arXiv Science⌕ Search

arXiv subjects

Yue Zhao

Publications and source records attributed to Yue Zhao.

At least 19 recordsLinked to original sources
arXiv2026

CHI-Bench: Can AI Agents Automate End-to-End, Long-Horizon, Policy-Rich Healthcare Workflows?

End-to-end automation of realistic healthcare operations stresses three capabilities underrepresented in current benchmarks: policy density, decisions must be grounded in a large library of medical, insurance, and operational rules; Multi-role composition: a single task requires the agent to play multiple roles with handoffs; and multilateral interaction: intermediate workflow steps are multi-turn dialogs, such as peer-to-peer review and patient outreach. We introduce $χ$-Bench, a benchmark of long-horizon healthcare workflows across three domains: provider prior authorization, payer utilization management, and care management. Each task hands the agent a clinical case in a high-fidelity simulator of 20 healthcare apps exposed via 87 MCP tools, which it must drive to a terminal status through tool calls and writing the role's artifacts, guided by a 1,290+ document managed-care operations handbook skill. Across 30 agent harness/models configurations, the best agent resolves only 28.0% of tasks, no agent clears 20% on strict pass^3, and executing all tasks in a single session slumps the performance to 3.8%. These results raise the hypothesis that similar gaps are likely to surface in other policy-dense, role-composed, irreversible enterprise domains.

cs.CL↗
arXiv2026

Controlled Decoding Attacks on Black-Box LLMs

Manipulating next-token probabilities during generation can bypass the safety alignment of large language models. Existing approaches, however, rely on access to model weights or numerical token probabilities and therefore do not apply to interfaces that return only sampled text. Reconstructing probabilities from sampled outputs offers a possible alternative, but finite sampling produces sparse and noisy estimates, while repeating this process at every generation step incurs substantial query costs. Our empirical observations suggest that large distributional changes along successful jailbreak trajectories are concentrated at a small subset of positions, motivating selective control. We introduce \method{}, a framework for jailbreaking through text-only continuation interfaces that permit repeated sampling and assistant-prefix continuation. Sample-Based Distribution Reconstruction combines sampled outputs with a prior over unobserved actions to obtain a usable control signal. Risk-Gated Residual Control uses the evolving response prefix to decide when to reconstruct and modify the distribution, concentrating sampling costs at selected positions. Speculative Multi-Token Execution further amortizes target calls by verifying and accepting draft prefixes that require no intervention. Across four target endpoints and three benchmarks, \method{} achieves the highest mean score most comparisons against baselines.

cs.CR↗
arXiv2026

A Fast Algorithm for Quaternion Tensor Singular Value Decomposition under the QT-Product with Applications to Color Video Processing

Based on the complex representation of quaternion matrices, this paper revisits the quaternion tensor singular value decomposition (QT-SVD) under the QT-product and establishes the corresponding $z$-block circulant matrix decomposition. We develop an efficient implementation of the QT-SVD. Numerical experiments show that this implementation is substantially faster than QT-SVD based on the quaternion matrix SVD approach \cite[Theorem~2.3]{AMLzhang2022} while maintaining high numerical accuracy. We further apply the QT-SVD to color video encryption and reconstruction. Experiments on five DAVIS video sequences show that the QT-SVD achieves higher reconstruction quality and shorter decomposition times than the quaternion T-SVD \cite{tsvdarxiv} under the same processing procedure. Both methods exhibit comparable ciphertext statistics and differential sensitivity, while the QT-SVD introduces less additional distortion under the tested input perturbations.

math.NA↗
arXiv2026

In-situ Control of the Photon-Magnon Synchronized Mode in a Miniaturized Magnetometer

Photon-magnon synchronized modes (PMSMs) provide a route for magnetic-field sensing by exploiting their enhanced field responsivity due to cusp points (CPs). However, the previous PMSM magnetometer relies on bulky discrete components and lacks in situ control of photon-magnon interactions, limiting its integration and adaptability. Here, we demonstrate a miniaturized PMSM magnetometer integrated on a printed circuit board. A variable resistor is used to tune the photon-magnon coupling strength in situ. By adjusting the variable resistor, the electromagnetic boundary condition of the magnetometer is altered; hence, the reservoir-mediated photon-magnon interaction is changed. The coupling strength shows a non-monotonic dependence on the reflection coefficient adjusted by the variable resistor and reaches its minimum at the impedance matching condition. Furthermore, we develop a non-Hermitian model with standing-wave interference to describe the PMSM dispersion and derive the critical condition for CP formation. This work realizes a compact and tunable PMSM magnetometer and provides a pathway for controlling photon-magnon interactions in integrated magnetic sensing systems.

