全部动态

本页 40 条
10月12日 周一
arXiv cs.LG75

RPP:数据集不平衡条件下针对后门攻击的可认证投毒样本检测框架

arXiv:2602.00183v2 公告类型:replace-cross 摘要:深度神经网络极易受到后门攻击,但迄今为止,大多数防御方法都依赖平衡数据,忽视了现实场景中普遍存在、且可能放大后门威胁的类别不平衡问题。本文首次深入研究了数据集不平衡如何加剧后门脆弱性,结果表明:(i) 不平衡会导致多数类偏向,从而增加模型对后门攻击的易感性;(ii) 随着不平衡程度加剧,传统防御方法的性能显著下降。为解决这一问题,我们提出 Randomized Probability Perturbation(RPP),这是一种可认证的投毒样本检测框架,仅利用模型输出概率即可在黑盒环境下运行。对于任意待检测样本,RPP 能够判断输入是否经过后门操纵,同时提供可证明的域内可检测性保证以及误报率的概率上界。在五个基准数据集(MNIST、SVHN、CIFAR-10、TinyImageNet 和 ImageNet10)上开展的广泛实验涵盖了 10 种后门攻击和 12 种基线防御方法,结果表明,RPP 的检测准确率显著高于当前最先进的防御方法,尤其是在数据集不平衡的条件下。RPP 为在数据不平衡的现实环境中防御后门攻击奠定了理论与实践基础。

arXiv cs.LG68

Learning to accelerate Krasnosel'skii-Mann fixed-point iterations with guarantees

arXiv:2601.07665v2 Announce Type: replace-cross Abstract: We introduce a principled learning to optimize (L2O) framework for solving fixed-point problems involving general nonexpansive mappings. Our idea is to deliberately inject summable perturbations into a standard Krasnosel'skii-Mann iteration to improve its average-case performance over a specific distribution of problems while retaining its convergence guarantees. Under a metric sub-regularity assumption, we prove that the proposed parametrization includes only iterations that locally achieve linear convergence-up to a vanishing bias term-and that it encompasses all iterations that do so at a sufficiently fast rate. We then demonstrate how our framework can be used to augment several widely-used operator splitting methods to accelerate the solution of structured monotone inclusion problems, and validate our approach on a best approximation problem using an L2O-augmented Douglas-Rachford splitting algorithm.

arXiv cs.LG64

Probabilistic Multi-Agent Aircraft Landing Time Prediction

arXiv:2512.08281v3 Announce Type: replace-cross Abstract: Accurate and reliable aircraft landing time prediction is essential for effective resource allocation in air traffic management. However, the inherent uncertainty of aircraft trajectories and traffic flows poses significant challenges to both prediction accuracy and trustworthiness. Therefore, prediction models should not only provide point estimates of aircraft landing times but also the uncertainties associated with these predictions. Furthermore, aircraft trajectories are frequently influenced by the presence of nearby aircraft through air traffic control interventions such as radar vectoring. Consequently, landing time prediction models must account for multi-agent interactions in the airspace. In this work, we propose a probabilistic multi-agent aircraft landing time prediction framework that provides the landing times of multiple aircraft as distributions. We evaluate the proposed framework using an air traffic surveillance dataset collected from the terminal airspace of the Incheon International Airport in South Korea. The results demonstrate that the proposed model achieves higher prediction accuracy than the baselines and quantifies the associated uncertainties of its outcomes. In addition, the model uncovered underlying patterns in air traffic control through its attention scores, thereby enhancing explainability.

arXiv cs.LG70

Infinitesimal Operator World Models: Finite-Sample Guarantees for Offline Reinforcement Learning

arXiv:2511.10383v2 Announce Type: replace-cross Abstract: Continuous-time stochastic processes underlie many natural and engineered systems. In healthcare, autonomous driving, and industrial control, direct interaction with the environment is often unsafe or impractical, motivating offline reinforcement learning from historical data. However, there is limited statistical understanding of the approximation errors inherent in learning policies from offline datasets. We address this by linking reinforcement learning to the Hamilton-Jacobi-Bellman equation and proposing an operator-theoretic algorithm based on a simple dynamic programming recursion. Specifically, we represent our world model in terms of the infinitesimal generator of controlled diffusion processes learned in a reproducing kernel Hilbert space. By integrating statistical learning methods and operator theory, we establish global convergence of the value function under sufficiently small generator-approximation error and derive explicit finite-sample guarantees with bounds tied directly to system properties such as smoothness and stability. Our theoretical and proof-of-concept results indicate that operator-based approaches may hold promise for solving offline reinforcement learning using continuous-time optimal control.

arXiv cs.LG79

ABLEIST:LLM 生成的招聘情境中的交叉性残障偏见

arXiv:2510.10998v2 公告类型:replace-cross 摘要:大型语言模型(LLM)因在招聘等高风险领域延续基于身份的歧视,尤其是针对残障人士(PwD)的歧视,正受到越来越多的审视。然而,现有研究仍主要以西方为中心,忽视了性别和种姓等相互交织的边缘化形式如何塑造全球南方残障人士的经历。我们对六个 LLM 进行了全面审计,涵盖 2,820 个招聘情境,涉及不同的残障、性别、国籍和种姓背景。为捕捉隐蔽的交叉性伤害与偏见,我们提出了 ABLEIST(健全主义、励志化、超人化和象征性纳入),这套指标以残障研究文献为基础,包括五项健全主义特定伤害指标和三项交叉性伤害指标。结果显示,针对残障候选人的 ABLEIST 伤害显著增加,而许多最先进的模型未能检测出这些伤害。对于因性别和种姓而被边缘化的残障候选人,交叉性伤害(例如象征性纳入)急剧增加,进一步放大了上述伤害。这凸显了当前安全工具的重大盲点,以及在招聘等高风险领域对前沿模型开展交叉性安全评估的必要性。

arXiv cs.LG61

Surrogate Graph Partitioning for Spatial Prediction

arXiv:2510.07832v2 Announce Type: replace-cross Abstract: Spatial prediction refers to the estimation of unobserved values from spatially distributed observations. Although recent advances have improved the capacity to model diverse observation types, adoption in practice remains limited in industries that demand interpretability. To mitigate this gap, surrogate models that explain black-box predictors provide a promising path toward interpretable decision making. In this study, we propose a graph partitioning problem to construct spatial segments that minimize the sum of within-segment variances of individual predictions. The assignment of data points to segments can be formulated as a mixed-integer quadratic programming problem. While this formulation potentially enables the identification of exact segments, its computational complexity becomes prohibitive as the number of data points increases. Motivated by this challenge, we develop an approximation scheme that leverages the structural properties of graph partitioning. Experimental results demonstrate the computational efficiency of this approximation in identifying spatial segments.

