SEARCH · arXiv Science

Search arXiv Science

Search indexed arXiv papers on artificial intelligence, large language models, computer vision and robotics. Read source abstracts and follow links to arXiv.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 613 records · Page 34Linked to original sources

arXiv2026

Decomposable polytopes with few vertices

A polytope $P$ is decomposable if it can be written as the Minkowski sum of two polytopes that are not homothetic to it. It is well known that decomposable $d$-dimensional polytopes with $2d$ or fewer vertices are the simplicial prisms. More recent work shows that, with two exceptions in low dimensions, decomposable $d$-dimensional polytopes with exactly $2d+1$ vertices are either pentasms or capped prisms. All these examples have a line segment for a summand. In this paper, we extend this conclusion to decomposable $d$-polytopes with exactly $2d+2$ or $2d+3$ vertices. In both cases, all such polytopes, with three exceptions, have a line segment for a summand. The exceptional cases are specified in detail.

math.CO↗

arXiv2026

Echoes of Error: Residual-Directional Local Rollout Consistency for Timeseries Forecasting

In time-series forecasting, rollout errors are not merely one-step fitting discrepancies: once fed back into the evolving state, they can perturb future predictions. We formalize this effect through local rollout consistency, which compares the next prediction produced under teacher forcing with that produced under free running. In principle, this consistency can be enforced directly by tracking the residual-induced perturbation of the next state. In practice, however, the residual-to-state alignment operator is often difficult to design when the input state and output block have different dimensions, heterogeneous components, or architecture-dependent layouts. We therefore use a first-order local surrogate that penalizes the Jacobian-vector product of the predictor along the actual feedback perturbation, suppressing precisely the directions through which self-generated errors remain visible to future predictions. We further give the same loss a geometric interpretation near a predictive manifold: by controlling residual-induced directions that probe the normal bundle, the objective yields theoretical conditions under which free-running trajectories remain inside a stability tube around the manifold. Experiments on time series forecasting tasks support this view, showing that the proposed regularization improves predictive accuracy. More broadly, our results suggest a training principle for time-series forecasters and sequential predictors: a model should not only make small one-step errors, but also learn not to let its own errors echo into the future. Code is available at https://github.com/Wangzzzzzzzz/Echoes-Of-Error.

cs.LG↗

arXiv2026

Adversarial Robustness of Kernel Machines: A Comprehensive Analysis

Kernel machines are an important class of models in machine learning. However, the question of how robust modern kernel machines are to adversarial examples has not been studied comprehensively. In this paper, we provide a thorough empirical investigation of the adversarial robustness of kernel-based models for both binary and multiclass classification tasks, via white-box and black-box evasion attacks. We evaluate the native robustness of kernel machines, random feature classifiers, and the relatively newer Recursive Feature Machines. In addition, we provide an algorithm for approximate adversarial training of kernel machines. Our experiments on classification tasks on image and tabular datasets strongly indicate that kernel machines are natively more robust than neural networks, i.e., their performance degrades more gracefully against adversarial perturbations.

cs.LG↗

arXiv2026

Suppression of the Laser Hosing Instability in a Parabolic Plasma Channel

We present an analytical stability analysis of the laser hosing instability in a parabolic channel in the weakly relativistic regime. We employ a variational principle approach to derive a set of coupled equations describing laser dynamics in a transversely inhomogeneous plasma. The quadratic Lagrangian formalism is applied to perform a stability analysis and to derive the growth rates for hosing in both long- and short-wavelength regimes. We find that a parabolic channel suppresses the long-wavelength hosing mode completely, for any channel depth, and that the unstable band of the short-wavelength mode is bounded below by a cutoff wavenumber set by the ratio of the channel frequency to the hosing coupling. A steeper channel narrows the unstable band and lowers the short-wavelength growth rate, but cannot stabilize the mode, since the dispersion relation forbids damping identically. The analysis is accompanied by two-dimensional particle-in-cell simulations, which reproduce the prediction in the nonlinear regime: the long-wavelength mode is absent in a channel, the surviving modulation shortens as the channel steepens, and its amplitude falls with channel depth. Further, our simulation results demonstrate the sensitivity of off-axis laser propagation to the plasma channel and distinguish the hosing instability from laser oscillations due to off-axis laser propagation in a plasma channel.

