DeepSeek

深度求索的模型与产品动态,含 DeepSeek 对话模型与推理模型。

arXiv cs.AI76

Trace Evolution Bench: Measuring Whether Agents Improve from Their Own Environment Traces

Self-evolving agents are usually scored by endpoint Gain: held-out success after an update minus success before. That difference can credit a frozen rescore as evolution. We introduce Trace Evolution Bench (TEB), a protocol that separates that rescore from a context or weight update, together with three frozen 80/20/40 packs. An update is accepted only when validation does not fall, held-out identifiers never enter the update, and a text update is not ranked with a weight update. The primary scoreboard is coding, graded by hidden unit tests in a closed workspace. On that pack (40 held-out tasks, one family), DeepSeek v4 Pro under no_evolve never changes its policy yet moves 7.5, 5.0, and 12.5 percentage points across three seeds. Of nine text-update cells inspired by GEPA, ACE, and ExpeL, seven have positive excess above that seed's own band, and one gepa_llm seed moves down by the width of its band (-12.5, regression 0.48). GLM and MiniMax do not reproduce that seven-of-nine pattern. No method stays above its own band on every seed of all three models: GLM has two paired cells above their own bands, and MiniMax expel_llm seed 44 is a third (regression 0.30). The methods were fixed on a validation screen before held-out was read. Office, graded by rule-bounded delivery, and manufacturing table QA are separate packs: office DeepSeek does not exceed its own bands (widest 17.5 points), and manufacturing has no paired positive excess beyond its seed band.

arXiv cs.LG76

Adaptive DHiSparse:基于负载自适应 KV 层级结构的推测解码

arXiv:2610.13708v1 公告类型:cross 摘要:长上下文服务在硬件达到其有效吞吐量之前就会耗尽 KV 内存。HiSparse 将历史记录存储在主机内存中,仅获取选定条目,但它在任何负载下都使用相同的缓存预算,也不支持 DSpark 和 DFlash2 等草稿模型推测解码。我们提出 Adaptive DHiSparse,支持基于层级稀疏 KV 的推测解码,并根据负载调整驻留内容。它会保护所需的工作集,在 GPU 内存有余量时保留额外历史记录,并通过精确融合检索恢复其余内容。DSpark 和 DFlash2 保持各自的提议与接受规则:查询共享缺失行检索,草稿 KV 使用窗口限制的环形缓冲区,验证暂存区则在各层组之间复用。在 100K 上下文和并发数 128 下,采用 DFlash2 的 GLM-5.3 每个解码 GPU 可达到 793 个输出 token/s,分别是 HiSparse 的 1.45$\times$ 和非推测自适应服务的 1.27$\times$。在与 HiSparse 相同的延迟上限下,根据每 token 的延迟限制不同,其可支持的并发数最高提升至 4$\times$,输出量提升至 2.3 至 3.7$\times$。在 500K 上下文和并发数 512 下,DeepSeek-V4.1-Flash 采用 DSpark 的 Adaptive DHiSparse,其输出量达到采用 DSpark 的常驻式服务的 1.85$\times$。在负载阶跃变化期间,可选的驻留机制使低负载下主机获取量从选定行的 14.2% 降至 1.4%,并能在压力下释放内存。

arXiv cs.LG81

将分词从主机端移出以服务智能体式 LLM

arXiv:2610.13325v1 公告类型:cross 摘要:智能体式工作负载会在多次调用之间重复发送几乎不变的长上下文。如今,前缀缓存可以跳过其中大部分预填充阶段,但每个请求仍必须先完成全部分词,之后才能查询缓存。分词这一长期以来被视为无关紧要的 CPU 阶段,如今却成为首 token 生成时间(TTFT)中占比最大的部分;而为整个 GPU 集群执行分词的前端,则限制了其能够供给的 GPU 数量。我们提出 GraphTok,这是一种 GPU 分词器,可将从预分词、字节对编码(BPE)合并到 token ID 组装的完整编码流程,作为一张可重放的 CUDA 图运行。GraphTok 在 GPT-2、Llama 3、Qwen 2.5、DeepSeek-V3 和 Gemma 3 上逐位复现参考 token ID;对于 GPU 无法占优的短输入,则将其交给 CPU 引擎处理;同时,它还可以接入未经修改的 vLLM 和 NVIDIA Dynamo。GraphTok 在包含数据传输的情况下,可在 1.7–3.2 毫秒内编码一百万个 GPT-2 token;在 Llama 3 上,其速度比最强的 CPU 分词器 gigatoken 快 4.7–6.0 倍。在 TokTier 自有的单请求基准测试中,其速度比 gigatoken 快 2.6–3.9 倍,最高比 TokTier 快 18.1 倍。在使用缓存前缀的 vLLM 中,它将平均 TTFT 降低了 2.1–2.4 倍。最大的提升体现在容量方面。在 2 秒 P99 目标下,配备 GraphTok 的单个 Dynamo 前端可持续处理 518 个请求/秒、每个请求包含 12.1 万个 token 的流量,相当于高峰时段 56 个 GPU 的负载;相比之下,使用 gigatoken 时为 296 个请求/秒,使用默认分词器时仅为 18.5 个请求/秒。在 12.1 万至一百万个 token 的范围内,其可承载负载是 gigatoken 的 1.75–2.5 倍;在 gigatoken 的尾延迟失控的情况下,P99 最多可降低 64 倍。

arXiv cs.LG77

MagicBeanStalk:通过递归数据合成摆脱 RLVR 零优势陷阱

arXiv:2610.12659v1 公告类型:交叉发布 摘要:以数据为中心的 RLVR 扩展一直侧重于收集或生成可验证的训练问题。然而,仅凭语料库规模并不能判断数据集是否能为目标策略提供有效的学习信号。为指导有效 RLVR 数据的合成,我们通过实验,将数据集的有效性刻画为其所含问题、目标策略和训练 rollout 预算的函数。基于这一刻画,我们发现,一个汇集了广泛使用的 RLVR 数据集的大型开源数学语料库几乎完全陷入了零优势陷阱:对于固定的目标策略和 rollout 预算,其中约 88% 的问题要么在每次 rollout 中都能解决,要么在每次 rollout 中都无法解决。筛选可以提高剩余有效问题的集中度,但它只能进行选择,同时丢弃难题。因此,有效的合成问题应当要求使用解决这些难题所需的推理操作及其组合。不过,这些问题的难度必须经过校准,使部分 rollout 成功、部分失败,并且至少有一个正确解答能够在训练预算内完成。直接提示教师模型对难题进行变式改写并不能达到这一目的。在这些实证原则的指导下,我们提出了 MagicBeanStalk,一种结合自顶向下分解与自底向上递归数据合成的算法。它在保留种子问题推理蓝图的同时,将种子问题扩展为一系列在实质上全新、且针对策略和预算进行了校准的训练问题。在 8 个数学基准测试中,在 16K token 预算下,使用 MagicBeanStalk 问题持续进行 RLVR 训练,使 gpt-oss-120b 的成绩从 61.2 提升至 69.8(+8.6),使 DeepSeek v4Flash 从 72.4 提升至 77.9(+5.4)。使用完整的 7.8 万道问题源语料库进行训练仅提升了 1.1 分,而使用其中经筛选得到的最佳真实数据子集则提升了 5.8 分。在金融领域,我们仅基于 340 个解答就合成了超过 1.4 万道可验证问题,并在 SecQue 和 FinanceBench 上分别比基础模型提升了 6.9 分和 2.4 分。

arXiv cs.AI77

Adaptive DHiSparse:基于负载自适应 KV 层次结构的推测解码

长上下文推理服务在硬件达到有效吞吐量之前,就会耗尽 KV 内存。HiSparse 将历史数据存储在主机内存中,并且仅取回选中的条目,但它在所有负载下都使用同一缓存预算,也不支持 DSpark 和 DFlash2 等基于草稿模型的推测解码。我们提出 Adaptive DHiSparse,它支持在分层稀疏 KV 上进行推测解码,并根据负载调整数据驻留。它保护必需的工作集,在 GPU 内存空闲时保留更多历史数据,并通过精确的融合检索取回其余数据。DSpark 和 DFlash2 的候选生成与接受规则保持不变:查询共享缺失行的取回操作,草稿 KV 使用受窗口大小约束的环形缓冲区,验证阶段的暂存空间则跨层组复用。在 100K 上下文长度和 128 并发下,结合 DFlash2 的 GLM-5.3 在每个解码 GPU 上实现了每秒 793 个输出 token,分别为 HiSparse 的 1.45$\times$ 和不使用推测解码的自适应推理服务的 1.27$\times$。在遵守与 HiSparse 相同的延迟上限时,根据每 token 延迟上限的不同,它能够持续支持最高 4$\times$ 的并发量和 2.3 至 3.7$\times$ 的输出吞吐量。在 500K 上下文长度和 512 并发下,对于 DeepSeek-V4.1-Flash,结合 DSpark 的 Adaptive DHiSparse 实现了结合 DSpark 的全驻留推理服务 1.85$\times$ 的输出吞吐量。在一次负载阶跃变化中,可选驻留在低负载时将需要从主机取回的行占选中行的比例从 14.2% 降至 1.4%,并在内存压力下释放内存。

arXiv cs.AI73

语言模型能玩 Wikipedia Game 吗?

语言模型越来越多地被用于辅助或自动执行信息检索,从规模过大、难以建立索引的文档集合中查找信息。当这项任务需要专业的语言学或科学知识时,就会变得困难。我们使用 Wikipedia Game,在一项类似的信息检索任务中测试语言模型。在该游戏中,玩家必须仅通过文章链接到达目标文章。我们在五种语言的 Wikipedia 和五个学术文献数据集上,对句子嵌入模型和大语言模型(LLM)进行了比较。我们构建了超大规模的 Wikipedia 页面本地图结构,并利用 OpenAlex 构建了论文引用本地图结构,同时提供了构建和导航这些图结构的代码。这使得研究者无需依赖第三方 API,即可研究语言模型的导航能力。我们将这些模型与人类和 TF-IDF 基准进行了比较。Wikipedia Game 的形式支持跨技术、语言和领域的稳健比较。没有任何模型显著优于人类,但表现最好的模型(GPT-o3 mini、GPT-4o、QwQ:32B 和 DeepSeek-R1:70B)取得了与人类相当的成功率。模型的表现和排名随语言和主题而变化,这对采用这些技术的实践者具有参考意义。

arXiv cs.LG72

Internalizer:面向超大型语言模型的可移植上下文到参数映射

arXiv:2610.11715v1 公告类型:cross 摘要:将上下文直接映射为 LoRA 适配器的超网络能够让大型语言模型将该上下文携带在其权重中,但已有工作仅在最多拥有 140 亿参数的基础模型上进行了验证。我们提出了 Internalizer,这是一种先进的、可移植的上下文到参数映射超网络,能够为冻结的、拥有 284B 参数的 DeepSeek v4 Flash 生成文档特定的 LoRA 适配器;其目标模型规模比以往任何工作都大两个数量级。它的大部分参数都位于与模型无关的主干网络中,每个基础模型仅需配备轻量的输入层和输出层,因此可以先针对小型模型以较低成本训练,再迁移到大型模型上。在长度最多为 4096 个词元的未见文档上,即使上下文窗口中除一个三个词的指令外没有任何内容,生成的适配器仍能达到 84.9% 的 top-1 和 97.8% 的 top-5 教师强制准确率,而基础模型对应的准确率分别为 63.4% 和 83.5%。超网络训练完成后,只需一次前向传播,就能将任意文档转换为适用于这类模型的适配器;该适配器既可以单独提供服务以提升速度,也可以与文档一同放入上下文窗口中,从而进一步提高准确率。

arXiv cs.LG80

StoreBench:用于评估和训练自主运营代理的实时电商环境

arXiv:2610.10942v1 公告类型:cross 摘要:强化学习环境如今已成为后训练阶段提升大语言模型(LLM)能力的主要手段之一,但大多数智能体基准仍然是静态的:世界只有在智能体采取行动时才会推进,奖励是终局判定,及格线也被任意设定。我们推出 StoreBench,这是一种实时电商环境,智能体在生产级电商后端上运营一家中型在线服装店,在不确定性下考验长期规划能力和经济判断力。顾客全天候下单,供应商重新定价并可能失效,市场冲击也会在几乎没有预警或完全没有预警的情况下到来。智能体通过与人类运营者所使用的相同的 29 个商家工具进行操作,并受窗口化操作预算约束,使模拟时间成为所采取行动的函数,因此模型延迟不会影响模拟时间。及格阈值依据脚本化锚定策略进行校准,奖励机制经过加固以抵御一系列奖励投机行为,并且在给定行动序列的情况下,每个回合都能被完全一致地重放。我们在 11 个持续 30 至 45 天的场景和一个完整模拟年度上,对七个前沿 LLM 进行了评估;所有评估均使用三个世界随机种子,并匹配推理投入。平均而言,没有任何模型能达到脚本化 smart-triage 策略的水平:表现最佳的 DeepSeek-V4-Pro 在任务—随机种子单元格中的通过率为 49%,而启发式策略为 97%。使用相同工具和预算的人类专家得分超过所有模型(综合平均分为 0.708,而模型为 0.700)。在 Claude Code 工具框架下运行完整模拟年度时,大多数模型的性能都出现了显著提升。在一次 GRPO 后训练实验中,仅使用五个互不重叠的任务训练的 Qwen3.5-27B,将其在留出的评估任务上的综合平均分从 0.136 提升至 0.373。我们发布了五个训练集示例任务、十条示例轨迹,以及评分和验证工具;为避免基准受到污染,完整环境和评估套件暂不公开。

arXiv cs.LG79

A Closer Look at Agentic BBO: Benchmarking LLM Agents for Black-Box Optimization

arXiv:2610.12183v1 Announce Type: new Abstract: Black-box optimization (BBO) arises in many scientific and engineering problems where objective evaluations are expensive and limited. Recent large language model (LLM) agents offer a new way to approach BBO by combining task semantics, computation, optimization tools, and feedback-driven decision making, showing great potential due to the integration with mathematically rigorous tools. However, existing agentic BBO studies use different task domains and system configurations, making their results difficult to compare and the effects of individual design choices hard to isolate. We therefore introduce AgenticBBO-Bench, a cross-domain benchmark for agentic BBO spanning synthetic functions, hyperparameter optimization, database tuning, chip design, and molecular design under a unified finite-budget evaluation protocol. In our experiments, agentic BBO achieves higher family-averaged scores than direct LLM-based methods in all five domains and outperforms the best numerical optimizers in four. We further study three factors shaping agent performance: optimization tools, task information and prior knowledge, and the role of the LLM during search. Our results show that additional numerical tools do not consistently improve performance, task semantics are broadly useful while more specific priors are less reliable, and numerical optimizers can effectively absorb gains from search trajectories established by the agent. Finally, we introduce a five-task frontier challenge within AgenticBBO-Bench and evaluate seven LLMs under the Codex agent harness, where GPT-6 Astra and DeepSeek-V4.1-Flash lie on the Pareto frontier of performance and cost among the evaluated models. Our code is available at https://github.com/lamda-bbo/agentic-bbo.

