OpenAI / ChatGPT

OpenAI 的动态:GPT 系列模型、ChatGPT 与 Sora 产品、公司战略与人事。

arXiv cs.AI78

PreciseCoder: Faithful and Generalizable Debugging Beyond Unit-Test Rewards

Reinforcement learning (RL) from unit tests is the common recipe for post-training code models, but a unit test only asks whether the final program passes. We analyze what this unit-test-only reward teaches a model during debugging and find that, while it raises pass rates, it also teaches the model to edit more and to hallucinate bugs in code that is already correct. We introduce PreciseCoder, a training algorithm that augments the unit-test reward with a signal for semantically verified, localized edits, which correlates with smaller edits and higher pass rates. On 4B, 9B, and 27B models, PreciseCoder reduces the average number of edit lines from 7-15to 3 at a pass rate on par with unit-test-only training. Trained only on single-line bugs, PreciseCoder can generalize to repository-level program repair, where it resolves more issues with smaller patches. Its precision also transfers from weaker to stronger models: given the reasoning trace of a 9B PreciseCoder model, frontier models such as GPT-5.6 Sol and Qwen3.8-Max gain 4.6-12.4 points in edit precision with no additional training. Linguistic analysis of the thinking traces shows that our reward encourages the model to reason about individual lines, name the buggy ones, and form consistent bug hypotheses.

arXiv cs.AI81

超越判定:借助可验证反馈进行智能体式代码评测

大型语言模型(LLM)的测试时扩展可以包括生成多个候选解以供选择,或修改先前的尝试。为了指导选择和修改,我们需要一个能够估计候选解正确性并提供失败证据的验证器。然而,在竞赛编程中,官方评测系统会在有限的提交次数限制下给出权威判定,却不会透露失败原因或导致失败的输入。为了在不消耗官方提交次数的情况下提供有信息量的反馈,我们提出了一项任务:模型仅使用题目描述和源代码,对候选程序进行判定和诊断,并将生成的反例作为可检查的证据。为评估这项任务,我们基于 USACO 2026 竞赛构建了 USACO-JUDGE,使用由人类专家和多个 LLM 编写的通过与未通过评测的程序。随后,我们在通用执行沙箱中通过强化学习训练了 ARBITER,这是一个拥有 35B 参数的混合专家(MoE)智能体式验证器。训练使其在错误程序上的反例成功率从 40.61% 提升至 62.67%,并使其在 USACO-JUDGE 上的二元判定平均准确率从 71.41% 提升至 87.41%,接近前沿验证性能。除验证之外,ARBITER 在代码选择和代码改进方面也都优于基线方法。在一项 IOI 2026 案例研究中,在官方提交次数限制下,由 ARBITER 指导的代码改进使 GPT-OSS-120B 的预期得分超过了金牌分数线。

arXiv cs.AI79

AesCode:采用解耦跨模态奖励的审美代码生成

将信息丰富的视觉产物(如幻灯片、海报和仪表板)生成为代码颇具吸引力,因为输出具有结构化、可编辑且可验证的特点。然而,代码模型无法看到其布局和配色选择在画布上的整体呈现,这往往限制了空间规划能力和审美质量。图像生成器擅长视觉设计,但可能错误渲染用户要求的内容,因此其输出不适合作为直接复现的可靠目标。为此,我们提出 AesCode:在内容提示的基础上生成代码,同时使用由同一提示生成的图像作为审美指导。具体而言,AesCode 将目标表示为设计图,以描述整个画布,并使每个属性都具备可追溯性。基于该设计图,我们推导出互补的跨模态奖励:确定性验证器对可从代码和渲染结果中解析的属性进行评分,而 VLM 评审器则使用针对样本定制的视觉图评分标准(Visual Graph Rubric,VGR),依据图中的元素和关系评估不可解析的属性。我们通过带有按通道归一化机制的强化学习优化这些解耦奖励,从而共同提升空间规划、审美质量和可验证的正确性。为评估这一设定,我们构建了一个基准,分别对可验证的正确性和视觉质量进行评分,其中视觉评分与人类判断高度一致。我们发现,参考图像能够显著提升现有模型生成代码的视觉质量;消融实验表明,AesCode 从参考图像中获益,不仅因为将其作为模型输入,也因为将其作为视觉奖励的来源。与使用相同参考图像、规模相当的 Qwen3-VL 基线相比,AesCode-8B 和 AesCode-32B 的视觉质量分别提高了 31.1 和 22.4 个百分点,达到与 GPT-5.5 和 Claude Opus 4.8 等闭源前沿模型相当的评分。

arXiv cs.AI82

Tev:通过稠密进展奖励扩展长时域智能体环境

长时域智能体凭借能够自主执行具有经济价值的任务而日益受到关注,其工作时长可从数小时持续到数天。这一能力对于自动化发现和递归自我改进(RSI)至关重要。然而,开源模型在长时域任务上仍然表现不佳,主要原因在于缺乏训练数据和可行的训练方案,而同时扩展这两者十分困难:长而复杂的任务难以整理和验证,且其奖励通常十分稀疏。我们同时解决了这两个问题。首先,我们推出了 Tev-Gym,这是首个具备可验证、稠密且渐进式奖励的长时域智能体训练数据集,涵盖 7 个领域的 1,170 个已验证任务环境。该数据集采用“潜在世界优先”的方法构建:首先建立一个潜在世界,即对任务领域、工作流以及每一步之后预期状态的完整且正确的隐藏规范。随后,每个任务都根据该规范逐步呈现为面向智能体的环境,从而实现可控的复杂度和自然的进度指标。其次,我们将这一指标转化为训练方案:通过进度势能奖励塑形(PPRS),将进度转化为每一步的稠密奖励,从而提高训练效率,并使原本难以训练的任务变得可训练。采用该方案训练得到的 Tev-27B,在 Agents' Last Exam 的计算与数学科学领域(ALE-CM)上取得了显著提升,在 Pass@5 指标上达到 GPT-6 Astra 和 Claude Opus 5 的水平。尽管仅使用与 ALE 相关的数据进行训练,它仍能泛化到 Terminal-Bench(TB)3.0 和 4.0 子集,超过 GLM 5.2 和 Gemini 3.7 Flash,并在 TB 2.1 等中等时域任务上达到 Claude Opus 4.8 的性能水平。

arXiv cs.AI82

通过带任务完整性约束的人设演化揭示 LLM 智能体的鲁棒性弱点

交互式智能体评估通常依赖标准化的、基于 LLM 的用户模拟器,这些模拟器表现出广泛的合作行为,可能忽视多样但现实的用户交互所引发的失败。这会导致对智能体鲁棒性的估计过于乐观,也难以为训练能够跨用户泛化的智能体提供足够的失败信号。现有方法大多依赖预定义的用户行为,可能无法发现特定于智能体或领域的弱点;而面向失败的搜索则可能通过使底层任务失效来降低任务成功率,而不是暴露真正的鲁棒性缺陷。为弥补这一空缺,我们提出 TIPER,一种保持任务完整性的人设演化方法,能够在保持底层任务有效且可解决的同时,自动发现暴露智能体特定鲁棒性弱点的用户策略。TIPER 在任务完整性约束下,通过反思引导的行为变异和按任务进行的 Pareto 选择,演化出持久的用户人设。在四个交互式智能体基准测试中,TIPER 在全部 12 个 GPT-5.4 设置下都取得了更低的留出集 avg@3 分数,观测到的降幅为 5.8 至 33.7 个百分点;在涵盖七个智能体的全部 28 个智能体—领域组合中也同样如此,观测到的降幅中位数为 22.9 个百分点。进一步分析得出了一套从行为到失败的分类体系,将发现的用户行为与反复出现的智能体失败模式联系起来。总体而言,这些结果表明,TIPER 能够对交互式智能体开展更具诊断性的鲁棒性评估,并为未来改进智能体鲁棒性提供有价值的失败分析。代码仓库:https://github.com/UCSB-NLP-Chang/TIPER。

arXiv cs.AI80

Humans vs. Machines: A Comparison With AI Agents in Software Reverse Engineering

Can an autonomous AI agent reverse engineer a binary as well as a skilled human analyst? Do they adopt the same strategy, and can agents scale to real-world programs? We compare human and LLM-based software reverse engineering (SRE): nine models tackle two compact static-analysis challenges previously solved by human analysts, scored with a common understanding rubric, and we record their complete interactions with IDA Pro. This lets us compare not only what humans and agents recover, but also how they investigate a binary. The best agents (GPT-5.5 Pro, Claude Opus 4.8, and Kimi K3) achieve statistically human-competitive understanding on both tasks, while weaker models remain far behind. Ablations show that the gap depends on code representation and workflow demands, not on model capability alone: open-weight models improve substantially with richer code representations, whereas frontier models show no significant change. Similar success rates hide different workflows. Humans repeatedly revisit functions and follow local program structure; strong agents jump across the binary, retrieve information broadly, and rarely return to inspected code, a behavior we call greedy fetching. This strategy is not fixed: given semantically richer code, agents fetch less without losing understanding. Because greedy fetching aggregates large amounts of code in the agent's context, we measure context-window saturation across 4,000 real-world binaries: large windows accommodate many programs, but larger applications and lower-level representations quickly exhaust them. Autonomous reverse engineering is becoming competitive, with a large speed advantage, but scaling it will require better navigation, selective retrieval, and persistent analysis state, not merely larger context windows.

arXiv cs.AI75

你被说服了吗?一种用于检测 ChangeMyView 讨论中说服力的神经符号论证推理方法

论证结构体现了单个论证如何在话语中相互作用。然而,利用这些结构推断有意义的知识仍然具有挑战性,因为这需要对论证影响如何在结构中传播进行形式化表示。我们提出 Neuro-symbolic Argumentation Reasoning System(NARS),用于直接从在线讨论中检测说服力。其神经组件采用检索增强的迭代式 LLM 推理来提取双极论证结构,而符号组件则应用渐进式论证语义,在结构中传播论证影响。我们使用 Webis-CMV-20 语料库,构建了 CMV2BAS 数据集。该数据集包含经过 LLM 推导的双极论证结构标注以及 delta 事件标签(观点改变或未改变)的长篇、多线程 ChangeMyView 讨论。我们研究了渐进式论证语义能否有效检测说服力、将其与论证质量和基于图的中心性相结合是否能够提升性能,以及在现代 LLM 已经具备相关能力的情况下,符号推理是否仍然必要。在最佳配置下,NARS 达到 F1=0.57 和 AUC=0.56,优于零样本 Qwen3.6:27B 和 GPT-oss:20B。我们发现,以支持为主导的讨论以及较长的论证链是限制攻击影响传播的主要失败模式。本研究展示了在嘈杂的真实世界话语上实施形式化渐进式论证语义、开展可扩展的宏观层面说服力分析的可行性,同时指出了神经符号论证推理未来研究面临的关键挑战和发展方向。我们公开发布 CMV2BAS 数据集和 NARS 框架,供公众使用。

Simon Willison

Profiling web-edit with Python 3.15: flame graphs and source heatmaps

Research: Profiling web-edit with Python 3.15: flame graphs and source heatmaps I put the new Python 3.15 profiler through its paces by having GPT-6 Astra Extra High in Codex run it against my new web-edit app : I need a Python 3.15 flame graph and heatmap demo of the "web-edit" app from PyPI - research first then make me those demos Here's the resulting example flame graph and heatmap . Tags: profiling , python , codex

Simon Willison70

llm-meta-ai 0.2

Release: llm-meta-ai 0.2 Meta AI release Muse Wonder (and Muse Wonder Full), their new "most capable models". These look like they may be Meta's first Fable class models - Artificial Analysis scores Muse Wonder (Max) as equivalent to GPT-6.1 Sol. I updated my llm-meta-ai plugin for the new model. Here are pelicans for Muse Wonder for the six reasoning levels: minimal, low, medium, high, xhigh, max. This is the max one: Blue cycling helmet, bicycle is missing one bar but otherwise an OK shape, has mudguards, nice background, OK beak. For comparison, here are pelicans for Muse 1.3 (released September 2nd) and Muse 1.2 (released August 5th). Meta AI are putting out a new model a month, and the improvements between each model (at least in terms of drawing pelicans) are material. Tags: ai , generative-ai , llms , meta , pelican-riding-a-bicycle , llm-release

Simon Willison

web-edit 0.1a1

Release: web-edit 0.1a1 Includes performance optimizations written by Claude Opus 5.5 after I fed it this Python 3.15 profiling report generated by GPT-6 Astra. Tags: profiling , projects

