arXiv subjects

Xiaoyu Xu

Publications and source records attributed to Xiaoyu Xu.

At least 19 recordsLinked to original sources

arXiv2026

The Image Still Has a Say: Final-Answer Repair for Multimodal Chain-of-Thought

Although chain-of-thought prompting has improved multimodal reasoning, it is still difficult to produce correct final answers, as the reasoning can drift away from the image. Besides, the trace is already fixed when the answer is generated, leaving no room for self-correction. Considering the image is still available at the final-answer step, we think it is reasonable to fix the answer there without rewriting the reasoning. As such, the problem becomes to correct the final answer using the image under fixed reasoning. Unlike methods that improve trace generation through training, resampling, or decoding-time grounding, we repair the final-answer readout while keeping the reasoning trace fixed. The motivation is based on our finding that a wrong option can become prematurely committed in the reasoning while the correct option still has stronger image support in middle-to-deep layers. Thus, we propose Text-to-Visual Evidence Reallocation (TVER), a training-free method for final-answer repair. Specifically, TVER selects answer-related text and question-matched image patches, and moves bounded attention from text to patches. Furthermore, the patches are chosen in a middle-to-deep layer window based on question relevance. Our method improves answers across benchmarks and backbones, with gains in both multiple-choice and open-answer evaluations.

cs.CL↗

arXiv2026

SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents

Tool-using language-model agents select and execute third-party artifacts. Different implementations can return the requested output while producing hidden execution effects that task-, attack-, or choice-based evaluations may miss. We study functional counterfeits: implementations that match benign alternatives on the requested output but add an effect forbidden by the task contract. We introduce SINGED (Source Integrity and the Nonidentifiability Gap in Execution Decisions for LLM Agents), a controlled benchmark covering five primary and two held-out task families. It varies displayed rank, evidence depth, decision policy, model release, and agent configuration, while task and process oracles verify the artifact and execution path. Across 7,549 audited trials, the randomized-rank study finds counterfeit execution in 45% (27/60) of rank-one trials and none at later ranks. Cross-candidate comparison eliminates shallow failures and reduces layered failures from 15.7% to 4.2%, but leaves dependency failures; its benefit is uncertain on unseen effects and public-package structures. Moreover, seven releases with no counterfeit executions when benign alternatives are available execute the counterfeit in 55/175 single-source cells after alternatives are removed. SINGED thus exposes a rank-, evidence-, and choice-sensitive outcome-to-execution gap: evaluation must connect correct outputs to execution paths.

cs.CR↗

arXiv2026

Machine Unlearning for Large Language Models: Foundations, Advances, and Agentic Extensions

Machine unlearning aims to remove target influence while preserving other capabilities. This survey compares methods, benchmarks, and evidence across large language models and systems using retrieval, memory, tools, and interacting agents. A five-layer framework connects removal requests, system boundaries, target locations, interventions, and supported claims. A seven-stage lifecycle and six evidence dimensions guide comparison. The review shows that target construction, retained data, and recovery tests affect reported outcomes. Evidence from model evaluations remains insufficient to establish removal across external state and subsequent updates, motivating evaluation that tracks dependencies and tests whether target influence returns.

cs.CR↗

arXiv2026

CAITLYN: Can LLM Agents Autonomously Synthesize Defenses against Emerging Injection Attacks?

Prompt injection attacks on Large Language Model (LLM) agents seek to introduce malicious instructions or content into external text sources retrieved by agents, forcing the underlying LLMs to execute harmful actions outside their benign scope. While current defenses effectively counter known injection attacks, deploying them in LLM agent environments remains challenging due to attack variants and emerging threats. Moreover, existing solutions typically suffer from an inherent trilemma, i.e., a constant trade-off among runtime efficiency, contextual precision, and adaptability. To bridge this gap, we propose Continuous Agents for Injection Threats via Lifelong Yielding Nexus (CAITLYN), an agent-agnostic defense middleware. CAITLYN integrates two systems. System I focuses on immediate defense against existing attacks using a two-tiered library: Tier-0 for rule-based detection scripts and Tier-1 for optimized LLM-based accurate inference. System II, in contrast, is deployed to monitor potential abnormal signals and attempt to synthesize new defenses. On standard benchmarks, CAITLYN matches the detection performance of state-of-the-art defenses at lower token overhead than LLM-as-a-judge baselines. On Emerging, our new delivery-aware benchmark featuring novel injection techniques, static baselines and the standalone System I configuration remain vulnerable. In contrast, System II autonomously synthesizes verified defense capabilities, substantially lowering the attack success rate across three diverse agent environments.

