond-mat.mes-hall↗

arXiv2026

EcoGym: Evaluating LLMs for Long-Horizon Plan-and-Execute in Interactive Economies

Long-horizon planning is widely recognized as a core capability of autonomous LLM-based agents; however, current evaluation frameworks suffer from being largely episodic, domain-specific, or insufficiently grounded in persistent economic dynamics. We introduce EcoGym, a generalizable benchmark for continuous plan-and-execute decision making in interactive economies. EcoGym comprises three diverse environments: Vending (adapted from the closed-source Vending-Bench, with full open-source release), Freelance (new), and Operation (new), implemented in a unified decision-making process with standardized interfaces, and budgeted actions over an effectively unbounded horizon (1000+ steps if 365 day-loops for evaluation). The evaluation of EcoGym is based on business-relevant outcomes (e.g., net worth, income, and DAU), targeting long-term strategic coherence and robustness under partial observability and stochasticity. Experiments across eleven leading LLMs expose a systematic tension: no single model dominates across all three scenarios. Critically, we find that models exhibit significant suboptimality in either high-level strategies or efficient actions executions. EcoGym is released as an open, extensible testbed for transparent long-horizon agent evaluation and for studying controllability utility trade-offs in economic settings.

cs.CL↗

arXiv2026

Evaluating and Enhancing the Vulnerability Reasoning Capabilities of Large Language Models

Large Language Models (LLMs) have demonstrated remarkable proficiency in vulnerability detection. However, a critical reliability gap persists: models frequently yield correct detection verdicts based on hallucinated logic or superficial patterns that deviate from the actual root cause. This misalignment remains largely obscured because contemporary benchmarks predominantly prioritize coarse-grained classification metrics, lacking the granular ground truth required to evaluate the underlying reasoning process. To bridge this gap, we first construct a benchmark consisting of two datasets: (1) real-world vulnerabilities with expert-curated causal reasoning as ground truth, and (2) semantically equivalent code perturbations for assessing reasoning robustness. Our large-scale empirical study reveals that even state-of-the-art models struggle to maintain logical consistency during semantic code comprehension, exhibiting 12 systematic failure patterns. Addressing these limitations, we propose DAGVul, a novel framework that models vulnerability reasoning as a Directed Acyclic Graph (DAG) generation task. Unlike linear chain-of-thought (CoT), our approach explicitly maps causal dependencies to enforce structural consistency. By further introducing Reinforcement Learning with Verifiable Rewards (RLVR), we align model reasoning trace with program-intrinsic logic. Experimental results demonstrate that our framework improves the reasoning F1-score by an average of 18.9% over all the baselines. Remarkably, our 8B-parameter implementation not only outperforms existing models of comparable scale but also surpasses specialized large-scale reasoning models, including Qwen3-30B-Reasoning and GPT-OSS-20B-High. It is even competitive with state-of-the-art models like Claude-Sonnet-4.5 (75.47% vs. 76.11%), establishing new efficiency in vulnerability reasoning across model scales.

cs.CR↗

arXiv2026

HyperPotter: Spell the Charm of High-Order Interactions in Audio Deepfake Detection

Advances in AIGC technologies have enabled the synthesis of highly realistic audio deepfakes capable of deceiving human auditory perception. Although numerous audio deepfake detection (ADD) methods have been developed, most rely on local temporal/spectral features or pairwise relations, overlooking high-order interactions (HOIs). HOIs capture discriminative patterns that emerge from multiple feature components beyond their individual contributions. We propose HyperPotter, a hypergraph-based framework designed to capture high-order relations associated with synergistic patterns through clustering-based hyperedges with class-aware prototype initialization. Extensive experiments on 13 test sets show that HyperPotter improves over the baseline on 11 sets, yielding an average relative EER reduction of 12.68\% across all test sets and 22.15\% on the improved sets. These results demonstrate strong cross-scenario generalization, while also revealing robustness limits under severe codec or channel distortion.

cs.SD↗

arXiv2026

Divide and Conquer: Multimodal Video Deepfake Detection via Cross-Modal Fusion and Localization

This paper presents a system for detecting fake audio-visual content (i.e., video deepfake), developed for Track 2 of the DDL Challenge. The proposed system employs a two-stage framework, comprising unimodal detection and multimodal score fusion. Specifically, it incorporates an audio deepfake detection module and an audio localization module to analyze and pinpoint manipulated segments in the audio stream. In parallel, an image-based deepfake detection and localization module is employed to process the visual modality. To effectively leverage complementary information across different modalities, we further propose a multimodal score fusion strategy that integrates the outputs from both audio and visual modules. Guided by a detailed analysis of the training and evaluation dataset, we explore and evaluate several score calculation and fusion strategies to improve system robustness. Overall, the final fusion-based system achieves an AUC of 0.87, an AP of 0.55, and an AR of 0.23 on the challenge test set, resulting in a final score of 0.5528.