physics.plasm-ph↗

arXiv2026

AMORT-V1: Checkpointed Post-Quantum Attestation for Industrial Controllers

Programmable logic controllers often remain deployed for decades, making post-quantum attestation a long-term requirement. Prior measurements of OpenPLC attestation show that post-quantum signing can consume 88--99% of round-trip latency and that durable state can further limit throughput. We introduce AMORT-V1, a checkpointed attestation protocol that moves public-key signing and durable commitment from individual reports to periodic checkpoints. An ML-KEM epoch establishes per-device evidence keys, devices authenticate reports with MACs, and the controller commits ordered evidence through hash-chained Merkle checkpoints signed with ML-DSA or SLH-DSA. Because shared MACs do not provide transferable proof of device origin, AMORT-V1 adds a device-held disclosure chain whose keys are released after checkpoint commitment. We validate the protocol with a 27-case attack matrix, 149 differential-test vectors, and a seven-node Raspberry Pi 5 testbed with five physical OpenPLC provers. Checkpointing reduces controller cost by 90 times relative to per-report ML-DSA without durable logging and by 878 times when durable logging is required. Transferable device-origin verification costs 2.95micro sec per report, while controller-side scaling to 10,000 identities requires 6.18 micro sec and 155 octets per report. AMORT-V1 also supports rollback-resistant restart through TPM-backed monotonic state without placing durable hardware operations on the per-report path.

cs.CR↗

arXiv2026

KOSMOS: Self-scheduling Persistent Kernels for Communication-Compute Overlap

Tensor and sequence parallelism (TP+SP) and expert parallelism (EP) put collectives on the critical path of transformer layers. State-of-the-art fused kernels mitigate this with fixed roles or schedules, but this rigidity leaves large idle windows. Predicting a communication-computation split does not remove them either; a predetermined split cannot follow data readiness. We present KOSMOS, a library for self-scheduling persistent kernels whose workgroups use queues ordered by consumer demand to switch between communication and computation roles as data become ready, with no scheduler, per-call cost model, or tuned split. KOSMOS fuses every TP+SP collective of a transformer layer with its GEMM, and runs an entire expert layer, from router to fold, in one launch per direction. Evaluated on AMD Instinct MI350X and AMD Instinct MI355X GPUs, KOSMOS speeds up TP+SP end-to-end training in Megatron-LM by 1.10-1.28x in BF16 and 1.10-1.25x in MXFP8. KOSMOS accelerates end-to-end training of DeepSeek-V3 and Qwen3-235B proxies by 1.29-1.83x over DeepEP.

cs.DC↗

arXiv2026

Localization Does Not Imply Steerability: A Mechanistic Study of Sign Errors in LLM Mathematics

When large language models do multi-step mathematics, a characteristic failure recurs: the model writes one wrong sign token mid-computation -- a cofactor sign, the minus of a recursive integration-by-parts step -- then executes the rest of the arithmetic correctly, and the answer comes out wrong. We ask where inside the network that sign is written. Across six open models spanning 14B to 675B parameters, a per-layer readout shows the wrong sign is committed late -- by MLP layers in the last quarter of the network (70-100% per model and task), a pattern present, where tested (Qwen), in the base model before instruction tuning. The mechanism varies: some models carry fixed "minus-stamp" layers that push a minus regardless of the right answer, others carry amplifiers of whichever sign was already chosen, and Qwen adds a downstream rescue layer that opposes the stamp. The circuit is causal: subtracting a single sign direction from the residual stream flips 13 of 14 held-out minus-written integration-by-parts errors on Llama-3.3-70B, with flips replicating on Qwen, Gemma, and Mistral-Small (24-70% per cell), and with representation-level specificity -- the same dose breaks correctly-minus answers while sparing correct-plus answers where the direction is surgical (0/72 on Llama), and matched random-direction and control-layer interventions are null. Core claims were preregistered with pass criteria frozen in git before held-out data was seen: 23 of 29 checks passed, all misses reported. But causality is not uniform: Phi-4 implements an equally well-localized circuit at the same late depth, yet the identical intervention flips almost nothing -- the sign is written redundantly across ~15 layers with margins several times larger (median 17.8 logits). Localization, we conclude, does not imply steerability: two models can share a circuit location yet differ enormously in how overturnable it is.

cs.LG↗

arXiv2026

Disproof of a conjecture of Ruscheweyh et al. on universal convexity of Ramanujan generating function

