论文

本文提出 MAGE（Memory as Agent-Guided Exploration），一种将交互存储在分层状态树中的主动式执行状态管理器；实验显示，MAGE 将平均任务成功率较基线提升 7.8–20.4 个百分点，同时 token 消耗减少 55.1%。This work proposes MAGE (Memory as Agent-Guided Exploration), an active execution-state manager that stores interactions in a hierarchical state tree and shows that MAGE improves the average task success rate by 7.8--20.4 pp over baselines, while reducing token consumption by 55.1%.

本文提出 User as Code（UaC）范式，将 Agent 对用户的建模视为一个活的软件项目：类型化 Python 对象承载用户状态，普通 Python 函数编码其治理规则，从而在解释器可运行的同一媒介内完成对用户的表示与推理。This work introduces User as Code (UaC), a paradigm in which an agent's model of a user is a living software project: typed Python objects hold the user's state and ordinary Python functions encode the rules that govern it, so representing and reasoning about the user happen in one medium an interpreter can run.

综合结果表明，强大的 coding agent 通过使用工具、反馈和工作区状态来构建目标语言的可工作模型，从而适应不熟悉的语言。Together, these results show that strong coding agents adapt to unfamiliar languages by using tools, feedback, and workspace state to build a working model of the target language.

提出 agent harness 的操作性定义，配套统一词汇，可用于指导工程实践以及对 agentic 系统的科学比较。An operational definition of agent harness is proposed, with a shared vocabulary, able to guide engineering practice and the scientific comparison of agentic systems.

GLM 将推理分解为分类、推理、动作生成与图检索等专用 Agent，支持分支化与选择性上下文共享，在保持推理质量的同时降低 prompt 长度与推理迭代次数，从而提升准确率并减少整体 token 消耗。GLM decomposes reasoning into specialized agents for classification, reasoning, action generation, and graph retrieval, enabling branching and selective context sharing to reduce prompt length and reasoning iterations while preserving reasoning quality, thereby improving accuracy and reducing overall token consumption.

本文提出一个多 Agent 框架，由主 LLM 协调 grounding agent 定位与问题相关的片段，并协调 vision agent 提取目标文本观测，显著优于强非 Agent 基线，且强化学习进一步增强了已训练 Agent 的推理与规划能力。A multi-agent framework in which a master LLM coordinates a grounding agent to localize question-relevant segments and a vision agent to extract targeted textual observations is proposed, which significantly outperforms strong non-agent baselines and shows reinforcement learning further strengthens reasoning and planning for the trained agent.

本文提出 ReMemR1，将 memory retrieval 机制融入 memory update 过程，使 Agent 能够选择性回溯历史记忆以进行非线性推理，并设计多级奖励机制，将最终答案奖励与密集的 step 级信号相结合，引导对 memory 的有效使用。This work presents ReMemR1, which integrates the mechanism of memory retrieval into the memory update process, enabling the agent to selectively callback historical memories for non-linear reasoning, and proposes a multi-level reward design, which combines final-answer rewards with dense, step-level signals that guide effective memory use.

Decentralized Language Models (DeLM) 是一种 MAS 框架，通过并行 Agent、共享已验证上下文与任务队列实现去中心化协作，在软件工程 test-time scaling 与长上下文推理两方面均取得提升。Decentralized Language Models (DeLM), a MAS framework that decentralizes coordination through parallel agents, a shared verified context, and a task queue, improves both software-engineering test-time scaling and long-context reasoning.

提出一种自我演化的法律 Agent 框架，将 Model、Harness、Agent 角色、法律 Knowledge、确定性 Tools 与程序性 Skills 拆分为可审计的层面，用于来源可追溯性、日期与数字的事实校验、交付物合规性以及问题闭环。A self-evolving legal-agent framework that factors Model, Harness, Agent roles, legal Knowledge, deterministic Tools, and procedural Skills into auditable surfaces for source traceability, date and number grounding, deliverable compliance, and issue closure is introduced.