cs.MM↗

arXiv2026

Deterministic non-local parity control and supercurrent-based detection in an Andreev molecule

The ability to manipulate and detect the parity of quantum states in superconductor-semiconductor hybrid systems is pivotal to realizing the promise of topological quantum computation. However, as these architectures scale toward artificial Kitaev chains with phase-control loops, local accessibility becomes restricted, constraining conventional local parity control and detection. While Andreev molecules offer a platform for non-local intervention, deterministic protocols for parity manipulation have yet to be experimentally established. Here, we demonstrate deterministic non-local control over the parity configuration of a quantum dot (QD) by electrically modulating the coherent hybridization with a spatially adjacent QD within an Andreev molecule. By systematically investigating three distinct joint parity configuration regimes in the elastic co-tunneling limit, we experimentally uncover the operational conditions for this non-local control. In conjunction with theoretical simulations establishing a global phase diagram, we identify a set of universal selection rules governing parity transitions, dictated by the symmetry-imposed interplay between the joint parity configuration and the dominant inter-dot coupling mechanism (elastic co-tunneling vs. crossed Andreev reflection). Furthermore, we establish the supercurrent, directly signaled by zero-bias conductance peaks, as an intrinsic, sensor-free probe of the parity configuration, obviating the need for auxiliary charge sensors. Our results provide a validated physical framework for parity engineering, offering a key building block for scalable, multi-QD superconducting architectures.

cond-mat.mes-hall↗

arXiv2025

Neural Collapse in Test-Time Adaptation

Test-Time Adaptation (TTA) enhances model robustness to out-of-distribution (OOD) data by updating the model online during inference, yet existing methods lack theoretical insights into the fundamental causes of performance degradation under domain shifts. Recently, Neural Collapse (NC) has been proposed as an emergent geometric property of deep neural networks (DNNs), providing valuable insights for TTA. In this work, we extend NC to the sample-wise level and discover a novel phenomenon termed Sample-wise Alignment Collapse (NC3+), demonstrating that a sample's feature embedding, obtained by a trained model, aligns closely with the corresponding classifier weight. Building on NC3+, we identify that the performance degradation stems from sample-wise misalignment in adaptation which exacerbates under larger distribution shifts. This indicates the necessity of realigning the feature embeddings with their corresponding classifier weights. However, the misalignment makes pseudo-labels unreliable under domain shifts. To address this challenge, we propose NCTTA, a novel feature-classifier alignment method with hybrid targets to mitigate the impact of unreliable pseudo-labels, which blends geometric proximity with predictive confidence. Extensive experiments demonstrate the effectiveness of NCTTA in enhancing robustness to domain shifts. For example, NCTTA outperforms Tent by 14.52% on ImageNet-C. Project page is publicly available at https://github.com/Cevaaa/NCTTA.

cs.CV↗

arXiv2025

BlinkBud: Detecting Hazards from Behind via Sampled Monocular 3D Detection on a Single Earbud

Failing to be aware of speeding vehicles approaching from behind poses a huge threat to the road safety of pedestrians and cyclists. In this paper, we propose BlinkBud, which utilizes a single earbud and a paired phone to online detect hazardous objects approaching from behind of a user. The core idea is to accurately track visually identified objects utilizing a small number of sampled camera images taken from the earbud. To minimize the power consumption of the earbud and the phone while guaranteeing the best tracking accuracy, a novel 3D object tracking algorithm is devised, integrating both a Kalman filter based trajectory estimation scheme and an optimal image sampling strategy based on reinforcement learning. Moreover, the impact of constant user head movements on the tracking accuracy is significantly eliminated by leveraging the estimated pitch and yaw angles to correct the object depth estimation and align the camera coordinate system to the user's body coordinate system, respectively. We implement a prototype BlinkBud system and conduct extensive real-world experiments. Results show that BlinkBud is lightweight with ultra-low mean power consumptions of 29.8 mW and 702.6 mW on the earbud and smartphone, respectively, and can accurately detect hazards with a low average false positive ratio (FPR) and false negative ratio (FNR) of 4.90% and 1.47%, respectively.

cs.CV↗