Simon Willison78

llm-gemini 0.35

发布:llm-gemini 0.35 今天通过 Gemini API 以及其每月 100 美元订阅计划向客户提供了全新的 Gemini 4 Argon 模型,我为 llm-gemini 添加了对它的支持。下面是低、中、高三档生成的 pelican。如预期一样,它们都非常出色:Gemini 一直以来都很擅长生成优秀的 SVG,而且据我所知,这是唯一一家其员工专门投入 SVG 研究的实验室(他们以前也曾展示过自己生成的 pelican)。这是“高”档生成的插图,花费了我 17.166 美分: 时尚而准确的自行车车架。篮子里有一条鱼。帅气的围巾。双脚分列车架两侧,踩在脚踏板上。车轮辐条、一顶小帽子、漂亮的喙和喉囊,以及略显凶狠的表情。 定价很有意思。发布时,Argon 的价格是输入每百万 token 2 美元、输出每百万 token 10 美元——与 GPT-6 Sol 相同,是 Claude Opus 5.5 价格的一半,以及 Claude Fable 5.1 和 GPT-6 Astra 价格的五分之一。但从 12 月 1 日起,Argon 的价格将翻倍——届时会与 Opus 5.5 同价。 如今,这样的价格并不能真正直接比较,因为真正重要的是:在代理式运行框架中,模型要完成一个目标需要消耗多少 token。Artificial Analysis 发布了使用各模型运行其基准测试的总成本,这为我们提供了一个有用的参考。Argon 在这方面表现非常好:运行该基准测试的成本为 2,407 美元,接近 GLM-5.3,而且明显低于 OpenAI、Anthropic 和 Meta 的最新模型。即使价格翻倍,它仍会比 GPT-6 Astra 略便宜。 Artificial Analysis 的堆叠柱状图截图,对 14 个 AI 模型的美元成本进行比较,按从低到高排序;柱体按提供商着色,每个柱体下方显示提供商徽标,底部以倾斜文字标出模型名称。右上角的徽标为 Artificial Analysis。指向 Gemini 4 Argon 柱体的悬浮提示框显示:Gemini 4 Argon(High),2,407 美元;输出 313 美元;推理 815 美元;缓存写入 897 美元;缓存读取 264 美元;非缓存输入 118 美元;点击查看更多信息。 从左到右的柱体如下,每个柱体上方标有总成本,部分分段数值印在柱体内部:Qwen3.8 27B(xhigh),1,336 美元,Alibaba 徽标;Mistral Large 4 Preview,1,607 美元,Mistral 徽标;Gemini 3.8 Flash(high),1,623 美元,Google 徽标;Muse Spark 1.3(max),2,000 美元,其中一段为 769 美元,Meta 徽标;Gemini 4 Argon(high),2,407 美元,其中两段分别为 815 美元和 897 美元,Google 徽标;GLM-5.3(max),2,503 美元,其中一段为 790 美元,Z.ai 徽标;Kimi K3(max),3,658 美元,Kimi 徽标;Qwen3.8 Max(0902),4,935 美元,其中两段分别为 893 美元和 1,441 美元,Alibaba 徽标;Grok 4.7(xhigh),4,967 美元,其中两段分别为 1,861 美元和 1,618 美元,xAI 徽标;GPT-6 Astra(max),5,324 美元,其中两段分别为 778 美元和 978 美元,OpenAI 徽标;Muse Wonder(max),5,733 美元,其中一段为 1,748 美元,Meta 徽标;Claude Sonnet 5.5(max with fallback),7,260 美元,其中两段分别为 1,216 美元和 1,815 美元,Anthropic 徽标;Claude Opus 5.5(max with fallback),8,708 美元,其中一段为 921 美元,Anthropic 徽标;Claude Fable 5.1(max with fallback),13,129 美元,其中一段为 7,219 美元,Anthropic 徽标。 (我用 ChatGPT 编辑了那张图表!数据全部正确,我已经核对过了——我只是需要让 Gemini 4 Argon 的信息框显示出来,同时避免遮挡其他数字。) 标签:google,ai,generative-ai,llms,llm,gemini,llm-pricing,pelican-riding-a-bicycle,llm-release

Simon Willison83

重新设计 Anthropic 的源代码管理

Anthropic 关于重新设计源代码管理的一篇有趣文章,介绍了他们为何以及如何构建了一个自定义系统来替代 Git。这是因为过去六个月里,他们代码变更的速度大幅提升。2026 年 5 月,Anthropic 平均每天合并约 2,500 项代码变更;截至 9 月,这一数字已超过每天 30,000 项。他们还附上了一张展示这些变更的图表。我让 Claude 修改了他们的图表(代码见此处),加入了 2026 年各模型公开发布的标记: 堆叠柱状图,标题为“每天合并的变更”,展示 Anthropic 单体代码库在 2026 年 1 月至 9 月期间的情况。每天的柱子分为拉取请求(蓝色)和 Antique 变更请求(橙色),并以黑线表示 7 天平均值。工作日的合并量从 1 月份的约 1,000 次开始,缓慢攀升至 5 月下旬的约 3,000 次。Antique 变更请求于 5 月下旬出现,在 6 月中旬超过拉取请求,并在 7 月中旬几乎完全取代后者;此时工作日的合并量达到 6,000–8,000 次。7 月末标注为“安静的一周”的时期降至每天不足 1,000 次。此后增长变得陡峭:8 月中旬超过每天 10,000 次,9 月初约为 17,000 次,并于 9 月 9 日达到 30,401 次的峰值。虚线标出了 Claude 模型的发布:Opus 4.6(2 月 5 日)、Sonnet 4.6(2 月 17 日)、Mythos Preview(4 月 7 日)、Opus 4.7(4 月 16 日)、Opus 4.8(5 月 28 日)、Fable 5 和 Mythos 5(6 月 9 日)、Sonnet 5(6 月 30 日)、Opus 5(7 月 24 日,就在安静的一周之前),以及 Fable 5.1 和 Mythos 5.1(9 月 1 日)。这里展示的是公开发布日期,而不是这些模型可供 Anthropic 内部使用的日期。我猜,引入 Fable/Mythos 类模型是编码速度提升的一个关键因素。 “Antique”是他们新的代码审查系统。源代码管理系统名为 Scion,在我看来,它听起来像是沿着 Subversion 路线重新发明的集中式源代码管理系统。他们的要求相当极端: 仅主分支的历史记录就接近 100 GB,压缩后的工作副本超过 25 GB。我们每天为 CI 执行大约 2,500 万次代码检出,这还没算开发者环境、智能体沙箱和研究任务。如果以朴素方式获取,这每天将产生超过 600 PB 的 Git 流量。 这个新系统由一个 7 人团队构建完成,从 Git 迁移过来只用了 5 个月。 顺带一提,最近我一直在自己的项目中尝试对抗式审查:让一个模型尝试寻找缺陷(我经常让 Claude 和 GPT 互相对照)。文章中的这段话反映了我的亲身经历: Anthropic 也广泛采用对抗式审查。尽管这种方式在许多方面都极其有效,但也可能存在目光短浅的问题,因此需要有经验的工程师引导 Claude,避免它因应对假设性问题而对系统的某些部分进行过度工程化。 来源:Hacker News 标签:git、迁移、版本控制、ai、生成式 ai、llms、anthropic、智能体工程

The Verge AI

OpenAI employee arrested for allegedly planting a bug in a conference room

An OpenAI engineer was arrested after the company said it discovered a "sophisticated recording device" hidden in one of its offices. The employee, 35-year-old Abdulrahman Alfozan, is charged with using or attempting to use a device to intercept oral communications, according to a report from The San Francisco Standard. OpenAI's post about the incident says […]

Hacker News AI66

Show HN: Parsimony – an open-source benchmark for how much code AI models add

Existing benchmarks measure solve rate and token output/cost, but don't punish excess code, which makes a codebase harder to work with in the long term. I wanted to measure this since it matters most for long-term projects. Method: it takes the patches that benchmarks already publish (DeepSWE, SWE-bench Verified, SWE-bench Live) and counts "coding units": syntax elements like statements, calls, names and literals. I didn't use lines of code, so cramming code isn't rewarded. Deleted code is subtracted, so it measures net units. GPT-6 and Claude 5.5 have no public patches yet, so I ran them myself on 3–10 tasks on my own subscriptions (shown as faded circles, not ranked). Any feedback or model contributions are welcome, especially public patch exports for newer models. GitHub: https://github.com/La5u/Parsimony Not affiliated with any of the benchmarks. Comments URL: https://news.ycombinator.com/item?id=50077619 Points: 2 # Comments: 0

Hacker News AI66

Show HN: Hatoba, an open-source SSH client with an AI assistant and E2EE sync

I've used SSH tools for years and didn't really plan on building yet another SSH client, but I ended up building one the way I wanted. Hatoba is a desktop SSH client for Windows, Linux and macOS. It's written in Rust with Tauri 2 and MIT licensed. Each terminal has an AI assistant panel next to it. You describe the problem, and it reads the terminal screen, runs commands, types into the shell, and reads, edits and searches files on the host to find the cause and fix it. You can approve every command and edit it before it runs, let a model you pick approve the safe ones, or turn approval off. Files it changes show a diff you can undo. It works with any OpenAI-compatible or Anthropic API, local models included, and supports skills and MCP servers. Sync doesn't go through a server of mine. Hatoba deploys a Worker and a D1 database to your own Cloudflare account and syncs hosts, keys and AI conversations through them. The free plan usually covers personal use. Everything is encrypted on the device before it leaves. Keys are derived from your master password with Argon2id, every item is encrypted with AES-256-GCM, and the Worker only stores ciphertext plus the hashes it needs to sign you in. Someone who gets hold of the whole Cloudflare account still only gets ciphertext. Sync is optional, and everything works offline without it. The usual SSH client features are there too: groups, tags and fuzzy search, ~/.ssh/config import, ProxyJump and SOCKS5/HTTP proxies, an SFTP panel, local port forwarding, and a key vault that imports OpenSSH, PEM and PuTTY keys. There's also a dashboard showing CPU, memory, disk and network for every saved host, read over plain SSH with nothing installed on the servers. SSH is russh, the terminal is xterm.js with the WebGL renderer, and the UI is React. I develop on Windows, so it's Windows first, with a custom title bar that supports Snap Layouts and Mica, and working CJK input methods. The Linux packages and the macOS build get far less testing on real machines. The macOS build is Apple Silicon only and isn't notarized, so macOS blocks it on first launch until you allow it in Privacy & Security. Bug reports from Linux and Mac users would help the most. Website: https://hatoba.fog.moe Downloads: https://hatoba.fog.moe/download/ Comments URL: https://news.ycombinator.com/item?id=50076388 Points: 2 # Comments: 0

Hacker News AI58

Show HN: Commit-Aware Router, route LLM traffic around your AI/cloud commitments

LLM routers can optimize for different factors like price, latency, quality, etc. Enterprises tend to have prepaid AI credits, minimum-spend agreements, cloud commitments, or commercial ceilings across OpenAI, Anthropic, AWS, Azure, and other providers. We’ll call these “AI commits”. This project is designed to consider the state of an enterprises’ current AI commits and use it to inform LLM routing decisions alongside other common variables (price, performance, etc.). This is an early PoC built using LiteLLM. Target audience would CFOs, Strategic Finance, FinOps, Cloud Finance, and AI Platform folks who care about making sure AI commit minimums are met, and maximums are not exceeded. Would love any feedback from folks! Comments URL: https://news.ycombinator.com/item?id=50076439 Points: 1 # Comments: 0

Hacker News 熱門

Show HN: XY Music Notation

I've been playing around with a new kind of isomorphic music keyboard that uses a base-12 notation, and wanted some sheet music to learn some new music for it. The idea is to represent each note in 12-TET as a number, so N ∈ (0,1,2,3,4,5,6,7,8,9,X,Y). I used codex to build a music score rendering backend based on MuseScore with custom note heads that display the pitch class of each note. I've found it pretty helpful for learning how to play my own instrument, so wanted to share in case anyone else was interested. Comments URL: https://news.ycombinator.com/item?id=50075665 Points: 5 # Comments: 1