本文提出后确定性分布式系统（PDDS）作为一种研究与工程模型，用于协调确定性代码、随机模型与自主 Agent 共存的异构环境，并证明经典分布式计算模型是该参与者通用模型的零模糊特例。This paper introduces Post-Deterministic Distributed Systems (PDDS) as a research and engineering model for coordinating heterogeneous environments where deterministic code, stochastic models, and autonomous agents coexist, and shows that classical distributed computing models form a zero-ambiguity special case of this participant-general model.

提出 Stratum，一种统一系统基础设施，在 agentic pipeline 搜索期间将 pipeline 执行与规划和推理解耦，无缝集成现有 Python 库，将批量 pipeline 编译为优化的执行图，并通过基于 Rust 的新型 runtime 等异构后端高效执行。Stratum is proposed, a unified system infrastructure that decouples pipeline execution from planning and reasoning during agentic pipeline search, and integrates seamlessly with existing Python libraries, compiles batches of pipelines into optimized execution graphs, and efficiently executes them across heterogeneous backends, including a novel Rust-based runtime.

HERA 是一个分层框架，联合演化多 Agent 编排与角色特定的 Agent prompt，在多 Agent RAG 中实现针对性的、角色条件化的改进，并提供角色感知的 prompt 演化。HERA is a hierarchical framework that jointly evolves multi-agent orchestration and role-specific agent prompts, enabling targeted, role-conditioned improvements in multi-agent Retrieval-Augmented Generation and Role-Aware Prompt Evolution.

本文认为 UQ 研究必须转向面向交互式 Agent 的现实场景，需要一套面向 Agent 的新原则性框架，并首次提出了能涵盖现有 UQ 设置的 Agent UQ 通用形式化方法。This paper argues that UQ research must shift to realistic settings with interactive agents, and that a new principled framework for agent UQ is needed, and presents the first general formulation of agent UQ that subsumes broad classes of existing UQ setups.

文中认为，编码 Agent 已跨越能力门槛，传统的人工 code review 已不再是软件质量流水线的必要环节。It is argued that coding agents have crossed a threshold of capability at which traditional human code review is no longer a necessary component of a software quality pipeline.

该方法通过在现有企业搜索基础设施之上叠加一层轻量级 harness，为推理型 LLM 配备 search、find、open、summarize 等工具，使其能够自主地迭代检索信息、跨文档导航并分析证据，从而降低对单一环节的过度依赖。The approach reduces this overdependence by layering a lightweight harness on top of existing enterprise search infrastructure, equipping a reasoning LLM with search, find, open, and summarize tools enabling the model to iteratively retrieve information, navigate within documents, and analyze evidence autonomously.

本文围绕形式化框架与 Agent 生命周期，对面向 LLM-based Agent 的文本世界模型进行系统性综述，旨在整合这一快速发展的方向、厘清其设计空间，并指出未来研究的开放挑战。This work systematically review text world models for LLM-based agents, organized around a formal framework and the agent lifecycle, and aims to consolidate this rapidly developing area, clarify its design space, and highlight open challenges for future research.

本文提出 Beyond Rows to Reasoning (BRTR)，一种面向电子表格理解的多模态 Agentic 框架，将单轮检索替换为迭代式工具调用循环，支持从复杂分析到结构化编辑的端到端 Excel 工作流。This work introduces Beyond Rows to Reasoning (BRTR), a multimodal agentic framework for spreadsheet understanding that replaces single-pass retrieval with an iterative tool-calling loop, supporting end-to-end Excel workflows from complex analysis to structured editing.

介绍 Corpus2Skill：离线将文档语料蒸馏为分层 Skill 目录，服务时由 LLM Agent 自顶向下导航——从全局概览逐层深入到更细粒度的摘要再到具体文档，并在分支无效时回溯。Corpus2Skill is presented, which distills a document corpus offline into a hierarchical skill directory and lets an LLM agent navigate it at serve time, drilling from a bird's-eye view through progressively finer summaries down to documents, and backtracking when a branch is unproductive.

本研究对基于RAG的系统与工具增强的LLM Agent进行系统对比，特别是在Agent仅可访问基础关键词搜索工具的条件下，评估二者的检索机制与响应质量。This study conducted a systematic comparison between RAG-based systems and tool-augmented LLM agents, specifically evaluating their retrieval mechanisms and response quality when the agent only has access to basic keyword search tools.