arXiv cs.LG81

QUILT:通过共享查询执行重新思考稀疏注意力预填充

arXiv:2610.11134v1 公告类型:新论文 摘要:稀疏注意力降低了长上下文注意力的开销,但现有内核通常独立处理各个查询,反复加载并反量化多个查询共享的 KV 条目。我们观察到,相邻查询所选的 KV 条目存在大量重叠,为跨查询复用创造了机会。我们提出 QUILT,一种工作负载感知的稀疏注意力执行机制,通过联合处理相邻查询并复用共享 KV 条目,减少冗余的内存流量和计算。QUILT 引入 Shift-and-Compare Set Decomposition(SCSD),将不规则的集合操作转化为适用于现代加速器的规则数据并行原语,并将 SCSD 与注意力计算以流水线方式执行,以隐藏其开销。级联共享在多个粒度上分层实现复用。一种分块感知的执行策略在共享粒度与硬件分块利用率之间取得平衡,并选择性地移除重要性较低的查询专属尾部,以消除利用不足的分块。我们使用 GLM-5.3 和 DeepSeek-3.2,在张量并行和序列并行两种设置下,基于 LongBench 评估 QUILT。与最先进的稀疏注意力内核相比,QUILT 将平均内核延迟最多降低 55.1%,将处理的 KV 数据量最多减少 55.9%,同时将首个词元生成时间(TTFT)延迟最多降低 36.8%,且准确率下降可忽略不计。

arXiv cs.LG74

使用干预迁移评估评分标准生成

arXiv:2610.10809v1 公告类型:新 摘要:针对实例的评分标准在 AI 基准测试中十分常见,因为可靠的评估需要特定的专家知识。这种方法难以扩展,因此研究人员开始探索使用大语言模型(LLM)生成评分标准。然而,即使有专家评分标准作为参考,如何大规模有效地评估生成评分标准的质量仍不明确。本文提出了一种用于评估评分标准生成的方法,称为干预迁移(Interventional Transfer,IT)。该方法基于这样一个理念:如果对某个回答进行扰动,使其通过或未通过其中一个评分标准时,两个评分标准的判定结果会同步变化,那么这两个评分标准就是相似的。不同于现有的评分标准生成评估方法,我们认为,不同形式的干预迁移可用于评估生成评分标准在不同任务中的效用。例如,我们在 HealthBench 上开展了一项案例研究,展示了由 Qwen3.8-27B、Deepseek-V4-Flash 和 Opus-5 生成的评分标准之间存在不对称性,这些评分标准用于评估 GPT-5.6-Terra 生成的回答。根据生成的评分标准或专家评分标准会降低回答质量的扰动,会在相应的专家评分标准或生成评分标准上迁移为更低的分数;但在一个评分标准上有所改进的扰动,却无法可靠地迁移为另一个评分标准上的更高分数。我们认为,这一发现对于使用 LLM 生成的评分标准进行性能监控和爬山优化具有重要意义。我们将该方法与现有的评分标准评估方法进行了对比,后者无法揭示出我们观察到的这种不对称性。

The Decoder79

AI 驱动的黑客工具帮助一名疑似单独攻击者入侵韩国多家银行

据 CrowdStrike 称,一名疑似讲中文的攻击者入侵了韩国多家金融机构。仅在 Shinhan Bank,就有超过 25,000 条客户记录被窃取。该攻击者使用了 ARTEX,这是一款开源工具,利用 DeepSeek 和 GLM-5.3 等 AI 模型进行自动化渗透测试。CrowdStrike 表示,这起事件表明,AI 工具可以让单个人实施大规模入侵。文章《AI 驱动的黑客工具帮助一名疑似单独攻击者入侵韩国多家银行》最初发表于 The Decoder。

arXiv cs.LG77

用于兼容压缩的稀疏长上下文 LLM 推理的 Self-Indexing Attention

arXiv:2609.13205v2 公告类型:replace-cross 摘要:稀疏长上下文推理要求在预填充和解码阶段都能高效检索词元。现有方法通常在这两个阶段采用不同的检索策略,导致同一种检索表示无法在整个推理过程中复用。我们提出了 Self-Indexing Attention,这是一种基于共享变换域符号—幅值表示的免训练框架。键的符号位提供了可复用的词元级索引,可用于分组预填充选择和解码检索;同时,该表示仍兼容外部 KV 缓存压缩,无需单独的索引器元数据。这种 1 比特索引可通过现代加速器广泛支持的按位运算实现高效检索。在 5% 的注意力密度下,Self-Indexing Attention 在 LongBench 和 RULER 上的表现仍接近稠密注意力,并在预填充和解码阶段分别实现了最高 6.1 倍和 10.3 倍的注意力算子加速。结合 TurboQuant 和 DeepSeekV4-Flash 的实验进一步验证了其与低比特 KV 缓存压缩及预训练稀疏注意力索引器的兼容性。

arXiv cs.LG68

Beyond the Leaderboard: Multi-Dimensional Evaluation of Dense and Mixture-of-Experts Models for Automated Program Repair

arXiv:2610.08173v1 Announce Type: cross Abstract: Automated Program Repair (APR) with language models is usually evaluated by whether a generated patch passes the test suite, which can hide differences in maintainability, security, and computational cost. We propose a Weighted Quality Index (QI), inspired by the ISO/IEC 25010 software quality model, that combines functional correctness, maintainability, security, and generation efficiency under configurable weighting schemes. We evaluate three dense Qwen2.5-Coder models (3B, 7B, 14B) and the 16B-parameter DeepSeek-Coder-V2-Lite Mixture-of-Experts (MoE) model (2.4B active parameters) on 40 QuixBugs and 90 Defects4J bugs, all run locally on identical hardware to control for infrastructure effects. Model rankings change with the weighting scheme, showing that single-metric evaluation can hide trade-offs. The MoE model shows almost no statistically significant difference in correctness from the 7B and 14B dense models (McNemar's exact test) while using 3-6 times fewer active parameters, whereas correctness increases significantly across the three dense scales. These results suggest that active parameter count can be a more informative lens than total parameter count for sparse code models.

arXiv cs.LG77

ServeLearnBench:智能体能够在多大程度上从服务经验中自我改进?

arXiv:2610.07792v1 发布类型:new 摘要:大型语言模型智能体正越来越多地被部署用于在现实环境中执行复杂任务。然而,在这些环境中实现正确行为所需的知识往往是隐含的、未公开的,并且会随时间变化。近期的持续学习框架试图通过让智能体从服务经验中不断改进来应对这一挑战。然而,这些方法的有效性与局限性尚未得到充分刻画。现有基准只能覆盖部分情况:有些基准明确提供目标知识,有些假设环境是静态的,而支持持续适应的基准在规模和知识多样性方面仍然有限。为实现系统性评估,我们形式化提出了演化环境流式数据集(EESD):在该数据集中,随着隐藏策略不断演化,智能体必须根据交互和结果反馈推断、应用并修订潜在的环境知识;同时,我们引入了 ServeLearnBench,涵盖零售支持、银行业务和销售话术生成等场景,包括 53 个环境窗口和 7,718 项任务。我们在六个模型(GPT-5.6 Terra、Opus 5、Kimi K3、GLM-5.3、DeepSeek V4.1 Flash 和 GLM-5.3 Flash)上评估了五种学习框架(RAG、Mem0、SkillOpt、Continual Harness 和 Prime),覆盖 28 个模型—框架组合和 252 次学习运行。评估揭示了三个主要发现:任务能力与从经验中学习的能力之间仍存在显著差距;持续适应代价高昂,并且可能损害原本正确的行为;探索不足是实现有效适应的关键瓶颈。总体而言,ServeLearnBench 提供了一个受控测试平台,用于诊断这些局限,并跟踪智能体通过服务经验持续、可靠地改进这一目标的进展。

Simon Willison83

推出 Mistral Large 4:Le chonk

推出 Mistral Large 4:Le chonk。Mistral 重返赛场。今天,他们发布了 Mistral Large 4 的预览版:这是一个拥有 1 万亿参数、其中 490 亿为活跃参数的模型,训练使用了他们自有集群中的 3,800 块 NVIDIA Grace Blackwell GPU。该预览版可通过其 API 使用。他们承诺将在“本月底”发布开放权重模型。该模型通过 Mistral API 仅支持两个推理等级——“none”和“high”。下面是两只鹈鹕——“high”版本看起来更好,不过令人意外的是,它只使用了 2,717 个输出 token,而“none”版本使用了 3,275 个:表现不错。鹈鹕的喉囊很棒,自行车车架尺寸合适,脚踩在脚踏板上。不过,两只脚踏板似乎都位于车架前方。渐变效果不错。在 Artificial Analysis 上,它的得分为 38,仅落后于 DeepSeek 4.1 Flash;后者是一个拥有 5,520 亿参数的模型。这比去年 12 月的 Mistral Large 3 有了巨大提升,后者画出了这只糟糕的鹈鹕,并在 AA 上只得到 9 分。它当然还不是 Fable 级别的模型,但很高兴看到 Mistral 发布了一个重新回到大约落后前沿模型 6 个月水平的模型。来源:Hacker News 标签:ai、generative-ai、llms、mistral、pelican-riding-a-bicycle、llm-release

The Decoder72

Reflection 的 Beam 成为中国以外构建的能力最强的开放权重模型

一幅抽象图形:深绿色背景上由白色点和线构成的图案,从左侧的一个小圆向右侧扩散成越来越大的环。Reflection 发布了 Beam,这是其首个开放权重模型。该混合专家系统每个词元仅激活其 5010 亿个参数中的 230 亿个,旨在以少三到四倍的计算量,在编程和推理方面达到 GLM 5.2 的水平。面对 Deepseek 和 Qwen 等中国开放权重竞争对手,该策略注重效率,而非原始性能。《Reflection 的 Beam 成为中国以外构建的能力最强的开放权重模型》一文最先发表于 The Decoder。

arXiv cs.AI73

BRANCH-MoE:面向大型嵌入模型的感知均衡树路由

混合专家(MoE)层能够提升模型容量,同时避免每个样本的计算量按比例增加。然而,传统的扁平路由器可能导致专家利用率失衡,并将专家视为无结构的集合,其索引不具有任何拓扑意义。我们提出 {\bf BRANCH-MoE},一种将 \(E\) 个专家置于深度为 \(\log_2 E\) 的二叉决策树叶节点上的路由架构。在每个内部节点,分支概率以到达该节点的流量按权重计算的平均得分为中心。我们使用指数移动平均估计该均值,从而在无需额外负载均衡损失的情况下,促进两个子树都得到利用。我们证明,这种移动平均估计存在明确的噪声—滞后权衡。对于线性节点映射和对数凹到达分布,我们证明该机制能够防止路由质量崩溃。我们进一步证明,在路由器被冻结的情况下,专家的执行频率决定其随机梯度收敛速率;当按照树前缀将专家分配到设备时,根节点附近的高置信度决策能够限制跨设备通信。我们在 Criteo 点击率预测、Forest Covertype、HIGGS 和 YearPredictionMSD 任务上,对 BRANCH-MoE 与 Switch softmax、DeepSeek-V3 动态偏置、Skywork 对数归一化以及确定性哈希路由进行了评估,使用 \(E=16\)、top-\(4\) 路由和五个随机种子。结果表明,层次化路由能够在保持任务质量和利用率均衡的同时,形成支持局部化专家共同激活并减少通信的拓扑结构。

arXiv cs.AI79

CIPHER-MoE:在万亿参数规模 MoE 训练中平衡效率与路由保真度

混合专家(MoE)已被近期的大语言模型(LLM)架构广泛采用。然而,在 LLM 训练中扩大 MoE 规模会带来系统层面的训练挑战:非均匀的词元路由可能导致专家和设备之间的工作负载高度失衡,进一步破坏训练过程的稳定性。对于万亿参数规模的 LLM,专家工作负载失衡会进一步放大 MoE 训练的资源成本,导致低负载专家的训练效率和硬件利用率下降,而热点专家则需要额外资源来承接过量的工作负载。近期研究通过复杂的并行策略或资源重分配来解决 MoE 训练中的负载失衡问题。然而,这些系统层面的方法往往引入额外的资源需求和相当高的编排复杂度,在计算资源受限的条件下训练万亿参数 LLM 时,这些开销愈发难以承受。本研究提出 CIPHER-MoE,在保持路由器词元侧 Top-K 选择不变的同时,缓解 MoE 工作负载失衡。CIPHER-MoE 采用感知亲和度的专家到词元筛选,并结合显式容量控制,无需额外硬件资源或复杂的运行时设计,即可降低热点专家的工作负载。该方法已在包括 DeepSeek-V4-Pro 在内的大规模 MoE 模型上进行评估,结果表明,在保持训练质量的同时,Top-1 专家的工作负载占比最高可降低 64.9 个百分点,训练速度可提升至原来的 1.10–1.94 倍。源代码将于近期发布。

