AI safety and alignment

Alignment, interpretability, red-teaming, bias and privacy: the research on what these systems do when they misbehave.

17,788 stories · RSS feed

arXiv Computer Vision
Oct 21

Robotic Video World Models: A Survey of Applications, Research Challenges, Future Directions

arXiv:2601.07823v2 Announce Type: cross Abstract: Video world models have emerged as promising candidates for high-fidelity world models, offering the potential to synthesize high-quality videos capt...

By Zhiting Mei, Tenny Yin, Ola Shorinwa, Apurva Badithela, Zhonghe Zheng, Joseph Bruno, Madison Bland, Lihan Zha, Asher Hancock, Jaime Fern\'andez Fisac, Philip Dames, Anirudha Majumdar
arXiv AI
Oct 21

MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems

MAS-Guard is a unified framework designed to safeguard both single- and multi-agent large language model (LLM) systems. It introduces a local Agent Guardrail (A-Guard) layer that uses task-specific experts to evaluate agentic events, and a system-level Control Plane that applies deterministic structural checks and semantic assessments to routes, capabilities, and message content. The framework enforces interventions—allow, reflection, confirmation, and block—across benchmarks, reducing attack success rates by 71.5‑86.3% while maintaining utility on benign tasks.

By Mohammad Kachuee, Phu Mon Htut, Sheng Li, Nikolaos Pappas, Miguel Ballesteros Martinez, Yassine Benajiba, Sujith Ravi, Dan Roth
arXiv Computation and Language
Oct 21

SciDiagBench: A Type-Specific Benchmark for Human-Aligned Evaluation of Scientific Diagrams

SciDiagBench is a new benchmark designed to evaluate scientific diagram generation in a way that mirrors human peer‑review practices. It provides a dataset of 165 diagrams from 10 domains, systematically classified into 11 distinct types such as graphical abstracts and technical roadmaps. The benchmark also introduces a preference‑guided calibration method that incorporates human preferences into type‑specific evaluation criteria, aiming to improve the reliability of automated assessments.

By Hao Wang, Zixuan Li, Long Bai, Xiaolong Jin, Jiafeng Guo, Tat-Seng Chua, Tian Tian
arXiv AI
Oct 21

Language Guidance for Supervised Vision Training: An Empirical Study of Generalization

The paper investigates whether pretrained language models can act as lightweight auxiliary supervision for supervised vision training, without requiring paired image-text data or complex objectives. Two forms of language guidance—Explicit Language Guidance (ExLG) and Implicit Language Guidance (ImLG)—are evaluated across six generalization regimes, including in‑distribution, out‑of‑distribution, shortcut resistance, texture/shape bias, adversarial robustness, and continual learning. Results show that ExLG improves in‑distribution, low‑data performance, and continual learning retention, while ImLG is more effective in shortcut‑sensitive and adversarial settings, and both add minimal parameters and training overhead.

By Shruthi Gowda, Nikita Jain, Elahe Arani, Bahram Zonooz
arXiv AI
Oct 21

CovNav: Conformal Prediction-Guided Adaptive Inference for Object Goal Navigation

CovNav is a training‑free framework that uses Conformal Prediction to decide when an embodied agent should switch from fast, low‑latency LLM reasoning to slower, more accurate chain‑of‑thought reasoning during object‑goal navigation. By treating each spatial query as a binary decision and calibrating the fast LLM’s token probabilities, CovNav escalates only ambiguous queries to the slow mode, achieving higher success rates on Gibson and HM3D while invoking slow reasoning for just 12.4% of queries. Real‑robot tests on a TurtleBot 4 confirm the method’s practical benefits.

By Pengying Wu, Zhejia Wen, Kang Ding, Kangjie Zhou, Chunxuan Jiao, Wei Pan, Xiangli Nie, Chang Liu
arXiv Machine Learning
Oct 21

On Johnson-Lindenstrauss Transforms for Byzantine-Robust Optimization

The paper investigates the use of Johnson‑Lindenstrauss (JL) transforms in Byzantine‑robust distributed optimization. By leveraging JL’s ability to preserve inner products and distances, worker messages are weighted based on their alignment with a trusted reference gradient, reducing communication costs while maintaining robustness. Experimental results support the theoretical claims.

By Aleksandr Shestakov, Vladimir Aletov, Aleksandr Beznosikov
arXiv Machine Learning
Oct 21

PACE: Geometry-Aware Bridge Transport for Single-Cell Trajectory Inference

PACE is a trajectory inference framework that reconstructs continuous transport dynamics from destructive single‑cell time‑course snapshots. It uses a state‑ and time‑dependent anisotropic Riemannian metric to guide transport along tangent directions, alternates between refining cross‑time couplings and fitting neural bridges, and distills the learned dynamics into a global velocity field. Across multiple datasets, PACE outperforms existing methods, reducing key distance metrics by an average of 23.7% and improving RNA‑velocity alignment by 15.4%.

By Chenglei Yu, Chuanrui Wang, Bangyan Liao, Tailin Wu
arXiv Machine Learning
Oct 21

LLM-Attack Suite: A Unified Red-Team Framework for Privacy Evaluation of Split and Distributed LLM Systems

The paper introduces LLM‑Attack Suite, a unified framework for evaluating privacy risks in split and distributed large language models. It records attacker choices—such as message types, model weights, datasets, and recovery metrics—to enable consistent comparison and extension of privacy evaluations. Experiments on GPT‑2 demonstrate that providing gradients during training significantly boosts token and document recovery rates, illustrating how attacker access levels influence privacy outcomes.