cond-mat.mes-hall↗
arXiv2026

An inverse moving point source problem in inhomogeneous acoustic media: uniqueness, stability and reconstruction

This paper is concerned with the simultaneous recovery of the trajectory and intensity of an unknown moving point source in an inhomogeneous acoustic medium. We prove that the whole-boundary measurements over a finite time interval uniquely determine the moving source. Furthermore, under suitable propagation and rank assumptions, Lipschitz stability of determining both the trajectory and intensity is derived using waveforms measured at four fixed receivers outside the source region. A novel Volterra--Euler reconstruction scheme is developed for solving the inverse problem, and the error estimate is derived for the proposed scheme. Numerical experiments are presented to demonstrate the effectiveness of the proposed numerical method.

math.AP↗
arXiv2026

Block Diagonalization and Multiplicativity of Quaternion $Z$-Block Circulant Matrices with Applications

The motivation of this paper is twofold. We firstly investigate the block-diagonalization of the $z$-block circulant matrix $\mathtt{bcirc_z}(\mathcal A)$, and develop the algorithm $\mathtt{bcirc_z}$-inv for computing the inverse of $\mathtt{bcirc_z}(\mathcal A)$. Second, we establish the multiplicativity of the operator $\mathtt{bcirc_z}$, which yields the equivalence between the QT-product of tensors and the multiplication of their corresponding $z$-block circulant matrices. As applications of these results, we conduct large-scale numerical experiments and analyze the scalability of the Tikhonov-regularized model. We also obtain polar decompositions under the QT-product, develop an algorithm for computing them, and present a large-scale test and a scalability analysis. In addition, we evaluate several rotation strategies based on the QT-polar decomposition through video rotation applications. The results show that the decomposition remains stable and maintains inter-frame consistency while accurately preserving colors.

math.NA↗
arXiv2026

A Fast Algorithm for Quaternion Tensor Singular Value Decomposition under the T-product

Quaternion tensor singular value decomposition (T-SVD) under the T-product provides a framework for analyzing multidimensional quaternion data. However, the T-SVD construction of Pan and Ng (SIAM J. Matrix Anal. Appl., 2024) \cite{PanNg2024} contains a structural gap: an unrestricted quaternion matrix SVD need not preserve the paired Fourier block structure required for tensor factor recovery, potentially leading to loss of T-unitarity and inaccurate reconstruction. To address this issue, we develop a structure-preserving construction that transforms each paired quaternion block into a complex matrix and maps its complex SVD factors back to quaternion factors with the required structure. This construction corrects the proof of \cite[Theorem 4]{PanNg2024} and leads to a corrected version of \cite[Algorithm 2]{PanNg2024}, hereafter referred to as the ``corrected algorithm'', ensuring T-unitary tensor factors and an f-diagonal core for arbitrary third-order quaternion tensors. A numerical counterexample demonstrates the failure of \cite[Algorithm 2]{PanNg2024} and verifies the corrected algorithm at machine precision. Notably, we propose a fast structure-preserving algorithm, Algorithm~\ref{alg:t-fast}, and compare it numerically with the corrected algorithm. The experimental results show that Algorithm~\ref{alg:t-fast} reduces the decomposition time while maintaining near-machine-precision accuracy. Furthermore, its application to color video encryption yields high reconstruction quality, favorable ciphertext statistics, and stability under input perturbations.

math.NA↗
arXiv2026

TrainBridge: Agentic NPU Training Optimization Guided by GPU Compilation Evidence