arXiv cs.AI79

面向智能体排行榜的测量优先审计:污染易感性、匹配对照重评估与评分器验证

智能体排行榜日益使用公开基准来评估系统,而这些基准的任务描述和包含解答的工件可能持续处于可访问状态。我们提出了一种测量优先的审计框架,根据支持污染声明所需的证据,对污染声明进行区分。该框架将需要不同证据的渠道分为三类:训练时暴露、评估时检索,以及流水线/脚手架泄漏。按照失败即关闭规则,每个渠道被编码为开放、部分开放、关闭或未知。在九种 Holistic Agent Leaderboard (HAL) 配置中,27项渠道评估无一被编码为关闭,但在其中四种配置中确认了相关事件。随后,我们将该框架的行为组件应用于 SWE-bench Verified 中一项已报告的文件定位差距,采用结果盲法、同一仓库匹配对照设计,并结合对称式提示泄漏筛查、成对且考虑仓库因素的不确定性分析,以及评分器验证,在 GPT-4.1 和 DeepSeek-V4-Flash 上进行评估。在经过对称筛查和成对完整性排除后保留的100对样本中,GPT-4.1 显示出按样本对加权的、与基准相关的 $+10.0$ 个百分点差距;但预先指定的成对自助法和事后仓库均衡分析所得的95\%区间均包含零,因此与基准相关的差距尚无定论。复现实验评分器未通过其验证门槛:相对于人类共识标签,无法为任一模型确立足够的评分器敏感度;而且 DeepSeek-V4-Flash 在正确金标准对比中的两次触发均为误报。在缺乏溯源证据、适当对照、对称式泄漏筛查和经过验证的评分器的情况下,不应提出更强的污染声明。研究结果无法证明训练数据成员关系、污染普遍程度或基准导致的分数膨胀。

arXiv cs.AI82

LatentIndex:采用层特定选择的跨层共享稀疏注意力

稀疏注意力降低了核心注意力的计算量,但其索引器仍会产生重复的选择开销,并需要按层存储键缓存。在各层之间复用已选索引可以降低这一开销,但会限制多个层使用同一组 token。我们提出 LatentIndex,将 Multi-head Latent Attention 的潜在表示共享原则扩展到索引器层。每个层组根据其首层的隐藏状态构建共享的潜在缓存,同时通过层特定的评分实现独立的 token 选择。将键解码器吸收到查询中后,无需重建历史的逐层键,即可直接对共享缓存进行评分。我们设计了无需训练的校准方法,并研究了这一原则的一种感知训练的实现。为平衡质量与计算开销,分层选择(HS)变体允许后续层在锚点层提出的共享候选集上独立进行细化。在四层共享的设置下,LatentIndex 在 DeepSeek-V3.2 上将逻辑索引器缓存存储降低了 61.1%。在 DeepSeek-V3.2 和 GLM-5 上,无需训练的 LatentIndex 相比 IndexCache 将按头计算的注意力质量召回率最高提升了 3.28 个百分点,同时保持 RULER 和 LongBench 性能接近原生 DSA。在 8K 至 128K 的上下文长度范围内,HS 进一步实现了相对于 DSA 2.30 至 2.72 倍的解码索引器加速,并保留了 LatentIndex 的大部分召回率。LatentIndex 为跨层索引提供了新的视角:共享连续表示而非离散选择,能够在保留层特定 token 选择的同时实现高效复用。

arXiv cs.AI78

RETRACE:从纠缠的修复历史到可复用的 CI 修复经验

大型语言模型(LLM)智能体日益广泛地复用既有经验,但大多数方法都假设问题与解决方案已经完成对齐。软件历史很少能提供这种对齐:一个拉取请求(PR)可能包含多个持续集成(CI)问题、失败的尝试、回滚的编辑以及无关变更,从而难以判断哪些变更解决了哪些问题。我们提出 RETRACE,一种从此类历史中重构问题级修复经验的框架。RETRACE 结合了终点视角与开发视角:前者从通过测试的修订版本中保留的变更出发进行反向推理,后者沿提交历史正向追踪修复的演变过程。CI 执行证据用于协调这两个视角,恢复出的经验则以三个抽象层级表示,从具体修复到可迁移的修复模式。对于新的失败,RETRACE 会检索相关的问题级经验以指导修复。在 CI-REPAIR-BENCH 上,该基准包含来自 101 个仓库、涵盖 12 类失败的 565 个 PR 级修复,RETRACE 将 mini-SWE-agent 的 Pass@1 使用 MiniMax-M2.5 时从 19.6% 提升至 31.9%,使用 DeepSeek-V4-Flash 时从 23.3% 提升至 32.8%。在匹配的子集上,Codex 的表现从 15.5% 提升至 27.5%。结合两个视角始终优于单独使用任一视角,这表明恢复问题与变更之间的对齐关系,能够使历史上的 CI 修复成为可复用的修复经验。

arXiv cs.LG74

MaskCoFT:面向内存高效 MoE 推理的掩码协同自适应微调

arXiv:2609.34077v2 公告类型:替换 摘要:混合专家(MoE)语言模型通常会超出单个 GPU 的内存容量。专家卸载将大多数专家保存在主机内存中,并按需加载,因此解码速度取决于每个 token 需要获取多少个专家。缓存和预取只能在路由机制允许的范围内降低这一开销。仅对路由器进行微调可以重塑路由,使其复用专家,但专家保持冻结状态,因而无法适应新路由发送给它们的 token。我们提出 MaskCoFT,这是一种掩码协同自适应微调方法,仅使用交叉熵损失共同训练路由器和专家。在微调过程中,一个可学习的二值掩码将每一层的 Top-K 路由限制在专家子集内,同时专家适应被重新定向给它们的 token。在推理时,学习到的掩码会成为一种软先验,用于重新排序专家,因此每个专家仍然可以被选中。我们分别针对 Mixtral-8x7B 的每层 4 个专家和 DeepSeek-V2-Lite 的每层 12 个专家模拟 GPU 缓存。相较于基础模型,MaskCoFT 将每个 token 的专家获取次数分别减少了 23.7% 和 10.1%。在真实的卸载系统服务中,它将每个输出 token 的耗时分别最多降低了 16.4% 和 5.5%。在九项基准测试中的平均准确率分别比基础模型高出 0.92 和 0.53 个百分点。

arXiv cs.AI80

EvoRiskBench:面向工作空间代理运行时安全风险的演进基准

工作空间代理将大型语言模型与执行框架相结合,以执行访问或修改外部资源的有状态、多步骤任务。现有基准在运行时安全风险的可执行覆盖方面存在空白,而模型能力、执行框架、工具和威胁的不断演进也促使基准持续发展。我们提出 EvoRiskBench,这是一个围绕 EP-Path-EF 框架组织的演进基准,该框架通过代理介导的风险路径,将初始风险入口与单跳技术影响关联起来。该框架定义了九类入口点和五类影响;一项包含 20 名参与者的研究表明,在具有代表性的案例上,这些类别具有良好的可解释性和分类一致性。在该框架的指导下,我们构建了一套自动化端到端工作流,在隔离环境中构造并执行风险案例,并利用运行时轨迹和环境状态独立验证结果。该基准提供了一个可复现的数据集,包含跨六种场景的 450 个对抗性任务。我们评估了九种模型—执行框架配置,涵盖三种模型(GPT-5.6 Sol、DeepSeek-V4-Pro-0813 和 Claude Opus 5)以及三种执行框架(Claude Code、Codex 和 OpenClaw)。结果揭示了各系统存在大量漏洞。其中,最易受攻击的配置是 Codex 与 DeepSeek-V4-Pro-0813 的组合,其攻击成功率(ASR)达到 68.44%,表明仅配置工作空间代理并不足以确保安全的自主执行。ASR 在不同模型之间的变化大于不同执行框架之间的变化,且执行框架之间的差异取决于所使用的模型。基准案例和评估平台将在完成工件安全性与可复现性检查后发布。

MarkTechPost58

DeepSeek Harness v0.2 Brings Official Desktop Apps to Its Open-Source Agent Harness

DeepSeek has released official macOS and Windows desktop apps for DeepSeek Harness v0.2, its MIT-licensed agent harness. The preview adds a plugin manager, file and code-change review, and scheduled Automation Tasks. It also supports non-DeepSeek models through OpenAI-compatible endpoints. The post DeepSeek Harness v0.2 Brings Official Desktop Apps to Its Open-Source Agent Harness appeared first on MarkTechPost .

arXiv cs.LG83

在点号之间阅读:解码填充词元中的隐藏计算

arXiv:2607.03502v2 公告类型:替换交叉版本 摘要:前沿 LLM 能够在点号或计数序列等不含内容的填充词元上执行多步推理,并在没有可见思维链(CoT)的情况下得出正确答案。这是行为监督的一个极限情形,因为表面词元不携带有关底层推理的信息。但对输出而言隐藏,并不等于对我们隐藏。在四类任务(事实检索、并行数值组合、字符串操作和上下文内计算)中,两个开放权重的前沿模型(DeepSeek V3、Kimi K2)以可读的方式在填充词元上进行计算:注意力将问题经由填充区域传递至答案;logit-lens 读数显示,检索到的事实会较早出现,而它们的组合则在后期层中逐渐成形;在填充位置进行 KV-cache 移植,则能够从因果上交换不同示例之间的输出。我们提出了一种无监督解码流程,仅以隐藏状态作为输入,即可在两个模型和全部四项任务上,以 82%–94% 的准确率(最佳 LLM 评审结果)恢复中间值,无需真实标签或训练。即使不使用评审器,这些隐藏值也已经有 35%–85% 的概率直接出现在该流程的前 2 个词元中。无论填充内容是预先填入,还是由模型自行生成,这一提升都依然存在。在这些能够被清晰分解的任务上,足以击败基于行为的 CoT 监控的隐藏计算,仍可从残差流中读取;这表明,可监控性是模型完整计算轨迹的属性,而不仅仅是其表面词元的属性。

arXiv cs.LG83

通过多智能体可解释性检测多智能体串通

arXiv:2604.01151v3 公告类型:替换-交叉 摘要:随着 LLM 智能体越来越多地部署于多智能体系统中,它们带来了可能规避标准人类监督形式的隐蔽协同行为风险。尽管针对模型激活的线性探针已显示出在单智能体场景中检测欺骗行为的潜力,但串通本质上是多智能体现象,而利用内部表征检测智能体之间的串通仍未得到探索。我们提出了 NARCBench,这是一个用于评估环境分布偏移下串通检测能力的基准,并提出了五种探测技术:将每个智能体的欺骗分数进行聚合,以在群体层面判别场景。我们在四个开放权重模型(Qwen3-32B、Llama-3.1-70B、DeepSeek-R1 32B、GPT-OSS-20B)和六种探针架构上进行了评估。我们将这一问题定义为分布式异常检测问题,识别出三种串通特征,它们分别对应不同的异常类型和检测范式。在分布内测试中,每个模型都达到了 1.00 的 AUROC;在表现最强的模型 Llama-3.1-70B 上,五种探测技术迁移到结构不同的多智能体场景进行零样本测试时,AUROC 达到 0.73 至 0.93;在隐写式二十一点算牌任务上则达到 0.99 至 1.00,且检测性能随模型能力提升而增强。我们发现,没有任何一种探测技术能够在所有串通类型上占据优势,这与该框架的预测一致:不同的异常类型需要不同的检测范式。这项工作朝着多智能体可解释性迈出了一步:将白盒检查从单个模型扩展到多智能体环境,因为在此类环境中,检测需要聚合多个智能体之间的信号。这些结果表明,模型内部信息能够为文本层面的监控提供互补信号,用于检测多智能体串通。代码和数据见 https://github.com/aaronrose227/narcbench。

arXiv cs.LG82

通过部分信息分解解释大语言模型的推理

arXiv:2610.00571v1 公告类型:cross 摘要:大型推理模型(LRM)在解决复杂数学问题方面取得了显著进步,但通常会生成冗长、重复或错误的推理轨迹。在本文中,我们提出了一种新的可解释性框架 SLIDER,用于评估推理过程的质量。SLIDER 利用了信息论中一个新兴的研究方向——部分信息分解,将两个连续推理步骤之间关于最终答案的信息解耦为非负的组成部分:独有信息(来自前序步骤或当前步骤)、冗余信息以及协同信息。在此分解的基础上,我们提出了逐步重复推理指数(Step-RRI)这一具有理论依据的度量,用于评估当前步骤 $S_i$ 中与答案相关的信息,相对于其独有贡献和协同贡献,是否主要与过去的步骤 $S_{<i}$ 存在冗余。为评估 Step-RRI 检测重复性的有效性,我们将 SLIDER 应用于 PRMBench 数据集中的冗余类别。与基于嵌入相似度和信息增益的基线方法相比,Step-RRI 将步骤级冗余识别准确率提高了超过 $10$ 个百分点。随后,我们定义了轨迹-RRI(Trajectory-RRI),这是一种衡量单条推理轨迹重复性的聚合指标。为展示其实用价值,我们证明,在 QwQ-32B、DeepSeek-R1-Distill-Qwen-32B 和 GPT-4.1 上,平均 Trajectory-RRI 与实际推理长度具有很强的相关性,这说明它可作为提升推理效率的一种信号。最后,我们提出了由 Trajectory-RRI 引导的微调数据选择方法,结果表明,根据 Trajectory-RRI 选择训练数据,可以在基本保持任务性能的同时,提高微调模型的推理效率。

arXiv cs.LG74

发明一个数据集:用零种子衡量数据集生成能力

arXiv:2610.01674v1 发布类型:new 摘要:构建数据集仍然是 AI 开发中最依赖人工且最脆弱的环节之一。在这份技术报告中,我们聚焦于现实世界从业者面临的最极端、同时也是最普遍的情境:零数据环境。在这种情况下,从业者手头没有任何用于学习目标能力的数据。我们推出 Invent-A-Dataset,这是一个基于提示词的系统,能够从数据集描述出发,生成真实且大规模的后训练数据集。我们将 Invent-A-Dataset 与包括 Anthropic、Google、Open AI、DeepSeek、Zai 在内的五个前沿模型 API 进行评估。在八种任务类型以及最大 20K 个样本的数据集规模上,Invent-A-Dataset 均显著胜出:不仅质量最高(相对提升 17%),同时生成的样本也最为多样(相对提升 19%)。随着训练数据集规模扩大,其多样性优势进一步扩大:从 200 个样本时的持平,提升至 20K 个样本时的相对提升 37%。这进一步转化为显著的下游训练收益,产生性能强得多的后训练模型。在不同的后训练模型架构中,Invent-A-Dataset 微调模型始终比其他生成器微调模型排名更高。

arXiv cs.LG76

强化学习扩展真的需要更多训练吗?

