Hugging Face Blog

Run fast, private agents on-device with LFM2.5-24B-A2B

arXiv AI
Sep 15

BlueLM-GUI Technical Report: A Real-Device-Centric Flywheel for Self-Improving Mobile GUI Agents

arXiv:2609.12394v2 Announce Type: replace Abstract: Mobile GUI agents are shifting from multi-module frameworks to native models trained end-to-end, yet industrial deployment faces three persistent g...

By Tong Ye, Kunyang Han, Guozhi Wang, Longqiang Luo, Zhifeng Ding, Yongxiang Zhang, Xiaolei Shen, Yuxuan Zhang, Zhuping Zhang, Tao Xu, Yue Pan, Yucheng Zhao, Yupei Hu, Yuanjiang Ouyang, Danfeng Shen, Runqi Lin, Hongda Cai, Zhaoxiong Wang, Mengjia Yan, Yingjie Zhong, Chen Zhou, Zeyu Zhang, Xuwen Zhu, Penggang Shi, Mingcheng Luo, Ziyang Wu, Min Jin, Mingfu Shen, Zairong Xu, Fan Zhang, Hao Wang, Liang Liu, Zhulin Xie, Lijun Yao, Xiao Liang, Liangmin Wen, Liqiang Feng, Feilong Wu, Min Hu, Min Chen, Guanjing Xiong, Xiaohu Ruan, Xiaoxin Chen
arXiv AI
Oct 27

A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank

The paper introduces Enclawed, a deterministic security runtime that protects large language model agents running on high‑performance computing (HPC) systems. It provides hardware‑rooted supervision for every rank, preventing compromised hosts from causing catastrophic failures, and enforces launch policies, lease‑based heartbeats, and automatic eviction or killing of tampered jobs. Enclawed operates without administrator privileges, integrates via Secure Shell, and adds minimal startup overhead while successfully blocking a wide range of simulated attacks.

By Alfredo Metere
arXiv AI
Oct 31

Tracekit Box: Running AI Agents in Micro-VMs Where Every Way Out Is Decided and Signed

Tracekit Box is an open‑source system that runs AI agents inside isolated Firecracker micro‑VMs with no network card, ensuring that every possible exit point—commands, outbound connections, secrets, model calls, and workspace patches—is controlled by a host‑side signer. The signer authorizes and signs each action, preventing unauthorized data leakage or code changes, and the VM’s final state is packaged into a verifiable .tkb bundle. The system has passed 13 end‑to‑end checks, 15 fuzz targets, and a demo run with 102 signed records, demonstrating robust isolation and auditability.

By Bravish Ghosh (Cygnux Labs)
arXiv AI
Jun 3

Agent libOS: A Library-OS-Inspired Runtime for Long-Running, Capability-Controlled LLM Agents

arXiv:2606. 03895v1 Announce Type: cross Abstract: Large language model (LLM) agents are evolving from request-response assistants into long-running software actors: they maintain state across model calls, fork subtasks, wait for external events, request human authority, generate tools, and perform side effects that must be resumed and audited.

By Yingqi Zhang