We study how to improve training efficiency on Ascend NPUs. In the NPU training programs we study, framework-level compilation optimizations such as operator fusion are only partially applied, leaving fragmented computation and avoidable execution overheads. Profiling-guided tuning can address these inefficiencies, but it often requires costly trial and error. To make training on NPUs more efficient, we propose TrainBridge, an agentic approach for transferring GPU optimization guidance to NPU training. TrainBridge uses the highly optimized execution produced by mature GPU compilation stacks as a task-specific reference for NPU tuning. It extracts optimization intents from the GPU training execution to guide NPU program rewrites and further refines the rewritten program through iterative profiling. Our GPU-to-NPU migration experiments show that TrainBridge achieves an average 1.7x speedup across four workloads covering LLM pretraining, image classification, and vision-language training, and an average speedup of nearly 2.0x across 27 Modded-NanoGPT speedrun records with highly optimized GPU implementations.

cs.CL↗
arXiv2026

Text-to-Image Generative Modeling Without Language Pretraining

Modern text-to-image (T2I) systems use internet-scale language pretraining for text-conditioned image generation. We ask whether language pretraining is necessary for strong T2I generation. We introduce Halcyon, a family of early-fusion multimodal autoregressive models pretrained entirely from scratch on GPIC, a dataset of 100M image-text pairs. Halcyon-0.52B outperforms LlamaGen-XL/8 (48.0 vs. 63.3 gFD) with 18.2$\times$ less pretraining compute. Further, Halcyon-1.6B outperforms JiT-T2I-XXL/8++ (35.3 vs. 41.0 gFD) with 275$\times$ less pretraining compute. Controlled experiments show that text-only pretraining does not improve T2I generation. Halcyon also learns image captioning by replacing caption dropout with I2T supervision, maintaining competitive T2I generation quality under the same pretraining budget. We show that strong T2I systems can be trained from scratch without internet-scale language pretraining. Code and models are available at https://cs.stanford.edu/~keshik/halcyon

cs.LG↗
arXiv2026

Multi-Band Constraints on Cosmic Strings: Unifying Harmonic and Burst Spectra

Cosmic-string loops generate a broadband gravitational-wave background (GWB) that is typically modeled via two distinct formalisms: a discrete harmonic expansion, commonly used in pulsar-timing-array (PTA) studies, and a continuous burst superposition, employed in ground-based GWB searches. In this work, we formally unify the two formalisms, showing that they provide discrete and continuous representations of the same underlying radiation process and converge on the scale-invariant spectrum plateau. On the rising low-frequency branch, where the first few harmonics dominate, the discrete nature becomes important, causing the two formalisms to diverge. Within this unified framework, the spectral calculation is more consistent across frequency bands, enabling multi-band inference. Leveraging this physical insight, we perform joint Bayesian inference across four representative loop-distribution models using the NANOGrav, EPTA, and LIGO--Virgo--KAGRA (LVK) datasets. By jointly sampling the string tension $Gμ$ alongside the average cusp and kink numbers $\{N_c, N_k\}$, the loop-radiation uncertainties are accounted for. We find that employing the harmonic expansion strengthens the LVK bounds by $21\%-31\%$ for three of these models. Additionally, the stringent LVK bounds preclude three of these models from explaining the observed PTA common signal. For the sole surviving model, our multi-band analysis improves the inferred limit on $Gμ$.

gr-qc↗
arXiv2026

PersonaCUABench: Benchmarking Computer-Use Agents Serving Diverse Personas

Computer-use agents (CUAs) are commonly evaluated against fixed task specifications, but users may omit requirements, add constraints, or require approval before consequential actions. Completing the benchmark instruction does not guarantee serving the person who asked. We introduce PersonaCUABench, which holds 74 tasks across 11 domains fixed and varies only who asks. A persona agent, playing one of 44 personas in four groups, rewrites each instruction in that user's own words and answers the CUA's questions, while the CUA sees only the dialogue, never the profile or the original instruction. Across nine backbones (3,330 runs), mean task completion falls by 36% relative to the original requests. The losses have two sources: in 59.9% of cells that lose points, the agent engages with what the user asked for and still gets it wrong, and 11.2% are stops the user requested that the checker scores as failures. Even when a persona request is fully completed, the user gives the top satisfaction rating in only 62.7% of cells, against 84.1% for the original requests. CUAs should therefore be evaluated not only on task completion but also on whether they meet the requirements and constraints users express. Code: https://github.com/MatrAIx-ai/PersonaCUABench. Project page: https://matraix.ai/research/persona-cua.html

cs.HC↗
arXiv2026

Grid-Bench: Can LLMs Predict How Discrete Worlds Change?

