论文

提出一种特权感知的训练后防御方法，教导 Agent 优先选用足够的低权限工具，仅在必要时升级；该方法在保留通用能力的同时大幅减少了不必要的高权限工具使用。A privilege-aware post-training defense that teaches agents to prefer sufficient lower-privilege tools and escalate only when necessary is introduced, showing that this defense substantially reduces unnecessary high-privilege tool use while preserving general capabilities.

提出 Qwen-RobotNav，一种基于 Qwen-RobotNav 构建的可扩展导航模型，通过参数化接口沿两个互补维度应对该问题：用于选择导航行为的多种任务模式，以及用于控制视觉历史编码方式的可控观测参数。Qwen-RobotNav is presented, a scalable navigation model built on Qwen-RobotNav that addresses it through a parameterised interface with two complementary dimensions: multiple task modes that select the navigation behaviour, and controllable observation parameters that govern how visual history is encoded.

C-Trace 提出一个验证框架，将 GDPR 的部分要求（包括同意、目的限制、数据最小化与被遗忘权）表达为针对 Agent 执行轨迹的正式策略谓词。C-Trace (Compliance Trace based Runtime Agent Conformance Enforcement), a verification framework that expresses a subset of GDPR requirements, including consent, purpose limitation, data minimization, and the right to erasure, as formal policy predicates over agent execution traces is proposed.

RODS（Reward-driven Online Data Synthesis）通过将进度奖励方差重新用作零成本边界检测器，在 RL 训练与数据生成之间形成闭环，无需在训练已有的 rollout 之外增加额外推理。RODS (Reward-driven Online Data Synthesis) closes the loop between RL training and data generation by repurposing the progress reward variance as a practical, zero-cost boundary detector that requires no extra inference beyond the rollouts already computed for training.

该工作以模拟的共享工作空间人机团队为受控实验环境，研究协作结构如何影响团队行为，并表明协调结构是决定可用能力能否提升团队结果的关键。This work uses simulated shared-workspace human-AI teams as a controlled testbed for studying how collaboration structure shapes team behavior, and suggests that coordination structure is central to whether available capability improves team outcomes.

结果表明，在基于 MCP 的 Agent 中，来源归因是事实性验证的一个独立维度；提出 ProvenanceGuard，一种针对 MCP 依据回答的来源感知验证器。Results show that source attribution is an independent axis for factuality verification in MCP-based agents, and ProvenanceGuard, a source-aware verifier for MCP-grounded answers is introduced.

本文介绍 Cordon，一个事务性运行时系统，用于在提交前暂存并验证 Agent 的不可逆操作；其在保持良性任务完成的同时降低不可逆操作失败率，且仅带来适度的审批与时延开销。This paper introduces Cordon, a transactional runtime system for staging and validating irreversible agent effects before commit and reduces irreversible-effect failures while preserving benign task completion with modest approval and latency overhead.

提出一种针对 LLM Agent 的自动化提示优化框架，将"观测到动作"流水线分解为目标条件描述子 Agent 与动作选择 Agent，并通过由 LLM 驱动、以环境回报为指导的进化循环迭代优化各模块提示。An automated prompt optimization framework for LLM agents that decomposes the observation-to-action pipeline into a goal-conditioned descriptor agent and an action selection agent, and iteratively refines each module's prompt through an LLM-driven evolutionary loop guided by environment returns is introduced.

本文认为，Agentic AI 的近期价值不在于完全自主或削减人力，而在于面向简单与中等复杂度业务流程的受控部分自主。It is argued that the near term value of Agentic AI does not lie in full autonomy or workforce reduction, but in controlled partial autonomy for simple and medium complexity business processes.

AgentOdyssey 被提出，这是一个新颖的评估框架，通过程序化方式生成包含丰富实体、世界动态和长视野任务的开放式文本游戏，并发现短期记忆对多种智能体范式均有益，是智能体测试时训练的重要组成部分。AgentOdyssey is introduced, a novel evaluation framework that procedurally generates open-ended text games with rich entities, world dynamics, and long-horizon tasks and finds that short-term memory benefits multiple agent paradigms and is an important component of agent test-time training.