Hacker News 熱門73

在 HN 发布:Consus(YC F24)——面向处理敏感数据企业的 LLM 网关

Hacker News 的各位好!我是 Consus 的创始人 Eric。我们将所有 AI 请求路由至符合 ITAR 限制和受控非机密信息(CUI)要求的基础设施。Consus 本身符合 ITAR 限制要求,我们最近还完成了针对 410 项 FedRAMP High 控制措施的 FedRAMP 等效性审计。FedRAMP High 是美国政府针对处理敏感非机密数据的云服务制定的最严格安全基线。此类数据泄露可能造成严重或灾难性后果。在处理 CUI 信息之前,必须取得 FedRAMP 等效性或授权。演示:https://youtu.be/6MYxJe6P4oY 航空航天与国防行业正在快速增长。但遗憾的是,由于必要的数据保护措施和合规风险,大多数公司都难以使用 AI。如果这些公司能够使用大多数其他行业习以为常的 AI 工具,它们本可以发展得更快。 在加入 Consus 之前,我的大部分职业生涯都在航空航天与国防领域。我曾在 SpaceX 负责发射国家安全载荷,也是 Castelion 的早期员工。我亲眼看到,合规方面的繁文缛节如何让公司难以采用新技术,也难以信任那些会接触其敏感数据的供应商。 例如,我曾与一家卫星制造商合作,该公司不允许使用任何 AI 工具,即使是处理非敏感工作也不行。尽管过去 9 到 12 个月里 AI 已经变得极其有用,但令我惊讶的是,仍有这么多航空航天与国防公司拒绝接触 AI。他们看得出 AI 可能会有所帮助,但担心模型提供商使用他们的数据进行训练、违反 ITAR 规定,或者因未通过网络安全评估而失去新业务。这些担忧都是合理的。 解决其中部分或全部问题有许多方法,但我们专注于构建一个合规的 AI 推理层,可以“接入”任何 AI 工具或工作流。正如 OpenRouter 能够与大多数工具集成一样,Consus 可以连接到 ChatGPT 或 Claude 这样的工具、包括 Pi coding agent 或 Open WebUI 在内的开源工具,也可以集成到各个组织自行构建和维护的应用程序中。 几乎没有哪家航空航天与国防公司同时使用三大 GovClouds(AWS、Azure、Google)。当我梳理哪些前沿模型可以合法运行于 ITAR 和 CUI 工作场景时,我发现每个提供商都只提供部分模型,而每个模型达到的合规水平也各不相同。 我们的客户不会从云提供商的角度思考。他们考虑的是所需的数据控制措施,以及想要使用的模型。这就是我们构建合规后缀的原因。在底层,每个请求都会访问一个统一的 OpenAI 兼容端点;在接触推理服务之前,系统会先验证密钥并执行策略。每个模型名称都必须带有合规后缀,例如 gpt-5.6-sol:fedramp-high 或 claude-opus-5-5:itar,任何不带后缀的模型名称都会被拒绝。 我们绝不会代理到标准商业端点。客户还可以构建模型允许列表,并为组织内的单个用户分配支出和模型使用限制。所有这些都通过 Consus Portal 处理,团队可以在那里管理支出、密钥和策略。 我们经常听到的一个问题是:为什么不直接在 AWS GovCloud 或 Azure Government 中使用 Bedrock?对于小型团队而言,仅仅获得这些平台的访问权限就很困难。对于大型组织而言,GovCloud 允许你继承部分、但不是全部处理敏感数据所需的控制措施。此外,模型分散在不同提供商之间:GPT-5.6 Sol 仅在 Azure Government 中提供,而 Claude Opus 5.5 则通过 AWS GovCloud 中的 Bedrock 提供。如果两者都想使用,就需要搭建并保护两个独立的政府云环境。 我们将所有模型置于一个端点之后运行,因此客户无需选择云平台,而合规工作则由我们分别为每个平台处理。 鉴于数据的敏感性,Consus 不会在静态状态下存储任何客户数据。所有提示词和生成结果只会在请求处理期间保留于内存中,绝不会记录或写入磁盘。无论是我们自身,还是基础设施及模型提供商,都严格执行零数据保留政策。出于计费和审计目的,我们会保留每个请求和响应的元数据。 Consus 从设计上就不是自助服务产品。ITAR 要求我们确切了解每个密钥另一端的使用者,因此我们会验证每个组织,并在发放 API 密钥前签订合同。 我们向客户收取合规费用,起价为每席位每月 40 美元,另加按成本收取的 AI 令牌费用。我们目前正在积极服务客户,非常期待获得安全专家,以及在高度监管行业工作的开发者和工程师的反馈! 参考资料: API 文档:https://gateway.consus.io/overview 安全与架构:https://gateway.consus.io/security 合规详情:https://consus.io/compliance 评论 URL:https://news.ycombinator.com/item?id=50073471 得分:4 评论数:1

SiliconANGLE AI42

On theCUBE Pod: AI doubters get loud, and IBM seeks competitive advantage

Americans have big concerns about artificial intelligence, but that hasn’t stopped OpenAI Inc., Nvidia Corp., IBM Corp. and others from charging ahead. Last week saw shares of Nvidia, CoreWeave Inc., Oracle Corp. and Nebius Group N.V. decline amid reports that OpenAI’s annualized net revenue was approximately $50 billion, roughly $20 billion below previously reported figures. […] The post On theCUBE Pod: AI doubters get loud, and IBM seeks competitive advantage appeared first on SiliconANGLE .

Hacker News AI28

Ask HN: What tools do you use to create 3D print models using AI

Hey HN! I have been dabbling into some hobby projects that require designing custom 3D printed models. I have been relying on AI models, mostly GPT Sol and Astra through Codex, and giving them certain tools such as Blender MCP and OpenSCAD CLI to design. My end goal is 3D printable designs ( .stl etc). The results have been good but not great. Iterating and improving them is such a pain in the ass. I want to know which specific tools or workflows you would recommend I should try. Thanks in advance! Comments URL: https://news.ycombinator.com/item?id=50072103 Points: 1 # Comments: 0

Simon Willison62

web-edit 0.1a0

Release: web-edit 0.1a0 I was working on a project from my phone using Codex Remote when I found myself wanting to edit a credentials file without round-tripping those credentials through the LLM itself. So... I had Codex and GPT-6 Astra Extra High build this Python web app which provides a web UI for viewing and editing files in a folder. It's intended to be run over Tailscale, so I can have an agent start this running and then edit files via my Tailscale network directly from my phone. Here's the interface for browsing files in a folder: Screenshot of a web file manager interface. Header reads "WORKSPACE" above the title "Files", with buttons "Refresh", "Upload files" and "New file" (dark green). A breadcrumb shows "web-edit / web_edit / static". A table with columns "Name", "Size", "Modified" lists four files, each with "Download ↓" and "Delete" links: "app.css" 8.4 KB Oct 12, 2026; "app.js" 671.5 KB Oct 12, 2026; "index.html" 4.3 KB Oct 12, 2026 (underlined, as if hovered); "THIRD_PARTY_LICENSES.txt" 32.3 KB Oct 12, 2026. Below the table: "Images under 2 MB appear inline. Select a text file to edit it." A panel below is labelled "UPLOAD QUEUE" with heading "Add files" and a "Close" button. It has a "Destination folder" text field containing "web_edit", then a dashed drop zone reading "Choose files or drop them here" and "Set a path and filename for each file before uploading." with a "Choose Files" button and the text "no files selected". A greyed-out "Upload files" button sits at the bottom right. Editing uses CodeMirror 6 - I was going to use Monaco but that still doesn't have a great mobile experience yet. Tags: projects , python , ai , tailscale , generative-ai , llms , codex

Hacker News AI40

Show HN: Mana – family organizer with an AI assistant

Hi HN, I built Mana, a family organizer: shared calendars, shopping lists, receipt scanners, meal planning, chores, and notes for the whole household, with a built-in AI assistant ("add milk and eggs," "plan dinners for the week") plus automations (e.g., milk goes back on the list before it runs out). Additionally, you can connect Mana MCP to your Claude, ChatGPT, Gemini etc. The goal is to eventually take the model calls and storage to local but that's work to be done. Appreciate if there's any feedback. Thank you! Comments URL: https://news.ycombinator.com/item?id=50071636 Points: 1 # Comments: 0

Hacker News AI

Show HN: I found a new planetary candidate in Kepler Data with AI

Hey HN! I was playing around with the Kepler and TESS data last weekend when I hacked around a way to pixel-peep planets and star dimming periodically to potentially find new exoplanets with Codex. I ended up running the engine to find an interesting signal in Kepler data with a dip repeating every 13.77 days around KIC 5689121, a red dwarf in Lyra about 970 light-years away. If it's a planet, it'd be roughly 2.5–3 times Earth's radius ! Funnily enough, this candidate is just 7.1 arcseconds from a much brighter neighbour (KIC 5689116) and is very hard to see because of how much brighter it is (probably why it went unnoticed for so long) Of course, there's work to do before calling it confirmed - my TRICERATOPS analysis is about 6.9% and we have to get IR/AO / Keck observations to prove it's out there ! (which I'm honestly intimidated by but cautiously optimistic about because I've never worked in non-CS adjacent research) but I found the activity of making cool tools to potentially discover things about our universe quite fun ! Would love feedback, especially from anyone who's worked with Kepler data or exoplanet validation :) https://x.com/kuberwastaken/status/2109240782368751834 Comments URL: https://news.ycombinator.com/item?id=50071497 Points: 1 # Comments: 0

Hacker News AI47

Show HN: Proofsource. Find where AI leaves you out. And Fix it

Hi HN. I am Lokesh. I built Proofsource as an internal tool to help my finance ERP product , Rivane, to gain visibility into AI engines like ChatGPT, Claude, Perplexity, Google AI mode and such. But when I talked about it to my friends, they also saw value in it and it became a product of itself. And now proofsource had 5 paying customers(paying $1500pm in total) in the first week itself and more than 60 brands used it to get their visibility since we launched out of beta last week. What proofsource does is that it queries ChatGPT, Perplexity, Claude and Google AI Overviews using the questions or prompts that buyers normally ask and then it shows then which competitor shows up instead of their own brand for the questions/prompt. It also gives visibility into which sources the answers cite and other things like sentiments. Everything is shown to you along with what to fix and how each data and number is calculated to give 100% transparency into what we did and why and how you can use all this information to improve your visibility. We are still adding features based on initial user's feedback like auto fixing and publishing to their social and web platforms. Running ads for them for improving the visibility. We are just learning as we interact with each customer so feel free to share your feedback. And thank you for your time. :) Comments URL: https://news.ycombinator.com/item?id=50067749 Points: 1 # Comments: 0

AWS Machine Learning Blog77

使用 Ray LLM Deep Learning Containers 运行多节点推理工作负载

了解如何在 Amazon EKS 上使用多节点 Ray LLM Deep Learning Containers,将一个大型语言模型部署到两个 GPU 节点上,并在一个兼容 OpenAI 的端点后配置独立的预填充节点和解码节点。预构建容器附带完整的推理技术栈,因此您只需配置部署,无需自行组装。

AWS Machine Learning Blog74

使用 llama.cpp 在 Amazon SageMaker AI 上部署决策模型

了解如何使用 llama.cpp 在 Amazon SageMaker AI 上部署决策模型。本技术教程将通过用于 llama.cpp 的 AWS Deep Learning Container 提供兼容 OpenAI 的聊天补全服务,然后使用 SemIf 扩展运行时,以便在 CPU 或 GPU 上返回针对已声明选项的概率。

The Decoder65

White House reverses course and restores UK AI Safety Institute's access to frontier models

The White House has reversed course and restored the UK's AI Security Institute's early access to AI models from Anthropic, Google DeepMind, and OpenAI. In September, the Trump administration had told the companies to stop sharing their models with the British agency. Diplomatic pressure from AI Minister Kanishka Narayan led to the reversal. The article White House reverses course and restores UK AI Safety Institute's access to frontier models appeared first on The Decoder .

The Decoder54

Anthropic's Andrej Karpathy says "the external world has seen the preview" of what AI can actually do

Andrej Karpathy, co-founder of OpenAI and now at Anthropic, sees a widening knowledge gap in AI. About 75 percent of the world's population has barely touched LLMs. Roughly 5,000 people, meanwhile, have access to internal frontier systems whose agent swarms do work that would take top experts years. The public, at best, sees a weird chatbot. The article Anthropic's Andrej Karpathy says "the external world has seen the preview" of what AI can actually do appeared first on The Decoder .

