arXiv subjects

Mohammed Sameer Syed

Publications and source records attributed to Mohammed Sameer Syed.

5 recordsLinked to original sources

arXiv2026

Certified AI Triage of ICU Alarms

In the VTaC benchmark 71% of ventricular-tachycardia alarms are false, but silencing a real one can delay recognition of a dangerous arrhythmia. We reframe alarm reduction as three-way triage (retain, suppress, or defer) and bound the decision this analysis treats as harmful: among suppressed alarms, the fraction that were genuine stays below a user-set budget with 95% confidence, under i.i.d. event sampling. Alarms sharing a waveform record are dependent, so the clustered analysis is a sensitivity check. On the official split a 5% budget certifies in all three seeds, suppressing 74.8% of false alarms while silencing 1.5% of genuine ones, at AUROC 0.953 and Challenge Score 83.33, numerically comparable to the strongest of the eleven published systems. Our central finding measures what multiplicity costs: the correction charges for every candidate, so a finer grid can certify strictly less. Under held-out calibration the 885-cell grid we declared certifies 1 of 15 fold-runs, while choosing the grid on a separate selection partition certifies 8. We project the calibration volume each budget needs, making an uncertifiable budget a design parameter. Finally, adding a learned reliability dimension to the policy grid did not sharpen the certified frontier.

cs.LG↗

arXiv2026

Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models

As language models take on agentic roles that call APIs, read tool outputs, and act on third-party content, their attack surface expands beyond what users type. Whether they treat a malicious instruction the same way regardless of where it arrives has not been studied systematically. We introduce the Safety Asymmetry Score (SAS), measuring how a model's susceptibility to adversarial content shifts depending on whether it arrives in the user message, tool metadata, or tool output, using matched payload pairs that hold the malicious text identical and vary only the channel. Across 10 production LLMs and three attack families, general-purpose models sharply discount instructions arriving as tool metadata relative to identical instructions in the user message, while agent-native models discount them far less. This differential survives an affordance-matched control equalizing tool availability and scoring, and a size-controlled mixed-effects analysis. Within the tool surface the pattern reverses: the same content is far more instruction-like in a tool's description than in its output, with affordances identical. Models treat tool metadata as instructions and tool results as data. In Llama 3.3-70B and GPT-OSS-120B this signal is causally present at mid-to-late depths but non-linearly encoded, so linear probes miss what activation patching recovers.

cs.LG↗

arXiv2026

ZetaDial: dialing net charge of protein binders at inference time for therapeutic developability

Net charge is a developability-relevant property of therapeutic binders, linked to viscosity, clearance, nonspecific interaction and aggregation, and antibody screens already use charge-related criteria. Yet inverse-folding pipelines expose no way to set it to a target value. ProteinMPNN and BindCraft offer amino-acid biases, weight choices and custom losses, but neither supplies a per-protein feedback loop that measures realised charge after sampling and corrects it to a setpoint. ZetaDial contributes a post-sampling, per-protein secant controller around fixed-backbone ProteinMPNN. On matched stochastic benchmarks the secant loop reduced mean absolute error relative to a fixed-slope loop on RCSB complexes (5.17 vs 6.46 charge units) and Cas13 monomers (5.57 vs 8.23). Relative to the optimised matched global bias, it cut RCSB error from 11.71 to 5.17 (cluster bootstrap p < 0.001) and was statistically indistinguishable on Cas13 (5.47 vs 5.57). Across 800 eight-protein subsets, sensitivity heterogeneity was associated with calibration gain (Pearson r = 0.79); this is descriptive resampling, not a prospective decision rule. Foldability deteriorated as bias magnitude increased. In the full 52-complex seed-0 analysis, reference-based DockQ declined clearly at +/-3 but not at +/-1.5; a selected five-seed replication on eight complexes showed paired declines at every nonzero setting, but does not estimate the effect for all 52. In exploratory BindCraft sweeps, PD-L1 designs moved toward near-neutral charge at similar maximum interface pTM but with overlapping success-rate intervals; IL-7R-alpha responses were non-monotonic and RBD produced no strong designs. A fixed-backbone C-alpha-neighbour analysis found smaller same-sign charge-patch proxies near neutral charge, but this proxy is not a measured electrostatic surface or experimental developability endpoint.

q-bio.BM↗

arXiv2026

The Mechanism Matters: When Knowledge Graphs Help Reinforcement Learning

Knowledge graphs (KGs) are widely used to inject prior knowledge into reinforcement learning (RL), yet the literature is dominated by single-domain, positive-result method papers, so we lack a systematic account of when KG structure helps an agent, when it is neutral, and when it hurts. We conduct a controlled study that independently varies the RL task, the injection mechanism (state features, action masking, or potential-based reward shaping), and KG quality. Using a synthetic, fully controllable KG over MiniGrid environments, we report three findings. First, on compositional sparse-reward tasks structured KG guidance improves sample efficiency and solve reliability (70% to 97% of seeds), and a shuffle control that permutes the KG's edges while preserving their count collapses the benefit toward baseline (masking p=0.0001; shaping p=0.006), so the gain is structural rather than generic regularization. Second, KG value scales with the amount of task-relevant knowledge the graph contains. Third, and most consequential, safety depends on the mechanism: soft, optimality-preserving injection benefits from correct knowledge and harmlessly ignores incorrect knowledge, whereas hard masking is brittle, forbidding essential actions when the KG is incomplete or corrupted and making a wrong KG worse than none. A UMLS-derived clinical case study on sepsis management under offline RL is a careful null, underscoring that benefits require task structure the chosen mechanism can exploit. Our results give practitioners concrete guidance on how, and how much, to trust a KG when using it to guide RL.

cs.LG↗

arXiv2026

ShifaMind: A Multiplicative Concept Bottleneck for Interpretable ICD-10 Coding

Automated ICD-10 coding from clinical discharge summaries requires models that are both accurate on long-tailed multi-label classification tasks and interpretable to clinicians. Concept Bottleneck Models (CBMs) offer a principled framework for interpretability by routing predictions through human-interpretable concepts, but this transparency often comes at a cost: compressing rich clinical text representations into a narrow concept layer can restrict gradient flow and limit predictive capacity. We present ShifaMind, a concept-grounded architecture built around a Multiplicative Concept Bottleneck (MCB), which changes the form, rather than the width, of the bottleneck. Instead of projecting through a narrow concept layer, ShifaMind uses a learned multiplicative gate over a concept-grounded representation while retaining a scalar concept interface for inspection. On MIMIC-IV top-50 ICD-10 coding, ShifaMind achieves performance competitive with LAAT, the strongest baseline, across F1, AUC, and ranking metrics, while outperforming five additional ICD-coding baselines and providing concept-mediated explanations. Its substantial gains over a capacity-matched Vanilla CBM in both predictive performance and interpretability-oriented metrics highlight the importance of the bottleneck design.

cs.LG↗