本文提出FROAV（Framework for RAG Observation and Agent Verification），一个通过提供即插即用架构——结合可视化工作流编排、综合性评估框架与可扩展Python集成——来降低LLM Agent研究门槛的开源研究平台。FROAV (Framework for RAG Observation and Agent Verification), an open-source research platform that democratizes LLM agent research by providing a plug-and-play architecture combining visual workflow orchestration, a comprehensive evaluation framework, and extensible Python integration, is presented.

本文介绍了 AutoResearchEval，包含 100 个基于已发表前沿科学、覆盖 7 个科学领域和完整研究生命周期的任务，以及 ARFT，一个由 45 个经验驱动的失败模式组成的框架，可实现可扩展的细粒度归因。AutoResearchEval, featuring 100 tasks grounded in published frontier science across 7 scientific domains and the full research lifecycle, and ARFT, a framework of 45 empirically-grounded failure patterns to enable scalable fine-grained attribution, are introduced.

提出 StateM，一种以持久化 state、phase-local 上下文、受检 transition、可恢复 runbook 以及版本化流程实践为核心组织执行的 agent-native runtime，使 Agent 与用户能够共同检视其执行过程，从而在不改模型权重的前提下通过 harness scaling 改善 Agent 周边的执行系统。StateM is introduced, an agent-native runtime that organizes execution around durable states, phase-local context, checked transitions, recoverable runbooks, and versioned procedural practices that agents and users can inspect together to bet on harness scaling to improve the execution system around an agent without changing its model weights.

本文提出了 LIFE-RL 框架，在不修改内部控制流的前提下，将原生编码 Agent harness 与可扩展的策略梯度优化相连接，并通过 GSPO 在三个原生编码 Agent harness 上训练稀疏 MoE 模型 Qwen3.5-35B-A3B 对其进行了评估。LIFE-RL, a framework that bridges native coding-agent harnesses with scalable policy-gradient optimization without modifying their internal control flow, is presented and evaluated by training the sparse MoE model Qwen3.5-35B-A3B with GSPO across three native coding-agent harnesses.

本文提出 Co-RL，一种由多个解耦模型组成的框架，这些模型不共享参数，通过基于彼此输出奖励的强化学习同时进行优化，并表明无监督推理可以通过协作式多智能体训练涌现This work introduces Co-RL, a framework in which multiple decoupled models, sharing no parameters, are simultaneously optimized through RL using rewards derived from their peers, and shows that unsupervised reasoning can emerge through cooperative multi-agent training.

论文认为，agentic CTI 调查的瓶颈在于该 substrate 而非模型能力，并提出了面向 Agent 的语料库脚手架 CTIFoundry。It is argued that this substrate, not model capability, is the bottleneck on agentic CTI investigation, and CTIFoundry, an agent-native corpus scaffold, is presented.

SkillGate 将 9B 策略的成功率从 40.8% 提升至 53.2%，显著优于将相同预算仅用于 outcome reward 的方案，同时将误导性候选的暴露减少三分之二，并读取更少的 skill。SkillGate lifts a 9B policy from 40.8% to 53.2% trial success, well ahead of the identical budget spent on outcome reward alone, while cutting exposure to misleading candidates by two thirds and reading fewer skills.

受损模型评估测试在第一个合法 tool call 之后插入 ground-truth 攻击调用，从而独立于模型行为测试 APC，证明了 APC 实现的 Blast Radius 单调性与组合可靠性。The compromised-model evaluation tests APC independently of model behavior by inserting the ground-truth attack call after the first legitimate tool call, which proves Blast Radius Monotonicity and Composition Soundness for APC implementations and proves Blast Radius Monotonicity and Composition Soundness for APC implementations.

提出 Repo0，一个面向零到全代码生成的持续结构演化框架，维护显式的架构状态，实例化为双有向无环图（Dual-DAG），由需求级 DAG、组件级 DAG 及其对齐关系组成。Repo0 is presented, a continuous structural evolution framework for zero-to-all code generation that maintains an explicit architectural state instantiated as a Dual-Directed-Acyclic-Graph (Dual-DAG), consisting of a requirement-level DAG, a component-level DAG, and their alignment relation.