arXiv cs.LG67

Approximation of differential entropy in Bayesian optimal experimental design

arXiv:2510.00734v2 Announce Type: replace-cross Abstract: Bayesian optimal experimental design provides a principled framework for selecting experimental configurations that maximize obtained information. In this work, we consider settings where the likelihood entropy is independent of the design or can be evaluated explicitly, which applies, e.g. to additive noise models with design-independent or explicitly computable noise entropy. This reduces the problem to maximum entropy estimation, where the nested integral defining the expected information gain collapses into a single integral. Our study is motivated by large-scale inference problems, such as inverse problems, where the computational cost is dominated by expensive likelihood evaluations. Under additive Gaussian noise model, we propose a computational approach in which the evidence density is approximated by a Monte Carlo or quasi-Monte Carlo surrogate, while the differential entropy is evaluated using standard methods without additional likelihood evaluations. We prove that this strategy achieves convergence rates that are comparable to, or better than, state-of-the-art methods for full expected information gain estimation, particularly when the cost of entropy evaluation is negligible. Our approach relies only on mild smoothness of the forward map and avoids stronger technical assumptions required in earlier work. We also present numerical experiments, which confirm some of our theoretical findings.

arXiv cs.LG72

UniConFlow:用于可认证运动规划的统一约束流匹配框架

arXiv:2506.02955v3 公告类型:替换并交叉列出 摘要:生成模型已成为机器人运动生成领域日益强大的工具,能够在各种任务中灵活生成多模态轨迹。然而,大多数现有方法在处理多种类型的约束时仍存在局限,例如避碰、驱动限制和动力学一致性;这些约束通常被单独处理,或通过启发式方法处理。在本研究中,我们提出 UniConFlow,这是一种基于统一约束流匹配的轨迹生成框架,可系统地纳入等式和不等式约束。此外,UniConFlow 引入了一种新颖的预设时间归零函数,在推理过程中塑造时变引导场,使生成过程能够适应不同的系统模型和任务要求。为进一步应对长时域、高维轨迹生成带来的计算挑战,我们还针对终端约束施加和推理过程提出了两种实用策略:一种违规片段提取方案,可精确定位并仅优化轨迹中违反约束的部分;以及一种轨迹压缩方法,可在降维空间中加速优化,同时保持解码后重建的高保真度。我们在双倒立摆、从现实到仿真的赛车任务以及从仿真到现实的操作任务这三项实验中进行了实证验证,结果表明,UniConFlow 优于最先进的生成式规划器和传统优化基线,在安全性、运动学与动力学一致性以及动作可行性等可认证运动规划指标上取得了更优的表现。项目页面:https://uniconflow.github.io。

arXiv cs.LG61

Physics-inspired Generative AI models via real hardware-based noisy quantum diffusion

arXiv:2505.22193v2 Announce Type: replace-cross Abstract: Quantum Diffusion Models (QDMs) are an emerging paradigm in Generative AI that aims to use quantum properties to improve the performances of their classical counterparts. However, existing algorithms are not easily scalable due to the limitations of near-term quantum devices. Following our previous work on QDMs, here we propose and implement two physics-inspired protocols. In the first, we use the formalism of quantum stochastic walks, showing that a specific interplay of quantum and classical dynamics in the forward process produces statistically more robust models generating sets of MNIST images with lower Fr\'echet Inception Distance (FID) than using totally classical dynamics. In the second approach, we realize an algorithm to generate images by exploiting the intrinsic noise of real IBM quantum hardware with only four qubits. Our work could be a starting point to pave the way for new scenarios for large-scale algorithms in quantum Generative AI, where quantum noise is neither mitigated nor corrected, but instead exploited as a useful resource.

arXiv cs.LG83

在提示注入防御面向用户之前进行审计:强大对手揭示了什么

arXiv:2505.15738v3 公告类型:替换并交叉列出 摘要:大型语言模型日益广泛地部署于面向用户的产品中,这些产品在处理敏感个人数据的同时,还会与不可信的外部内容交互。这使它们成为提示注入攻击的主要目标:攻击者在这些内容中注入恶意指令,以劫持模型。已有研究提出基于微调的防御方法,通过训练模型遵循正常的用户指令并忽略注入的指令,来缓解此类攻击。由于缺乏形式化保证,这些防御方法通常使用当时可获得的、最有效且符合现实条件的攻击进行实证评估,并往往报告接近零的攻击成功率。这给开发者及依赖他们的用户带来了虚假的安全感,同时仍存在一种可能:未来更强大的攻击可能绕过这些防御,并在广泛部署的系统中造成严重后果。本文主张,开发者应在发布前对防御措施进行压力测试,并提出了一个审计框架,使防御方无需自行发明下一种最先进的攻击方法,就能完成这项测试。我们的关键洞见是,微调过程本身会产生有用的产物:中间检查点可作为基于优化的攻击的跳板。尽管真实攻击者无法获取这些产物,但我们证明,它们暴露的漏洞是真实存在的,并且可被现实条件下的攻击者利用。通过使用 GCG 和 BEAST 等基于优化的攻击来具体实现这一框架,我们将针对最先进防御方法的攻击成功率从接近零提高至最高 96\%,揭示了以往评估遗漏的弱点。我们的结果表明,当前的评估实践可能大幅高估防御的鲁棒性,而在部署前使用强大对手审计防御措施,能够缩短反馈循环,并有助于防止攻击在现实世界中对用户造成伤害。

arXiv cs.LG77

快速局地城市微气候模拟器:未见城市形态中的风场与温度场

arXiv:2503.19708v3 公告类型:replace-cross 摘要:城市微气候涵盖受建筑几何形态影响的风场和温度场,对建筑能耗、行人风舒适度、污染物扩散、城市热岛效应及公共健康具有重要影响。传统计算流体力学(CFD)的计算成本过高,难以用于快速评估;而许多深度学习方法需要大量训练数据,且难以泛化至未见过的布局。本研究提出 Fast Localized Urban Microclimate Emulator(FLUME),这是一个基于傅里叶神经算子的快速、数据高效且具备几何感知能力的框架,用于预测三维风场和温度场。FLUME 假设,在给定来流和热力强迫条件下,这些平均场的大部分空间变化由周围建筑的几何形态控制。该框架引入 Multi-Directional Distance Feature(MDDF),在由可见性界定的自适应空间尺度上捕捉几何信息。通过将仅包含 23 个城市街区的模拟数据分解为较小的三维局部块,并加入预先计算的 MDDF 信息,FLUME 能够利用有限的 CFD 数据进行学习。在未见过的城市布局上,该模型的流向速度平均绝对误差为 0.2 m/s,温度平均绝对误差为 0.19$^{\circ}$C。深度集成为认知不确定性提供了实用的代理度量,而保形预测则将这些估计转换为经过校准的预测区间。集成预测的离散程度与局部预测误差呈正相关,其中屋顶高度处的剪切层、建筑尾流以及近地面垂直速度的不确定性更大。这些结果表明,FLUME 有望用于城市设计和城市气候研究中的快速情景评估。