arXiv:2610.01133v1 公告类型:新 摘要:推理扩展通常会在强化学习(RL)或推理阶段投入更多计算资源。我们表明,一段已经完成的 RL 训练历史能够产生强于其优化器曾访问过的检查点的策略。我们将其称为策略空间扩展:在不延长训练时间或增加单次查询推理计算量的情况下,扩大从固定 RL 历史中可获得的可部署策略集合。我们通过 SURGE(Scaling Up RL Gradient-free via Eigenspace fusion)实现了这一方法。SURGE 将同一 RL 运行中的两个检查点结合起来:一个高准确率的锚点,以及一个具有竞争力且生成更短回答的供体。它将两个检查点都表示为相对于共同初始化的变化,然后对锚点的更新进行谱分解,保留其主导成分,并融合供体的互补成分。在固定锚点更新保留比例目标的情况下,SURGE 无需测试候选策略,即可根据权重确定块大小。我们评估了两个 1.5B 数学推理训练历史(DeepSeek 和 Nemotron)以及一个 7B 编程训练历史(OLMo)。与两个输入检查点相比,SURGE 提高了基准平均准确率,同时使用的推理 token 少于锚点。在 DeepSeek AIME24 上,SURGE 达到 54.17%,高于实测原生最大值 50.83%;在 OLMo HumanEval+ 上达到 83.7%,高于 82.8%。这些提升超过了观测到的训练曲线。几何控制实验表明,除了权重位移或 token 减少本身之外,RL 更新的结构也十分重要。每个构造出的模型都作为单一策略运行。我们的研究表明,存储的 RL 历史是一种可复用的扩展资源:一次训练运行所能提供的能力,不必止步于其最佳检查点。

arXiv cs.LG79

匹配分布,而非计算量:训练后多词元预测头

arXiv:2610.00888v1 公告类型:新增 摘要:多词元预测(MTP)通过使语言模型在每次前向传播中起草多个后续词元,提高自回归生成的吞吐量;同时,对起草词元进行验证可确保骨干模型的词元分布得到保留。所有已公开的 MTP 系列模型(MiMo-7B、DeepSeek-V3、Qwen3)都在数万亿词元的完整预训练过程中与骨干模型联合训练,因此在预训练阶段确定了起草器的质量。我们探究:在冻结的推理模型上,仅对目标模型生成的思维链进行一次轻量级训练后处理,是否足以达到相同的预期吞吐量加速效果;并研究如何优化基于此类检查点构建的服务时系统。我们得到三个发现。1)对于采用 $K{=}3$ 个链式 MTP 头的冻结 Qwen3-8B,我们表明,在约 $\approx\!2.5$B 个词元上使用普通交叉熵的训练后处理方案,在数学、代码和知识基准测试上达到了或超过了联合训练 MiMo-7B 的预期加速效果。与联合预训练 MiMO-7B MTP 基线相比,我们的训练后处理方案所使用的 MTP 训练词元减少了 $10^3$--$10^4$ 倍。2)我们提出了一种具备链感知能力的起草词元验证规则松弛方案,允许词元分布相对于骨干语言模型发生有界偏移。我们表明,在保持任务准确率的同时,该松弛方案使每个基准测试的预期加速提升了 $+12$ 至 $+16\%$。3)我们提出了一种自适应控制器,可在推理时动态选择启用的 MTP 头数量,并证明在固定最大 MTP 起草长度的情况下,可以恢复速度加速损失的 $11$--$14\%$。

arXiv cs.LG74

分叉:回放下的突然过拟合

arXiv:2610.00394v1 公告类型:新论文 摘要:本文研究了分叉(forking)这一在 NanoGPT 自动研究中发现的泛化失败现象。在数据回放条件下,带有过度编码 n-gram 记忆分支的模型会在训练轮次边界处出现训练损失与验证损失的明显分离,其形状类似于分叉。我们在受控的原生 NanoGPT 设置中研究了这一现象,并在采用 Engram 的 DeepSeek 风格模型中复现了该现象。从机制上看,重复更新会强化训练数据中观察到的后续内容,同时抑制未见后续内容的概率,而后者的损失会随着每次遍历而增长。n-gram 模块会产生相互作用较弱的、特定于上下文的子空间,从而放大这一效应。低频上下文对损失差距的贡献最大,而更大的训练预算和高度拥挤的表会抑制该现象。我们还在短训练预算、重复程度很高的 SFT 和类 RL 环境中观察到了分叉现象。本文有两点贡献:(1)除 grokking 和双重下降之外,分叉揭示了深度学习中的又一种奇特现象。(2)分叉是自动研究代理所提出技巧带来的一个出乎意料且令人不快的副产品。尽管这些代理会产生数量极其庞大、看似有用的结果,但我们始终应当谨慎对待它们的结果。

arXiv cs.LG81

MoRA:通过路由器偏置学习与专家近似进行 MoE 剪枝

arXiv:2610.00367v1 公告类型:新 摘要:混合专家(MoE)模型通过为每个 token 仅激活少量专家,在有限的单 token 计算量下实现参数规模扩展,但部署这些模型仍需要将完整的专家池加载到内存中。结构化专家剪枝通过移除专家,可以有效降低内存使用量。然而,现有剪枝方法要么采用与模型性能不够契合的专家排序标准,要么依赖计算开销较大的有效专家子集搜索。此外,这些方法通常忽视了保留专家之间路由行为的冗余性。本文提出了通过路由器偏置学习与专家近似进行 MoE 专家剪枝的方法(MoRA),这是一种结构化 MoE 专家剪枝框架。我们为每个专家引入可学习的路由器偏置,并通过最小化语言建模损失和路由多样性正则项来优化这些偏置。学习得到的路由器偏置能够使路由概率分布更加尖锐,从而识别出对模型性能至关重要的专家,同时鼓励选择具有多样化路由偏好的专家。此外,我们引入了一种专家近似机制,作为剪枝后的增强手段。该机制利用剩余专家通过仿射变换近似被剪枝专家的输出,进一步提升剪枝模型的性能。我们在 Qwen3-30B-A3B、DeepSeek-V2-Lite 和 Moonlight-16B-A3B 上评估了 MoRA,在每个 MoE 层中移除 25\% 和 50\% 的路由专家。在九个零样本基准上的大量实验表明,MoRA 的性能优于当前最先进的剪枝算法。我们的代码将会发布。