By Georgios Politis, Evangelos Pappas
arXiv Computation and Language
Oct 21

Multimodal Ambivalence and Hesitancy Recognition with Bidirectional Audio--Text Cross-Attention

The paper introduces a multimodal framework that jointly processes full‑video transcripts and speech waveforms to recognize ambivalence and hesitancy (A/H) at the video level. It uses pre‑trained multilingual BERT for text and wav2vec 2.0 for audio, projecting both into a shared space and applying two stacked bidirectional cross‑attention blocks to fuse linguistic and acoustic cues without explicit temporal alignment. The resulting representations are aggregated and combined via concatenation, element‑wise products, and absolute differences, achieving 72.19 % accuracy and 77.95 % A/H F1‑score on the Behavioural Ambivalence/Hesitancy dataset.

By TingTing Gu, JinCheng Luo, WenQiu Guo
arXiv Computation and Language
Oct 21

Fluent but Fallible: Benchmarking Hallucination and Factual Reliability in Large Language Models

The paper "Fluent but Fallible: Benchmarking Hallucination and Factual Reliability in Large Language Models" evaluates ten advanced LLMs on a benchmark of 70 academic prompts across four complexity levels. Using five metrics—Accuracy, Precision, Recall, Response Deviation Index, and Hallucination Index—reviewers found that Perplexity and DeepSeek V3 achieved the highest overall accuracy, Gemini balanced recall and performance, LLaMA 3 resisted hallucinations, and Falcon had perfect precision but low recall and high deviation. The study highlights a trade‑off between response completeness and factual reliability, especially as prompt complexity increases.

By Osama Shabih, Dayam Nadeem, Shahab Saquib Sohail, Mohammad Nadeem
arXiv Computation and Language
Oct 21

Tracing Recurrent and Emergent Hallucination Patterns in Decomposed Text-to-SQL Generation

The paper introduces a drill‑down evaluation framework that breaks down Text‑to‑SQL queries into simpler executable sub‑queries and natural‑language questions, enabling analysis of hallucination patterns along the generation path. It distinguishes recurrent hallucinations—those appearing in both early and final steps—from emergent hallucinations that only surface at the end. Experiments on five large language models and an expanded BIRD‑mini benchmark reveal varying recurrence and emergence probabilities across categories, with conversational history generally increasing recurrence and decreasing emergence.

By Hayden Moore, Abhinav Verma, Anshuman Dutt
arXiv Computation and Language
Oct 21

Uncovering Audio-Text Alignment in Large Audio-Language Models through Cross-Modal Concept Neurons

The paper investigates how large audio‑language models (LALMs) integrate audio and text representations. By identifying cross‑modal neurons that encode both modalities, the authors demonstrate that audio and text representations align within a shared subspace across three LALMs and four acoustic attribute types. Causal interventions on these neurons confirm their necessity for prediction and show they can be manipulated to steer model outputs.

By Tzu-Quan Lin, Chih-Kai Yang, Yi-Cheng Lin, Hao Tang, Hung-yi Lee
arXiv Computer Vision
Oct 21

STEAM: Stable Self-Training with Elastic Matching and Adaptive Purification

STEAM is a self‑training framework for unsupervised cross‑view geo‑localization that eliminates the need for image‑generation warm‑ups or clustering. It introduces a Stable Spatial‑Aware Module for bounded nonlinear spatial weighting, Elastic Matching with Bidirectional Top‑K Soft Matching and Dynamic Threshold Filtering, and Adaptive Purification that updates pseudo‑labels based on confidence, age, and expiration. On the University‑1652 dataset, STEAM outperforms other unsupervised methods in both retrieval directions and shows competitive results on SUES‑200 and DenseUAV.

By Shaoxiang Wang, Kejia Zhang, Haiwei Pan, Lan Zhang, Guozheng Zheng
arXiv Computer Vision
Oct 21

CARI4D: Category Agnostic 4D Reconstruction of Human-Object Interaction

CARI4D is a category‑agnostic method that reconstructs spatially and temporally consistent 4D human‑object interactions from monocular RGB videos at metric scale. It introduces a pose hypothesis selection algorithm that integrates predictions from foundation models, refines them via a learned render‑and‑compare paradigm, and reasons about contacts to satisfy physical constraints. Experiments demonstrate a 38% improvement on in‑distribution data and 36% on unseen data compared to prior work, and the model generalizes to unseen categories, enabling zero‑shot application to internet videos.

By Xianghui Xie, Bowen Wen, Yan Chang, Hesam Rabeti, Jiefeng Li, Ye Yuan, Gerard Pons-Moll, Stan Birchfield
arXiv Statistics ML
Oct 21

Certifiably Correct Fr\'echet Means in Orbit Spaces

The paper investigates Fréchet means in orbit spaces arising from finite orthogonal group actions, a problem known to be NP-hard. It introduces spectral and semidefinite relaxations inspired by group synchronization, and provides a semidefinite certificate that can certify global optimality even when pairwise alignment fails. The authors demonstrate the effectiveness of their methods on Gaussian data with sign ambiguity and through numerical experiments on districting plan ensembles and time‑series clustering.

By Dustin G. Mixon, Tom Needham, Nathan Willey