arXiv cs.LG65

Understanding Transformer-based Vision Models through Inversion

arXiv:2412.06534v5 Announce Type: replace-cross Abstract: Understanding the internal mechanisms of deep neural networks remains a central challenge in machine learning. In computer vision, one promising yet only preliminarily explored approach is feature inversion via inverse networks, which reconstructs images from intermediate representations using trained inverse networks. In this study, we revisit feature inversion via inverse networks, introducing a novel, modular variant that enables a computationally more efficient application of the technique while, in some cases, producing semantically more coherent image reconstructions. We apply our method to large-scale transformer-based vision models, specifically Detection Transformer, Vision Transformer, Swin Transformer, and Data-Efficient Image Transformer, analyzing the resulting reconstructions across network depth. Our main analysis compares Detection Transformer and Vision Transformer, which exhibit the most informative differences among the evaluated architectures. At the same time, results for Swin Transformer and Data-Efficient Image Transformer support the broader applicability of our framework. Our findings reveal gradual representational changes across transformer layers as a shared characteristic of Detection Transformer and Vision Transformer, as well as systematic differences in how they preserve contextual shape and fine-grained image details, and in their robustness to color perturbations. These findings deepen understanding of transformer-based vision models and demonstrate the utility of modular feature inversion as an interpretability tool.

arXiv cs.LG66

Data-Driven Stochastic Optimal Control in Reproducing Kernel Hilbert Spaces

arXiv:2407.16407v3 Announce Type: replace-cross Abstract: This paper proposes a fully data-driven approach for optimal control of nonlinear control-affine systems represented by a stochastic diffusion. The focus is on the scenario where both the nonlinear dynamics and stage cost functions are unknown, while only a control penalty function and constraints are provided. To this end, we embed state probability densities into a reproducing kernel Hilbert space (RKHS) to leverage recent advances in operator regression, thereby identifying Markov transition operators associated with controlled diffusion processes. This operator learning approach integrates naturally with convex operator-theoretic Hamilton-Jacobi-Bellman recursions that scale linearly with state dimensionality, effectively solving a wide range of nonlinear optimal control problems. Numerical results demonstrate its ability to address diverse nonlinear control tasks, including the depth regulation of an autonomous underwater vehicle.

arXiv cs.LG77

超越分布内性能保持:通过面向脆弱性的调优恢复量化 VLA 的泛化能力

arXiv:2610.05745v2 公告类型:替换 摘要:已有研究表明,训练后量化能够在标准评估条件下保持 VLA 的性能,但其能否保留全精度模型的鲁棒性和泛化能力,仍缺乏充分探索。本研究系统考察了训练后量化的 VLA 策略在环境扰动下的鲁棒性和泛化能力。实证结果表明,量化策略尽管保持了相近的分布内性能,却可能对细微的环境变化变得脆弱。我们进一步观察到,动作差异集中在策略执行轨迹中的一小部分状态上,而教师指导的效果随差异程度而呈现相反趋势:它能提升高差异状态下的泛化能力,却可能削弱低差异状态下的泛化能力。这些发现揭示,有效的量化后恢复需要对脆弱状态进行选择性干预,而不是对学生模型进行全局蒸馏。因此,我们提出 Policy-Induced Vulnerability-Oriented Tuning(PIVOT-Q),这是一个具有脆弱性感知能力的同策略蒸馏(OPD)框架,以冻结的全精度策略作为教师,选择性地纠正量化学生模型在执行轨迹中遇到的脆弱状态。PIVOT-Q 利用短时域内的折扣累积差异识别脆弱状态,实施阶段均衡的稀疏监督,并使用 Behavioral Anchor 防止不必要的改变。在 LIBERO-Plus 的七种环境变化下开展的实验表明,该方法在多种 VLA 骨干模型和量化方法上均能实现稳定的性能恢复。值得注意的是,PIVOT-Q 在所有设置下都持续优于全状态蒸馏,而所用的状态级蒸馏预算仅为后者的 7.4%。我们的代码已发布于 https://github.com/ruanruan-andy/PIVOT-Q。

arXiv cs.LG73

Green-Routed Neural Operators:物理决定网络在何处读取

arXiv:2610.05337v2 公告类型:替换 摘要:我们发现,输运场在许多偏微分方程(PDE)中的物理作用与其在神经算子中的通常作用之间存在不匹配:PDE 利用输运场选择读取坐标,而神经算子通常仅将其视为输入值。为解决这一不匹配,我们提出 Green-Routed Neural Operator(GRNO),利用控制方程确定潜在特征的采样位置。一个无参数的方程适配器计算诊断关系,并构建以读取坐标为取值的出发点映射。多尺度编码器—解码器结合潜在特征的中心读取与路由读取,学习完整的有限时间更新。在五个二维和三维 PDE 系统的 40 步自回归评估中,GRNO 在其中四个系统上取得了最低的最终相对 $L^2$ 误差均值,并在 Keller-Segel 系统上保持了竞争力。固定权重下的路由干预表明,四个系统对方向和空间对齐具有较强依赖,而 Keller-Segel 系统的依赖较弱。在独立训练的消融实验中,相较于仅将输运场作为输入特征、用学习得到的位移替代方程指定的路由,或以空间错位方式应用路由的各个变体,GRNO 在全部五个系统上均取得了更低的平均误差。它还显著优于直接对物理状态进行平流输运并学习剩余更新的方式,表明方程指定的读取坐标为长时域 PDE 预测提供了有效的结构先验。

arXiv cs.LG70

Graph World Models for Constrained Epidemic Policy Planning

arXiv:2609.35545v2 Announce Type: replace Abstract: Epidemic policy planning often requires coordination between geographical regions, taking into account mobility-driven spillovers and how to make use of limited resources. Existing methods either lack action-conditioned models of coupled dynamics or cannot guarantee per-period feasibility. We present EpiMind, a graph world model framework for constrained epidemic policy planning across regions. A graph-factored recurrent state-space model generates joint policy-conditioned rollouts from regional latent beliefs, while graph-temporal ADMM optimizes regional interventions, enforces shared-resource feasibility through projection, and evaluates temporal specifications under the learned model. EpiMind reduces admission RMSE by 29% relative to graph-free dynamics modeling, plans within 1-5% of the best feasible constant policy with guaranteed shared-budget feasibility, and outperforms all deployable baselines across three resource budgets in real-context evaluation. These results demonstrate that graph-structured policy imagination with explicit constrained coordination supports effective epidemic interventions from learned dynamics.