cs.CR↗

arXiv2026

Amorphous and Nanocrystalline Topological Semimetal YPtBi/W/CoFeB Heterostructures for BEOL-Compatible Spin-Orbit Torque Devices

Spin-orbit torque (SOT) devices require spin-source materials that combine efficient charge-to-spin conversion with back-end-of-line (BEOL) thermal compatibility. Here, we show that YPtBi/W/CoFeB heterostructures deposited directly on Si/SiOx remain predominantly amorphous or weakly nanocrystalline from room temperature to 400 °C while preserving a large effective damping-like SOT response. Anomalous Hall and harmonic Hall measurements, together with X-ray diffraction, cross-sectional transmission electron microscopy, X-ray reflectivity, and electron energy-loss spectroscopy, show that the response does not correlate with bulk crystallization of YPtBi. Instead, the interfacial analysis indicates that the strongest trend of the spin Hall angle is associated with the chemistry of the upper YPtBi/W boundary: the effective SOT response tracks the integrated W concentration at that YPtBi surface. Meanwhile, a two-spin source analysis shows that the Pt-W-rich interlayer provides only a small positive correction, insufficient to explain the large negative effective spin Hall angle by itself. The dominant control variable is therefore inferred to be the incorporation of W into the upper YPtBi interface, which plausibly modifies the local electronic structure of YPtBi and amplifies the stack-level response. These results provide a more physically constrained interpretation of the stack behavior and identify a BEOL-compatible route to disordered topological spin-source layers for scaled SOT memory and compute-in-memory hardware.

cond-mat.mtrl-sci↗

arXiv2026

Profinite rigidity in lattices of $\mathrm{PSL}(2,\mathbb{C})$

A finitely generated group is profinitely rigid among a class of finitely generated groups if it can be distinguished among this class by its set of finite quotient groups. This paper proves that all lattices in $\mathrm{PSL}(2,\mathbb{C})$ are profinitely rigid among themselves. In addition, for any lattice $Γ\le \mathrm{PSL}(2,\mathbb{C})$, it is proven that $\mathrm{Out}(\widehatΓ)\cong \mathrm{Out}(Γ)$, where $\widehatΓ$ denotes the profinite completion of $Γ$.

math.GT↗

arXiv2026

RUTA: Principled Visual Token Allocation via Rate-Utility Optimization

High-resolution images and long videos provide vision-language models with rich context for multimodal reasoning and fine-grained perception, but the resulting long visual token sequences make large language model-side computation and memory costly. Existing visual token reducers often operate at prescribed rates, while recent methods adapt token counts across inputs using method-specific learned thresholds or importance predictors. We introduce RUTA, a principled Rate-Utility Token Allocation method that performs pre-LLM reduction by jointly learning which tokens to retain and how many to allocate to each image-query pair. RUTA constructs query-conditioned candidate tokens and predicts a retention probability for each candidate. During training, these probabilities parameterize independent Bernoulli gates, while their sum provides a differentiable training-time estimate of the token count for each pair. Retained tokens serve as anchors that aggregate information from non-retained tokens according to semantic affinity and spatial proximity. RUTA is optimized with a penalized rate-utility objective that balances downstream task loss against expected token usage. Averaged across five benchmarks and measured relative to each backbone's full-token baseline, RUTA uses only $2.0\%$ and $4.2\%$ of visual tokens while preserving $88.2\%$ and $94.4\%$ of task performance on LLaVA-NeXT-7B and Qwen3-VL-8B, respectively.

cs.CV↗

arXiv2026

VLT/MUSE Study of Close AGN Pairs and Host Galaxies in the Local Universe. I. Overview of the Ionized Gas