Spatial instructions describe how to move objects, transform regions, or modify their surroundings. When several operations are applied in sequence, each acts on a configuration shaped by earlier changes. How accurately can large language models (LLMs) predict the resulting spatial state? We introduce Grid-Bench, an executable benchmark in which eight families of operations transform discrete worlds represented as two-, three-, and four-dimensional grids. Given an initial grid, explicit rules, and an event history expressed as text, a model predicts the complete final grid. Reference execution makes every predicted value checkable, supporting comparisons across spatial operations, history lengths, and workloads. Evaluating six LLMs shows that complete-state accuracy falls sharply as histories grow, with substantial divergence among models that perform similarly on single events. Models with similar exact-match accuracy can nevertheless differ substantially in the number of incorrect cells on shared instances. Even over long histories, some models recover many correct changes beyond what copying the initial state would yield. Grid-Bench makes both complete recovery and these differences in returned states directly measurable across a range of spatial conditions.

cs.CL↗
arXiv2026

From Relevant Memories to Sufficient Evidence: Rethinking Memory Utilization in LLM Agents

Long-term memory enables LLM agents to reuse past experiences, yet retrieving relevant memories does not necessarily provide sufficient evidence for answering a query. Essential information may remain fragmented across memory records, obscured by abstraction, or disconnected from the relations required for reasoning. We identify this relevance-sufficiency gap and propose QEMem, a framework that reformulates memory utilization as the construction of query-specific evidence sets, shifting the focus from individual retrieval relevance to collective evidential support. QEMem integrates three complementary mechanisms: query-guided discovery retrieves evidence across multiple memory granularities; source-grounded reification organizes it into structured ViewCards with explicit evidential roles and source references; and sufficiency-guided refinement selectively recovers missing information. Operating on existing memory stores without modifying memory formation, QEMem achieves 91.43% LLM-judge accuracy on LoCoMo with Claude Opus 4.5, outperforming the strongest evaluated baseline, MemR$^3$, by 7.6 percentage points and NEMORI by 10.7 points under a shared memory store. Further analyses demonstrate improved evidence coverage and strong performance on questions requiring cross-session evidence integration.

cs.AI↗
arXiv2026

Deep Mesoscopic Dynamics

Microscopic simulations resolve spatial patterns but are feasible only over small domains and short timescales, whereas bulk descriptions erase those patterns through spatial averaging. Mesoscopic fields preserve this spatial organisation, but their effective equations are known only for selected microscopic systems and scaling limits. We introduce Deep Mesoscopic Dynamics (DeepMesoD), which uses neural networks to learn an effective mesoscopic field equation from microscopic trajectories at a prescribed coarse-graining scale. For the nonconserved dissipative dynamics studied here, DeepMesoD learns the free-energy functional with a spatial interaction kernel and a state-dependent dissipation operator constrained by the fluctuation-dissipation relation. We first validate the construction in the Ising-Kac model, where the learned mesoscopic equation recovers the known hydrodynamic limit and rollouts remain stable far beyond the training horizon. We then treat two systems without closed-form mesoscopic descriptions. For a two-dimensional Heisenberg ferromagnet governed by atomistic spin dynamics, DeepMesoD learns a mesoscopic model whose predictions match atomistic references up to 1 ns, and a rollout with an unseen initial condition remains bounded up to 25 ns. For layered CrBr$_3$, the learned kernel captures the suppression and sign reversal of interlayer coupling at a stacking fault whose location and strength are not supplied as inputs. Controlled changes to the learned interaction show how fault number and placement shape multistep magnetic responses, complementing our magneto-photoluminescence measurements. Across the two atomistic systems, DeepMesoD achieves a three-to-four-order-of-magnitude reduction in wall-clock time compared with atomistic spin dynamics.