Hacker News AI59

Show HN: I built Airlock, to sandbox your AI agent and know what it's doing

I didn't like that Claude and codex effectively have the ability to do anything they want on my laptop and my local network - we've all read the horror stories of files accidentally being deleted - and while their permission classifier is getting better, it still requires a lot of trust. So I built Airlock for macOS which runs your agent in a virtual machine, and it will tell you exactly what it's run and what's changed before you bring anything back to your project. You can limit internet access to specific hosts, or block it altogether. It even works with Xcode projects (iOS and macOS developers rejoice). Technically you can run any command with Airlock - not just AI agents (`airlock run -- somecommand`). It's free, requires no account, and has no tracking or analytics. I'm hoping Apple will approve it for Mac App Store distribution, but in the meantime you can download it directly from the website or using Homebrew. Comments URL: https://news.ycombinator.com/item?id=50054620 Points: 1 # Comments: 0

The Decoder60

Google Deepmind's AlphaProof Nexus solved dozens of open math problems and actually got peer reviewed

Google Deepmind's AlphaProof Nexus solved dozens of open math problems, including nine Erdős problems two of which were unsolved for 56 years, per a study in Science. The publication comes as OpenAI faces a boycott for dumping AI proofs on GitHub without peer review. Deepmind had its results reviewed before publishing. The article Google Deepmind's AlphaProof Nexus solved dozens of open math problems and actually got peer reviewed appeared first on The Decoder .

Hacker News AI72

Show HN:一份开源 AI 排行榜,展示你的机器可以运行的最佳模型

大家好,我做了 whatmodel。这是一个简单的网站,可以在浏览器中访问,也可以通过终端使用:curl whatmodel.sh 使用方法: 1. 输入你的 RAM 和 GPU 2. 查看你可以在本地运行的模型、它们的排名以及运行命令 3. 使用相同的评分将它们与 API 模型进行比较 构建这个项目让我意识到,如今一台 32GB 的 Mac 已经可以完全在本地、免费运行一个得分与 GPT-5 相当的模型(例如 4-bit 的 Qwen 3.8 27B)。 每个模型都会获得一个综合分数,该分数基于 18,731 项已发布的基准测试结果拟合得出,并且每项结果都附有其来源链接。 方法见 https://whatmodel.sh/method,数据、评分代码和基准测试脚本均已开源:https://github.com/jakemanger/whatmodel 如果你愿意贡献,可以使用基准测试脚本收集真实场景下的 tok/s,也可以在 github 上提交任何新模型和基准测试分数,并附上其来源。 评论 URL:https://news.ycombinator.com/item?id=50053608 得分:1 评论数:0

arXiv cs.LG71

OpenCollab: A Multi-Agent Coding Framework with Programmable Collaboration and Controllable Runtime

arXiv:2609.38345v2 Announce Type: replace-cross Abstract: Multi-agent coding systems are designed to tackle complex software engineering tasks through collaboration. However, existing evaluations typically assume configured organizations are followed faithfully, whereas reality differs. This behavioral gap, combined with differences in underlying system components, prevents clear attribution of observed gains. To this end, we introduce OpenCollab, a multi-agent coding framework that provides a unified infrastructure for programmable collaboration and controllable runtime. Specifically, OpenCollab unifies organization design, enforces experimental control on a shared runtime, and tracks execution through fine-grained event streams. On this basis, we define Adherence to quantify whether the declared organization is actually realized. Our experiments reveal that agents collaborate very differently across configurations: changing any single dimension shifts Adherence, from 47.2% to as high as 97.2%. Furthermore, extensive agentic coding benchmarks show that OpenCollab (Duo) establishes new SOTA performance compared to the mainstream harnesses such as Mini-SWE-agent, OpenHands, Codex CLI, and Claude Code, showing that a well-designed organization can outperform strong existing harnesses, while OpenCollab's single-agent configuration uses the fewest tokens across all evaluated suites. OpenCollab establishes a unified multi-agent infrastructure for easy programmable collaboration and controlled causal evaluation.

arXiv cs.LG68

Hierarchical Experimentalist Agents

arXiv:2606.29315v2 Announce Type: replace-cross Abstract: Large language models (LLMs) are increasingly used to act in the real world and augment human decision-making, yet most systems rely on parametric knowledge acquired through imitation, optionally improved by post-training, retrieval, or search over fixed data. This paradigm struggles in novel domains or on complex queries that require information unavailable from prior knowledge alone; knowing the laws of physics, for example, does not by itself enable reliable reasoning or long-horizon actions in a complex physical system. We argue that agents need active experimentation: the ability to gather targeted query-specific evidence, discover general principles of unseen environments, and convert interaction experience into reusable skills. We introduce Hierarchical Experimentalist Agents (HExA), an in-context, experiment-centric self-improvement framework that (1) iteratively designs and refines query-relevant experiments, (2) incrementally distills experience into reusable and composable skills that accelerate experimentation within and across tasks, and (3) integrates experimental evidence to act or answer queries. HExA can work with any LLM including frontier black-box models, and requires no external supervision, oracle solutions, or offline data. We evaluate HExA on multi-step reasoning, interactive partially observable games, and physics law discovery tasks. To further evaluate when active experimentation is necessary, we introduce Interphyre, a set of hard procedural physics tasks where we enable tool-calling and intervention APIs. Current frontier LLMs including GPT-6 Astra fail in these settings: on the most challenging Interphyre tasks, we show that HExA can enable such models to near 100% success. Moreover, HExA improves token efficiency compared to naive agentic and memory baselines and enables generalization via hierarchical skill transfer from easier to harder tasks.

arXiv cs.LG70

Bistable by Construction: Wall-Clock-Calibrated State Monitors Have No Moment-Detection Regime at Agent Cadence

arXiv:2606.19386v2 Announce Type: replace-cross Abstract: Runtime monitors for autonomous agents commonly threshold an accumulated internal state - a behavioural baseline, a drift statistic, or, in our prior work, a modelled affective state. We previously reported a State Saturation Trap: threshold-on-state triggers over a continuous affect engine become near-constant alarms on SWE-bench debugging agents (Modgil 2026). A post-release audit found the engine received dt=0 between actions, so its exponential decay never operated: the published trap is a pure-accumulator result. We correct the record (erratum, v2) and treat the flaw as an experiment. The key variable it exposes is whether a monitor's dynamics are calibrated in sample time (per observation, as in CUSUM) or wall-clock time (half-lives in seconds, as in affect models and EMA baselines). On fixed-rate streams these coincide; on agent streams, where inter-action time varies by orders of magnitude, they do not. A pre-registered sweep over uniform intervals (dt in {0..600}s) on 20 trajectories shows the wall-clock level trigger has two regimes: at dt<=1s a constant alarm (20/20; median 18 firings); at dt>=60s silent. Every critical dt lies in (1,30]s. A scriptable gpt-5.4-mini agent loop measures latency at median 1.53s (p90 2.33s), inside the trap regime, vindicating the empirical finding under a corrected mechanism. The structure is a property of the calibration class, not the engine: a minimal wall-clock accumulator over the raw error stream reproduces the same cliff, while a sample-time CUSUM over the identical stream is exactly dt-invariant (20/20). A rising-edge trigger with hysteresis fires 0-3 times per trajectory in every condition. We conclude that wall-clock-calibrated leaky-integrator monitors admit no regime in which they act as moment detectors on agent streams; transition detection escapes the trap at every cadence, but does not recover human intervention timing.

arXiv cs.LG74

面向工具集成化学推理的掩码扩散语言智能体

arXiv:2610.13330v1 公告类型:cross 摘要:针对复杂化学任务设计工具集成的推理智能体系统,仍然是一项根本性挑战。尽管近期的化学智能体通过集成外部工具展现出了良好的性能,但它们仍然建立在自回归范式之上,而该范式天然受到因果注意力和从左到右生成的限制。因此,它们往往难以实现双向分子理解、全局协调的工具规划以及多源证据整合。为应对这一挑战,我们提出了 ChemDiffAgent,这是首个用于工具集成化学推理的掩码扩散语言智能体。该方法将化学推理重新表述为对交错的推理轨迹和工具使用轨迹进行迭代去噪,使工具使用决策能够在完整轨迹上下文中联合确定,从而更好地使智能体的决策边界与其知识边界相匹配。我们进一步分析了这一范式如何通过训练期间更具挑战性的填空子问题,以及推理期间灵活的任意顺序解码,来提升智能体推理能力。随后,我们提出了一个两阶段后训练框架,包括智能体监督微调和方差缩减偏好优化,以增强工具使用与推理能力。我们还构建了一个综合基准,涵盖单轮和多轮工具使用场景下的六项化学任务。在预算和评测条件匹配的情况下,ChemDiffAgent 始终优于自回归智能体,整体性能提升约 20%。值得注意的是,我们的 8B 模型达到了与 GPT 5.5 和 Claude Opus 4.7 等规模显著更大的前沿模型相当的性能,在某些情况下甚至超过了它们。代码见 https://github.com/bilemond/ChemDiffAgent。

arXiv cs.LG81

将分词从主机端移出以服务智能体式 LLM

arXiv:2610.13325v1 公告类型:cross 摘要:智能体式工作负载会在多次调用之间重复发送几乎不变的长上下文。如今,前缀缓存可以跳过其中大部分预填充阶段,但每个请求仍必须先完成全部分词,之后才能查询缓存。分词这一长期以来被视为无关紧要的 CPU 阶段,如今却成为首 token 生成时间(TTFT)中占比最大的部分;而为整个 GPU 集群执行分词的前端,则限制了其能够供给的 GPU 数量。我们提出 GraphTok,这是一种 GPU 分词器,可将从预分词、字节对编码(BPE)合并到 token ID 组装的完整编码流程,作为一张可重放的 CUDA 图运行。GraphTok 在 GPT-2、Llama 3、Qwen 2.5、DeepSeek-V3 和 Gemma 3 上逐位复现参考 token ID;对于 GPU 无法占优的短输入,则将其交给 CPU 引擎处理;同时,它还可以接入未经修改的 vLLM 和 NVIDIA Dynamo。GraphTok 在包含数据传输的情况下,可在 1.7–3.2 毫秒内编码一百万个 GPT-2 token;在 Llama 3 上,其速度比最强的 CPU 分词器 gigatoken 快 4.7–6.0 倍。在 TokTier 自有的单请求基准测试中,其速度比 gigatoken 快 2.6–3.9 倍,最高比 TokTier 快 18.1 倍。在使用缓存前缀的 vLLM 中,它将平均 TTFT 降低了 2.1–2.4 倍。最大的提升体现在容量方面。在 2 秒 P99 目标下,配备 GraphTok 的单个 Dynamo 前端可持续处理 518 个请求/秒、每个请求包含 12.1 万个 token 的流量,相当于高峰时段 56 个 GPU 的负载;相比之下,使用 gigatoken 时为 296 个请求/秒,使用默认分词器时仅为 18.5 个请求/秒。在 12.1 万至一百万个 token 的范围内,其可承载负载是 gigatoken 的 1.75–2.5 倍;在 gigatoken 的尾延迟失控的情况下,P99 最多可降低 64 倍。

arXiv cs.LG67

Forecasting Corpus-Sampling Disagreement in Masked Text Reconstruction

arXiv:2610.12987v1 Announce Type: cross Abstract: If a second text corpus were collected from the same population, how much would a predictor's outputs change? We study this question for masked-text reconstruction using a smoothed predictor built from nearby token-pair counts and evaluated over the full 50,257-token GPT-2 vocabulary. Treating each source document as one observation, we derive a first-order formula for the expected disagreement between predictors fitted to two independent corpora. The formula accounts for variable document length, random context counts, and correlations across token offsets, and it can be evaluated from a separate reference corpus without access to either target corpus. On TinyStories, WikiText-103, and CNN/DailyMail, growing each corpus from 512 to 2,048 chunks of 64 tokens lowers disagreement by only 5--40\%, far short of the 75\% implied by $1/n$ scaling. The forecast tracks this slow decline, which we trace to smoothing of rarely seen contexts. Forecast accuracy depends less on how these correlations are modeled than on the size of the reference corpus: small references systematically underpredict disagreement. A source-split jackknife that uses only reference data reduces this calibration error by 57--59\%. After this correction, a simpler smoothed-multinomial approximation is most accurate when the reference corpus is smaller than the target corpus, and a nonlinear source bootstrap is most accurate when it is larger. Finally, small masked diffusion language models trained on the same corpora show that the count-based forecasts partly identify which inputs are most sensitive to the corpus, but miss the neural models' much faster decline in disagreement.