We disprove a conjecture of Ruscheweyh, Salinas and Sugawa concerning the universal convexity of the normalized generating function associated with the Ramanujan sequence $θ(n).$ More precisely, we prove that the function \[ σ(z)=\frac{1}{θ(1)-1/3}\sum_{n\geq1}(θ(n)-1/3)z^{n} \] is not universally convex on the slit domain $\mathbb{C}\backslash[1,\infty).$ The proof uses Watson\textquoteright s integral representation of $θ(n),$ asymptotic estimates for an auxiliary function $h,$ and the representation of derivatives of universally convex functions via logarithmic integrals. As a general extension of this result, we also show that the generalized Ramanujan generating function \[ σ_α(z)=\frac{1}{θ(1)-1/3}\sum_{n\geq1}(θ(n)-1/3)\frac{z^{n}}{n^α} \] is universally convex if and only if $α\geq1.$

math.CV↗

arXiv2026

Bergman Kernel Zeros on Rational Hartogs Triangles

We prove the Edholm--Mathew nonvanishing conjecture for the palindromic polynomials associated with rational Hartogs triangles. For relatively prime positive integers $m>n$, we show that $e^{-i(m-n)θ}Q_{m,n}(e^{iθ})$ is strictly positive for every real $θ$ and derive an explicit lower bound. The proof expresses this trigonometric polynomial as a finite average of products of unnormalized Fejér kernels. It follows that $Q_{m,n}$ has exactly $m-n$ zeros in the punctured unit disc, counted with multiplicity. As a consequence, a rational Hartogs triangle has a zero-free Bergman kernel if and only if its exponent is the reciprocal of a positive integer.

math.CV↗

arXiv2026

Compact Motion Embeddings for Feed-forward Unified Human Animation

Animating a reference image with a driver's motion requires a motion representation that captures face, hand, and body articulation but excludes the driver's appearance. Most body animation methods take motion from external pose estimators and render it with many denoising steps; compact learned motion representations mostly cover the face. We present FUHA, a real-time-capable feed-forward transformer that learns a compact motion embedding of the whole human and uses it for face, upper-body, and full-body animation. A Q-Former compresses the driver's features from a frozen visual encoder into this embedding. To disentangle motion from appearance, a novel contrastive loss pulls it toward the motion embedding of the driver's rendered keypoint image and away from that of the same person in another pose. At inference time, FUHA needs no external pose estimators, keypoints, or parametric body models. As a retrieval key, the motion embedding matches body pose better than the learned global embeddings of ten vision encoders. Its same-person retrieval rate is 0.1%, against 9.5% for its own DINOv3 backbone. On our upper-body benchmark, FUHA outperforms all baselines on every self-reenactment metric and on cross-reenactment identity similarity. It is competitive on face and full-body and runs at up to 38.9 FPS at 512x512 on a single RTX 4090.

cs.CV↗

arXiv2026

Signed but Not Safe: Requirement Integrity in Multi-Agent LLM Handoffs

Enterprise AI agents increasingly split a user's request across subagents and merge their results, and each handoff can summarize away, alter or ignore a requirement. We report a preregistered study with synthetic, exactly scorable tasks comparing free-text, structured JSON and signed requirement-manifest handoffs: the orchestrator extracts each requirement as a verbatim quote plus a checkable predicate, code signs the manifest with HMAC-SHA256, and deterministic code verifies the merger's decision. With Qwen3-8B (1,440 trajectories, five threats), signed manifests cut unsafe commits under attack from 69.4% to 9.0% (60.4 pp, 95% CI [51.4, 69.4]) with no net loss of conformant commits relative to structured handoffs. Signing is what defeats in-transit tampering: an unsigned manifest committed violations in 79% of mutated runs, the signed one in none. On identical trajectories the deterministic verifier caught 78.7% of violating decisions versus 59.0% for an LLM checker, with 7% versus 50% false alarms. An oracle manifest removed all remaining unsafe commits: the residual risk comes from extraction errors made before signing. A preregistered pre-signing injection attack confirmed this boundary: one adversarial line raised signed-manifest violations from 14.6% to 37.5% (Qwen3-8B), 11.1% to 63.9% (gpt-oss-20b) and 8.3% to 75.0% (GPT-5.6-luna), and the signature then authenticated the corrupted manifest. Signing protects requirements in transit, not at extraction; the extraction step is the trust boundary.

cs.CR↗

arXiv2026

Percolation of discorectangles oriented predominantly along two mutually perpendicular directions

