arXiv AI
Aug 26

Auditing the Synthetic Memoir: Measuring Scene-Level Confabulation in LLM-Generated Autobiography Against the Documented Record of the Life It Describes

The paper audits a 366‑day autobiographical book generated by a large language model (LLM) against an independent verification corpus. Using a four‑level rubric, 354 of the 366 days (96.7%) failed verification, with only 12 days containing corroborated scenes and 19 days containing actively contradicted claims. Regenerating the same days with current models yielded 100% verification failure, while grounding the generation in the subject’s own corpus improved the rate to 83.3% but still left substantial residual failure.

By Heather Renze
arXiv AI
2d ago

Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization

The paper introduces MONOLOGUE, a single‑document poisoning framework that uses logic hijacking to subtly alter Retrieval‑Augmented Generation (RAG) outputs without overt contradictions. Instead of directly refuting facts, MONOLOGUE frames updates as authoritative historical corrections, embedding counterfactuals into a grounded narrative. The method refines payloads offline through local multi‑dimensional gated optimization, combining text quality audits with surrogate behavioral verification, and demonstrates superior attack efficacy across multiple benchmarks, retrieval backends, and open‑weight generators.

By Hangyi Zhao, Bonan Zhang, Fusen Guo, Jiaheng Wei, Chao Chen, Tianqing Zhu
arXiv AI
Oct 9

Large Language Model Turnover Undermines Screening for Artificial Intelligence-Assisted Scientific Writing

The study examines how the rapid turnover of large language models (LLMs) undermines the effectiveness of AI‑detectors used to screen scientific manuscripts. By comparing 4,000 PNAS abstracts rewritten by 23 different LLM versions released between June 2023 and August 2026, the authors show that detectors trained on past versions can fail dramatically at generation boundaries, missing up to 96% of rewrites just after a sharp transition. Even detectors updated to newer versions can overlook rewrites of older models, and a commercial detector missed most rewrites of the newest version while flagging few human‑written abstracts.

By Kazuki Nakajima, Takayuki Mizuno