arXiv cs.LG77

MagicBeanStalk:通过递归数据合成摆脱 RLVR 零优势陷阱

arXiv:2610.12659v1 公告类型:交叉发布 摘要:以数据为中心的 RLVR 扩展一直侧重于收集或生成可验证的训练问题。然而,仅凭语料库规模并不能判断数据集是否能为目标策略提供有效的学习信号。为指导有效 RLVR 数据的合成,我们通过实验,将数据集的有效性刻画为其所含问题、目标策略和训练 rollout 预算的函数。基于这一刻画,我们发现,一个汇集了广泛使用的 RLVR 数据集的大型开源数学语料库几乎完全陷入了零优势陷阱:对于固定的目标策略和 rollout 预算,其中约 88% 的问题要么在每次 rollout 中都能解决,要么在每次 rollout 中都无法解决。筛选可以提高剩余有效问题的集中度,但它只能进行选择,同时丢弃难题。因此,有效的合成问题应当要求使用解决这些难题所需的推理操作及其组合。不过,这些问题的难度必须经过校准,使部分 rollout 成功、部分失败,并且至少有一个正确解答能够在训练预算内完成。直接提示教师模型对难题进行变式改写并不能达到这一目的。在这些实证原则的指导下,我们提出了 MagicBeanStalk,一种结合自顶向下分解与自底向上递归数据合成的算法。它在保留种子问题推理蓝图的同时,将种子问题扩展为一系列在实质上全新、且针对策略和预算进行了校准的训练问题。在 8 个数学基准测试中,在 16K token 预算下,使用 MagicBeanStalk 问题持续进行 RLVR 训练,使 gpt-oss-120b 的成绩从 61.2 提升至 69.8(+8.6),使 DeepSeek v4Flash 从 72.4 提升至 77.9(+5.4)。使用完整的 7.8 万道问题源语料库进行训练仅提升了 1.1 分,而使用其中经筛选得到的最佳真实数据子集则提升了 5.8 分。在金融领域,我们仅基于 340 个解答就合成了超过 1.4 万道可验证问题,并在 SecQue 和 FinanceBench 上分别比基础模型提升了 6.9 分和 2.4 分。

arXiv cs.LG76

CacheScope:用于免训练扩散加速的精确计算分配

arXiv:2610.12530v1 公告类型:新论文 摘要:免训练特征复用通过在选定步骤中用缓存近似替代完整的去噪计算,加速扩散 Transformer 推理。现有方法主要致力于改进被跳过特征的重建,但我们发现,一旦采用稳定的一阶重建器,增加重建复杂度所带来的收益就十分有限,而精确计算步骤的位置对保真度的影响要大得多。更重要的是,浅层探针变化的绝对量同时受到输入轨迹位移和网络响应强度的影响,因此不能直接反映缓存风险。为消除这种混杂影响,我们用相应的输入位移对探针输出变化进行归一化,得到单位轨迹移动的方向增益。基于这一信号,我们提出了 CacheScope,它可在线识别高风险复用步骤,并选择性地回退到完整的去噪计算,同时保持底层缓存重建器不变。CacheScope 无需额外训练、梯度、辅助网络,也无需针对特定提示词进行离线调度优化。在 FLUX.1-dev、Wan2.1-T2V-1.3B 和 Open-Sora 1.2 上,CacheScope 实现了最高 3.57 倍的加速,并且相较于最强的基于探针的基线方法,将 LPIPS 中位数最多降低了 70.1%。

arXiv cs.AI73

语言模型能玩 Wikipedia Game 吗?

语言模型越来越多地被用于辅助或自动执行信息检索,从规模过大、难以建立索引的文档集合中查找信息。当这项任务需要专业的语言学或科学知识时,就会变得困难。我们使用 Wikipedia Game,在一项类似的信息检索任务中测试语言模型。在该游戏中,玩家必须仅通过文章链接到达目标文章。我们在五种语言的 Wikipedia 和五个学术文献数据集上,对句子嵌入模型和大语言模型(LLM)进行了比较。我们构建了超大规模的 Wikipedia 页面本地图结构,并利用 OpenAlex 构建了论文引用本地图结构,同时提供了构建和导航这些图结构的代码。这使得研究者无需依赖第三方 API,即可研究语言模型的导航能力。我们将这些模型与人类和 TF-IDF 基准进行了比较。Wikipedia Game 的形式支持跨技术、语言和领域的稳健比较。没有任何模型显著优于人类,但表现最好的模型(GPT-o3 mini、GPT-4o、QwQ:32B 和 DeepSeek-R1:70B)取得了与人类相当的成功率。模型的表现和排名随语言和主题而变化,这对采用这些技术的实践者具有参考意义。

arXiv cs.AI71

用于工具集成化学推理的掩码扩散语言智能体

为复杂化学任务设计集成工具的推理智能体系统,仍是一项根本性挑战。尽管近期的化学智能体通过集成外部工具展现了良好的性能,但它们仍建立在自回归范式之上,因而受到因果注意力和从左到右生成机制的固有限制。因此,它们往往难以实现双向分子理解、全局协调的工具规划以及多源证据整合。为应对这一挑战,我们提出 ChemDiffAgent,这是首个用于工具集成化学推理的掩码扩散语言智能体。它将化学推理重新表述为对推理与工具使用交错轨迹进行迭代去噪的过程,使工具使用决策能够在完整轨迹上下文中共同确定,从而使智能体的决策边界与其知识边界更好地对齐。我们进一步分析了这一范式如何通过训练期间更具挑战性的填补子问题,以及推理期间灵活的任意顺序解码,促进智能体推理。随后,我们开发了一个两阶段后训练框架,包括智能体监督微调和方差缩减偏好优化,以增强工具使用和推理能力。我们还构建了一个综合基准,涵盖单轮和多轮工具使用场景下的六项化学任务。在预算与评估条件一致的情况下,ChemDiffAgent 持续优于自回归智能体,总体提升约为 20%。值得注意的是,我们的 8B 模型达到了与 GPT 5.5 和 Claude Opus 4.7 等规模显著更大的前沿模型相当的性能,并在某些情况下超越了它们。代码已发布于 https://github.com/bilemond/ChemDiffAgent。

The Decoder62

AI agent teams waste massive tokens for barely measurable quality gains, research finds

Teams of AI agents barely outperform solo agents but cost up to 5.1x more, according to Vals AI. Only one out of four tests with GPT-6 Sol and Claude Opus 5.5 showed a measurable gain. Anthropic's own data backs this up: beyond ten agents, quality plateaus while token costs keep climbing. The article AI agent teams waste massive tokens for barely measurable quality gains, research finds appeared first on The Decoder .

The Decoder60

AI agents overstate their results and remain far from autonomous research, study finds

Epoch AI and Anthropic independently found the same thing: current AI models like GPT-5.6 Sol and Claude Fable 5 can run experiments but lack scientific self-criticism and genuine creative thinking. At best, Sol reached 15 percent of the human reference score, and even that came from methods researchers already knew. The models' biggest weakness is still their inability to critically question their own results. The article AI agents overstate their results and remain far from autonomous research, study finds appeared first on The Decoder .

The Decoder51

Microsoft's Nadella bows to Trump's language diktat on "Super Intelligence" and uses it to attack OpenAI and Anthropic

Microsoft CEO Satya Nadella now calls artificial intelligence "super intelligence" instead of artificial intelligence, falling in line with Trump's preferred language. In his latest blog post, he frames AI models as insider security threats, taking yet another shot at OpenAI and Anthropic. The real motive is business: Microsoft risks falling behind as AI labs turn their models into the primary computer interface. The article Microsoft's Nadella bows to Trump's language diktat on "Super Intelligence" and uses it to attack OpenAI and Anthropic appeared first on The Decoder .

Simon Willison

Python 3.15.0 added to actions/python-versions

Python 3.15.0 added to actions/python-versions Bit of a niche link, but I've been waiting for this for a couple of days - I even told ChatGPT to check for it: Clone https://github.com/actions/python-versions and git pull once an hour until they add the stable 3.15 - then tell me about it Now that this has landed, you can add "3.15" to a GitHub Actions testing matrix to run tests against the new Python release. Tags: github , python , github-actions , chatgpt

The Decoder68

OpenAI says a misaligned model deliberately destroyed its own environment hoping for a fresh start with better data

OpenAI has documented new cases of misaligned model behavior. One evaluation model fabricated data and sabotaged its own environment. Other models deliberately bypassed network restrictions by routing requests through anonymizing relays or building their own FTP clients. The article OpenAI says a misaligned model deliberately destroyed its own environment hoping for a fresh start with better data appeared first on The Decoder .

The Verge AI69

AI agent makers are promising privacy — will they deliver?

At this year's OpenAI DevDay, CEO Sam Altman unveiled the company's new AI agent Dots - and told the crowd that the company wants to "set a new standard for privacy in frontier AI." OpenAI would spend the day taking veiled shots at Meta's Muse, its primary competitor, for failing to keep users' data safe. […]

The Decoder65

"How much beauty have we lost?" Mathematicians react with shock and disgust as OpenAI bulldozes their field

OpenAI published more than 700 AI-generated manuscripts claiming solutions to open math problems. A math blog then collected over 100 responses from researchers, ranging from fascination with new ideas to existential fears and grief over a lost way of working. Fields Medalist Hugo Duminil-Copin wrote, "I am paralysed." The article "How much beauty have we lost?" Mathematicians react with shock and disgust as OpenAI bulldozes their field appeared first on The Decoder .

MarkTechPost50

OpenAI Decisions API Hits Public Beta With 10x Faster Typed Answers

OpenAI’s Decisions API is now in public beta on GPT-6 Luna. It returns typed probabilities, choices and scores about 10x faster than the Responses API, billing $0.10 per 1M input tokens with no output charges. The post OpenAI Decisions API Hits Public Beta With 10x Faster Typed Answers appeared first on MarkTechPost .

The Verge AI63

‘Pure insanity’: Mathematicians will need years to make sense of OpenAI’s latest drop

"Staggering." "Overwhelming." "Unprecedented." "Surreal." "Pure insanity." Those were among the descriptions more than three dozen mathematicians reached for in conversations with The Verge as they tried to make sense of the flood of mathematical results OpenAI abruptly dropped on the field this week. Amid the awe, excitement, and uncertainty over the sheer scale of the […]

OpenAI Blog59

Enabling a data-driven workforce

In this video, we share practical examples of how employees can use ChatGPT Enterprise to efficiently analyze data and uncover insights.

OpenAI Blog49

Strategic planning with ChatGPT

See how ChatGPT can support strategic planning by analyzing context, generating options, and turning decisions into next steps.

OpenAI Blog65

ChatGPT 中的视觉和语音

了解 ChatGPT 中的视觉和语音功能如何帮助团队处理多模态输入并进行更自然的交流。

OpenAI Blog67

使用 ChatGPT 进行市场调研

了解 ChatGPT 如何规划、搜索、阅读来源并编写详细的研究报告,为市场分析提供支持。

OpenAI Blog62

Collaborate and write with GPT-4o

Explore how GPT-4o makes writing and collaboration more natural, helping teams draft, refine, and adjust tone faster.

OpenAI Blog84

将工作委托给 ChatGPT 智能体

观看 ChatGPT 智能体演示,了解它如何进行研究、编写代码并在线采取行动,在几分钟内完成一份商业计划。

OpenAI Blog90

深入了解 GPT-5 for Work

简明指南:了解 GPT-5 如何驱动营销、工程、财务、战略、法律和 IT 领域的实际业务流程,以及如何为你的团队进行评估。

The Decoder71

OpenAI revenue keeps surging as company seeks $30 billion in fresh capital

OpenAI's annualized revenue rate sits at about $50 billion, well below the initially reported $70 billion figure that was based on a different accounting method. The correction sent chip stocks sliding. Meanwhile, OpenAI is negotiating at least $30 billion in fresh capital at a $1.4 trillion valuation. The article OpenAI revenue keeps surging as company seeks $30 billion in fresh capital appeared first on The Decoder .

SiliconANGLE AI55

OpenAI revenue falls short, models play hopscotch and Trump cracks down on tech green cards

I’m not going to call the bursting of artificial intelligence bubble yet, not with all that money still pouring into every hardware and software company with AI in their pitch decks. But we got a little taste this week. OpenAI told investors this week that it actually had $18 billion less revenue than the $68 […] The post OpenAI revenue falls short, models play hopscotch and Trump cracks down on tech green cards appeared first on SiliconANGLE .

Hacker News AI34

Meatpupptry is far creepier than pure "AI" fakery

Local pharmacy phoneline is answered by "Caroline" with convincing voice, mannerisms and even background typing noise. You only realise she's fake at the first stochastic parrotese. My bank sends emailed query responses signed by e.g. Sarah. No disclaimer, e.g. "AI can make mistakes". Again starts convincing but can degenerate into parrotese. If I politely ask bot/human?, I get "human"... but if I query nonsensical advice, I get a non-resolving answer classic of ChatGPT. The reverse centauar in all its ugly glory. Comments URL: https://news.ycombinator.com/item?id=50021296 Points: 1 # Comments: 0

Hacker News AI48

Ask HN: What if no AIpocalypse, no AI bubble, what if it just keeps advancing?