The percolation of finite-thickness elongated objects---discorectangles (stadiums)---oriented predominantly along two mutually perpendicular directions is studied, extending recent results for zero-thickness sticks. The angular distribution is the ``Maltese cross'' parametrized by $α$. Based on the known analytic expression for the excluded area of a discorectangle pair, the percolation threshold is estimated by the eigenvalue method. The discorectangle connectivity matrix is represented as the stick matrix plus a rank-1 term determined by the constant part of the excluded area, $C=4lw+πw^{2}$, which gives the approximate relations $λ_{\max}^{\mathrm{DR}}\approxλ_{\max}^{\mathrm{stick}}+C$ and $n_c^{\mathrm{DR}}\approx n_c^{\mathrm{stick}}/(1+C n_c^{\mathrm{stick}})$. Finite thickness shifts the absolute thresholds and affects the first normalization, whereas the second normalization, written through maximum eigenvalues, cancels the additive geometric contribution and preserves only the orientational dependence, explaining the universality of the normalized curves. Monte Carlo simulations of unit-length discorectangles with aspect ratios 8, 16, and 32, various domain sizes, periodic boundary conditions, and union--find scaling analysis confirm the theoretical predictions.

cond-mat.stat-mech↗

arXiv2026

MEvince: Knowledge-Constrained LLM Reasoning for Technique Identification from Malware Reports

Mapping behavioral intelligence in malware analysis reports to ATT&CK techniques supports threat analysis and defense, but reliable identification remains challenging. Supporting evidence is often scattered across long, heterogeneous reports, while closely related techniques share behavioral cues and differ only in subtle but decisive details. While large language models (LLMs) can use external knowledge to interpret reports, they may assign techniques based on plausible associations rather than sufficient evidence. We present MEvince, a knowledge-constrained LLM reasoning framework for report-level malware technique identification. Its core is a shared behavioral representation connecting report observations to technique definitions. This representation is built through agentic mining of technique documentation and supports two online stages: 1) primitive-guided extraction uses behavioral primitives to structure LLM-extracted observations, link them to source passages, and group dispersed evidence; 2) evidence-aligned retrieval matches this evidence to technique profiles through the same concepts, retaining likely candidates and confusable alternatives for LLM comparison of distinguishing behaviors. Controls at both stages validate evidence references and check technique-specific requirements. The representation also supports adaptation without parameter updates, where offline agentic audits diagnose concept weaknesses and refine extraction or retrieval policies. We evaluate MEvince against 11 baselines spanning four method families using a dataset of 610 public malware reports referenced by MITRE ATT&CK. MEvince improves exact-ID F1 over the strongest baseline by 17.4%, and its concept-guided retrieval increases gold-label candidate coverage from 31.6% to 47.9%. With a small adaptation set, offline refinement yields further gains and outperforms baselines that update model parameters.

cs.CR↗

arXiv2026

When Does Blockwise Additivity Break? Diagnosing and Repairing the Additive Assumption in Distillation-Based Architecture Search

Blockwise distillation methods for architecture search, such as DNA, DONNA, LANA and Puzzle, score each candidate replacement block in isolation and assemble a child network by minimizing the sum of per-block scores. We test this additive assumption on DeiT-S and DeiT-B with seven replacement blocks per layer, seven block-latency budgets from 70% to 40%, three fine-tuning seeds and paired bootstrap confidence intervals. (i) At mild compression the additive integer linear program (ILP) is close to a pairwise integer quadratic program (IQP) that models block interactions, but the post-fine-tuning gap widens sharply between the 60% and 55% budgets: at 55%-40% the ILP trails the IQP by 3.3-16.6 top-1 points on ImageNet-100. (ii) We split the KL additivity error into a metric component, caused by the non-linearity of the KL in summed logit changes and computable from cached single-block logits, and a functional component, the score-level effect of non-additive logit changes. The metric component accounts for most of the error on DeiT-S (59-65%), the functional component for most of it on DeiT-B (73-76%). (iii) A hybrid search ranks moves with the logit-sum predictor and measures only the best ones. It needs no dedicated pair measurements, costs 13-27% of the IQP's pair stage, and on ImageNet-100 significantly outperforms the IQP in 7 of 14 settings, with no significant difference in 6 and a significant loss in 1. Further reducing the pre-fine-tuning KL, or scoring after a short fine-tune, gives no consistent gain. On full ImageNet-1k with 1000-class fine-tuning, the sharp widening between 60% and 55% (5.8-17.5 points at 55%-40%), the model-dependent decomposition and the hybrid's advantage (significantly better than the IQP in 13 of 14 settings, no the other) are reproduced.

cs.NI↗

arXiv2026

OPRD-Imp: a dataset of experimentally observed impurities and side products in multi-step pharmaceutical syntheses