本文指出，持续技能演化的关键瓶颈既非编辑能力亦非迭代轮数，而在于评估反馈能否持续提供可信的演化梯度；据此提出 SkillEvo，由可信反馈生成梯度，由可控治理约束方向。This work argues that the binding constraint on sustained skill evolution is neither editing capability nor the number of iterations, but whether the evaluation feedback keeps supplying trustworthy evolution gradients, and introduces SkillEvo, in which trustworthy feedback generates the gradient and controllable governance constrains its direction.

泄露带来两类现实攻击：一个训练好的分类器可从常规自然语言输出中推断用户记忆的语义谓词；一个由 RL 训练的对抗者可从生产级风格的 Agent 中完整提取社会安全号码。Leakage enables two practical attacks: a trained classifier that infers semantic predicates about user memories from routine natural-language outputs, and an RL-trained adversary that extracts full Social Security Numbers from a production-style agent.

Bespoke-Card 在传统通用估计器与学习型估计器架构之外开辟了一条新的基数估计路径，它是一个 Agent 驱动的系统，将面向特定工作负载的基数估计器合成为可执行代码。Bespoke-Card is opening a new avenue for cardinality estimation next to classical generic estimators and learned estimator architectures, an agent-driven system that synthesizes workload-specific cardinality estimators as executable code.

大语言模型 Agent 可在推理时构建工作流以适配复杂任务，但单个回合中发现的过程通常在执行后即被丢弃。现有 Skill 库提供可复用的可执行例程，但通常离线组装，且无法从 Agent 自身的工作流中不断生长。我们提出 FlowEvo，一个无需训练、推理时工作流与 Skill 协同演化的框架。FlowEvo 将成功的工作流编译为可调用 Skill，存入持久化库，并通过直接执行或作为上下文的方式使用检索到的 Skill。Large language model agents can adapt to complex tasks by constructing workflows at inference time, but procedures discovered in one episode are usually discarded after execution. Existing skill libraries provide reusable executable routines, but are typically assembled offline and do not grow from the agent's own workflows. We introduce FlowEvo, a training-free framework in which workflows and skills co-evolve at inference time. FlowEvo compiles successful workflows into callable skills, stores them in a persistent bank, and uses retrieved skills either through direct execution or as context

LLM 编程 Agent 通过接口下发 Bash 命令，这些接口可能对模型输出进行序列化、包装与再解析。仅凭匹配的执行得分无法区分命令生成阶段的错误与生成后引入的失败。QuoteBench 围绕一道刻意未转义的额外解析器，将生成合约与执行传输交叉，在 14 个源自真实事件的家族、共 56 个一次性任务上以精确最终状态校验来度量该边界。在插值点进行转义可复现每条回放回复的原始路径结果，因此任何在已声明边界下取得的恢复成效都必须……LLM coding agents issue Bash commands through interfaces that may serialize, wrap, and reparse model output. Matched execution scores alone cannot distinguish command-generation errors from failures introduced after generation. QuoteBench measures this boundary with exact final-state validation on 56 one-shot tasks from 14 incident-derived families, crossing the generation contract with the execution transport around one deliberately unescaped added parser. Escaping at the interpolation point reproduces each replayed reply's raw-path outcome, so any recovery under a disclosed boundary must com

使用工具的 AI agents 将 delegated 任务转化为 provider effects，但 authorization 常止于准入，而 provider 状态、delivery、retry 与 recovery 在持续演化。请求可能在 commit 前变化，或响应丢失使替换从同一 approval 产生二次 effect。我们提出 AID-Guard，一种有状态的 authorization-to-effect 闭合协议：commit 时重新验证已批准请求与 provider 状态，模糊情形下仅保留一个 reservation，并在出现终结结果或经 delivery fence 认证的无 effect 后才允许 release 或一次后继动作。对于支持的 pro[vider]……Tool-using AI agents turn delegated tasks into provider effects, yet authorization often ends at admission while provider state, delivery, retry, and recovery evolve. A request may change before commit, or response loss may cause a replacement to create a second effect from one approval. We present AID-Guard, a stateful authorization-to-effect closure protocol. It revalidates the approved request and provider state at commit, retains one reservation under ambiguity, and permits release or one successor only after a terminal result or certified no effect with a delivery fence. For supported pro