Studying AGN pairs and their host galaxies is essential for understanding the interplay between galaxy mergers and key internal processes such as supermassive black hole fueling and feedback. We cross-match between the Big Multi-AGN Catalog (The Big MAC) and the public data archive of the VLT/MUSE, and obtain 12 AGN pair candidates in the local universe ($z\lesssim0.1$) with a projected distance $r_{\rm p}\leq 20\rm\,kpc$. Using the archival VLT/MUSE data, we present a spatially resolved study of the ionized gas kinematics and ionization properties of these 12 AGN pair candidates. By decomposing the optical emission lines into two Gaussian components, we try to separate gas associated with disk rotation from non-circular motions. We further identify dominant ionization mechanisms using spatially resolved BPT diagnostics. We find that both nuclei in 4 of the 12 systems are classified as Seyfert or LINER. In addition, three nuclei are classified as star-forming or composite in the optical diagnostics, but are identified as AGNs at other wavelengths. Kinematically, regularly rotating ionized gas disks are detected in 16 of 24 nuclei. Prominent tidal features traced by ionized gas are also detected in 9 systems. Ionized gas outflows are widespread and are detected in 18 nuclei. Finally, for three nuclei (Mrk 739A, NGC 7592B, and J1544+0446A), we find evidence for fading AGN activity over the past several $10^{4}\rm\, yr$, based on optical emission-line ratios and an assumed AGN photoionization model.

astro-ph.GA↗

arXiv2026

UniReLo: Learning a Unified Humanoid Policy from Fall Recovery to Locomotion across Diverse Terrains

Reliable fall recovery, which commonly aims at attaining a nominal upright posture, is essential for the autonomous operation of humanoid robots in unstructured field environments. Although existing posture-centered methods can synthesize coordinated whole-body recovery motions from diverse fallen configurations, they may result in a dynamically fragile support state, leading to secondary loss of balance or unstable resumption of commanded locomotion, particularly under terrain-dependent contact conditions. We propose to learn a unified humanoid policy from fall recovery to locomotion (UniReLo) across heterogeneous field terrains. UniReLo leverages continuously gated multi-scale motion priors to modulate frame-, sequence-, and gait-level adversarial supervision according to recovery progress, preserving the distinct temporal structures of recovery and locomotion without requiring fixed-threshold switching. In addition, terrain-conditioned recovery guidance evaluates the evolving support state using a terrain-relative support representation and support-feasibility assessment. Simulation and outdoor real-world experiments demonstrate that UniReLo can deliver stable and continuous recovery-to-locomotion behaviors for humanoids across diverse field terrains. The supplementary video is available at https://vsislab.github.io/UniReLo/.

cs.RO↗

arXiv2026

Should Missing Modalities Always Be Necessary to Repair for Multi-modal Sentiment Analysis?

Existing methods for multimodal sentiment analysis (MSA) under missing modalities usually follow a repair-first paradigm. We revisit this assumption and ask: \emph{should every missing modality be repaired?} A per-sample oracle analysis shows the answer is not always: full-modality input is optimal for only a small fraction of samples, and every modality subset is preferred by some samples. These results suggest that adding or repairing modalities may not always improve prediction, and that the utility of each modality is sample-dependent. Building on this finding, we propose \textbf{S}ufficiency-\textbf{I}nformed \textbf{E}vidential \textbf{V}al\textbf{vE} (\textbf{SIEVE}) that turns ``whether to repair'' into an explicit, learnable decision at the sample level. SIEVE compares a direct prediction branch with a repair branch, derives an empirical sufficiency signal from their per-sample loss gap, and routes each input through an evidential gate that jointly models sufficiency and its epistemic uncertainty. SIEVE is repair-agnostic: it operates as a plug-and-play decision on top of any explicit or implicit repair module, without modifying its internal design. Experiments on CMU-MOSI and IEMOCAP show that SIEVE consistently improves representative repair backbones across evaluated missing rates, and approaches the per-sample dual-branch achievable optimum.

cs.CL↗

arXiv2026

Profinite rigidity of simple closed curves in surface groups

This paper establishes a new characterization of simple closed curves on a closed orientable surface. Let $Γ$ be the fundamental group of a closed orientable surface. We prove that if an element $g\inΓ$ has the same possible images as a given simple closed curve $γ\in Γ$ under epimorphisms from $Γ$ to every finite group, then $g$ belongs to the $\mathrm{Aut}(Γ)$-orbit of $γ$, i.e. $g$ is itself a simple closed curve with the same topological type as $γ$. Consequently, the set of simple closed curves in $Γ$ is closed in the profinite topology of $Γ$; and we obtain a new algorithm to decide whether a given element in $Γ$ can be represented by a simple closed curve. Proper powers of simple closed curves and the pro-$p$ cases are also discussed.