BAIR Blog73

Adaptive Parallel Reasoning: The Next Paradigm in Efficient Inference Scaling

Adaptive Parallel Reasoning overview Overview of adaptive parallel reasoning. What if a reasoning model could decide for itself when to decompose and parallelize independent subtasks, how many concurrent threads to spawn, and how to coordinate them based on the problem at hand? We provide a detailed analysis of recent progress in the field of parallel reasoning, especially Adaptive Parallel Reasoning. Disclosure: this post is part landscape survey, part perspective on adaptive parallel reasoning. One of the authors (Tony Lian) co-led ThreadWeaver ( Lian et al., 2025 ), one of the methods discussed below. The authors aim to present each approach on its own terms. Motivation Recent progress in LLM reasoning capabilities has been largely driven by inference-time scaling, in addition to data and parameter scaling ( OpenAI et al., 2024 ; DeepSeek-AI et al., 2025 ). Models that explicitly output reasoning tokens (through intermediate steps, backtracking, and exploration) now dominate math, coding, and agentic benchmarks. These behaviors allow models to explore alternative hypotheses, correct earlier mistakes, and synthesize conclusions rather than committing to a single solution ( Wen et al., 2025 ). The problem is that sequential reasoning scales linearly with the amount of exploration. Scaling sequential reasoning tokens comes at a cost, as models risk exceeding effective context limits ( Hsieh et al., 2024 ). The accumulation of intermediate exploration paths makes it challenging for the model to disambiguate amongst distractors when attending to information in its context, leading to a degradation of model performance, also known as context-rot ( Hong, Troynikov and Huber, 2025 ). Latency also grows proportionally with reasoning length. For complex tasks requiring millions of tokens for exploration and planning, it’s not uncommon to see users wait tens of minutes or even hours for an answer ( Qu et al., 2025 ). As we continue to scale along the output sequence length dimension, we also make inference slower, less reliable, and more compute-intensive. Parallel reasoning has emerged as a natural solution. Instead of exploring paths sequentially ( Gandhi et al., 2024 ) and accumulating the context window at every step, we can allow models to explore multiple threads independently (threads don’t rely on each other’s context) and concurrently (threads can be executed at the same time). Figure 1: Sequential vs. Parallel Reasoning Figure 1: Sequential vs. Parallel Reasoning Over recent years, a growing body of work has explored this idea across synthetic settings (e.g., the Countdown game ( Katz, Kokel and Sreedharan, 2025 )), real-world math problems, and general reasoning tasks. From Fixed Parallelism to Adaptive Control Existing approaches show that parallel reasoning can help, but most of them still decide the parallel structure outside the model rather than letting the model choose it. Simple fork-and-join. Self-consistency/Majority Voting — independently sample multiple complete reasoning traces, extract final answer from each, and return the most common one ( Wang et al., 2023 ). Best-of-N (BoN) — similar to self-consistency, but uses a trained verifier to select the best solution instead of using majority voting ( Stiennon et al., 2022 ). Although simple to implement, these methods often incur redundant computation across branches since trajectories are sampled independently. Heuristic-based structured search. Tree / Graph / Skeleton of Thoughts — a family of structured decomposition methods that explores multiple alternative “thoughts” using known search algorithms (BFS/DFS) and prunes via LLM-based evaluation ( Yao et al., 2023 ; Besta et al., 2024 ; Ning et al., 2024 ). Monte-Carlo Tree Search (MCTS) — estimates node values by sampling random rollouts and expands the search tree with Upper Confidence Bound (UCB) style exploration-exploitation ( Xie et al., 2024 ; Zhang et al., 2024 ). These methods improve upon simple fork-and-join by decomposing tasks into non-overlapping subtasks; however, they require prior knowledge about the decomposition strategy, which is not always known. Recent variants. ParaThinker — trains a model to run in two fixed stages: first generating multiple reasoning threads in parallel, then synthesizing them. They introduce trainable control tokens ( ) and thought-specific positional embeddings to enforce independence during reasoning and controlled integration during summarization via a two-phase attention mask ( Wen et al., 2025 ). GroupThink — multiple parallel reasoning threads can see each other’s partial progress at token level and adapt mid-generation. Unlike prior concurrent methods that operate on independent requests, GroupThink runs a single LLM producing multiple interdependent reasoning trajectories simultaneously ( Hsu et al., 2025 ). Hogwild! Inference — multiple parallel reasoning threads share KV cache and decide how to decompose tasks without an explicit coordination protocol. Workers generate concurrently into a shared attention cache using RoPE to stitch together individual KV blocks in different orders without recomputation ( Rodionov et al., 2025 ). Figure 2: Various Strategies for Parallel Reasoning Figure 2: Various Strategies for Parallel Reasoning The methods above share a common limitation: the decision to parallelize, the level of parallelization, and the search strategy are imposed on the model, regardless of whether the problem actually benefits from it. However, different problems need different levels of parallelization, and that is something critical to the effectiveness of parallelization. For example, a framework that applies the same parallel structure to “What’s 25+42?” and “What’s the smallest planar region in which you can continuously rotate a unit-length line segment by 180°?” is wasting compute on the former and probably using the wrong decomposition strategy for the latter. In the approaches described above, the model is not taught this adaptive behavior. A natural question arises: What if the model could decide for itself when to parallelize, how many threads to spawn, and how to coordinate them based on the problem at hand? Adaptive Parallel Reasoning (APR) answers this question by making parallelization part of the model’s generated control flow. Formally defined, adaptivity refers to the model’s ability to dynamically allocate compute between parallel and serial operations at inference time . In other words, a model with adaptive parallel reasoning (APR) capability is taught to coordinate its control flow — when to generate sequences sequentially vs. in parallel. It’s important to note that the concept of adaptive parallel reasoning was introduced by the work Learning Adaptive Parallel Reasoning with Language Models ( Pan et al., 2025 ), but is a paradigm rather than a specific method. Throughout this post, APR refers to the paradigm, while “ the APR method ” denotes the specific instantiation from Pan et al. (2025). This shift matters for three reasons. Compared to Tree-of-Thoughts, APR doesn’t need domain-specific heuristics for decomposition. During RL, the model learns general decomposition strategies from trial and error. In fact, models discover useful parallelization patterns, such as running the next step along with the self-verification of a previous step, or hedging a primary approach with a backup one, in an emergent manner that would be difficult to hand-design ( Yao et al., 2023 ; Wu et al., 2025 ; Zheng et al., 2025 ). Compared to BoN, APR avoids redundant computation. APR models have control over what each parallel thread will do before branching out. Therefore, APR can learn to produce a set of unique, non-overlapping subtasks before assigning them to independent threads ( Wang et al., 2023 ; Stiennon et al., 2022 ; Pan et al., 2025 ; Yang et al., 2025 ). Compared to non-adaptive approaches, APR can choose not to parallelize. Adaptive models can adjust the level of parallelization to match the complexity of the problem against the complexity and overhead of parallelization ( Lian et al., 2025 ). In practice, this is implemented by having the model output special tokens that control when to reason in parallel versus sequentially. Below is a condensed ThreadWeaver-style trace: two outlines and two paths under a block, then the threads agree on a single boxed answer. Figure 3: Example of an Adaptive Parallel Reasoning Trajectory from ThreadWeaver, manually condensed for ease of illustration. Figure 3: Example of an Adaptive Parallel Reasoning Trajectory from ThreadWeaver, manually condensed for ease of illustration. Figure 4: Special Tokens Variants across Adaptive Parallel Reasoning Papers Figure 4: Special Tokens Variants across Adaptive Parallel Reasoning Papers Inference Systems for Adaptive Parallelism How do we actually execute parallel branches? We take inspiration from computer systems, and specifically, multithreading and multiprocessing. Most of this work can be viewed as leveraging a fork-join design. At inference time, we are effectively asking the model to perform a map-reduce operation: Fork the problem into subtasks/threads, process them concurrently Join them into a final answer Figure 5: Fork-join Inference Design Figure 5: Fork-join Inference Design Specifically, the model will encounter a list of subtasks. It will then prefill each of the subtasks and send them off as independent requests for the inference engine to process. These threads then decode concurrently until they hit an end token or exceed max length. This process blocks until all threads finish decoding and then aggregates the results. This is common across various adaptive parallel reasoning approaches. However, one issue arises during aggregation: the content generated in branches cannot be easily aggregated at the KV cache level. This is because tokens in independent threads start at identical position IDs, resulting in encoding overlap and non-standard behavior when merging KV cache back together. Similarly, since independent threads do not attend to each other, their concatenated KV cache results in a non-causal attention pattern, which the base model has not seen during training. To address this issue, the field splits into two schools of thought on how to execute the aggregation process, defined by whether they modify the inference engine or work around it. Multiverse modifies the inference engine to reuse KV cache across the join. Before taking a deeper look into Multiverse ( Yang et al., 2025 )’s memory management, let’s first understand how KV cache is handled up until the “join” phase. Notice how each of the independent threads share the prefix sequence, i.e., the list of subtasks. Without optimization, each thread needs to prefill and recompute the KV cache for the prefix sequence. However, this redundancy can be avoided with SGLang ’s RadixAttention ( Sheng et al., 2023 ), which organizes multiple requests into a radix tree, a trie (prefix tree) with sequences of elements of varying lengths instead of single elements. This way, the only new KV cache entries are those from independent thread generation. Figure 6: RadixAttention’s KV Cache Management Strategy Figure 6: RadixAttention’s KV Cache Management Strategy Now, if everything went well, all the independent threads have come back from the inference engine. Our goal is now to figure out how to synthesize them back into a single sequence to continue decoding for next steps. It turns out, we can reuse the KV cache of these independent threads during the synthesis stage. Specifically, Multiverse ( Yang et al., 2025 ), Parallel-R1 ( Zheng et al., 2025 ), and NPR ( Wu et al., 2025 ) modify the inference engine to copy over the KV cache generated by each thread and edits the page table so that it stitches together non-contiguous memory blocks into a single KV cache sequence. This avoids the redundant computation of a second prefill and reuses existing KV cache as much as possible. However, this has several major limitations. First, this approach requires modifying the inference engine to perform non-standard memory handling, which can result in unexpected behaviors. Specifically, since the synthesis request references KV cache from previous requests, it creates fragility in the system and the possibility of bad pointers. Another request can come in and evict the referenced KV cache before the synthesis request completes, requiring it to halt and trigger a re-prefilling of the previous thread request. This problem has led the Multiverse researchers ( Yang et al., 2025 ) to limit the batch size that the inference engine can handle, which restricts throughput. Figure 7: KV Cache “Stitching” During Multiverse Inference Figure 7: KV Cache “Stitching” During Multiverse Inference Second, this approach modifies how models see the sequence, which creates a distributional shift that models are not pretrained on, therefore requiring more extensive training to align behavior. Specifically, when we stitch together KV cache this way, we create a sequence with non-standard position encoding. During independent-thread generation, all threads started at the same position index and attended to the prior subtasks, NOT each other. So when the threads merge back, the resulting KV cache has a non-standard positional encoding and does not use causal attention. Therefore, this approach requires extensive training to align the model to this new behavior. To address this, Multiverse ( Yang et al., 2025 ) and related works apply a modified attention mask during training to prevent independent threads from attending to each other, aligning the training and inference behaviors. Figure 8: Multiverse’s Attention Mask Figure 8: Multiverse’s Attention Mask With these issues arising from non-standard KV cache management, can we try an approach without engine modifications? ThreadWeaver keeps the inference engine unchanged and moves orchestration to the client. ThreadWeaver ( Lian et al., 2025 ) treats parallel inference purely as a client-side problem. The “Fork” process is nearly identical to Multiverse’s, but the join phase handles memory very differently as it does NOT modify engine internals. Instead, the client concatenates all text outputs from independent branches into one contiguous sequence. Then, the engine performs a second prefill to generate the KV cache for the conclusion generation step. While this introduces computational redundancy that Multiverse tries to avoid, the cost of prefill is significantly lower than decoding. In addition, this does not require special attention handling during inference, as the second prefill uses causal attention (threads see each other), making it easier to adapt sequential autoregressive models for this task. Figure 9: ThreadWeaver’s Prefill and Decode Strategy Figure 9: ThreadWeaver’s Prefill and Decode Strategy How should we train a model to learn this behavior? Naively, for each parallel trajectory, we can break it down into multiple sequential pieces following our inference pattern. For instance, we would train the model to output the subtasks given prompt, individual threads given prompt+subtask assignment, and conclusion given prompt+subtasks+corresponding threads. However, this seems redundant and not compute efficient. Can we do better? Turns out, yes. As in ThreadWeaver ( Lian et al., 2025 ), we can organize a parallel trajectory into a prefix-tree (trie), flatten it into a single sequence, and apply an ancestor-only attention mask during training (not inference!). Figure 10: Building the Prefix-tree and Flattening into a single training sequence Figure 10: Building the Prefix-tree and Flattening into a single training sequence Specifically, we apply masking and position IDs to mimic the inference behavior, such that each thread is only conditioned on the prompt+subtasks, without ever attending to sibling threads or the final conclusion. The engine-agnostic design makes adoption easy since you don’t need to figure out a separate hosting method and can leverage existing hardware infra. It also gets better as existing inference engines get better. What’s more, with an engine-agnostic method, we can serve a hybrid model that switches between sequential and parallel thinking modes easily. Training Models to Use Parallelism Once the inference path exists, the next problem is teaching a model to use it. Demonstrations are needed because the model must learn to output special tokens that orchestrate control flow. We found the instruction-following capabilities of base models insufficient for generating parallel threads. An interesting question here is: does SFT training induce a fundamental reasoning capability for parallel execution that was previously absent, or does it merely align the model’s existing pre-trained capabilities to a specific control-flow token syntax. Typical wisdom is SFT teaches new knowledge; but contrary to common belief, some papers—notably Parallel-R1 ( Zheng et al., 2025 ) and NPR ( Wu et al., 2025 )—argue that their SFT demonstrations simply induce format following (i.e., how to structure parallel requests). We leave this as future work. Figure 11: Sources of Parallelization Demonstration Data Figure 11: Sources of Parallelization Demonstration Data Demonstrations teach the syntax of parallel control flow, but they do not fully solve the incentive problem. In an ideal world, we only need to reward the outcome accuracy, and the parallelization pattern emerges naturally given that it learns to output special tokens through SFT, similar to the emergence of long CoT. However, researchers ( Zheng et al., 2025 ) observed that this is not enough, and we do in fact need parallelization incentives. The question then becomes, how do we tell when the model is parallelizing effectively? Structure-only rewards are too easy to game. Naively, we can give a reward for the number of threads spawned. But models can spawn many short, useless threads to hack the reward. Okay, that doesn’t work. How about a binary reward for simply using parallel structure correctly? This partially solves the issue of models spamming new threads, but models still learn to spawn threads when they don’t need to. The authors of Parallel-R1 ( Zheng et al., 2025 ) introduced an alternating-schedule, only rewarding parallel structure 20% of the time, which successfully increased the use of parallel structure (13.6% → 63%), but had little impact on overall accuracy. With this structure-only approach, we might be drifting away from our original goal of increasing accuracy and reducing latency… How can we optimize for the Pareto frontier directly? Accuracy is simple — we just look at the outcome. How about latency? Efficiency rewards need to track the critical path. In sequential-only trajectories, we can measure latency based on the total number of tokens generated. To extend this to parallel trajectories, we can focus on the critical path, or the longest sequence of tokens that are causally dependent, as this directly determines our end-to-end generation time (i.e., wall-clock time). As an example, when there are two sections with five threads each, the critical path will go through the longest thread from the first parallel section, then any sequential tokens, then the longest thread from the second parallel section, and so on until the end of sequence. Figure 12: Critical Path Length Illustration Figure 12: Critical Path Length Illustration The goal is to minimize the length of the critical path. Simultaneously, we would still like the model to be spending tokens exploring threads in parallel. To combine the two objectives, we can focus on making the critical path a smaller fraction of the total tokens spent. Authors of ThreadWeaver ( Lian et al., 2025 ) framed the parallelization reward as $1 - L_{\mathrm{critical}} / L_{\mathrm{total}}$, which is 0 for a sequential trajectory, and increases linearly as the critical path gets smaller compared to the total tokens generated. Parallel efficiency should be gated by correctness. Intuitively, when multiple trajectories are correct we should assign more reward to the trajectories that are more efficient at parallelization. But how about when they are all incorrect? Should we assign any reward at all? Probably not. To formalize this, $R = R_{\mathrm{correctness}} + R_{\mathrm{parallel}}$. Assuming binary outcome correctness, this can be written as $R = \mathbf{1}(\text{Correctness}) + \mathbf{1}(\text{Correctness}) \times (\text{some parallelization metric})$. This way, a model only gets a parallelization reward when it answers correctly, since we don’t want to pose parallelization constraints on the model if it couldn’t answer the question correctly. Figure 13: Differences in Reward Designs Across Adaptive Parallel Reasoning Works Figure 13: Differences in Reward Designs Across Adaptive Parallel Reasoning Works Evaluation and Open Questions When all is said and done, how well do these adaptive parallel methods actually perform? Well…this is a hard question, as they differ in model choice and metrics. The model selection depends on the training method, SFT problem difficulty, and sequence length. When running SFT on difficult datasets like s1k, which contains graduate-level math and science problems, researchers chose a large base model (Qwen2.5 32B for Multiverse ( Yang et al., 2025 )) to capture the complex reasoning structure behind the solution trajectories. When running RL, researchers chose a small, non-CoT, instruct model (4B, 8B) due to compute cost constraints. Figure 14: Difference in Model Choice Across Adaptive Parallel Reasoning Papers Figure 14: Difference in Model Choice Across Adaptive Parallel Reasoning Papers Each paper also offers a slightly different interpretation about how adaptive parallel reasoning contributes to the research field. They optimize for different theoretical objectives, so they use slightly different sets of metrics: Multiverse and ThreadWeaver ( Yang et al., 2025 ; Lian et al., 2025 ) aim to deliver sequential-AR-model-level accuracy at faster speeds. Multiverse shows that APR models can achieve higher accuracy under the same fixed context window, while ThreadWeaver shows that the APR model achieves shorter end-to-end token latency (critical path length) while getting comparable accuracy. NPR ( Wu et al., 2025 ) treats sequential fallback as a failure mode and optimizes for 100% Genuine Parallelism Rate, measured as the ratio of parallel tokens to total tokens. Parallel-R1 ( Zheng et al., 2025 ) does not focus on end-to-end latency and instead optimizes for exploration diversity, presenting APR as a form of mid-training exploration scaffold that provides a performance boost after RL. Open Questions While Adaptive Parallel Reasoning represents a promising step toward more efficient inference-time scaling, significant open questions remain. As noted above, Parallel-R1 ( Zheng et al., 2025 ) presents APR as a form of mid-training exploration scaffold rather than a primarily inference-time technique. This invites a more fundamental question: Does parallelization at inference-time consistently improve accuracy, or is it primarily valuable as a training-time exploration scaffold? Parallel-R1 suggests that the diversity induced by parallel structure during RL may matter more than the parallelization itself at test time. A related concern is stability. There’s also a persistent tendency for models to collapse back to sequential reasoning when parallelization rewards are relaxed. Parallel-R1 authors showed that removing parallelization reward after 200 steps results in the model reverting to sequential behavior. Is this a training stability issue, a reward signal design issue, or evidence that parallel structure genuinely conflicts with how autoregressive pretraining shapes the model’s prior? Beyond whether APR works, deployment introduces its own questions. Can we design training methods that account for available compute budget at inference time, so parallelization decisions are hardware-aware rather than purely problem-driven? Finally, the parallel structures considered above are essentially flat. What if we allow parallelization depth > 1? Recursive language models (RLMs; Zhang, Kraska and Khattab, 2026 ) effectively manage long context and show promising inference-time scaling capabilities. How well do RLMs perform when trained with end-to-end RL that incentivizes adaptive parallelization? Acknowledgements We thank Nicholas Tomlin and Alane Suhr for providing us with helpful feedback. We thank Christopher Park, Karl Vilhelmsson, Nyx Iskandar , Georgia Zhou, Kaival Shah , and Jyoti Rani for their insightful suggestions. We thank Vijay Kethana , Jaewon Chang , Cameron Jordan , Syrielle Montariol , Erran Li, and Anya Ji for their valuable discussions. We thank Jiayi Pan , Xiuyu Li , and Alex Zhang for their constructive correspondences about Adaptive Parallel Reasoning and Recursive Language Models.

