论文

揭示使用工具的 LLM Agent 的一种部署失效模式——来源缺口，以及一类跨上下文多步越狱攻击，可在早期交互中保留看似无害的中间产物，并在很久以后（可能在不同 Agent 实例或工作流阶段）诱发有害行为。A deployment failure mode for tool-using LLM agents, the provenance gap, and a family of cross-context multi-step jailbreaks that preserve benign-looking intermediate artifacts from an early interaction and elicit harmful behavior much later, potentially in a different agent instance or workflow stage.

本文提出一种分层隔离架构，结合策略感知的 ingestion、retrieval-time gating 与共享推理，并通过服务端 agentic 编排加以执行，在为多租户隔离提供天然强制点的同时，允许客户端框架保留对 agent 组合与延迟敏感操作的控制权。A layered isolation architecture combining policy-aware ingestion, retrieval-time gating, and shared inference, enforced through server-side agentic orchestration is introduced, creating natural enforcement points for multitenant isolation while allowing client-side frameworks to retain control over agent composition and latency-sensitive operations.

本文在视觉语言导航、具身问答和语言条件操控任务上评估了三种 AAS 变体，覆盖四个具身执行器，结果表明架构级搜索能在具身任务上产生可部署且具有方向性的成功率提升，而其中一个看似得分较高的候选因存在泄漏而被判定为无效。This work evaluates three AAS variants across four embodied executors spanning vision-language navigation, embodied question answering, and language-conditioned manipulation, and shows that architecture-level search can produce deployable and directional success-rate gains on embodied tasks, while one apparent high-scoring candidate is rejected as leak-bearing.

本文提出 ReDesign，一种 agentic 框架，通过跨模态选择与组合专用工具来构建可编辑的层级结构（layer hierarchy），在取得强视觉保真度的同时，于布局、颜色与文本编辑上提供最高的可编辑性。ReDesign is presented, an agentic framework that grows an editable layer hierarchy by selecting and composing specialized tools across modalities, and achieves strong visual fidelity while delivering the highest editability across layout, color, and text edits.

情感对话研究包含两种颇具影响力的策略传统。共情对话优先理解说话者的情绪体验；情感支持对话则选择并排序以满足求助者当前的需求。持续使用引入了更进一步的目标：有效的支持应在整个交互生命周期中维持用户进行情绪调节、应对、自我认同决策以及社会联结的能力。我们提出能力维持型情感对话（CSED）作为一种纵向研究范式，将支持策略与上述目标对齐，并...Emotional dialogue research includes two influential strategy traditions. Empathetic dialogue prioritizes understanding a speaker's emotional experience. Emotional support conversation selects and sequences support for the seeker's current needs. Sustained use introduces a further goal. Effective support should sustain users' capacities for emotion regulation, coping, self-endorsed decisions, and social connection across the interaction lifecycle. We propose capability-sustaining emotional dialogue (CSED) as a longitudinal research paradigm that aligns supportive strategy with this goal and or