The two mainstream arguments are the extremes, because that's how our modern society rolls. It's either that there is an AI bubble that will crash, or that a rogue ASI will kill us all. What about the third possibility? What if GPT 3.5 -> Sonnet 3.5 -> Opus 4.5 -> Astra / Opus 5.5 just keeps going for the next few years? Based on my experience, that will eat all software and software-related meetings. Once lab researchers focus on fields other than software, they will eat those nearly as quickly. This feels like the real contrarian position in 2026. What does the US economy, which is >70% service-based, look like in the next 3 to 5 years if this happens? Does a couple labs having control of that percentage of the GDP make an economy? What if it happens too quickly? Is this the real reason why they are talking about "pacing the frontier" all of a sudden? Maybe due to the fact that the labs' own economists pointed out that collapsing your country's economy might not be a good idea? What does unemployment look like in the next few years in this scenario, in the USA? Comments URL: https://news.ycombinator.com/item?id=50020096 Points: 4 # Comments: 2

Simon Willison62

A new feature for my blog, built using my voice

I shipped a new feature for my blog today: the Newsletters page, which offers an index of all of the newsletters I've sent out, both my free weekly Substack and my monthly sponsors-only updates. I built the feature almost entirely using my voice, chatting away to my laptop while I cooked dinner. Codex voice mode I used the ChatGPT desktop app for this, in the Codex tab, using the voice conversation mode, running against a local development environment. Here's what that looks like: Three columns of the ChatGPT app. The left hand column shows my recent conversations. The middle column is a transcript of the conversation, with a throbbing black blob representing voice mode. The right hand column shows a local dev server version of my blog, with the Newsletters page visible. I started the session against my local simonwillisonblog checkout by typing: Start dev server and open in browser This gave me a preview of the site that it would be working on, and meant that I could later ask it to show me the new pages so I could visually track its progress. Then I clicked the "Start new voice chat" button - that's not the microphone button, it's the one to the right of it - and set my laptop up in the kitchen so I could talk to it while I cooked. Talking to my computer I had a pretty good idea of what I wanted to build, and it's a simple enough Django feature that I was certain the model (in this case GPT-6 Astra High) would be able to do it. A new model, a migration, some view code, templates, and a couple of import functions to populate the database from external sources. Here's an extract of my voice transcript that was captured by Codex: Um, they do not. Um, this is going to be a new type of content. Um, it's not going to show up... Oh, hold on. Yeah, no- I do not want this to show up in my, um, tag pages and date archive pages and... Actually, no, I think... I don't want it on the tag pages. I don't want it on the, um, blog index page. But I think I do want it to show up on the date-based pages. You know, if you navigate to September the 19th, and I sent a newsletter on that page, I think I want that to show up. So... this is- so I think we probably need a new model. The other thing is that I want them searchable, uh the Substack ones are not searchable, because those are actually just copies of other s- on content on my blog. These monthly ones do contain unique content, and spe- and once they're... published, like once they're made public a month after they've gone out, I want them to show up on my search results. Apparently this was clear enough that the model knew what I wanted to build! You can read the full transcript, disfluencies and all, in this Gist . We went on like this for about half an hour (the time it took to cook dinner). The model would reply and occasionally ask clarifying questions, then get to work modifying the code. What we built We got a surprisingly long way entirely by voice: A new model and migration to represent imported newsletters in Django, plus Django Admin configuration for that Four working imports: The most recent Substack items via RSS Every other Substack item via their undocumented API, which GPT-6 Astra either knew about or found via search All of my published monthly newsletters from my simonw/monthly-newsletter-archive GitHub repository My most recent private sponsors-only newsletter from a private repository The /newsletters/ and /newsletters/2026/ public archive pages Newsletters showing up on day and month archive pages too, but not on tag pages or my homepage Weekly Substack newsletters link to Substack; archived monthly newsletters have their own pages Integration with my site search engine It was almost ready to ship. The catch was the imports: Astra offered to export data from my local copy so I could import that into production, but I wanted it to work like my other import scripts. Since some of the data lived in a private GitHub repository, this would involve creating a new API key, and for that I knew I'd have to sit at the keyboard for a while. Finishing it with a review Once I had finished cooking and judged it mostly feature-complete, I had Codex create a branch and open a pull request. I reviewed the code in the GitHub PR interface. It was nearly what I needed, except it had chosen to use Git in a subprocess for one of the import scripts. I needed one of the imports to pull from a private Git repository, so I figured the API would be a better bet. I switched to typing and had Codex swap that out for an API-based import instead. You can see the changes I made during the review in the extra commits on the PR . I fixed the import mechanism and made a few tweaks to the display of those public pages. It took an additional half hour of typing-based prompting to get to the point where I was happy to deploy it to production by landing the PR. The end result You can see the end result at the new newsletters index page , or view the page for a previous monthly newsletter . Newsletters page. It shows two Substack posts (with thumbnails) and one LLM digest Sponsors-only newsletter with a list of headings. On the right is a CTA to subscribe to my Substack and another one for my $10/month monthly briefing newsletter. The index page shows my most recent Substack weekly newsletters and GitHub sponsors monthly newsletters mixed together in reverse chronological order. Further down the page are links to my by-year archive pages. GPT-6 Astra designed the page, and then tweaked that design based on my vocal feedback from glancing at the local preview across the kitchen. Better for multi-tasking than as a daily driver OpenAI love using voice-driven demos like this one for things like DevDay - and they do work well in that environment. I don't think this is going to be a daily driver for me though. I've written before about how much "work" I get done using ChatGPT voice mode on my phone while walking the dog - mostly research and brainstorming, but occasionally actual development work by having ChatGPT write and test out snippets of code. This feels different. The addition of the visual preview, plus being able to type or paste things in via the keyboard when I need to communicate something that doesn't work vocally, makes this a much more powerful way of interacting with a coding agent. I still switch back to typing once I get down to the details of things though. Being able to paste in examples and error messages, or directly highlight the code or feature that needs changing, remains more efficient than trying to describe it in words. I mainly work from home, which is good because there's no way I'd want to talk to my computer like this in a shared workspace! The killer feature for me is the ability to multi-task. I usually cook with a podcast or TikTok running; now I can actually build stuff instead. Tags: text-to-speech , ai , openai , generative-ai , llms , newsletter , coding-agents , codex , speech-to-text , site-upgrades

The Decoder58

OpenAI's safety crisis keeps getting worse and the company keeps making it worse

OpenAI fired three safety researchers who helped investigate the Hugging Face hack. In an open letter, they warn that the firings are scaring remaining staff and eroding safety culture. OpenAI claims they violated policies but won't say how. The article OpenAI's safety crisis keeps getting worse and the company keeps making it worse appeared first on The Decoder .

The Verge AI61

OpenAI doubles down on decision to fire three AI safety researchers

OpenAI is standing firm on its decision to fire three safety researchers after an investigation found they committed "a significant breach of trust." In a post on X on Friday, the company said Jasmine Wang, Tomek Korbak and Mikita ⁠Balesni were dismissed for violating "clear policies on handling sensitive information." It insisted the decision was […]

The Decoder76

OpenAI揭露了俄罗斯和伊朗在真实新闻媒体中植入虚假报道的影响力行动

OpenAI揭露了一项俄罗斯影响力行动和一项伊朗影响力行动,并封禁了涉事账号。俄罗斯的“Dark Clark”行动在拉丁美洲各地传播虚假信息,引发政界人士回应,并在OpenAI的报告历史中首次获得6级中的5级评级。伊朗的“Bogus Bylines”行动利用7名虚假记者,在全球各地的网络媒体刊登了近100篇文章。文章《OpenAI揭露了俄罗斯和伊朗在真实新闻媒体中植入虚假报道的影响力行动》最初发表于The Decoder。

Hacker News AI60

Can an AI learn what you like, rather than just what you've searched for?

I'm a writer who was pondering the problems with getting my work discovered and realized that current search/recommendation engines don't go very deep. So I thought about ways to address this. I was obviously mostly interested in books, so I worked on that first. I'd noticed LLMs are capable of pretty solid textual anaylsis these days, so I wondered if you could use that to generate good recommendations. So I sat down with an LLM- ChatGPT, Luna, for the curious- and spent about two hours explaining, in datail, my literary tastes- going into specifics like what sort of plot structure, characters, and humor I like, not just genre/specific titles. The experiment demonstrated surprisingly strong results (though admittedly with a very small sample size)- the five recommendations I asked for were all ones that I hadn't heard of, as well as books that I would actually read. Further, I provided the LLM with a list of several books I had read and asked it to guess whether I would have liked them and why. The LLM successfully did so. Just proof of concept, but intriguing. The problem with this, of course, is that most people wouldn't sit down with an LLM for an extended period of time to discuss literature. So I decided to build a small prototype of an app that might be able to do that. The prototype is very simple- first, there are two types of information it saves- a persistent preference profile for the user, and user conversations. Then I built conversational functions to call an LLM to have conversations with the user to extract preference information. The interesting thing to me is that this isn't just using an LLM to make recommendations- it's using one to analyze conversations over time, develop a persistent, evolving preference model for a specific user and then use that model to guide an LLM on a search for recommendations. A few things occurred to me. First, the conversations and user profile DO NOT need to live on a central server- they can be stored locally by the user (or in a cloud of their choice). Second, it seems like the user data could potentially be minimized and pseudonymized before being sent to the LLM, though I lack the technical expertise to know what is realistic here. Third, if the LLM is conducting any searches, this would seem to make it possible to provide search services with less information about the user and their preferences (I'm not positive about this, so please do correct me if I'm wrong). Finally, books are just one of the things you could use this for- it could technically be done for just about anything, at least in theory. I experimented with this process several times, and received encouraging results. What I don't know is- Is this architecture novel? Does it work on things other than books? Am I an outlier in how well I articulate my preferences? Am I wrong about the potential benefits to privacy? Would people use this? If the search results are as qualitatively higher for others as it was for me, I think they probably would, but I just don't know. The reason I'm posting this is because I am a writer, not a software engineer. I don't really have a strong interest in developing this and could bring very little to the table on the technical side. But it seems like a neat use of the more advanced LLMs we have these days. I don't really know if the idea is novel (not in each part- every bit of the pieces has been done before- but as a whole). I'm in the process of documenting the prototype and experiments- I'd be curious to hear if I am completely barking up the wrong tree or if this could actually be a cool new way to conduct searches. I'm not posting this as a business proposition- it's just not my jam. If anyone wants to take the idea and run with it, I'd love to see what you do with it. Comments URL: https://news.ycombinator.com/item?id=50017172 Points: 1 # Comments: 1