BAIR Blog79

Teaching LLMs to Update Beliefs for Efficient Long-Horizon Interaction

ABBEL overview Overview of ABBEL compared to traditional recursive summarization. Beliefs replace the full interaction history as the agent’s working context, and belief grading improves performance by supervising the contents of each belief state.. As task horizons grow, LLM contexts can’t scale forever. Self-summarization enables concise, interpretable contexts, but at a significant performance cost, especially for human assistance domains where high quality data is scarce, e.g., collaborative code generation. We address this with ABBEL : a framework that isolates and supervises the information content of summaries in the form of natural-language belief states. Motivation: the cost of recursive summarization For language models to effectively assist with increasingly complex tasks such as software development, they must be able to interact with us over hundreds or even thousands of steps. For such long tasks, it is impractical to keep the history of the entire interaction in context. The heuristic approach used so far has been summary generation, sometimes called context compaction. For example, Cursor’s latest model composer 2.5 uses compaction during training for improved performance ( Cassano et al., 2026 ). Alongside composer, Grandcode ( DeepReinforce et al., 2026 ), the first system to consistently beat all human competitors in online coding competitions, despite using one of the newest efficient attention models (Qwen 3.5-397B), 1 still found it necessary to employ context summarization. But compaction has a problem. Despite seemingly low performance gaps in benchmarks, model servers like Cursor continue to recommend that users avoid compaction with their coding assistants in the middle of a task ( Heule et al., 2026 ). To understand why, see below the performance over RL fine-tuning of a Context summary model compared to full context models in Combination Lock, a Wordle-like game that allows up to 16 guesses. 2 Though both model types improve over the course of training, the summary model never closes the gap. Average attempts to guess target word with context summary vs full context policies over training Fig. 1: Average attempts to guess the target word on Combination Lock over RL fine-tuning (lower is better). Context-summary policies improve with training but do not close the gap to full-context policies. Making models self-summarize while completing a task increases the complexity of the learning problem. While this could typically be addressed by training with more data, the performance degradation observed in real world interactive settings likely arises from the difficulty we have in creating and using human simulators effectively to generate high quality training environments ( Lin et al., 2025 , Tomlin et al., 2025 ). Thus, the better you can learn to summarize on the limited and messy multiturn interaction trajectories you can collect, the better off your model will be for downstream users. ABBEL: acting through belief bottlenecks ABBEL belief grading diagram Fig. 2: Autoencoder-inspired belief grading. The model encodes prior belief, action and observation (b t , a t , o t ) into posterior belief b t+1 and is rewarded for how well select information from the history can be reconstructed from that belief. To address poor learning efficiency, we isolate the summary generation task. Drawing inspiration from recursive Bayesian estimation, we formulate summaries as belief states, which we periodically prompt the model to update based on new information. 3 ABBEL overview animation frame ‹ Prev Pause Next › 1 / 16 Fig. 3: ABBEL rollout. Belief updates from the latest observation alternate with action selection conditioned only on the current posterior belief. Belief grading We then extract and supervise the contents of the belief states (Fig. 2, Belief Grading). Belief grading can be thought of as adding an auxiliary RL task, using heuristics designed to capture what makes a good belief as the reward. An example heuristic for coding could be shorter is better, but closer to being able to reconstruct the git diff is also better, so balancing these would yield a good belief. In domains where good heuristics are hard to define, we propose a general autoencoding-inspired grading function, which treats the current language model π θ as both encoder and decoder of information from the history, and the belief states as the codes. We grade each belief b t+1 by how well it can be used by the current model π θ to reconstruct the most recent observation o t : Eq. 1: Reconstruction grading objective Eq. 1: Reconstruction grading objective. Here b t+1 is the updated belief, o t the latest observation, a t the action just taken, b t the prior belief, p I the task prompt, and π θ the current model. Higher grades reward beliefs that retain information needed to decode the latest observation. What do we gain by grading beliefs? Collaborative coding on CollabBench We demonstrate the utility of belief grading in our motivating domain of human-driven assistive coding, with the CollabBench environment from Sweet-RL ( Zhou et al., 2025 ). CollabBench collaborative coding environment Fig. 4: CollabBench collaborative coding environment. The agent asks clarifying questions, then submits a function scored against hidden unit tests. We see that with the general reconstruction-based belief grading function we reduce the performance gap from full context models by about 50%, and train in 50% fewer steps compared to training models to summarize without belief grading (no BG). After training, ABBEL still uses significantly less memory than the full context setting, as measured by the peak context token length (Peak Tokens). Model Test Pass Rate ↑ Success Rate ↑ Peak Tokens × 10² ↓ Training Steps ↓ Full Context 0.52±0.02 0.39±0.02 14.08±0.55 100 ABBEL (no BG) 0.46±0.02 0.31±0.02 4.20±0.37 100 ABBEL-rec-BG 0.48±0.01 0.36±0.01 6.01±0.33 50 Fig. 5: CollabBench results. With reconstruction belief grading, ABBEL-rec-BG recovers about half the gap to full context while using fewer peak tokens, and trains in 50 steps instead of 100. Combination Lock Additionally, in CombinationLock, we demonstrate that ABBEL with a belief grader which leverages domain knowledge (by computing useful statistics over the history and checking that they can be reconstructed from the belief state), enables even higher learning efficiency than full context (FULL CTX) models. Average Attempts to guess target word ABBEL Fig. 6: Average attempts to guess the target word on Combination Lock (lower is better). With domain-knowledge belief grading, ABBEL approaches or exceeds FULL CTX in this setting; without belief grading, learning is slower. Multi-objective question answering In a third environment, multi-objective question answering (from MEM1 Zhang et al., 2025 , a recent work which performed end-to-end optimization in a modified version of typical recursive summarization), we demonstrate the utility of isolating belief states from reasoning, by showing that a Peak Belief length Penalty (more details in paper) significantly reduces memory usage with minimal performance degradation, unlike is commonly observed when penalizing reasoning lengths ( Arora et al., 2025 ). Performance and memory usage in multi QA Fig. 7: Exact-match score and peak memory versus number of objectives in multi-objective QA. ABBEL with a peak belief penalty (PBP) maintains comparable performance while using less memory than MEM1 and ABBEL without PBP in this evaluation. Related work Alternative solutions to managing long contexts involve different tradeoffs, and are worth considering depending on the requirements of a deployed system. Context compression methods generate dense representations which, while computationally efficient, sacrifice human-understandability ( Kontonis et al., 2026 , Eyuboglu et al., 2025 , Gupta et al., 2025 , Chevalier et al., 2023 , Deng et al., 2025 , Deng et al., 2025 , Bulatov et al., 2022 ). Hand-designed summarization prompts ( Wang et al., 2025 , Örwall et al., 2025 , Starace et al., 2025 ) and pruning strategies ( Jiang et al., 2024 ) specific to target environments require expert human knowledge and don’t allow an agent to learn what to remember as part of its decision-making strategy. Methods that process long contexts into an external memory store ( Packer et al., 2023 , Xu et al., 2025 ) for the agents or subagents to query ( Zhang et al., 2025 ) are complementary, as they may benefit from better next context creation through summarization training. We would like to point out some exciting works in the space of general recursive summarization focused on math ( Wu et al., 2026 ), reasoning with belief generation ( Zhou et al., 2025 ), competitive coding with a distilled summarization module using similar autoencoding objectives to our general belief grader ( DeepReinforce et al., 2026 ), and adding continuous features to summaries ( Kontonis et al., 2026 ). What’s next for better memory? Many more possibilities are enabled through using explicit belief states as information bottlenecks for multi-step interaction. You could reward actions based on their effect on the belief state to guide exploration, transmit the explicit belief states for better communication between agents, or even improve user controllability by directly modifying the memories on which the agents’ decisions are based. Some forms of information, e.g., what a person looks like, are not represented well by text alone. A continuously learning system will also have to capture such information. Additionally, if we want a system to learn to communicate in a brand new language or to play a brand new game better than any person in the world, the skills accumulated over the lifetime of conversations or games must be stored in a very compressed form, essentially taking on the role of the weights of the model itself. More powerful systems will likely utilize a combination of multiple forms of memory, where the contents of the context may correspond to working memory while other approaches are used for short and long-term memory. How to instantiate these other forms of memory, for instance via test-time training, adapter memories, continuous context memories, or some combination thereof, presents an exciting challenge. Acknowledgements Acknowledgements: We would like to thank Alane Suhr and Kartik Goyal for advising this research as well as Ethan Mendes , David He , Jitesh Jain , and Nicholas Tomlin for comments on early drafts of this post. We would like to thank the MEM1 authors for their email correspondence and for sharing private reviewer feedback which we found particularly insightful. Citation If abbel was inspiring for your future work, please cite us with this! And here is some advice for doing similar research! @misc { lidayan2026abbellearningnaturallanguagebelief , title = {ABBEL: Learning Natural-Language Belief States for Memory-Efficient Interaction} , author = {Aly Lidayan and Jakob Bjorner and Satvik Golechha and Kartik Goyal and Alane Suhr} , year = {2026} , eprint = {2512.20111} , archivePrefix = {arXiv} , primaryClass = {cs.CL} , url = {https://arxiv.org/abs/2512.20111} , } With newer models the number of tokens till 50% compute spend is on attention gets much larger than 25K. Interleaving linear attention alternatives with full attention as is done with gpt-oss and DeepSeekv4, results in massive flops reductions for the attention computation. For example with DeepSeekv4-Pro (1.6T A49B) it requires nearly 450 thousand tokens to reach the 50% tradeoff point. Grandcode uses Qwen-3.5-397B-A17B a model which hits 50% FLOPs for attention at ~150 thousand tokens. ↩ This setting is technically solvable with much more computationally effective tools, but serves as a flexible test bed to study properties of recursive summarization. Bertsimas et al., 2022 , showed that an exact solution for the wordle game instantiated with the original vocabulary of the javascript game can be found with dynamic programming, but evidently the general formulation of wordle as a guessing game on K letters with L attempts and some dictionary of valid words and correct words D is NP hard to determine the minimal number of moves required. ↩ In practice there is an O(N/K) overhead cost for summary. N is the total number of actions. K is the number of actions till summarization is triggered. This is necessarily true for any summary approach. For ease of illustration this gif uses K = 1. In our experiments, to put more emphasis on summarization weaknesses we also use K=1. In practice overhead is small as K can be chosen to be near the efficient hardware limit. ↩

arXiv cs.AI80

概率并不够:探索并统计用于 LLMs 推理不确定性量化的分歧词元

随着大语言模型的思维链推理能力不断提升,对其推理置信度进行评估和校准对于量化答案的不确定性变得愈发重要。当前,大语言模型置信度估计方法通常基于所选关键词元的概率,但其背后的机制仍不明确。我们的初步研究发现,用粗粒度替代值替换所选词元的概率同样可以改善校准效果,这促使我们进一步探索模型置信度的有效信号。我们提出 Divergent Token Confidence(DTC),一种通过统计两个模型在解码过程中强烈不一致的词元数量来估计置信度的框架。DTC 使用沿同一推理轨迹评估得到的下一词元分布之间的 Jensen-Shannon 散度来识别这些分歧词元。我们发现,分歧词元的数量与答案准确率几乎呈负相关,因此可以作为一种简单而有效的不确定性量化信号。DTC 支持借助辅助模型进行白盒和黑盒评估,无需显式训练,也不会影响生成过程。在多个模型系列和六个数学基准上的实验表明,相较于基于概率的方法和言语化基线,DTC 能够实现更好的校准效果。在白盒评估中,仅依赖计数的估计器的平均期望校准误差为 13.0%,而标准的完整序列置信度方法为 32.7%–42.4%。在黑盒设置下,DTC 相较于原始言语化分数同样改善了校准效果。例如,在 DeepSeek-V3.2 上,平均期望校准误差从 32.1%–40.2% 降至 13.7%–16.3%。这些发现为改进大语言模型中的推理不确定性量化提供了新的思路。代码发布于 https://github.com/szu-tera/DTC.git。

arXiv cs.AI70

Routing Drift Alone Does Not Diagnose Failure in Merged MoE LLMs

Model merging efficiently combines specialized large language models (LLMs) without joint retraining, but can substantially alter expert routing in Mixture-of-Experts (MoE) models. Such \emph{routing drift} is often interpreted as routing failure, raising a fundamental question that remains unclear: \emph{does routing drift after MoE merging actually indicate routing failure, and what evidence should justify repair?} We investigate these questions across DeepSeekMoE, OLMoE, and Qwen3-MoE proposing a routing analysis toolkit for controlled counterfactual interventions and token-level analysis. By crossing source and merged router inputs and parameters, we attribute most expert reassignments to input shifts rather than parameter changes at the same layer. However, source-relative routing differences poorly predict next-token likelihood gains from source-route restoration, and different expert selections can produce directionally similar mixture outputs. We therefore operationalize routing failure as \textit{task loss recoverable under a specified routing intervention, with non-routing parameters fixed.} These tests detect recoverable loss under deliberate router corruption, whereas source-route restoration does not establish reliable task benefits in the evaluated merged models. Motivated by these, we propose \emph{Selective Router Repair (SRR)} as a case study, and find that source-specialist token-likelihood advantages do not reliably identify beneficial local corrections. Together, these findings show that \textbf{routing drift alone is insufficient evidence of routing failure}: source-informed corrections must be judged by their task-level intervention effects. The analysis toolkit and SRR code are released.

Hacker News 熱門63

DeepSeek 弹性计算 (DSec)

文章 URL: https://arxiv.org/abs/2609.22978 评论 URL: https://news.ycombinator.com/item?id=49859112 点数: 6 评论数: 0

arXiv cs.AI86

预填充推理通道:针对推理型 LLM 的输出前缀攻击

大型语言模型(LLM)接收并生成单一文本序列;因此,如果可以在 LLM 响应的开头添加文本,即输出前缀,那么后续所有 token 都将以此为条件。输出前缀攻击技术是一种成本低廉的黑盒提示注入方法。先前研究表明,这类攻击能够稳定地令非推理模型越狱。大多数推理模型会在助手的最终响应之前,增加一个中间的草稿推理步骤。一些 API 暴露了编辑这一推理通道的能力,攻击者可以利用某些攻击向量发起推理注入攻击。我们开展了首项系统且受控的研究,将草稿推理通道单独作为输出前缀攻击向量进行分析;同时也是首项在推理过程公开和隐藏的模型中,对仅推理、仅输出前缀以及推理加输出前缀三类攻击进行比较的研究。我们采用 3 种前缀类型 × 2 种推理注入的析因设计,在从 AdvBench 抽取的 1,800 个测试案例上,对三个 2026 年前沿模型 Gemini 3 Flash Preview、DeepSeek V4 Flash 和 Claude Haiku 4.5 发起攻击。我们发现,单独注入恶意推理基本不起作用(攻击成功率约为 0%);但将相同的推理与一个简单的输出前缀一同注入后,在某些模型上可将攻击成功率提升至最高 99%。对于这类攻击,我们发现上下文前缀的效果优于静态前缀;此外,模型是否容易受到攻击取决于具体模型。

arXiv cs.AI80

Can LLMs Catch a Rigged Backtest? A Clean-Control Calibration Benchmark

Backtest auditing is a calibration problem: high flaw recall is not useful when the model falsely flags matched clean strategies. We build a 96-item paired benchmark in which every flawed backtest has a clean control that holds strategy, dates, code style, labels, and reporting scaffold fixed while changing one methodology detail. A deterministic scorer separates flaw recall, clean-control false positives, evidence localization, and fix relevance. Over 1440 cached audits from four text endpoints, the primary DeepSeek auditor reaches 100.0\% closed and clean-aware code recall, but open prompts over-flag 93.8\% of clean code controls, and clean-aware all-three specificity is 87.5\% even where recall saturates. A clean-aware warning drops DeepSeek code false positives from 20.8\% (95\% CI 11.7--34.3) to 0.0\% (0.0--7.4) at unchanged recall, while the budget anchor still flags 38/48 clean controls under the same prompt. Reporting recall alone would rank three of these four models identically; reporting the clean-control rate separates them by 79 points.