math.GT↗

arXiv2026

Learning Stable Canonical Worlds for Novel View Synthesis and Beyond

Feed-forward Gaussian splatting (FFGS) facilitates real-time novel view synthesis, yet current methods often remain tied to view-dependent predictions. As more input views are added, they may accumulate noisy or redundant evidence instead of converging to a stable scene representation. In this paper, we introduce CanonicalGS, a feed-forward pipeline that maps cluttered multi-view observations into a stable, scene-centric representation. CanonicalGS first extracts view-centric evidence from depth, semantic features, and uncertainty estimates, and then aggregates this evidence in a canonical latent world using uncertainty-aware fusion. By emphasizing reliable observations while suppressing uncertain or redundant ones, CanonicalGS produces representations that scale more effectively for novel view synthesis and transfer to downstream visual perception tasks. Experiments show up to a $2.5$ dB improvement in peak signal-to-noise ratio for synthesizing novel views and an $11\%$ gain in semantic segmentation accuracy.

cs.CV↗

arXiv2026

Jet-ISM Interaction and Multi-channel AGN Feedback in the Post-merger Galaxy 4C+29.30

4C+29.30 is a post-merger galaxy hosting a rejuvenated active galactic nucleus (AGN) with a complex multi-scale radio morphology, making it an ideal laboratory to study the interplay between different AGN feedback modes. We present a multi-wavelength analysis combining optical integral field spectroscopy (SDSS/MaNGA and CFHT/SITELLE) with radio continuum imaging (VLASS) to map the ionized gas kinematics and ionization structure across the galaxy. We uncover a galaxy-scale, biconical ionized gas outflow whose axis is misaligned by $\sim$26$^\circ$ from the radio jet. This outflow, characterized by broad line widths and Seyfert-like ionization, is mostly consistent with a radiatively driven wind from the central supermassive black hole, which is accreting at a relatively high Eddington ratio ($L_{\mathrm{bol}}/L_{\mathrm{Edd}} \gtrsim 0.1$). In contrast, the northern radio lobe clearly drives localized gas acceleration and increased velocity dispersion, indicative of jet-driven shocks interacting with the interstellar medium, consistent with previous X-ray findings. The coexistence of a radiatively driven galactic-scale outflow and a distinct, misaligned radio jet demonstrates that multiple AGN feedback channels can operate simultaneously within the same system, providing new evidence for the concurrent action of radiative and mechanical feedback.

astro-ph.GA↗

arXiv2026

Improved selector behavior in ultrathin chromium-doped V$_2$O$_3$ films

Devices based on the negative differential resistance effect in chromium doped V$_2$O$_3$ are considered to be promising as selector elements for use in emerging memory technologies, as well as for neuromorphic applications. It is shown by electrical measurements, that the switching effect is maintained for very thin films down to 5 nm, and even improved properties such as a low leakage current and an abrupt transition are observed. For these thicknesses, the behavior of crystalline and amorphous films becomes very similar; most strikingly, a forming step is required in both. Transmission electron microscopy reveals this to be likely due to a thin amorphous layer that forms at the interface to the TiN electrode. Elemental mapping further shows a complex distribution of the chromium dopants, as well as a diffusion of Ti into the layer from the electrode, which might be responsible for the improved properties.

cond-mat.str-el↗

arXiv2026

From Craft to Kernel: A Governance-First Execution Architecture and Semantic ISA for Agentic Computers

The transition of agentic AI from brittle prototypes to production systems is stalled by a pervasive crisis of craft. We suggest that the prevailing orchestration paradigm-delegating the system control loop to large language models and merely patching with heuristic guardrails-is the root cause of this fragility. Instead, we propose Arbiter-K, a Governance-First execution architecture that reconceptualizes the underlying model as a Probabilistic Processing Unit encapsulated by a deterministic, neuro-symbolic kernel. Arbiter-K implements a Semantic Instruction Set Architecture (ISA) to reify probabilistic messages into discrete instructions. This allows the kernel to maintain a Security Context Registry and construct an Instruction Dependency Graph at runtime, enabling active taint propagation based on the data-flow pedigree of each reasoning node. By leveraging this mechanism, Arbiter-K precisely interdicts unsafe trajectories at deterministic sinks (e.g., high-risk tool calls or unauthorized network egress) and enables autonomous execution correction and architectural rollback when security policies are triggered. Evaluations on OpenClaw and NanoBot demonstrate that Arbiter-K enforces security as a microarchitectural property, achieving 76% to 95% unsafe interception for a 92.79% absolute gain over native policies. The code is publicly available at https://github.com/cure-lab/ArbiterOS.