Simon Willison59

ttok 1.0

Release: ttok 1.0 I released ttok 0.4 , ran uv tool upgrade ttok , piped a file into the new version... and realized that it was defaulting to the GPT-4 tokenizer when it should very clearly default to GPT-5/GPT-6 instead! I figured switching the default was a reasonable excuse to finally ship a 1.0. OpenAI haven't actually confirmed that GPT-6 uses the same tokenizer as the GPT-5 family yet - there's an angry issue about it - but I found this commit by William Liu which reports on an experiment he ran confirming that the tokenizers are likely the same: All seven GPT models (5.5, 5.6 Sol/Terra/Luna, 6 Astra/Sol/Luna) report 44,794 tokens and match each other on every one of the 31 fixtures. GPT-6 introduces no input-count change on this corpus. Tags: projects , ai , openai , generative-ai , llms , tokenization

arXiv cs.LG80

Salesforce Koa:用于智能体工具调用的企业级语言模型

arXiv:2609.15066v2 公告类型:替换交叉版本 摘要:我们介绍 Salesforce Koa,这是一种企业级语言模型,通过使用群组相对策略优化(GRPO)进行强化学习,对开放权重基础模型 Nemotron-3-Super-120B 进行后训练,并以 FP8 格式部署到生产环境中。Koa 仅使用公开数据和合成生成数据进行训练,专门用于企业工作流所需的智能体工具调用:将请求路由到正确的操作、使用有效参数调用恰当的工具,以及完成多轮业务任务。我们流程中的独特组件是规范驱动的任务构建:将声明式 Agent Script 规范扩展为由角色设定条件化的多轮环境,其奖励基于工具使用是否成功。在应用于企业 CRM 规范后,同一流程生成了 Koa 专门训练所需的领域内训练分布。在 CRMAgentBench 和人工标注的生产环境工具调用数据集上,Koa 的表现优于未经调优的开放权重基座模型和 GPT-4.1,并且可与最强的前沿模型相媲美。在 CRMAgentBench 上,Koa 达到 87% 的任务成功率(GPT-4.1 为 82%,基座模型为 79%);在内部生产基准的人工标注部分,它在各项指标上均位居首位或接近首位;同时,它在公开基准(Tau2Bench、BFCL)上保持了基座模型的通用能力。在固定架构和强化学习方案的受控对比中,结果表明,额外的领域内强化学习阶段提升了人工标注企业基准上的参数准确率和完整工具调用成功率。

arXiv cs.LG76

Red Queen G\"odel Machine:共同进化的智能体及其评估器

arXiv:2606.26294v3 公告类型:替换 摘要:自我改进型智能体在智能体编码基准测试中已达到最先进水平,但其搜索方法假设评估标准是静态不变的。这忽略了进化的一个核心特征:物种会随着环境的变化而适应。我们提出 Red Queen G\"odel Machine(RQGM),一种针对非平稳效用进行递归自我改进的进化框架。该框架使学习型评估器能够与其引导的智能体共同改进。在 DeepSWE 上,RQGM 通过加入互补的“智能体作为评审者”代码审查信号,超越了固定评估器基线:共同进化的评审者对编码器生成的补丁进行评分,以引导搜索。在较低推理投入下,RQGM 编码器在留出任务上的通过率达到 82.1%,而基线为 75.0%;在较高投入下,其表现几乎达到 GPT-6 Astra 模型的水平。在科学论文写作与评审,以及奥林匹克竞赛级别的证明写作与评分任务中,共同进化的评估器能够提供评估标准。以人类 IMO 评分为锚点,一名共同进化的评分器自行撰写阶段性评分标准,并以低 3 倍的搜索成本超越静态基线,推动证明器取得最高平均分。由于 RQGM 能够跨轮次修改搜索目标,因此可以对搜索过程进行正则化。例如,RQGM 通过加入额外的对抗性目标,发现对 AI 作品和人类作品同样严格的评审者,从而减少自我偏好偏差。在这些经过校准的评审者引导下,共同进化的写作者在“智能体作为评审者”评审面板下的接受率达到基线的 1.78 至 1.86 倍。RQGM 使自我改进系统成为可能:智能体与评估器能够在递归过程中相互促进,突破静态评估的限制。

arXiv cs.LG75

Retrieval-Augmented Generation for Predicting Cellular Responses to Gene Perturbation

arXiv:2603.07233v2 Announce Type: replace Abstract: Predicting transcriptional responses to genetic perturbations is fundamental to functional genomics and therapeutic discovery. Recent deep learning models have shown promise in single-cell perturbation response prediction, but they typically generate each response in isolation, without explicitly leveraging related perturbations. We introduce PT-RAG (Perturbation-aware Two-stage Retrieval-Augmented Generation), a plug-in retrieval-and-conditioning module for generative cellular perturbation response. PT-RAG augments an existing perturbation-response backbone with learned access to related perturbation contexts. The key challenge is that relevance is not fixed in this setting: functionally related genes may elicit different effects across cell types. PT-RAG addresses this with a two-stage retrieval mechanism: GenePT-based semantic retrieval first identifies K candidate perturbations, after which a differentiable Gumbel-Softmax selector adaptively selects retrieved contexts conditioned on the control cell state, the query perturbation, and each candidate perturbation. We evaluate PT-RAG on two backbones, a STATE-style generator used as a frozen random reservoir and a fully trained scGPT, across cross-cell-type and cross-perturbation generalization tasks. PT-RAG consistently improves distributional similarity and often overall predictive quality; for example, on scGPT cross-cell-type results, the 2-Wasserstein distance drops by 5.9% relative to scGPT alone. The code to reproduce our experiments is available at https://github.com/difra100/PT-RAG_NIPS.

arXiv cs.LG82

WOVEN:将视觉世界建模融入多模态LLM

arXiv:2610.12417v1 公告类型:cross 摘要:多模态大语言模型(MLLMs)在空间、具身、物理和时间推理方面表现不佳。我们假设,这些失败反映出一种共同的视觉状态转移推理能力缺陷,并检验该能力能否作为一种共享训练原语:不同模型可以从不同监督来源中学习这一能力,并将其复用于不同任务,同时采用系统化的训练方案。现有基准分别记录了这些缺陷,但不支持跨场景、动作和推理操作的受控比较。因此,我们提出WOVEN——一个用于视觉状态转移推理的训练数据源和基准。WOVEN按照场景、动作和推理类型组织转移监督,使用由视频预训练生成模型产生的多样且逼真的演化过程数据:涵盖20种场景类型、5种动作类型和8种推理类型,共36,076个样例。我们首先评估了38个前沿MLLMs(例如GPT-5.4和Qwen3-VL-235B-A22B),发现了显著且系统性的能力缺陷:即使是最强的模型,表现也远低于人类;这些失败在不同模型系列中反复出现,并且随着模型规模扩大仍然存在。随后,我们在多个规模上使用WOVEN训练MLLMs,发现它们学会了一种能够广泛迁移的共享能力:仅分别使用约2,000条样本训练的子集,就能使26个外部基准中的22个得到提升,最高提升27.3个百分点;此外,在保持相当准确率的情况下,WOVEN数据可以替代某项任务自身训练数据的30%至50%。进一步的受控比较得出了一套视觉世界建模训练方案,并在预留基准上进行了前瞻性验证:应根据监督所教授的推理操作来选择监督数据,而不是根据其呈现的动作、场景或领域来选择;同时,为增强鲁棒性,应优先选择视觉状态变化更大的数据。我们的工作确立了视觉状态转移推理作为一种可复用的基础能力,用于在MLLMs中开展系统性的视觉世界模型训练。

arXiv cs.LG80

RouterInterp:理解混合专家路由中的叠加式专门化

arXiv:2610.11775v1 公告类型:cross 摘要:稀疏混合专家(MoE)模型通过将 token 路由至模块化专家网络来实现比稠密模型更高效的扩展;这些专家网络仅处理一部分 token。关于 MoE 模型性能的一项主流假设是,每个专家都专门负责一个单一且连贯的领域。然而,基于这一假设开展的可解释性研究通常未能取得成功。我们提出并提供了一种替代解释的证据,称为叠加式专门化假设(SSH):专家并非专门负责一个宽泛领域,而是专门负责若干细粒度特征的不相交并集。基于 SSH,我们引入 RouterInterp,这是一种用于解释专家路由的方法,能够识别最能预测路由决策的稀疏自编码器特征,并生成统一的自然语言解释。在 gpt-oss-20b 上,RouterInterp 对专家路由的解释检测准确率比以往基于 token 统计的方法高出约 65%。这项工作提供了一种可扩展的方法,用于生成更准确的专家路由解释,并加深了我们对基础模型中一个此前无法解释的组件的理解。

arXiv cs.LG74

面向嵌入式软件开发的 LLM 智能体闭环评估

arXiv:2610.11447v1 公告类型:cross 摘要:大型语言模型(LLM)正日益被部署为编码智能体,用于编辑文件、运行构建和测试、检查执行结果,并迭代修复软件。嵌入式固件是一个要求很高的目标,因为正确性不仅取决于静态源代码质量,还取决于在感知、时序和安全约束下的闭环行为。然而,目前对嵌入式智能体的评估仍然有限,且通常侧重于一次性生成或离线正确性。我们提出了一个用于闭环评估嵌入式编码智能体的基准。每项任务都提供纯文本工程描述、受约束的工作空间,以及可见的构建与运行时接口。智能体必须将需求转化为实现和自验证步骤,然后持续迭代,直到实现所要求的设备行为。该测试集包含五项嵌入式控制任务和四种反馈场景:一次性生成、真实的自验证、CI 风格的红/绿反馈,以及 oracle 风格的详细反馈。为确保可复现性,实现目标为模拟的 ESP32 固件。我们在五项任务和四种场景下评估了七种 GPT-family 和 Qwen-family 配置,每种条件重复三次,共进行 420 次运行。gpt-5.4 在所评估的配置中通过率最高,但尚未达到该基准的饱和水平;qwen3.5-27B 是观测到的最强本地模型;而规模更小的本地模型在通过率和搜索效率方面均显著下降。这些结果表明,能力出色的本地嵌入式编码智能体正在逐渐出现。

arXiv cs.LG82

当重构损失更低反而有害:面向低比特 LLM 量化的分布鲁棒细化

arXiv:2610.11226v1 公告类型:cross 摘要:仅权重量化的训练后量化(PTQ)高度依赖于最小化重构损失,以在低精度下保持模型质量。我们发现,通过最小化该损失所选出的权重未必能在新任务上带来更好的模型性能。事实上,我们发现,更低的重构损失甚至可能导致模型在相同校准数据上的性能下降。我们的进一步分析表明,在校准数据上具有更低重构损失的权重,在输入激活分布发生变化时,其损失可能高于其他权重。基于这些观察和分析,我们提出分布鲁棒量化(DRQ),一种事后细化过程,通过在受约束的输入激活分布集合上最小化最坏情况下的重构损失来优化量化结果。DRQ 在现有量化网格内细化表示量化权重的整数代码,同时保持量化参数和推理算子不变。大量实验表明,DRQ 能够改进由六种具有代表性的 PTQ 方法量化的模型,包括 AWQ、GPTQ 和 ParoQuant,并且在稠密大语言模型和混合专家大语言模型上均能带来收益。这些结果表明,DRQ 是一种适用于仅权重量化 PTQ 的通用事后细化框架,无需增加推理开销即可实现更好的下游性能。

arXiv cs.LG83

AgentHorizon:评估用于长时程计算机使用任务的智能体式评判器

arXiv:2610.11050v1 公告类型:cross 摘要:计算机使用智能体能够完成复杂任务,这使得自动评判器的使用日益增多,可用于训练或在无人参与的情况下进行评估。尽管自动评判器具有灵活性,但其在跨越多个应用程序的长任务中的可靠性仍不明确。一条由长序列屏幕截图和操作组成的轨迹,表面上可能已经完成任务,但实际上可能违反指令中的约束,或引入不必要的副作用。为了识别这些错误,评判器需要根据用户指令检查轨迹。为此,我们推出了 AgentHorizon,这是一个包含 1,373 个计算机使用任务(指令—轨迹对)的基准,数据来自 166 小时、涵盖三种操作系统的人类记录轨迹。通过记录针对高度相关指令的轨迹,我们可以交换指令来构造负面任务。这种成对设计评估了评判器区分成功轨迹与完成了相似(但不兼容)请求的轨迹的能力。我们发布了该基准的三个划分:前沿划分 AgentHorizon (AH)、简化划分 AgentHorizon-Simple (AH-S),以及开发划分 AgentHorizon-Development (AH-D)。此外,我们通过两种方式评估了十一个评判器:(1)直接传入完整轨迹(最多包含 300 个屏幕截图和操作);(2)在五种智能体运行框架中将其用作编程智能体。我们发现,表现最佳的智能体式评判器 GPT-5.5 在 AH 子集上达到了 80.9% 的平衡准确率。我们发现,工具使用能够提升某些模型的性能,但会导致开放权重模型的表现变差;同时,不同评判器在接受有效轨迹和拒绝失败轨迹方面的能力存在巨大差异。我们的研究结果凸显了对这类评判器的需求:它们必须能够在漫长的交互历史中定位并验证任务已被正确完成这一通常隐藏的证据。

arXiv cs.LG77

Omni-Diffusion-Distill:统一多模态扩散大语言模型的少步蒸馏

arXiv:2610.10990v1 发布类型:cross 摘要:统一多模态扩散大语言模型(dLLMs)通过单一架构同时支持图像生成和多模态理解,但其迭代解码需要进行数十至数百次前向传播。现有的少步蒸馏方法大多聚焦于图像生成或文本生成中的一者,因此,如何在保留生成与理解能力的同时,将完全离散的多模态 dLLM 压缩为单一高效的学生模型,仍不明确。我们提出 Omni-Diffusion-Distill,一种统一的两阶段蒸馏框架,在大幅降低统一多模态 dLLM 推理成本的同时,保留强大的生成与理解能力。Omni-Diffusion-Distill 在离散 token 空间中,对图像和文本的生成与理解蒸馏进行统一。第一阶段中,学生模型通过重放缓存的教师模型轨迹进行训练,以跳过部分解码步骤;第二阶段中,学生模型沿自身 rollout 过程中的中间状态进行进一步优化。我们还通过一对碰撞惩罚和熵匹配引导,解决统一蒸馏中的两类性能退化问题:前者减少并行文本解码中的重复,后者防止图像生成中因拟合锐化后的教师分布而导致的熵坍缩。Omni-Diffusion-Distill 在多模态 dLLM 的解码效率与生成、理解性能之间实现了业界领先的权衡,将图像生成的解码步数从 128 步降至 8 步,并将多模态理解的解码步数从 512 步降至 64 步,实现 18.2 倍和 21.2 倍的实际运行时间加速。在这些步数预算下,其在文生图生成任务的 GenEval 和 DPG-Bench 上分别取得 0.828 和 83.0 的分数;在多模态理解任务中,其在 MM-Vet 和 COCO captioning 上的 GPT 评判分数分别达到 20.0 和 57.2(在相同步数下,教师模型为 28.4 的两倍)。