Hacker News 熱門78

Training a model to identify AI-generated web content from structure alone

Hey HN! We’re Vincent and Jochen from Sitefire ( https://sitefire.ai ). We have been working together for years, with backgrounds in RL/optimization at Stanford and software engineering from Technical University Munich (TUM). With Sitefire (YC W26), we help marketing teams get recommended by AI Search (ChatGPT, Google AI Overviews, AI Mode, Claude, etc.). Our software monitors prompts, sees which web pages get cited, and uses these insights to help marketing teams take action, e.g. create YouTube videos or write the right blog posts. This means we have a commercial stake in AI-generated web content. And for now, high-information, AI-generated content works great to get cited and recommended in AI Search. But after talking to hundreds of marketing teams, it became clear that everyone despises AI-generated content (“AI slop”). And yet, everyone still wants to leverage AI to create content. So we asked ourselves: what characterizes AI slop? Can we train a model to identify it from human-generated web pages? Researchers from the University of Maryland and Google DeepMind already asked this question for fiction. Their paper StoryScope (Russell et al., 2026) showed that you can tell AI-written stories from human ones by their structure alone, without looking at the words. We ported their pipeline to commercial web pages. Using the Wayback Machine, we collected 2,250 blog posts from 268 B2B company websites that were written before ChatGPT existed. For each blog post, five AI models (GPT-5.4, Claude Sonnet 4.6, Gemini 3 Flash, DeepSeek V3.2, Kimi K2.5) wrote their own version. Instead of looking at the words, we looked at how each post is built. We had an AI model answer 214 questions about every post, e.g. how hard it pushes its own product, whether it backs up its claims with sources, or whether it quotes a named expert. Then we trained a classifier on these answers. On blog posts it had never seen before, our classifier told AI-generated and human posts apart with 98% accuracy, getting only 19 of 1,740 wrong. Why does it work so well? Because all five AI models write in a similar shape. Mapping every AI model’s values for these features, we see they cluster together, while the human values sit apart and spread out much more. Of the 1% most unique blog posts in our data set, 149 are human, only 4 are AI. So what characterizes AI slop? It tells you the same thing three times. The title already promises what you'll get ("How to Cut Onboarding Time in Half"), the intro lays out what's coming, and the ending says it all again. 77% of the AI posts end by repeating their main point, compared to only 12% of the human posts. We call it the tidy, self-announcing blog post. Still, each AI model has its own accent. We trained a second classifier to tell which of the five AI models wrote a post, or whether a human did. It picks the right author 79% of the time, where random guessing (1 in 6) would get 17%. Almost all of its mistakes are mix-ups between the AI models, not between human and AI. The cool thing about structural features is that you can't simply reword your way out of it. We had each AI model rewrite its own posts until, on average, 73% of their original 13-word sequences were gone, and the AI slop classifier still worked just as well. We're building this into Sitefire: our agents get a structural understanding of text, so the posts they write go deeper and vary the way human writing does. There's a lot we haven't tested yet, like the myriad of humanizer tools, human rewriting, restructuring a post, or prompting an AI model to explicitly avoid these habits. And our human posts are mostly from 2020 to 2022, while the AI posts were generated in August 2026. Structure can't really tell when a human post was written, but it's still not a same-year comparison. We published the study with all the figures on arXiv: https://arxiv.org/abs/2609.15369 . The code is on GitHub: https://github.com/pulse-energy-eu/slopshape We're pretty sure your own blog isn't AI slop, is it? We built a checker that runs one of your posts through the ten features from the paper, so you can see for yourself (the full report asks for a work email): https://sitefire.ai/slop-checker . Think you can tell AI slop from human writing? We also made a little game to see if you can keep up with our model, which gets all five rounds right: https://sitefire.ai/spot-the-slop . Comments URL: https://news.ycombinator.com/item?id=49800566 Points: 5 # Comments: 0

Hacker News 熱門77

Show HN:Cactus Needle 3:8-29MB 自动化模型可媲美 DeepSeek V4 Flash

嘿 HN,我是来自 Cactus 的 Henry。 几周前我们在这里提交了 Needle 2,讨论串里的反馈非常有价值,感谢大家!得益于所有这些反馈,我们得以快速发布 Needle 3,我也很想再次听听你们的看法。 关键特性: 1) 自动化(工具调用与结构化 JSON 输出):Needle 仍然在设计上不用于聊天,要把通用能力塞进如此小的模型里相当有挑战,所以我们专注于工具调用和结构化 JSON。如果你声明的工具都不适合该请求,就会返回一个空列表(试玩 demo 时请注意这一点)。 2) 智能阶梯化:每一层(2 到 20 层)都是一个可部署的子网络,因此只需一组权重,2-bit 下为 2500 万到 1.21 亿参数,以 8-29MB 二进制文件发布。在 Raspberry Pi 5 上,它的解码速度最高可达 4k tokens/秒,预填充最高可达 10k。 3) Monarch Hadamard MLP:用三组可学习的、以 Walsh-Hadamard 初始化的 Kronecker(Monarch)因子对取代密集 FFN,中间交错每通道对角缩放、固定置换、SiLU 非线性,以及一个 rank-8 输入条件门控,因此每个 token 都能对其 d_model 通道进行完全混合的非线性变换,参数量和计算量为 O(d√d),而不是密集 4 倍扩展 MLP 所需的 O(d²)。 4) 性能:在 Mobile Actions(手机命令,按精确调用评分)上,20 层模型通过发布的 2-bit 二进制文件取得 86.0;LFM2.5 1.2B 为 82.4,Qwen3.5 0.8B 为 76.0,Apple 的端侧模型为 57.6,全部为 f16。链接中有更多结果,当然我们并不是处处领先。 5) 多语言:Needle 3 现在支持英语、法语、西班牙语、德语、荷兰语、意大利语、波兰语,更多语言即将推出。 6) 微调:你可以只用 4L 在一个窄任务上达到 DeepSeek v4 Flash 级别的性能,重点是“窄任务”;我们发现生产用户通常更倾向于在投产前先进行调优。 7) 触发器:落地到具体上下文是工具调用的常见挑战,至少对 Needle 2 来说如此,因此我们增加了对大小写不敏感正则表达式的支持,可与每个请求匹配以拦截假阴性。 8) 置信度:每个响应还附带一个校准后的置信度分数,取完成调用后的判断与其解码概率二者中的较小值。高于你的阈值就执行;低于阈值则显示调用并询问,或升级到更大的模型。 9) 支持平台:macOS、x86-64 上的 Linux、ARM64、ARMv7、RISC-V 和 MIPS32、Windows x64 和 ARM、Android、iOS、watchOS、tvOS、作为 WebAssembly 的浏览器,以及一个 WASI component。 感谢阅读,和往常一样,欢迎分享想法! 评论 URL: https://news.ycombinator.com/item?id=49748553 得分:144 评论数:71

arXiv cs.AI69

QART: A Quantum-Classical Hybrid Architecture for Long-Horizon Reasoning -- Exploring a Conditional Path toward Quantum Scaling

Long-horizon reasoning is vulnerable to early errors that compromise later decisions. We present QART, the Quantum-Augmented Reasoning Transformer, a quantum--classical hybrid architecture combining a backbone language model with quantum encoding, CIM-based QUBO optimization, and quantum decoding. Semantic information can come from hidden representations or model-generated text; detailed encoding and optimization procedures remain proprietary. Under explicit assumptions, we establish a conditional asymptotic reliability separation from single-trajectory autoregressive LLMs. For a common task family with aligned optimality and acceptance criteria, autoregressive acceptance probability tends to zero when cumulative conditional risk of irreversible errors diverges. QART's task-optimal-path recovery probability remains bounded away from zero if conditional probabilities for optimal-path coverage and semantic fidelity, spectral certification, dynamical reachability, and faithful readout remain uniformly positive under a specified resource schedule. The architecture alone does not imply these bounds. Paired measurements on six long-horizon benchmarks using DeepSeek V4 Flash, GLM-5.3, and GPT-5.5 xhigh in a Codex agent environment favor QART in 14 of 15 backbone--benchmark pairs. Relative gains reach 84.0% on SciCode, 47.6% on $τ^3$-Bench, and 44.4% on Terminal-Bench 4.0; the DeepSeek V4 Flash configuration regresses by 7.8% on DeepSWE. These results do not directly validate the asymptotic separation. Potential quantum scaling laws are formulated as conditional hypotheses. A quantum-advantage interpretation requires a demonstrated CIM quantum advantage over strong classical solvers and its transfer to end-to-end reasoning after all system overheads.

arXiv cs.AI82

在使用 LLM 进行民调之前:审议式诊断框架

LLM 能像人类一样推理新信息,还是只会检索缓存的观点?对于硅基抽样而言,这是一个关键问题,因为 LLM 人格化角色能够大规模模拟公众舆论。当前的评估只检验人格化角色是否持有正确的观点——即一个静态快照。然而,舆论研究越来越依赖动态保真度:人格化角色是否会像人类在审议过程中那样,针对新的论点更新信念。目前还没有任何基准测试对此进行检验。我们提出了审议式民调诊断框架,用于比较人类和 LLM 在接受完全相同的信息干预后信念的变化。该框架以审议式民调为基础,能够揭示静态评估无法发现的失败:模型即使能够生成看似合理的党派观点,仍可能错误呈现这些观点会如何变化。我们使用 America in One Room 的数据(526 个人格化角色、72 个问题),将该框架应用于五个前沿模型,发现每个模型都存在失败,而且表现方式各不相同。GPT-5.1 表现出逆转现象:在获得平衡信息后,其人格化角色对 opposing party 变得更加敌视,而人类则相反,敌意有所降低。这种逆转具有选择性(在外群体问题上为 80%,在政策问题上为 26%),并且在不同党派身份之间呈对称分布。Gemini 2.0 Flash、Claude Sonnet 4.5 和 Llama 3.3 70B 表现出过冲:观点变化方向正确,但幅度达到人类的 5—7 倍。DeepSeek V3 则表现出僵化,变化幅度接近于零。针对性的消融实验表明,政策内容会触发这些失败,而且它们与身份有关:GPT-5.1 在外群体问题上发生逆转,但在内群体问题上出现过冲;Gemini 则正好相反。我们将这一特征称为“自我谄媚”:模型遵循其对人格化角色的内部刻板印象,而不是依据所提供的信息进行推理。我们的框架提供了一套具体方案:在信任 LLM 人格化角色模拟信念更新之前,先运行审议式诊断。

arXiv cs.AI79

Corrupt Plans, Clean Traces: Evading Chain-of-Thought Monitoring with Plan Injection

Chain-of-thought (CoT) monitoring is a safety strategy where the reasoning of a large language model "actor" is inspected by a "monitor" (often another language model) for signs of unsafe planning, deception, or misalignment. We find that planting harmful but benign-sounding reasoning in the actor's context can steer it to perform adversarial actions while evading monitors, an attack we term "plan injection". We initially discover this attack in the multiple-choice question-answering monitorability setting proposed by Lanham et al. (2023), using the investigator-agent elicitation framework of Li et al. (2025). We generalize the attack and show that the discovered behavior scales to harder tasks (achieving 25-33% monitor evasion rates across different monitorability benchmarks) and larger models such as DeepSeek-R1. Across the settings we study, actor models not only follow injected plans but also paraphrase them as their own reasoning, without explicit attribution to the injections. Finally, we find cases where extra monitor resources cause harm - giving the monitor access to the injected plan drops detection by as much as 50% in the Bio-Math task and in a case study on monitor reasoning budget, we find transcripts where additional thinking tokens are spent rationalizing the injected plan rather than flagging it.

arXiv cs.AI77

在时间上锚定临床事件:保留 UID 的多模态重建与基于来源的裁决

临床时间线支持治疗窗口分析和无数据泄漏建模,但出院小结往往掩盖事件时序,结构化 EHR 表格也只能描述患者病程的一部分。我们提出了一个保留 UID 的框架,将每次叙述性事件发生与其来源文本片段关联起来,并通过纯文本估计、结构化证据检索、带时间戳的源行锚定和联合修订,在整个过程中保留该身份。我们还提出了 GAVEL,这是一种 LLM 评判器,可将两个 UID 对齐的时间线与叙述和结构化记录进行比较,从而增强既有的匹配和时间评估。基于六个开放权重模型和 40 份混合重症监护摘要,与其纯文本版本相比,GLM 5.2 多模态修订在不降低事件恢复率的情况下提高了时间一致性,并且其表现具有与临床医生标注相竞争的水平;而其他模型的修订版本增益较小,整体表现也较低。消融实验表明,UID 主要用于保留事件,而源行关联则支持时间定位。盲法人工审查支持了 GAVEL 的大多数判断;受控裁决显示,多模态 GLM 5.2 优于纯文本版本,但 DeepSeek V3.2 并非如此。在开发 UID 和评判器流程的过程中,我们证明了事件恢复率提高了 43\%,构建出了具有与临床医生标注相竞争表现的框架,并实现了一个能够为重建和评估提供事件发生级溯源的系统。

arXiv cs.AI74

识别并不等于逆转:一项保持事实不变的新闻框架受控逆向测试

大型语言模型(LLM)正越来越多地用于分析和改写新闻,但当前的框架研究主要评估文本生成、框架检测,或改写后的文本是否显得更加中立。它们并不能直接说明模型是否能够在保持事实不变的同时,消除一种已知的框架转换。我们针对框架的三种既有文本实现形式——评价性词汇、行动者呈现和信息显著性——引入了一项受控逆向测试。在60篇新闻文章和三种干预强度下,该测试生成了540组保留原子事实且记录了编辑内容的成对变体。在Qwen、DeepSeek和Kimi上,事实保留率保持在接近0.84的水平,而干预逆转率仅为0.044--0.068。即使框架类型和方向都被正确识别,合并后的逆转率也只有0.071。这些结果清楚地揭示了事实忠实度、框架识别与框架逆转之间的区别:能够识别一篇文章采用了何种框架,并不意味着能够消除该框架。

Hacker News 熱門67

DeepSeek v4.1 Flash

文章 URL: https://twitter.com/deepseek_ai/status/2097930608790167907 评论 URL: https://news.ycombinator.com/item?id=49639090 分数:17 评论数:3