提出 Single-rollout Asynchronous Optimization（SAO），用于解决异步 RL 中的稳定性与 off-policy 难题，可稳定训练一千步，并在 Agentic 编码与推理基准上一致优于 GRPO 及其变体。Single-rollout Asynchronous Optimization (SAO) is presented to address the stability and off-policy challenges in asynchronous RL and is able to train stably for one thousand steps and consistently outperform GRPO and its variants on agentic coding and reasoning benchmarks.

提出 TokenWall，一种作用于 agent token 流的语义防火墙式运行时防御框架，证明语义运行时约束可在持久化 AI agents 上实现实用的安全性与效用性权衡。TokenWall is proposed, a runtime defense framework that acts as a semantic firewall over agent token flows, demonstrating that semantic runtime containment can achieve a practical security-utility trade-off for persistent AI agents.

提出 Contextuality（上下文性）——即 AI 系统自主访问用户累积知识资本的程度——作为 AI 介导不平等的一个维度，补充但不可化约为 Sharp 等人的框架。Contextuality -- the degree to which an AI system autonomously accesses a user's accumulated knowledge capital -- is proposed as a dimension of AI-mediated inequality that complements, but is not reducible to, the Sharp et al. framework.

消融实验表明，选择性干预优于被动记忆库暴露、常驻注入、仅顾问引导和通用检索。Ablations show that selective intervention outperforms passive bank exposure, always-on injection, advisor-only guidance, advisor-only guidance, and general retrieval, and general retrieval and that selective intervention outperforms passive bank exposure, always-on injection, advisor-only guidance, and general retrieval.

提出 ABot-AgentOS，一个通用机器人 Agent Operating System，位于底层控制器之上，提供 deliberation agent 层，支持场景条件规划、上下文隔离的 Skill 执行、多阶段验证、多模态记忆以及边云协同。ABot-AgentOS is presented, a general robotic Agent Operating System that sits above low-level controllers and provides a deliberative agent layer for scene-conditioned planning, context-isolated skill execution, multi-stage verification, multi-modal memory, and edge-cloud collaboration.

本文提出 Multi-Agent Contextual Exploration (MACE)，一个通过结构化的对等体选择显式促进探索的轻量级框架，显著改善了探索行为和下游任务表现，并在理论上证明探索价值随 Agent 多样性增加而提升。This work introduces Multi- Agent Contextual Exploration (MACE), a lightweight framework that explicitly promotes exploration through structured peer selection that substantially improves exploration behavior and downstream task performance and shows theoretically that the value of exploration increases with agent diversity.

基于 LLM 的编程 Agent 显著推动了自动化软件问题解决，但由于对仓库理解不足，仍易出现事实性错误。近期方法尝试通过修复前仓库探索来缓解此问题；然而，其修复驱动策略在未识别 Agent 知识缺口的情况下探索仓库，往往产生不精确的上下文，无法弥补潜在的理解不足。本文提出 ACQUIRE，一种面向软件问题解决的 QA 驱动框架，模拟经验丰富的开发者LLM-based coding agents have significantly advanced automated software issue resolution, yet they remain highly prone to factual errors caused by insufficient repository understanding. Recent methods attempt to mitigate this limitation through pre-repair repository exploration; however, their fix-driven strategies explore repositories without identifying the agent's knowledge gaps, often yielding imprecise context that fails to bridge the underlying understanding deficit. In this paper, we propose ACQUIRE, a QA-driven framework for software issue resolution. Mirroring how experienced developer

介绍 AMID，一种面向医学影像模型开发的自主多 Agent 框架，其性能优于所评估的通用 MLE 系统，并在异构任务上接近或匹配强大的人工设计挑战赛方案。AMID is introduced, an autonomous multi-agent framework for medical imaging model development that outperformed evaluated general-purpose MLE systems and approached or matched strong human-designed challenge solutions across heterogeneous tasks.

除领域内增益外，mid-training 还能缓解 agentic post-training 对非 Agent 编程及非编程工具调用基准（tau-bench、BFCL）造成的能力侵蚀：尽管 mid-training 语料仅含 Python 代码，函数调用的归纳偏置在 post-training 后依然保留，带来稳定的增益。Beyond in-domain gains, mid-training mitigates the capability erosion that agentic post-training otherwise inflicts on non-agent coding and non-coding tool-use benchmarks (tau-bench, BFCL): although the mid-training corpus contains Python code only, the function-call inductive bias survives post-training and yields consistent gains.