arXiv cs.LG70

LLM4Trust: Exploring the Capabilities of Large Language Models for Trust Evaluation

arXiv:2609.33521v2 Announce Type: replace Abstract: Trust evaluation plays a critical role in cybersecurity by supporting risk mitigation and decision-making. A variety of trust evaluation methods have been proposed, with learning-based approaches offering high accuracy and automation. However, they often require substantial ground truth, suffer from low training efficiency, lack support for basic trust properties, and provide limited explainability. Large Language Models (LLMs) offer a compelling alternative due to their strong zero-/few-shot reasoning abilities and broad knowledge. To this end, we propose LLM4Trust, the first benchmark framework that systematically explores the capabilities of LLMs for trust evaluation. We first construct diverse trust graphs to model five basic trust properties and design corresponding property understanding tasks. We then assess the ability of eight representative LLMs to understand these properties under nine prompt methods. Based on this exploration, we identify the most effective LLM-prompt combinations and apply them to five real-world datasets for validating LLMs' trust evaluation capability. During this process, we propose two strategies to extract key information from large-scale trust graphs, addressing the context window limitations of LLMs. Extensive experiments show that LLMs can effectively understand basic trust properties and have great potential for real-world trust evaluation, particularly under limited supervision. However, they remain vulnerable to attacks targeting trust graphs and demonstration examples used in few-shot prompting, and incur high inference costs. Accordingly, we propose a defense mechanism and batch inference to improve the robustness and efficiency of LLM-based trust evaluation. The source code of LLM4Trust is available at https://github.com/Jieerbobo/LLM4Trust

arXiv cs.LG74

表格基础模型注意力机制的基准测试

arXiv:2609.31306v3 公告类型:替换 摘要:TabPFN、Mitra 或 ConTextTab 等表格上下文学习器依赖于在潜在嵌入的二维序列上交替进行行注意力和列注意力计算。这些注意力模式与语言模型中的一维情形显著不同:行注意力涉及较长的序列,而列注意力处理的序列短得多,且表格数据的跨步内存布局使得生成连续张量的成本很高。此外,当前模型使用的隐藏维度相较于近期的语言模型较小。然而,高效注意力的研究主要集中于一维序列,二维表格场景尚未得到探索。为此,我们构建了一套可复现的基准测试环境,并在多个后端上研究表格注意力的独有特征——包括 Torch SDPA(efficient 和 cuDNN)、FlashAttention-2/3/4,以及仅用于推理的后端 vLLM 和 SageAttention——在三代 GPU(A100、H100、B200)上,针对符合实际的表格张量形状测量前向和反向计算的吞吐量。我们发现,列注意力与行注意力的最优后端选择不同,并且会随硬件和模型具体配置而变化:尽管针对各代 GPU 定制的 FlashAttention 实现总体表现最佳,但在序列较长的列注意力场景中,CuDNN 有时表现更优,性能交叉点取决于注意力头维度。在仅用于推理的后端中,SageAttention 在行注意力以及超过 16,000 行的大规模序列上表现良好。我们可复现的基准测试为未来改进表格原生注意力机制奠定了基础。自包含的基准测试与评估代码已公开发布于:https://github.com/SAP-samples/tabular-attention-benchmark

arXiv cs.LG71

RLVR$^{2}$:基于可验证评分准则排名的强化学习

arXiv:2609.23457v2 公告类型:替换 摘要:基于可验证奖励的强化学习(RLVR)正从数学和代码等具有明确定义的正确性信号的任务,拓展至由多维评分准则规定的多方面质量要求。由于策略优化对每次 rollout 仅使用一个标量,基于评分准则的流程必须将多个标准的分数映射为一个标量奖励。这种聚合通常被视为分数缩放,但它实际上隐式决定了训练过程中各质量维度之间的权衡方式。目前普遍采用的做法是对每项标准进行归一化,再取线性组合,这假定不同标准的基数分数差异具有可比性,且某项标准上的提升可以弥补另一项标准上的不足;当各标准在语义上存在异质性时,这两个假设都不可靠。我们提出基于可验证评分准则排名的强化学习(RLVR$^2$),这是一种面向基于评分准则的 RLVR 的可验证排名范式。对于每项标准,RLVR$^2$ 将评分准则分数转换为该标准特定的组内序数结果,从所得的比较矩阵中恢复潜在效用,并将这些效用合并为一个训练信号。通过仅保留组内排序并舍弃原始分数的大小,RLVR$^2$ 避免了对异质评分准则量表进行校准。它还支持保持目标不变的属性调整:与观测排名相关、但并非训练目标的辅助属性可以纳入估计,而无须扩展评分准则或直接对这些属性给予奖励。在三种模型规模和 16 项基准测试中,RLVR$^2$ 均持续优于具有代表性的基于评分准则的基线方法,并在每种规模下的大多数基准测试中取得最佳综合表现。分析表明,它在保持质量目标不变的同时,能够控制与推理效率和回复格式相关的系统性影响。

arXiv cs.LG74

SUN:在强化学习中追寻新颖性

arXiv:2609.08642v2 公告类型:替换 摘要:强化学习(RL)中的探索仍是一项根本性挑战。近期的目标条件化 RL 策略(通过选择目标来促进更广泛的状态覆盖)已展现出良好效果,但尚无策略能同时依据新颖性和可达性对目标进行评分:这两种信号要么被人为权衡,要么被依次应用,要么其中一种被完全忽略。本文提出一种可达性感知的目标选择框架,显式整合这两个方面,并可无缝融入任何离策略 RL 算法。为此,我们提出 SUccessor-to-Novelty(SUN),这是一种从后继价值函数推导出的指标,用于识别既新颖又可达的目标。我们证明,SUN 是一种按计数缩放的目标达成奖励所对应的价值,可为短时域内的命中概率提供界限,并能排除不可达目标。我们进一步提出一种利用这些性质的自适应目标选择策略,以及一种准确且轻量级的伪计数方法,以避免经典方法的开销。我们通过全面的基准测试验证了所有论断:在包含不可达或难以到达的状态、不可逆转移、障碍物、迷宫及无界空间的标准环境和新环境中,SUN 均持续优于当前最先进的方法。代码见 https://github.com/sparisi/rl-anvil

arXiv cs.LG74

评估方案对跨 Trust-Hub 家族的基于特征的硬件木马检测的影响

arXiv:2609.07199v2 公告类型:替换 摘要:Trust-Hub 会重复使用宿主电路:若干文件的主要差异在于植入的木马。当同源变体中的逻辑门同时进入训练折和测试折时,检测器可能会受益于其已经见过的宿主逻辑。我们测量了这一效应,而非提出另一种分类器。该语料库包含来自 16 个网表的 49,124 个逻辑门,分为五个宿主家族。我们保持解析器、36 项逻辑门特征、类别权重、模型设置、阈值及家族级聚合方式不变,仅改变一个选项:测试集的划分边界。三种设置分别从混合语料库中抽取测试逻辑门、留出一个完整网表,以及留出某个宿主的所有变体。这一选择会产生显著影响。随机森林在混合逻辑门设置下的 F1/AP 为 0.914/0.978,在留出一个网表时为 0.636/0.851,在留出一个宿主家族时为 0.460/0.577。在相同的比较中,XGBoost 从 0.946/0.976 降至 0.464/0.544。逻辑回归的 AP 也有所下降,但其固定阈值下的 F1 并非单调变化。每个家族从混合划分到家族留出划分都呈现相同的变化方向。特征移除、使用多个模型与模拟器随机种子重复实验、分数归一化、与解析器相关的样本排除,以及缩小样本规模,都会改变差距的大小,但不会逆转这一趋势。聚合方式同样重要:按逻辑门数量加权的平均值由较大的 ISCAS 文件主导,因此主要报告值对每个宿主家族赋予相同权重。自助法和刀切法的汇总结果显示差距仍为正,但其各折重复使用了训练家族。我们将五个家族对应的结果行视为描述性证据,而非独立试验。五个宿主家族不足以支持对总体作出断言,而且该实验无法说明向新标准单元库或工业设计迁移的情况。它支持一个更有限的结论:同源基准变体可能夸大表观迁移能力。对于包含同一宿主电路多个变体的基准,应在报告混合划分得分的同时,报告考虑家族结构的留出评估结果以及全部五个家族的结果。