Predicting reaction impurities is a critical yet persistently data-limited challenge in pharmaceutical process chemistry. While machine learning models for reaction outcome prediction have advanced rapidly, benchmarking their ability to predict impurities remains impractical due to the absence of curated, publicly accessible datasets. We present OPRD-Imp, a dataset of 229 organic reactions drawn from 62 publications in Organic Process Research & Development, each annotated with experimentally observed impurities and their mechanistic origins. A total of 784 impurity entries is provided, classified into four origin categories. Reactions are represented as reaction SMILES and impurities as individual SMILES strings, with multi-step synthetic route connectivity preserved. All data were manually extracted from the source publications by trained chemists following a standardized extraction protocol, with expert chemical validation and manual structure drawing. OPRD-Imp is intended to serve as a benchmark resource for evaluating models that predict reaction impurities, providing experimentally reported impurity annotations and mechanistic origin labels that are not systematically represented in conventional reaction datasets.

physics.chem-ph↗

arXiv2026

ReviewMap: Mapping Evaluative Acts and Automation Boundaries in Peer-Review Comments

Peer-review comments check what a paper does and judge why it matters, but no existing scheme distinguishes these two evaluative acts. We argue that making these acts explicit and measuring how reliably LLMs identify them is a prerequisite for responsible LLM-assisted review analysis: humans need to inspect review judgments and their grounds. This defines a more honest mission for NLP in peer review than full automation. We present ReviewMap, a framework that classifies each comment as assessment of claims and scholarly standards or calibration of contribution value and venue fit, with finer-grained attributes applied conditionally by act type. Applied to 500 ICLR~2026 papers through multi-model LLM consensus, the act layer proves reliably automatable under the operational guideline (inter-model $κ\geq 0.75$), supported by five-human validation on 470 development comments, while the attribute layer requires human oversight, defining a measured automation boundary. At the corpus level, 17% of reviewer-paper instances contain no panel-coded calibration, and the panel-coded calibration share is nearly $3\times$ as high in Strengths as in Weaknesses. This boundary informs three affordances: a review guideline that operationalizes the assessment-then-calibration workflow for reviewers, a per-comment rebuttal strategy scaffold for authors, and a discussion-phase dashboard for area chairs.

cs.CL↗

arXiv2026

Statistical and Privacy Guarantees for Deep M-Regression via Stochastic Gradient Langevin Dynamics

In this article, we study deep nonparametric regression trained via stochastic gradient Langevin dynamics (SGLD), a variant of stochastic gradient descent that injects carefully calibrated Gaussian noise during optimization. Using a PAC-Bayesian analysis tailored to deep ReLU networks, we establish an excess-risk bound that simultaneously accounts for network approximation error, statistical complexity, and the algorithmic cost accumulated along the SGLD trajectory. Under a Bernstein condition and within a stable SGLD regime, the excess-risk bound contains a stochastic term whose coefficient is inversely proportional to the variance of injected noise, while the estimator retains the optimal rate for nonparametric regression under the Hölder smoothness condition up to logarithmic factors. This result provides an approximation-error-aware, rate-optimal statistical perspective on the widely observed generalization benefits of moderate SGLD noise. For per-sample clipped SGLD, we further establish an exact f-DP guarantee and the corresponding asymptotic $μ$-GDP guarantee for the proposed estimator. We establish statistical convergence rates and differential privacy guarantees for DNN estimators trained using SGLD, while explicitly accounting for both network approximation error and the effect of injected noise in the excess-risk bound. Extensive simulation studies and analyses of two real datasets examine the finite-sample predictive performance and privacy-utility behavior of the proposed procedure.

stat.ME↗

arXiv2026

Electrical conductivity of a two-dimensional two-component medium: discretization and effective medium approximation

The effective conductivity of a two-dimensional two-component medium is studied within a discretization scheme and the effective-medium approximation (EMA). A square lattice is superimposed on a random isotropic medium; each cell is assigned the conductivity of its majority component, and the cell is replaced by a star of four resistors. Neighboring cells are connected by an equivalent resistor whose conductivity is $σ_1$, $σ_2$, or the harmonic mean $σ_{12}=2σ_1σ_2/(σ_1+σ_2)$, with probabilities $(1-p)^2$, $p^2$, and $2p(1-p)$, respectively. Applying Foster's theorem and the EMA yields a closed equation for the dimensionless effective conductivity $x$ and, after transformation, a cubic equation whose coefficients depend on $p$ and the conductivity ratio $r$. The EMA predictions are compared with direct calculations on a $200\times200$ resistor network with periodic lateral boundary conditions and Dirichlet conditions on the top and bottom. For uncorrelated disorder, good agreement is found. For correlated disorder, when resistor conductivities are assigned according to the discretization rule from the colors of adjacent nodes, significant deviations appear and the percolation-like inflection point shifts to the right of $1/2$. The results question the validity of the correlated-disorder EMA approach and help explain discrepancies previously reported for random nanowire networks.

cond-mat.stat-mech↗