尽管视觉-语言模型（VLMs）已取得成功，但误导性图表因欺骗性视觉结构与失真数据表示仍构成重大挑战。我们提出 ChartCynics，一个通过"怀疑式"推理范式揭露视觉欺骗的 Agentic 双路径框架。与整体化模型不同，ChartCynics 将感知与验证解耦：诊断式视觉路径通过策略性 ROI 裁剪捕获结构异常（如倒置坐标轴），OCR 驱动数据路径确保数值根植性。为解决跨模态冲突，我们提出Despite the success of Vision-Language Models (VLMs), misleading charts remain a significant challenge due to their deceptive visual structures and distorted data representations. We present ChartCynics, an agentic dual-path framework designed to unmask visual deception via a "skeptical" reasoning paradigm. Unlike holistic models, ChartCynics decouples perception from verification: a Diagnostic Vision Path captures structural anomalies (e.g., inverted axes) through strategic ROI cropping, while an OCR-Driven Data Path ensures numerical grounding. To resolve cross-modal conflicts, we introduce

本研究将朴素搜索的根因追溯到生成器特有的、可演化的知识边界——即生成器经训练可内化的内容与必须保留于外部上下文的内容之间的鸿沟，并表明该边界可通过"先教后搜"协同训练框架被有效发现。This work traces the root cause of naive search to a generator-specific, evolving knowledge boundary: the divide between what a generator can internalize through training and what must remain in external context, and shows that it is discoverable through a teach-then-search co-training framework.

本研究考察了 GitHub 项目在各自引入首个 bot 前后两年间的情况，发现变化集中在采纳时点附近，而非逐渐累积，这与一种特定解读一致：可预测、基于规则的 Agent 能够成为社区社交基础设施的一部分。This work examines GitHub projects for two years before and after each adopted its first bot, finding changes cluster around adoption rather than accumulating gradually, consistent with a specific interpretation: predictable, rule-based agents can become part of a community's social infrastructure.

论文提出 Vinci2，一个主动式的第一人称视频协助系统，将端侧助手 Vinci 由被动响应推进到主动协助；以及免训练、记忆增强的 Agent EgoMemo，维护三种互补的记忆表征：多尺度时间摘要、语义知识图谱与视觉嵌入档案。Vinci2 is presented, a proactive egocentric assistance system that advances the on-device assistant Vinci from reactive response toward proactivity and EgoMemo, a training-free, memory-augmented agent that maintains three complementary memory representations: multi-scale temporal summaries, a semantic knowledge graph, and visual embedding archives.

论文提出 OAT，将该问题建模为基于神经受控微分方程的单类学习，在潜空间中刻画成功轨迹的动力学模式；实验表明其比基于 prompt 的基线更快，并在领域内和分布外数据集上均稳定优于基线。OAT is proposed, which casts this problem as one-class learning with neural controlled differential equations, modeling the dynamical pattern of successful trajectories in latent space, and is shown to be faster than prompting-based baselines and consistently outperforms them in both in-domain and out-of-distribution datasets.

STRACE（Structural TRajectory Analysis and Causal Extraction）是一个用于构建高信噪比优化上下文的框架，旨在对长周期 Agent 实施更精确、更有效的优化。STRACE (Structural TRajectory Analysis and Causal Extraction) is a framework that constructs high signal-noise optimization contexts for more precise and effective optimization of long-horizon agents.

提出一个多 Agent 框架，通过结合监督微调、直接偏好优化和检索增强生成 (RAG) 来调和事实基础与意识形态对齐，产生稳定的胜者和排名，且以宣言为锚的谱系能可靠预测现实世界中的实现，而幻觉内容则不能。A multi-agent framework that reconciles factual grounding with ideological alignment by combining Supervised Fine-Tuning, Direct Preference Optimization, and Retrieval-Augmented Generation is presented, which yields a stable winner and ranking, and manifesto-anchored lineage reliably predicts real-world materialization whereas hallucinated content does not.