cs.LG↗
arXiv2026

GEO-Bench: Benchmarking Ranking Manipulation in Generative Engine Optimization

Large language models (LLMs) increasingly rank products, documents, and recommendations for user queries, which makes manipulating these rankings a growing concern for fairness and information integrity. Research on generative engine optimization (GEO) has produced many manipulation methods, but each is evaluated on its own dataset with its own metrics, so their relative strength and detectability stay unclear. We present GEO-Bench, a benchmark that evaluates GEO ranking-manipulation attacks under one protocol. It unifies black-box prompt-based attacks (TAP, Zero-Shot), white-box gradient-based attacks (STS, RAF, StealthRank), and ten white-hat C-SEO strategies. We score every method on five datasets against a fixed open-weight ranker (Llama-3.1-8B-Instruct), using metrics for both effectiveness (NRG, Success@α, Promote@α) and stealth (keyword violation rate, perplexity ratio). Our evaluation shows that effectiveness and stealth trade off across adversarial attacks, that black-box content rewriting matches or exceeds gradient-based attacks on rank promotion while producing more fluent text and can evade both keyword- and perplexity-based detection on some domains, and that the access model does not predict attack strength. By standardizing datasets, attack implementations, and metrics, GEO-Bench enables the first direct comparison across these attack paradigms and supports the development of detection methods.

cs.CR↗
arXiv2026

The First Step of Decision Making: Alignment under Semantic Uncertainty for Automated Operations Research

Problem definition: Automated operations research (OR) depends on correctly understanding the problem users intend to solve. In practice, limited user knowledge and vague expressions can obscure that problem, creating semantic uncertainty in the descriptions used for modeling. This uncertainty can lead to mathematical models that depart from users' intentions. We study semantic alignment to identify and correct errors or omissions in these descriptions before mathematical modeling. Methodology/results: We develop AMAO, an ambiguity-aware multi-agent framework for automated OR under semantic uncertainty. Its two-stage alignment process first uses semantic cues and contextual information to identify and correct potential semantic errors, then obtains additional information via human--AI interaction for further revision when the available context is insufficient. Specifically, AMAO integrates OR-guided mixture-of-experts (MoE) tuning and trajectory-based harness evolution to enhance semantic alignment capabilities. In addition, an ambiguity-aware benchmark and its matched multi-turn dialogue extension are proposed. Extensive experiments support that AMAO can recover the intended operational problem from ambiguous descriptions and recognize when available information is insufficient. Managerial implications: AMAO provides managers with an integrated workflow for translating ambiguous operational descriptions into mathematical models and optimization solutions. By combining semantic alignment with targeted user interaction, it supports recovery of the intended problem and improves downstream solution accuracy.

math.OC↗
arXiv2026

agent-risk: Risk Assessment for Changes to AI Agents

Before changing a deployed AI agent (a stricter safety gate, a new model), organizations must approve the change, starting from existing logs. Extending classical risk analysis to partial records and partial changes to running systems, agent-risk replays logged episodes, assuming nothing else changes and the agent does not anticipate the change. The log settles episodes acting as before, a declared stop value settles stopped ones, and the rest need logged support, a saved-state rerun, or a bound. We prove what logs must record for exact replay and which saved states serve a gate family. For independent episodes, we bound the reruns a decision needs and tolerable drift from live behavior. In a bash sandbox, a 7,200-episode log alone decided neither of two retry gates, which let the agent act after refusals the log never shows. Rerunning only each gate's blocked episodes from saved states reached both live decisions at half the agent calls of a live test sized post hoc for them, given the log. Without per-step harm, a stopping gate's certified harm ceiling rose up to 2.5-fold, since the log hides whether harm preceded the stop. Approval thus needs evidence designed in advance: log fields, saved states, targeted reruns.

cs.AI↗
arXiv2026

Additive results of the dual Moore--Penrose generalized inverse with an application to rigid-body motion estimation

We derive explicit formulas for the dual Moore--Penrose generalized inverse (DMPGI) of dual complex matrix sums under some conditions. We first express the DMPGI of a matrix partitioned into column blocks in terms of these blocks and associated projectors, and then derive two formulas for matrix sums. Two examples illustrate the results. We further apply the formulas to rigid-body motion estimation with two observation points subject to a first-order perturbation of their positions that preserves the rank-deficient observation geometry. The DMPGI recovers the observable motion components from the velocity data.

math.NA↗