cs.CR↗

arXiv2026

Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs

Unlearning in large language models (LLMs) aims to remove specified data, but its efficacy is typically assessed with task-level metrics like accuracy and perplexity. We show that these metrics can be misleading, as models can appear to forget while their original behavior is easily restored through minimal fine-tuning. This \emph{reversibility} suggests that information is merely suppressed, not genuinely erased. To address this critical evaluation gap, we introduce a \emph{representation-level analysis framework}. Our toolkit comprises PCA similarity and shift, centered kernel alignment (CKA), and Fisher information, complemented by a summary metric, the mean PCA distance, to measure representational drift. Applying this framework across multiple unlearning methods, data domains, and LLMs, we identify four distinct forgetting regimes based on their \emph{reversibility} and \emph{catastrophicity}. We compare recovery strategies and show that relearning efficiency relies on the data source. We also find that irreversible, non-catastrophic forgetting is exceptionally challenging. By probing unlearning limits, we identify a case of seemingly irreversible, targeted forgetting, offering insights for more robust erasure algorithms. Overall, our findings expose a gap in current evaluation and establish a representation-level foundation for trustworthy unlearning.

cs.CL↗

arXiv2026

Design and Implementation of BNN-Based Object Detection on FPGA

This paper implements a Binary Neural Network (BNN) based YOLOv3-tiny-like object detector on a low-cost FPGA. The network takes 320*320*3 RGB images as input. Its main convolution layers use 1-bit weights and 8-bit activations, while Conv1 and the final detection head use fixed-point standard convolutions. From the trained ONNX model, weights, biases, and quantization parameters are extracted, converted to fixed point, packed into COE files, and stored in Vivado BRAM ROMs. The hardware is written fully in Verilog RTL and includes padding, line buffering, binary convolution, quantization post-processing, max pooling, and detection-head computation. For layers where Mul_prev is indexed by input channel and Div_current by output channel, Mul_prev is fused in-to the BNN PE so that channel-wise compensation is applied during accumulation. On VOC, the model obtains 39.6% mAP50 with 0.098 GFLOPs and 0.74 M parameters. RTL simulation shows that the final raw detection output reaches a correlation coefficient of 0.999964 and a mean absolute error of 0.020027 against the corresponding ONNX node.

cs.AR↗

arXiv2026

FIT to Forget: Robust Continual Unlearning for Large Language Models

While large language models (LLMs) exhibit remarkable capabilities, they increasingly face demands to unlearn memorized privacy-sensitive, copyrighted, or harmful content. Existing unlearning methods primarily focus on \emph{single-shot} scenarios, whereas real-world deletion requests arrive \emph{continually}. Naïvely applying these methods to sequential requests leads to severe utility degradation and catastrophic forgetting. To address this, we propose \fit, a robust continual unlearning framework to process high-volume sequential deletion streams while resisting both catastrophic forgetting and post-unlearning recovery. \fit stabilizes sequential updates through three synergistic mechanisms: redundancy \underline{F}iltering, \underline{I}mportance-aware adaptive algorithm selection, and \underline{T}argeted layer attribution. Furthermore, to facilitate rigorous evaluation, we introduce \textbf{PCH}, a unified benchmark encompassing \textbf{P}ersonal, \textbf{C}opyrighted, and \textbf{H}armful content, alongside two symmetric metrics, Forget Degree (F.D.) and Retain Utility (R.U.), to systematically quantify forgetting-utility trade-offs. Extensive experiments across five LLMs (up to 14B parameters) demonstrate that \fit consistently achieves state-of-the-art unlearning efficacy and utility preservation. Notably, even after hundreds of sequential requests, \fit preserves strong downstream (\eg, GSM8K, MMLU) performance and exhibits superior resilience against relearning and quantization recovery attacks.

cs.CL↗