提出 Hy-Embodied-RxBrain，一个具备语言-视觉联合推理与想象的具身认知基础模型，并将其扩展到连续机器人动作生成，在无需大规模动作数据预训练的情况下展现出可观的真实机器人性能。Hy-Embodied-RxBrain, an embodied cognition foundation model with joint language-visual reasoning and imagination, is introduced and extended to continuous robot action generation, where it shows promising real-robot performance without large-scale action-data pretraining.

Reflexion 是一个通过语言反馈而非更新权重来强化语言 agent 的新框架，在多种任务（序贯决策、编程、语言推理）上相较基线 agent 取得显著提升。Reflexion is a novel framework to reinforce language agents not by updating weights, but instead through linguistic feedback, which obtains significant improvements over a baseline agent across diverse tasks (sequential decision-making, coding, language reasoning).

HuggingGPT 是一个由 LLM 驱动的 Agent，利用 LLM（如 ChatGPT）连接机器学习社区中的各种 AI 模型以解决 AI 任务，能够处理跨模态、跨领域的大量复杂 AI 任务。HuggingGPT is an LLM-powered agent that leverages LLMs (e.g., ChatGPT) to connect various AI models in machine learning communities to solve AI tasks and can tackle a wide range of sophisticated AI tasks spanning different modalities and domains.

本文在交通微观仿真器 SUMO 中应用现代深度强化学习方法构建一个真正自适应的交通信号控制智能体，并采用一种新的状态空间——离散交通状态编码——其信息密度较高。This work applies modern deep reinforcement learning methods to build a truly adaptive traffic signal control agent in the traffic microsimulator SUMO, using a new state space, the discrete traffic state encoding, which is information dense.

提出 Lucid，一个黑盒对抗框架，在严格的图像受限威胁模型下攻击多模态记忆管道，无需访问目标 MLLM、目标检索编码器或文本通道，揭示了多模态记忆管道中的结构性漏洞。Lucid is proposed, a black-box adversarial framework that compromises multimodal memory pipelines under a strictly image-bounded threat model, requiring no access to the target MLLM, target retrieval encoder, or the text channel, exposing a structural vulnerability in multimodal memory pipelines.

提出数据科学世界模型概念，通过基于当前工作流状态和候选操作预测环境状态转移来建模数据科学执行环境；提出DSWorld框架，结合结构化状态构建、成本感知路由、轻量级真实执行以及基于LLM的昂贵操作模拟器。The concept of Data Science World Model is introduced, which model the data science execution environment by predicting environment state transitions conditioned on current workflow states and candidate operations and proposes DSWorld, a practical framework that combines structured state construction, cost-aware routing, lightweight real execution, and an LLM-based simulator for expensive operations.

TARS是一个集成在Visual Studio Code中的LLM驱动Agent，通过直接锚定到被分析代码的自主解释来支持程序理解，基于轻量级心智理论范式构建。TARS is an LLM-powered agent integrated into Visual Studio Code that supports program comprehension through autonomous explanations anchored directly to the code under analysis, built around a lightweight Theory of Mind paradigm.

在一个 recipe 级操作机制中，fan-in Muon 在共享 KL 与 clipping 下支持更激进的稳定有效步长：该余量在优化仍有空间时最大，而在接近饱和、经 AdamW 调参后或使用 magnitude matching 时收缩。A recipe-level operating regime in which fan-in Muon supports a more aggressive stable effective step under shared KL and clipping is identified: the margin is largest when optimization headroom remains and contracts near saturation, after AdamW tuning, or under magnitude matching.

提出RESOURCE2SKILL框架，将教程视频、仓库、文章和参考制品等多模态资源蒸馏为软件Agent的可执行技能，并验证了多模态技能格式、层次化组织、来源多样性、选择策略与在线获取的价值。RESOURCE2SKILL is presented, a framework that distills multimodal resources, including tutorial videos, repositories, articles, and reference artifacts, into executable skills for software agents, and confirms the value of multimodal skill format, hierarchical organization, source diversity, selection strategy, and online acquisition.

一种面向语言模型推理的新框架 Tree of Thoughts (ToT)，推广了流行的 Chain of Thought 提示方法，允许在作为问题求解中间步骤的连贯文本单元（thoughts）上进行探索。A new framework for language model inference, Tree of Thoughts (ToT), which generalizes over the popular Chain of Thought approach to prompting language models, and enables exploration over coherent units of text (thoughts) that serve as intermediate steps toward problem solving.