arXiv cs.LG77

DASC:面向混合线性注意力推理服务的衰减感知状态压缩

arXiv:2608.30386v2 公告类型:替换 摘要:混合线性注意力架构近期已扩展至大型开放权重模型,在显著降低键/值(KV)缓存增长的同时,提供了可与全注意力媲美的质量。然而,其原地递归状态更新使缓存管理变得复杂:前缀复用需要在全注意力 KV 缓存之外保存状态检查点,而完整存储状态检查点会增加内存压力,导致更多缓存驱逐和重复预填充。通过分析 Gated DeltaNet(GDN)和 Kimi Delta Attention(KDA)的衰减结构,我们发现,不同注意力头和通道保留前缀信息的时间尺度存在显著差异,我们将其称为\emph{保留时域}。这种差异表明,持久保存的状态检查点具有很大的压缩潜力。基于这一观察,我们提出了\emph{衰减感知状态压缩}(DASC):从模型权重推导保留时域,选择长时域状态单元,并将其打包为不规则的状态检查点布局。为与张量并行推理引擎高效集成,DASC 进一步在各个 TP 秩之间均衡分配压缩后的状态检查点。复用时,DASC 可以将被省略的单元填零,也可以付出额外计算开销,利用长度受限的后缀刷新这些单元。在 Kimi-Linear 上的检索和端到端推理基准测试中,保守的 DASC 配置在将 KDA 递归状态检查点压缩 $2.63\times$ 的同时,保持了接近完整缓存的表现。在固定的状态检查点内存预算下,由此获得的容量提升使平均首个词元生成时间(TTFT)降低了 42.6\%,输入吞吐量提高了 68.4\%。在更高压缩比下,后缀刷新能够恢复因更激进省略而损失的大部分准确率,但代价是额外的重放计算。采用 GDN 的 Qwen 也呈现出类似的质量—效率趋势,表明 DASC 可以从按通道处理的 KDA 扩展到按注意力头处理的 GDN。

arXiv cs.LG70

The Fourth Quadrant: A Stylized View of Benign Misfitting

arXiv:2608.01032v2 Announce Type: replace Abstract: Training error is what we can observe on a training set; test error is the quantity we care about. We study squared-error linear regression in a deterministic $(d+1)$-dimensional single-spike model. Each training vector has spike coordinate $\sqrt{\gamma}$, $\gamma>1$, and equal-norm, mutually orthogonal nuisance components. Training labels are $1$. Fresh test points are centered Gaussian with covariance $\operatorname{diag}(\gamma,1,\ldots,1)$ and noise-free label $x[1]/\sqrt{\gamma}$. We compute the exact train--test tradeoff for linear predictors in the training span. When the spike direction is unknown, allowing all linear predictors does not improve this tradeoff, on average or in the worst case over directions consistent with the data. There is a range of training-set sizes where every span predictor that generalizes well must fit the training data worse than the zero predictor. We call this benign misfitting, or the fourth quadrant. At its sharpest, test error tends to zero while training error diverges, with both zero-predictor errors normalized to one. The best span predictor begins to generalize when $n\gg d/\gamma^2$, while interpolation needs $n\gg d/\gamma$. In the intervening window $d/\gamma^2\ll n\ll d/\gamma$, useful span prediction lies beyond interpolation: training predictions overshoot the labels. One-pass stochastic gradient descent with a large constant learning rate attains small test error throughout this window, matching the best span predictor up to a logarithmic factor, while leaving large empirical training error. Finally, the nuisance component responsible for the training misfit also controls adversarial sensitivity.

arXiv cs.LG77

一阶上下文 Shapley:面向 LLM 对齐与评估的可扩展数据审计

arXiv:2607.22766v2 公告类型:替换 摘要:大语言模型的后训练对齐日益受到数据质量的制约:偏好与指令微调语料中不断积累标签噪声、安全性偏好倒置和标注者间的矛盾,这些问题无法通过去重发现,而使用 LLM 对整个语料库进行评判的成本又过高。尽管 Data Shapley 提供了具有理论依据的价值评估框架,但精确计算需要进行难以承受的重新训练,而 KNN-Shapley 等基于嵌入的替代方法无法区分高效用与低效用示例(与生成效用的相关性为 $\rho = 0.0003$)。我们提出了一种仅需推理的价值评估流程,在语义 $k$-NN 邻域上构建上下文合作博弈,无需更新参数,仅通过 $O(k)$ 次前向传播即可计算其一阶项;该方法在全部目标上均与多示例蒙特卡洛上下文 Shapley 呈正相关,而计算量仅为后者的 1/19。通过将成对的对数似然变化投影到有向影响图上,我们用三个信号刻画每条记录:出向示范优势、入向受示范优势,以及用于保护稀有提示的拓扑独特性得分。预筛选将 LLM 双模型仲裁的范围限制在 1%–5% 的记录内,同时在 HelpSteer2 和 Anthropic HH-RLHF 上分别实现了 4.5 倍和 2.2 倍的已确认错误富集率,并捕获了零样本似然和间隔筛选遗漏的矛盾。在 DPO 训练期间,已确认存在矛盾的记录比干净记录更频繁地与更新方向相悖(在 LoRA 梯度中占比分别为 56.7% 和 37.0%),且其奖励准确率始终低于随机水平。最后,对 HH-RLHF 基准的审计揭示了标签错误:对于这些错误,对齐模型与人工标签不一致的比例达到 73%–83%;在修复或过滤被标记的记录后重新进行 DPO 训练,即使不使用 LLM 仲裁,也能使整体奖励准确率提高 0.5–0.6 个百分点,并使已修复的偏好倒置样本上的奖励准确率提高 3.1–3.5 个百分点。

arXiv cs.LG70

Learning from All-Failed Groups via First-Visit Coverage in Long-Horizon Agentic Tasks

arXiv:2607.22724v2 Announce Type: replace Abstract: Group-based policy optimization has been increasingly used to train large language model (LLM) agents from sparse outcome rewards by comparing trajectories or steps within a group. However, on difficult long-horizon agentic tasks, we found this comparison suffers from a sampling imbalance: repeated or low-effect actions dominate the high-probability region of the policy, leaving useful state-changing actions under-sampled. This imbalance produces many all-failed rollout groups, where the relative advantages within such a group provide no direction for updating the policy. Consequently, the sampling imbalance and the all-failed groups collapse into a self-perpetuating credit trap: failure-dominated sampling yields no learning signal, allowing repeated low-effect actions to persist. To break this trap, we propose Coverage-conditioned Group Policy Optimization (CovGPO), which uses first-visit observation coverage only when all samples in a group receive zero outcome reward. Specifically, within such groups, CovGPO assigns higher relative advantages to state-exploring actions without corrupting the original reward signal, as reaching new observations is a prerequisite for task success. Experiments on two challenging agentic benchmarks, ALFWorld and WebShop, show that CovGPO consistently improves over group-based baselines, with particularly large gains on hard tasks.