Hacker News 熱門73

DeepSeek 推出 v4.1 flash,比 v4 pro 更便宜且能力更强

DSeek 计划于 2026 年 9 月 10 日(北京时间)前后正式发布 V4.1 Flash 模型。经过广泛的内部和外部测试,V4.1 Flash 在性能、成本、速度和任务完成时间等所有关键指标上均全面超越 V4 Pro。秉持对用户负责的承诺,在 V4.1 Flash 正式发布后、V4.1 Pro 发布前,所有发往 Pro 模型的请求都将转由 V4.1 Flash 处理,并按照 Flash 的价格计费。如果您在 V4 Pro 与 V4.1 Flash 的对比测试中遇到任何问题,请随时向我们反馈。感谢您的支持! 我们将从 2026 年 9 月 10 日北京时间 12:00 起调整 Flash 系列的价格。在非高峰时段,输入缓存命中的单价为 0.003 美元,输入缓存未命中的单价为 0.15 美元,输出单价为 0.6 美元。高峰时段的价格将为非高峰时段价格的两倍。请合理安排您的使用计划。 评论 URL: https://news.ycombinator.com/item?id=49624603 得分:7 评论数:1

arXiv cs.AI70

Design Docs Are All You Need: An AI-native Machine-Learning Performance Tool

Machine-learning performance modeling is a uniquely hostile terrain for long-lived software: the assumptions baked into today's abstractions are invalidated by tomorrow's models and systems, forcing perpetual refactoring of performance-modeling frameworks. Meanwhile, AI coding agents have become fast and capable enough that regenerating an entire library is cheaper than paying down the tech debt of incrementally patching it. We describe SMART, a rigorous symbolic performance-modeling library for ML systems whose main branch contains almost no code: the repository is a DAG of self-contained natural-language design docs, coding sub-agents regenerate the implementation from only the docs on new version updates, and every human change is a natural-language edit to a doc--self-documenting by construction. Two ingredients make regeneration reliable: (i) a design-doc style built around step-by-step worked examples that act as in-context demonstrations for the generating agents, and (ii) a minimal, recursively defined operator IR with symbolic (SymPy) cost expressions, a fast analytical roll-up mode for large sweeps, and a slow modulo-scheduling mode for fine-grained schedule studies. Regenerated implementations reproduce hand-audited reference models--including DeepSeek-V3 serving on a TPU pod slice--to round-off precision, suggesting that design docs--not code--can be the durable artifact for ML-systems co-design tools.

arXiv cs.AI70

How Does mHC Use Its Residual Streams? Selective Routing and Near-Identity Mixing

Hyper-Connections and their manifold-constrained variant mHC widen a residual pathway from one stream to n, yet how trained models use this capacity remains unclear: how broadly blocks read and write, how strongly the residual pathway mixes streams, and whether the streams carry distinct representations. We examine these properties in the four-stream residual pathway of DeepSeek-V4-Flash using effective stream counts, cross-stream residual weights, and inter-stream cosine similarity. Read/write routing is concentrated but varies across depth: a typical attention or FFN site effectively uses about two streams, while the dominant stream changes across layers and the representations remain directionally distinct. Residual mixing is modest and occurs primarily in early layers; in layers 22-42, the pathway mostly carries each stream forward separately. Targeted interventions establish the functional significance of these patterns. Replacing the late mixers by identity increases C4 perplexity by only 1.9% and preserves the six-task average score, whereas replacing the early mixers increases perplexity by 41%. Fixing each early mixer to its C4 diagnostic mean increases perplexity by only 0.2% and reduces the average score by 0.25 percentage points, showing that its site-specific structure matters more than its token-wise variation on the evaluated metrics. Likewise, retaining the three largest routing weights per token at every site increases perplexity by at most 2.7% and changes the average score by at most 0.4 points. Thus, the studied model realizes only part of the flexibility afforded by four-stream mHC: individual blocks rarely require all four streams, and late residual mixing provides little measured benefit.

arXiv cs.AI80

Harness-of-Harness:具备持续改进的多日自主软件开发

本文研究自主软件开发,即基于 LLM 的编码代理在无需人工干预的情况下,将高层需求转化为完整、可运行且可用的软件系统。我们提出 Harness-of-Harness (HoH),这是一个使编码代理在自主开发过程中持续改进软件的框架。HoH 基于现有的 coding-agent harness 运行,并将其执行组织为迭代式的规划-编码-测试循环。为在各轮循环中持续提升,HoH 在修复与能力增长之间取得平衡,将开发范围限定为小而可验证的增量,将实现阶段测试与独立评测分离,并约束可验证的输出而非规定代理的工作流。它逐步开放交付物、面向角色的工具和技能,鼓励复用而非重建,并维护带版本记录的项目历史。在 GameCraft-Bench、FrontierSWE 和 ProgramBench 上,三个 harness-model 配对(Codex with GPT-5.5、OpenCode with DeepSeek-V4-Pro,以及 Pi with MiniMax-M3)中,HoH 始终优于对应的独立 harness,在三轮迭代后取得平均相对提升 52.25%,最高提升 82.86%。在一次持续多日、超过 70 轮迭代的部署中,HoH 自主开发出一款第一人称射击游戏,具备连贯的故事线、完整实现的核心机制、可供人类游玩的体验、精致的视觉效果以及集成音频。Github: https://github.com/Flesymeb/HarnessOfHarness Project Page: https://flesymeb.github.io/HarnessOfHarness/

arXiv cs.AI74

先评估再改进的学习:面向自动研究代理的自动评分标准归纳

自主科学研究代理正越来越多地应用于端到端的科学工作流,包括文献综述、数据分析、实验和报告生成。然而,开放式研究任务往往并未明确指定完成任务所需的分析、方法和成功标准。因此,代理可能会遗漏重要分析、使用不恰当的方法,或得出缺乏充分证据支持的结论。为了解决这一问题,我们提出 AutoSciRub,这是一个以评估为先的框架,它在研究执行之前先归纳出一个任务特定、可执行的评分标准,并利用该标准来指导执行、进行准则级验证以及迭代修订。AutoSciRub 将一个规定不明确的指令分解为原子级科学目标,将其锚定到相关文献和任务可见数据中,并综合生成具体、可操作且可验证的准则。由此得到的评分标准将隐含的实验与证据要求显式化,为实验和分析提供指导。在修订过程中,基于评分标准的验证会识别未满足的准则,并支持对研究报告及其支撑工件进行有针对性的改进。在 ResearchClawBench 上,AutoSciRub 在所有测试配置中都持续带来提升:在固定的 Codex harness 下,三个基础 LLM 的平均提升为 2.08 分;在使用固定 DeepSeek-V4-Flash backbone 的三个 agent harness 上,平均提升为 2.95 分。在 AstaBench E2E Discovery 随机抽样的 20 个任务子集上,AutoSciRub 在三个 agent harness 上进一步实现了平均 16.8 分的提升,同时保持或增加了成功完成的任务数量。这些结果表明,以评估为先的引导为自主科学研究提供了一种有效且可泛化的控制机制(Code: https://github.com/zjunlp/AutoSciRub)。

arXiv cs.AI70

Q-Strata: Hierarchical Bit Allocation for Mixed-Precision Quantization of Mixture-of-Experts LLMs

Mixed-precision quantization (MPQ) assigns a different bitwidth to each linear layer of a large language model (LLM) to minimize the quantization-induced quality loss under a fixed budget, but Mixture-of-Experts (MoE) models contain these layers in every expert of every MoE block, so the allocation space grows far larger than in a dense model. Existing methods either allocate within each block under a uniform per-block budget, or allocate across blocks through an additive proxy, and neither directly optimizes a model-level objective over the choices that couple the blocks. We propose Q-Strata, a bi-level allocator that ranks within-block assignments with a cheap proxy and allocates across blocks with a model-level objective evaluated on the assembled quantized model. Its inner stage caches a Pareto frontier of candidates per block over finely spaced budgets, leaving the outer stage to set one budget per block instead of a bitwidth for every linear layer. With the search reduced to one budget per block, the outer stage optimizes this model-level objective directly, capturing the inter-block coupling that additive proxies miss. On Mixtral-8x7B-Instruct, Qwen1.5-MoE-A2.7B, and DeepSeek-V2-Lite, Q-Strata consistently achieves lower WikiText2 perplexity than uniform-bitwidth GPTQ and the state-of-the-art MoE MPQ methods MxMoE and GEMQ in the low-bit regime. The code is available at https://github.com/snu-mllab/Q-Strata/tree/main.

arXiv cs.AI77

并行与分布式推理语言模型的性能基础

Reinforcement Learning with Verifiable Rewards(RLVR)及其他 RL 风格的后训练范式,已被用于使大语言模型(LLMs)与推理标准对齐。近期涌现的 Reasoning Language Models(RLMs),如 DeepSeek-R1、o3 和 Kimi k1.5,表明这种 RL 风格的后训练(“RL-for-LLMs”)能够显著提升思维链推理、长时程规划和自我纠错能力。然而,这些系统的计算开销极其庞大:最先进的 RLM 训练需要数百万 GPU 小时,以及紧耦合的多模型流水线,其对现代硬件的压力远超传统的监督式 LLM 训练。这使得 RLM 训练同样是一个并行与分布式系统问题,而不仅仅是算法问题。在这项工作中,为了促进同时具备高性能、可扩展性和成本效益的 RLM 开发,我们首先系统化 RL-for-LLM 范式,并从计算角度分析了几种重要的后训练算法框架:Proximal Policy Optimization(PPO)、Group Relative Policy Optimization(GRPO)及其变体。其次,我们构建了适用于 RL-for-LLMs 的模型内与模型间并行策略分类,涵盖传统技术(数据、张量、流水线、序列、上下文和专家并行)以及面向多模型 RLM 训练的新型并行与优化技术,例如解耦部署、阶段融合、混合并行和异步执行。我们借助并行计算的 work-depth 模型,使该分类及其洞见更加严谨且具可移植性。最后,我们分析了现有 RLM 框架,并提炼出构建可扩展、快速且成本效益高的 RLM 的实用指南,同时概述了未来开放研究方向。

arXiv cs.AI83

EVOMAL:自进化编码代理中的自我投毒

自进化的 LLM 编码代理通过模仿从共享技能库中检索到的技能来编写自己的工具。我们在这一循环中发现了一个漏洞:在编写过程中,被检索到的恶意技能可以成为新技能的模板,并保留有效载荷。我们将其称为自我投毒:代理编写、存储并运行由此产生的恶意技能。我们通过 EvoMal 利用这一点,这是一种通过将可替换的有效载荷包裹在 banner 中来放大自我投毒的攻击;banner 是一组看似无害的结构元素,会诱使模仿型代理复现其中的代码。攻击者无需调用这些恶意技能,就能将其植入库中。随后,代理会编写并执行携带有害代码的新技能。每个编写出的副本都可以重新进入库中,再次被模仿,形成一种在植入技能被移除后仍然存在的自我传播蠕虫。我们将代理自我投毒率(ASPR)定义为将新编写的恶意技能加入库中的任务占比。在 6 个模型、153 个与工具相关的 SWE-bench Verified 任务上,ASPR 范围为 20.3% 到 41.8%,而被污染的库中恶意技能数量是植入数量的 4.9 到 9.0 倍。即使没有 banner,这一漏洞也会出现:DeepSeek-V4-Pro 在仅含有效载荷时的 ASPR 达到 11.1%。将植入技能的描述针对某一任务家族进行定制,可将 ASPR 提高到 86.7%。在移除植入技能后,由于代理生成的副本仍然存在,Qwen3 的第 5 轮 ASPR 仍达到 68%。这些副本绕过了现有防御,因为这些防御主要针对攻击者提交的名称、代码和签名。我们提出 counter-prompt 作为一种防御,它能抑制 banner 风格的复制,并将 EvoMal 的 ASPR 降至不超过 6.7%,且任务完成无显著损失。

arXiv cs.AI71

HyMem: Hierarchical Context Management for Long-Horizon Agents via Information Isolation

Large language model (LLM) agents often perform poorly on complex, long-horizon tasks because their context becomes increasingly cluttered over time. As interactions accumulate, detailed execution traces and intermediate outputs dominate the context, making it difficult for the model to retain and use high-level planning information. Most existing methods address this issue through compression or retrieval applied to a single, flat context, which does not clearly separate different types of context information and often leads to degraded reasoning. To address this challenge, we propose HyMem, a hierarchical framework that explicitly separates the agent's context into distinct functional layers. HyMem organizes context by function to separate high-level planning from execution and complex analysis. Its isolated reasoning module handles complex subtasks without adding intermediate reasoning traces to the persistent planning context, while its memory management module preserves task progress across context refreshes through structured summaries. These components reduce redundant context accumulation, retain task-critical information, and support coherent long-horizon reasoning within a limited context window. Experiments on GAIA and Browsecomp-plus show that, with DeepSeek-V4, HyMem achieves average Pass@1 scores of 66.7% and 61.3%, outperforming the strongest baseline by 6.1 and 4.7 percentage points, respectively. Further analysis indicates that HyMem effectively controls the growth of the reasoning context, allowing the model to maintain focus and accuracy across complex, long-horizon tasks.

arXiv cs.AI72

DeaMoE:用于快速小批量解码的高效 MoE 结构

混合专家(Mixture-of-Experts,MoE)模型已被广泛应用于代码助手、实时音视频交互系统等实时交互式应用。为满足这些场景对极低响应延迟的要求,实践者通常采用小批量解码;在这种情况下,MoE 推理会受内存限制,并严重受限于专家权重加载。然而,这一瓶颈受到的关注有限,现有解决方案,如训练后权重压缩或预训练期间的细粒度专家设计,要么会降低模型准确率,要么会引入额外的计算和通信开销。为解决这一问题,我们提出 DeaMoE,一种解码高效的 MoE 架构。在该架构中,专家被分组到若干部门,同一部门的专家由于来自同一专业领域而共享大部分参数,同时每个专家还包含少量私有参数以体现其独特性。此外,我们为 DeaMoE 设计了定制的两阶段路由策略,以避免冗余加载;在该策略下,DeaMoE 显著提升了 LLM 解码过程中的效率。与原始 MoE 相比,DeaMoE 将每步加载的权重最多减少 50.9%,并在 A40 上针对预训练的 7B 模型实现了最高 1.33 倍的端到端 TPOT 加速;在微基准测试中,针对 DeepSeek-V3,在 A40 和 H100 上分别实现了最高 2.00 倍和 1.97 倍的峰值加速。