arXiv cs.LG73

使用 Transformers 进行规划:计算链与结构化上下文窗口

arXiv:2607.17710v2 公告类型:替换 摘要:大语言模型(LLMs)已对机器学习的诸多领域产生了显著影响。然而,近期研究表明,它们难以可靠地解决规划问题,尤其是与经典规划器相比。即使面向推理的模型近期取得了进展,LLMs 究竟能在多大程度上真正执行规划,仍是一个悬而未决的问题。与此同时,理论结果表明,作为现代 LLMs 核心架构的 transformers 具有图灵完备性。在本研究中,我们探究了 LLMs 的理论计算能力与实际规划表现之间这一明显差距。我们提出了 Chain of Computation(COC),这是一种将基于 transformer 的语言模型(LM)置于迭代循环中,并利用其作为模式匹配系统的优势的计算架构。COC 使用 Structured Context Window(SCW)作为外部记忆,使模型在每个规划步骤中仅访问累积上下文中所需的部分,从而将输入规模维持在近似恒定的水平。在这一架构中,LM 学习规划策略和世界模型,并执行规划过程中所需的算术运算。我们表明,从零开始训练的较小规模 LM 能够从少量训练实例中学会规划程序,并泛化到未见过的问题,在 BlocksWorld 和煎饼排序谜题上的成功率超过 99%。我们进一步表明,COC 可以被形式化为下推自动机(PDA)。这一形式化方案能够求解最多包含 20 个圆盘的汉诺塔(TOH)实例,并使规划器能够执行深度优先搜索(DFS)算法。在理论层面,我们刻画了在标准全上下文设置下,无关上下文的累积如何增加规划失败的概率,以及 SCW 如何缓解这一影响。

arXiv cs.LG73

通过对抗蒸馏提升可认证鲁棒性

arXiv:2606.31653v2 公告类型:替换 摘要:可认证训练旨在生成其预测能够被形式化验证为可抵御对抗扰动的模型,通常通过优化允许扰动集合上最坏情况损失的上界来实现。对于神经网络,完全基于紧松弛界的可认证训练方法能够生成易于认证的网络,但会牺牲标准准确率。相反,对抗训练往往能带来更强的经验鲁棒性和更高的标准准确率,但所得模型通常难以用神经网络验证器进行认证。近期文献表明,将对抗训练目标与基于区间界传播(IBP)的宽松过近似相结合,可以在标准准确率与可认证准确率之间取得更好的权衡,其实质是在最坏情况损失的下界与上界之间进行插值。在此基础上,我们提出 AD-CERT,这是一种将对抗蒸馏与 IBP 上界相结合的可认证训练目标。我们表明,在 logit 空间中从具有经验鲁棒性的教师模型蒸馏对抗信息,可以为可认证训练提供有效的下界替代目标;AD-CERT 在多个面向 ReLU 网络的鲁棒性基准上取得了最先进的可认证性能。此外,在统一的实验设置下,研究表明,与鲁棒特征空间蒸馏目标相比,在 logit 层面蒸馏对抗信息可将可认证准确率提高最多 5.40 个百分点。我们的代码已发布于 https://github.com/matteo-melis/ad-cert。

arXiv cs.LG76

FlowAWR:通过优势加权校正实现在线自适应流强化学习

arXiv:2606.30376v2 公告类型:替换 摘要:通过在线强化学习对齐连续空间中的生成式流模型,受到轨迹似然难以计算的限制。现有基于密度近似的策略梯度方法依赖随机 SDE 采样器来构建可计算的转移核,这会引入训练与推理之间的不一致,并且需要无分类器引导(CFG)。尽管 DiffusionNFT 等隐式框架直接优化前向过程的速度场,但其启发式固定幅度校正使优化强度无法随组内相对质量而调整。我们提出 \textit{Flow Advantage-Weighted Rectification}(\textbf{FlowAWR}),这一范式将连续生成策略优化重新表述为朝向理论最优速度场的监督回归。从 KL 约束下奖励最大化的最优策略出发,FlowAWR 推导出具有幅度感知、优势加权校正形式的最优速度场,实现了无需 SDE 的优化和无需 CFG 的生成。在 SD3.5-Medium 上的对比评估中,FlowAWR 在提升对齐性能的同时,相较于 DiffusionNFT 实现了 2$\times$ 至 5$\times$ 的收敛加速(例如,FlowAWR 在 1.2k 步时达到 24.12 的 PickScore,而 DiffusionNFT 在 2.0k 步时达到 23.82,FlowGRPO 在 $>$4k 步时达到 23.50)。在多奖励约束下,FlowAWR 能够维持生成质量,在满足结构规则的同时保持稳定的域外性能。代码见 \href{https://github.com/Fuzm7/FlowAWR}{FlowAWR}。

arXiv cs.LG79

已被抹除,却未消失:输出遗忘并非真正遗忘

arXiv:2606.25001v2 公告类型:替换 摘要:机器遗忘(MU)通常通过输出遗忘来评判,例如遗忘集上的低准确率或成员推断能力的降低。然而,如果输出层面的成功可以与表征空间中不符合重新训练结果的残留同时存在,那么当前评估究竟在验证哪一种遗忘?我们通过与重新训练一致的表征遗忘来研究这一问题,将一组重新训练的模型(即不使用待遗忘数据、从头训练的模型)作为理想遗忘的可操作参考分布。针对多种遗忘方法、数据集和模型,我们的理论分析与实证结果表明,标准的输出层面评估可能系统性地高估机器遗忘的成功程度。在这一更严格的视角下,当前方法往往在输出层看似已完成遗忘,但相对于重新训练仍呈现结构性失配。它们在待遗忘样本上与重新训练部分对齐,在保留样本上则表现出更强的不一致性,并且往往留下沿重新训练相关方向局部分布的残余差异,而非弥散于整个表征空间。这种结构性失配的特征包括遗忘与保留之间的不对称性、方向性失配,以及沿重新训练相关方向集中的残留。在许多情况下,这些差异超出了独立重新训练的变异范围,并带来在重新学习攻击中恢复信息的风险。总体而言,结果表明,当前对 MU 的评估往往针对的是表面遗忘,而非与重新训练一致的遗忘。更广泛地说,重新训练揭示了输出遗忘所掩盖的内容。

arXiv cs.LG75

VLA-FAIL:面向微调视觉-语言-动作模型的高效任务失败检测

arXiv:2606.21386v2 公告类型:替换 摘要:视觉-语言-动作模型(VLA)在许多机器人操作任务上达到了最先进的性能,但在分布外场景中仍可能表现出不可预测的行为。因此,运行时失败检测对于 VLA 在现实世界中的安全部署至关重要。然而,现有的任务失败检测器要么需要计算成本高昂的动作采样,要么基于限制其对 VLA 适用性的架构假设,要么需要获取失败轨迹。我们提出 VLA-FAIL,这是一种轻量且广泛适用的 VLA 失败检测框架,以极低的额外开销结合了两种新颖的失败检测器,且无需失败数据。第一种是末层马氏距离(LLMD),通过逐词元测量末层特征相对于训练数据的偏离程度来检测分布外状态。第二种是动作块一致性(ACC),利用滚动时域控制产生的时间重叠,在连续动作块变得不一致时检测失败。为刻画检测准确性与检测延迟之间的权衡,我们引入了 \textsc{AUCPDT},这是一种不依赖阈值的指标,可联合评估精确率、召回率和检测时间。通过大量现实世界和仿真实验,我们证明 LLMD 和 ACC 能够捕捉互补的失败模式,两者结合可在多种任务中实现可靠且及时的失败检测,并且经常优于计算成本高得多的基线方法。项目页面:https://vla-fail.github.io/vla-fail-2026

arXiv cs.LG74

用于解释大语言模型的可扩展回路学习

arXiv:2606.16939v2 公告类型:替换 摘要:机制可解释性领域的一个重要研究方向是学习大语言模型组件之间的稀疏回路,以揭示这些组件如何共同产生模型行为。然而,原始神经元具有多义性,导致学到的回路难以解释。稀疏自编码器(SAE)特征缓解了这一问题,但其高维性使现有基于干预的回路学习方法面临难以承受的计算成本。我们提出 CircuitLasso,这是一种基于稀疏线性回归的可扩展回路学习方法。在基准数据上,CircuitLasso 恢复出的回路在结构准确性上可媲美最先进的基于干预的方法,而计算成本仅为其一小部分。在可解释性方面,CircuitLasso 能高效揭示 SAE 特征之间的关系,展示人类可理解的语义特征如何在模型中传播并影响其预测。最后,我们利用所学回路提供的洞见,在一项领域泛化任务上以显著更低的成本实现了相当的性能,从而验证了这些回路的实用价值。

arXiv cs.LG66

Learning Transfers: Kan Extensions of Topological Invariants of Learned Representations

arXiv:2606.07627v4 Announce Type: replace Abstract: When a learned representation is reused for a new task, which of its structure should survive? A task is a small category, a change of task is a functor $J$, and the invariants of a trained representation form a functor $F$. The left Kan extension $\operatorname{Lan}_JF$ is the invariant that the source and the change of task force on the target: by its universal property, every comparison of the source with an observed target invariant factors through it. The transfer discrepancy is the largest distance, over the target objects, between this extension and the observed invariant. For persistent homology the extension is a cokernel over comma categories, and a functorial version of the discrepancy, which also compares the maps between target objects, is $1$-Lipschitz under interleavings. On finite samples the discrepancy is a bottleneck distance, computed without approximation. For data glued from two pieces whose exclusive parts lie farther apart than the filtration scale, a Mayer-Vietoris sequence identifies what extending homology loses, while extending chains loses nothing. For a merge of labelled point clouds, the degree-zero discrepancy vanishes if and only if some $1$-Lipschitz classifier has a margin above the filtration scale at every sample point. In experiments on sampled manifolds, trained encoders and pretrained image models, every exact prediction holds on every sample. The discrepancy of truncated invariants recovers a hidden merge of separated parts far above chance and tells the intended target of a merge from a permuted control, but across pretrained models it does not track the accuracy of a linear probe.

arXiv cs.LG75

教师何时应更新?自同策略蒸馏中的时间耦合与稳定性

arXiv:2606.03532v2 公告类型:替换 摘要:自同策略蒸馏使用由学生策略自身参数历史构建的教师来训练学生策略,但教师的更新调度——决定教师与学生之间的\emph{时间耦合}——尚未作为稳定性变量得到系统研究。通过在 Qwen3-8B 上开展受控的调度扫描实验,我们证实,\emph{隔离期}(即两次更新之间完全冻结教师的时段)才是实现稳定学习的关键结构性属性,而非教师的年龄。为刻画这些底层训练动态,我们提出了一个涵盖时间 KL 结构、刷新冲击和长度尾部风险的诊断框架。该框架进一步揭示了\emph{状态无感知崩溃}:在短期训练中最优的固定调度,在长期训练中会发生灾难性失效,因为时钟驱动的刷新可能通过一次不可逆的操作,将暂时发生漂移的学生复制到教师中。这种失效模式在短期评估中无法察觉,且在机制上不同于 EMA 的持续性污染。为解决这一问题,我们提出 \emph{Consolidation-Gated Teacher Refresh}(CGTR),该方法保留隔离期,同时根据奖励提升与长度尾部安全性的联合证据,对每次刷新进行门控,确保教师的每次更新都响应学生真正的学习巩固,而非时钟信号。CGTR 仅使用一套共享参数,无需针对各数据集重新调参,就在全部四项任务(Chemistry、Biology、Physics、ToolUse)上实现了\textbf{零崩溃}和最佳最终得分,并能根据各任务的学习动态自主调节刷新频率。

arXiv cs.LG72

动态医疗治疗强化学习的统一基准

arXiv:2606.01028v4 公告类型:替换 摘要:医疗治疗推荐给强化学习(RL)带来了若干挑战:患者的生理状态在连续时间中演变,测量和干预以不规则的时间间隔进行,且治疗效果在个体间存在显著差异。然而,现有的 RL 建模方法和仿真环境均基于具有固定决策间隔的离散时间马尔可夫决策过程(MDP)。因此,仍难以评估 RL 方法能否处理依赖于时间间隔的疾病进展、个性化治疗反应,以及连续两次测量之间的安全性。为填补这一空白,我们推出了 MedGym,一个用于动态治疗推荐的基准环境。MedGym 在连续时间框架下对患者状态的纵向演变进行建模,并利用物理信息神经网络,根据临床数据构建可配置的医疗 RL 基准。由此构建的基准能够在不规则治疗时机和患者特异性动态变化条件下,直接比较离散时间方法与连续时间方法。此外,MedGym 支持从个性化和轨迹层面的安全性等临床重要角度进行评估。通过为连续时间动态治疗提供标准化且可配置的基准,MedGym 能够对医疗 RL 方法进行更贴近现实、更具参考价值的评估。

arXiv cs.LG75

深度集成真的能捕捉图神经网络中的不确定性吗?

arXiv:2605.22593v2 公告类型:替换 摘要:尽管深度集成被广泛视为深度学习中不确定性量化的默认方法,但人们往往仅凭其在计算机视觉等领域的成功,就假定它对图结构数据同样有效。我们专门研究了标准深度集成在消息传递图神经网络中的表现。通过在涵盖不同任务和复杂度的八个数据集上进行基准测试,我们发现,集成相较于单个模型仅带来微小改进。这些微小收益主要源于对点预测中的优化噪声进行平均,而非不确定性估计得到实质性改善。通过对偶然不确定性和认知不确定性进行分解,我们发现了认知不确定性坍缩现象:独立训练的网络总是收敛到过于相似的预测结果。由于预测分歧是集成捕捉认知不确定性的根本机制,这种多样性的缺失抵消了其关键优势。为解释这一现象,我们推导了一个由图拓扑和 Dirichlet 能量预算决定的认知方差界,将认知不确定性坍缩与消息传递的平滑偏置联系起来。我们的结果表明,深度集成的成功并不能直接迁移到图机器学习中。

arXiv cs.LG66

Stochastic MeanFlow Policies: One-Step Generative Control with Entropic Mirror Descent

arXiv:2605.21282v3 Announce Type: replace Abstract: Combining entropy regularisation with mirror descent in online off-policy reinforcement learning requires expressive policies with efficient sampling and explicit entropy control. Gaussian policies struggle to represent multimodal targets, whereas generative policies often require iterative sampling or lack tractable entropy estimates. We introduce Stochastic MeanFlow Policies (SMFP), a one-step generative policy class that combines MeanFlow-based noise-to-action mappings with Gaussian reparameterisation. The latent mapping captures diverse action modes, while a learnable conditional Gaussian scale provides an analytic entropy lower bound. We use this bound to regulate stochasticity alongside direct value guidance and advantage-weighted MeanFlow regression, enabling entropy-regularised mirror-descent learning with one-step policies. Across seven MuJoCo benchmarks, SMFP achieves strong performance against Gaussian and generative baselines with single-step inference. Additional experiments demonstrate multimodal action modelling and effective exploration in sparse-reward navigation.

arXiv cs.LG73

SURF:调控标量化权重以均匀遍历 Pareto 前沿

arXiv:2605.20619v2 公告类型:替换 摘要:标量化因其简单性和可扩展性而被广泛用于多目标优化。在许多应用中,目标是生成能够代表多样化用户偏好的解,理想情况下均匀覆盖 Pareto 前沿(PF)。然而,均匀采样标量化权重通常会导致对 PF 的非均匀覆盖。我们通过标量化路径的几何性质解释这一不匹配现象。随着权重变化,相应的解以通常并不均匀的速度遍历 PF。对该速度积分可得到累积弧长。用总长度归一化后,它便定义了权重上的累积分布函数(CDF),其反函数可选取弧长间隔相等的点。基于这一洞见,我们提出 SURF(沿 Pareto 前沿均匀采样)。对于包括双目标多臂老虎机在内的结构化问题,我们推导了该 CDF 映射及由此得到的 PF 感知权重采样规则的解析表达式。对于一般问题,SURF 交替执行 CDF 重建与权重采样。在理论上,我们证明,在双目标 LS 的可证明条件下,SURF 的 CDF 重建误差线性收敛至 $O(N^{-2})$ 的离散化误差下限。在实证方面,多臂老虎机、multi-objective-gymnasium 和多目标 LLM 对齐上的实验表明,SURF 能够高效地实现比基线方法更均匀的 PF 覆盖。

arXiv cs.LG68

Quadratic Characterizations for Reachability Analysis of Neural Networks

arXiv:2605.20482v2 Announce Type: replace Abstract: Quadratic constraints (QCs) are widely used to characterize nonlinearities and uncertainties, but generic analytical characterizations can be conservative on bounded domains. This paper develops a framework for constructing verified quadratic characterizations of scalar relations in the two-dimensional real plane. Candidate quadratic inequalities are locally generated by solving convex quadratic programs using samples from the relation and exterior sample points. They are then verified globally using sum-of-squares certificates over an exact semialgebraic description or, in the case of nonpolynomial relations, over relaxed polynomial descriptions. The resulting verified constraints define a sound overapproximation of the scalar relations over the considered domains. These constraints are directly compatible with existing analysis frameworks based on QCs and pointwise integral quadratic constraints (IQCs) for static nonlinearities and uncertainties, and they can also be embedded in QC-based semidefinite programs for reachability and safety analysis of feedforward neural networks. For smooth activations such as $\tanh$, the method yields domain-dependent quadratic characterizations that constitute an alternative to generic sector- or slope-based descriptions. For ReLU networks, we give methods to reduce conservatism in QC-based reachability analysis of feedforward networks by exploiting dependencies between neurons and tighter local bounds. Numerical examples demonstrate improved reachability results for smooth activations, reduced conservatism for ReLU networks, and applicability beyond neural networks through an example involving saturation.

arXiv cs.LG70

Bayesian Nonparametric Mixed-Effect ODEs with Gaussian Processes

arXiv:2605.13088v2 Announce Type: replace Abstract: Dynamical modelling in pharmacometrics, systems biology, and epidemiology often involves subjects with related but distinct dynamics, observed through temporally sparse and irregular measurements. Classical nonlinear mixed-effects ODE models represent this heterogeneity but rely on parametric vector fields, making them vulnerable to structural misspecification. Existing nonparametric ODE methods typically assume shared dynamics rather than an explicit mixed-effect hierarchy. We propose MEGPODE, a Bayesian nonparametric mixed-effect ODE model that decomposes each subject's vector field into a shared population component and a subject-specific deviation, both endowed with Gaussian process priors. To avoid repeated ODE solves during training, we represent latent trajectories with state-space GP priors and penalize discrepancies between their derivatives and the vector fields on a finite time grid. A single variational objective enables approximate joint inference over trajectories and vector fields, accounting for state uncertainty and dependence between population and subject-specific dynamics. Across heterogeneous oscillatory and biomedical ODE benchmarks, MEGPODE improves population-field recovery and subject-level trajectory prediction relative to strong baselines.

arXiv cs.LG62

On the Approximation Complexity of Matrix Product Operator (MPO) Born Machines

arXiv:2605.11471v2 Announce Type: replace Abstract: Matrix product operator Born machines (MPO-BMs) are tractable tensor-network models for probabilistic modeling, yet their approximation capabilities remain poorly understood in theory. In this paper, we characterize these capabilities from both negative and positive perspectives. As a negative result, we prove that constructing a polynomial-bond MPO-BM approximation to an arbitrary continuous target with bounded KL error is NP-hard. On the positive side, for score-based variational inference, we prove that targets satisfying a log-Sobolev inequality admit polynomial-bond MPO-BM approximations with provable KL guarantees when the loss-induced Hamiltonian is local and has a constant spectral gap. Furthermore, under the same conditions, we construct local importance-sampling estimators and prove that polynomially many local score queries suffice to preserve the KL guarantees.