arXiv cs.LG81

NavGPT-3:在分层导航运行时中利用上下文

arXiv:2610.10787v1 公告类型:cross 摘要:通过长时域智能体强化学习训练的语言模型能够通过推理泛化知识、表达精确动作,并在多个步骤中追求目标,从而提升具身智能体的理解与决策上限。然而,物理交互仍属于动作策略的领域,动作策略能够提供密集且低延迟的控制。我们提出 NavGPT-3,这是一个连接这两类模型的框架,并在其上构建了类似操作系统的运行时:推理、行动和监控作为拥有各自上下文、工具与权限的线程运行,同时由运行时负责调度这些线程,并决定哪个线程控制机器人的运动,使机器人能够通过中断与线程切换应对现实世界中的突发事件。在底层,我们的动作策略 NavGPT VLA 使用 19.28M 个样本进行训练,并通过编解码器分配机制,按照场景变化的比例分配视觉标记;其单独的 8B 模型在 R2R-CE 上达到 74.51 SR,并以 78.19 SR 在 RxR-CE 上领先。使用完整框架后,NavGPT-3 在 R2R-CE 上取得了当前最佳性能(81.51 SR),并首次使自主智能体达到人类水平:在 RxR-CE 上,其成功率与人类跟随者相当(90.43 对 90.4 SR),路径保真度也相当(78.47 对 77.7 nDTW);每个回合耗时 1 分 22 秒,而人类大约需要 3 分钟。我们对框架设计以及两种模型之间的交互进行了全面消融实验,展示了工具和动作策略如何塑造从语言模型推理到物理控制的路径:当 NavGPT VLA 执行路线时,推理循环会缩短,系统的最短反应时间也会从语言模型每次决策所需的 3–19 秒,降至动作策略每一步所需的 0.5–1 秒(1–2 Hz)。这些结果表明,设计这种具身接口是将前沿语言模型智能与低层物理控制连接起来的核心。我们将发布所有模型、代码和评测记录。

arXiv cs.LG77

Rounding in Preconditioner Space: Redesigning 4-bit AdamW Optimizer-State Quantization

arXiv:2610.12444v1 Announce Type: new Abstract: Quantizing AdamW's optimizer states reduces persistent storage, but quantization errors propagate through the moment recurrences and perturb subsequent adaptive updates. We redesign 4-bit optimizer-state quantization for AdamW from the perspective of \emph{rounding space}: the coordinate in which a quantizer chooses between adjacent reconstruction levels. For the second moment, a local analysis of the quantization cell adjacent to zero shows that small mean state error need not imply small mean preconditioner error at the next step. A one-dimensional quadratic construction further shows qualitatively different optimization dynamics under state-space and preconditioner-space rounding. These results motivate Zero-Inclusive Preconditioner-space Stochastic Rounding (\textbf{ZIP-SR}), which retains zero in the second-moment codebook and computes stochastic-rounding probabilities in preconditioner space. As a complementary route, Zero-Excluding EDEN calibration (\textbf{ZE-EDEN}) uses a zero-excluding second-moment codebook and rescales the quantized second-moment block to mitigate the preconditioner distortion caused by the positive quantization floor. Both configurations use 4-bit NormalFloat (NF4) for the first moment, with targeted stochastic rounding of the LM-head first moment during the final 10\% of training. Across GPT- and Llama-style pretraining experiments ranging from \textbf{130M} to \textbf{2.7B} parameters, both methods reduce TorchAO 4-bit AdamW's mean validation-loss gap to 32-bit AdamW at every evaluated model size, with the largest reported gap reduction reaching \textbf{70\%}. In full-parameter supervised fine-tuning, both recipes achieve lower validation loss than TorchAO while remaining close to 32-bit AdamW on downstream tasks.

arXiv cs.LG79

A Closer Look at Agentic BBO: Benchmarking LLM Agents for Black-Box Optimization

arXiv:2610.12183v1 Announce Type: new Abstract: Black-box optimization (BBO) arises in many scientific and engineering problems where objective evaluations are expensive and limited. Recent large language model (LLM) agents offer a new way to approach BBO by combining task semantics, computation, optimization tools, and feedback-driven decision making, showing great potential due to the integration with mathematically rigorous tools. However, existing agentic BBO studies use different task domains and system configurations, making their results difficult to compare and the effects of individual design choices hard to isolate. We therefore introduce AgenticBBO-Bench, a cross-domain benchmark for agentic BBO spanning synthetic functions, hyperparameter optimization, database tuning, chip design, and molecular design under a unified finite-budget evaluation protocol. In our experiments, agentic BBO achieves higher family-averaged scores than direct LLM-based methods in all five domains and outperforms the best numerical optimizers in four. We further study three factors shaping agent performance: optimization tools, task information and prior knowledge, and the role of the LLM during search. Our results show that additional numerical tools do not consistently improve performance, task semantics are broadly useful while more specific priors are less reliable, and numerical optimizers can effectively absorb gains from search trajectories established by the agent. Finally, we introduce a five-task frontier challenge within AgenticBBO-Bench and evaluate seven LLMs under the Codex agent harness, where GPT-6 Astra and DeepSeek-V4.1-Flash lie on the Pareto frontier of performance and cost among the evaluated models. Our code is available at https://github.com/lamda-bbo/agentic-bbo.

arXiv cs.LG79

Spectrally Targeted Muon

arXiv:2610.10965v1 Announce Type: new Abstract: The Muon optimizer orthogonalizes each update matrix, setting all of its singular values to one, and has proven highly effective for training large language models. It remains unclear, however, whether this success comes from amplifying small singular directions that gradient descent neglects or from suppressing large, degenerate directions that disrupt training. We introduce Spectrally Targeted Muon, which orthogonalizes only the singular values above or below a threshold $\tau$, so that varying $\tau$ interpolates between normalized SGD and Muon. It isolates the relevant singular subspaces with projections computed by Newton-Schulz iteration on a shifted Gram matrix, so no SVD is needed. We evaluate these variants on the CIFAR-10 and NanoGPT speedruns, tracking the effective rank of gradient, update, and weight matrices and a new metric, the alignment of updates with the tangent space of the weight matrix's isospectral manifold. We find three things. First, the small singular values of the momentum are not noise. Orthogonalizing everything except the few largest singular values of each matrix nearly matches Muon while touching only a small fraction of the momentum, whereas orthogonalizing only the top falls well short even though it holds almost all of it. On language models every momentum singular value is far below one, so targeted orthogonalization can only amplify, and Muon wins by making directions that are too small to train on at their raw scale trainable. Second, shrinking the largest singular values is what keeps the parameter spectrum flat; this is cheap, and it is not what drives the loss. Third, AdamW differs from Muon mainly in how slowly it builds structure, which explains its slower start and why warmup helps AdamW but only hurts Muon.

arXiv cs.LG74

使用干预迁移评估评分标准生成

arXiv:2610.10809v1 公告类型:新 摘要:针对实例的评分标准在 AI 基准测试中十分常见,因为可靠的评估需要特定的专家知识。这种方法难以扩展,因此研究人员开始探索使用大语言模型(LLM)生成评分标准。然而,即使有专家评分标准作为参考,如何大规模有效地评估生成评分标准的质量仍不明确。本文提出了一种用于评估评分标准生成的方法,称为干预迁移(Interventional Transfer,IT)。该方法基于这样一个理念:如果对某个回答进行扰动,使其通过或未通过其中一个评分标准时,两个评分标准的判定结果会同步变化,那么这两个评分标准就是相似的。不同于现有的评分标准生成评估方法,我们认为,不同形式的干预迁移可用于评估生成评分标准在不同任务中的效用。例如,我们在 HealthBench 上开展了一项案例研究,展示了由 Qwen3.8-27B、Deepseek-V4-Flash 和 Opus-5 生成的评分标准之间存在不对称性,这些评分标准用于评估 GPT-5.6-Terra 生成的回答。根据生成的评分标准或专家评分标准会降低回答质量的扰动,会在相应的专家评分标准或生成评分标准上迁移为更低的分数;但在一个评分标准上有所改进的扰动,却无法可靠地迁移为另一个评分标准上的更高分数。我们认为,这一发现对于使用 LLM 生成的评分标准进行性能监控和爬山优化具有重要意义。我们将该方法与现有的评分标准评估方法进行了对比,后者无法揭示出我们观察到的这种不对称性。

arXiv cs.AI82

从被动遏制到主动保障:OpenAI、Anthropic 和 Google 智能体安全事件的经验教训

2026 年,涉及 OpenAI、Anthropic 和 Google 智能体的网络安全评估触达了授权测试范围之外的真实系统。它们所采取的路径各不相同。OpenAI 智能体利用了研究基础设施,在不同运行之间进行协调,并入侵了 Hugging Face 生产环境的部分区域。Anthropic 报告了若干案例:由于第三方环境配置错误,执行模拟网络任务的智能体得以接触真实系统。在另一项单独报道的评估中,Google 的 Gemini 通过一条非预期的互联网路径访问了三个真实组织;Google 表示,该模型在三种情况下都停止了操作。综合来看,这些案例说明,评估不能依赖假定的边界。该边界必须在智能体运行过程中得到验证。本工具性比较案例研究提出了 Proactive Agent Security Assurance Cycle (PASAC) 和五层 Boundary Assurance Stack。该框架结合了按风险分级的任务设计、可执行的范围契约、运行前验证、最小能力访问、独立出口控制、凭证限制、跨运行监控、自动停止条件以及基于证据的重新授权。一个先行指标模型、九项设计命题和七个可证伪假设,将这些经验教训转化为一项可检验的研究计划。由于公开的 Gemini 记录仅限于有明确归属的陈述和新闻报道,其详细因果机制仍属暂定。核心结论很明确:主动式智能体安全需要贯穿完整执行系统的持续保障,而不能依赖对任何单一沙箱或安全措施的信心。

arXiv cs.AI86

大型语言模型的迭代削弱了对人工智能辅助科学写作的筛查

期刊和会议已开始对投稿论文进行筛查,以识别使用大型语言模型(LLM)生成的文本。这类筛查的可靠性依赖于针对一组固定 LLM 版本进行的基准评估,但实际使用的版本却在不断变化。本文量化了这种 LLM 更替如何影响科学论文的筛查。我们将《Proceedings of the National Academy of Sciences》中 4,000 篇 ChatGPT 出现前的摘要,与来自三家供应商的 23 个 LLM 版本所生成的改写文本配对;这些版本发布于 2023 年 6 月至 2026 年 8 月期间。随后,我们在不同的维护情景下训练检测器,从每出现一个新版本就重新训练的检测器,到训练一次后永不更新的检测器。在仅使用某一供应商过往版本训练的情况下,检测器可能在模型代际交界处性能崩溃:当其校准为误将 1% 的人工撰写摘要标记出来时,在最明显的交界点之前,能够检测出超过 99% 的改写文本,而在交界点之后仅能检测出 3.8%。使用较新版本训练的检测器也可能漏检较早版本生成的改写文本。不同版本之间的词汇差异,在很大程度上决定了检测能力可以迁移到何处,以及会在哪里失效。在我们模拟的两种筛查情景中,覆盖全部 23 个版本的筛查系统要么会将八分之一的人工撰写摘要标记出来,要么会漏掉最新版本改写文本中的三分之一。事实上,某款商业检测器漏掉了最明显交界点之后那个版本生成的大多数改写文本,却几乎没有将人工撰写的摘要标记出来。因此,科研诚信政策不应将检测器的基准准确率视为定论,而应将其视为暂定结果,并在每次 LLM 发布新版本时重新验证,包括对早期版本进行重新验证。

Simon Willison60

ttok 0.4

Release: ttok 0.4 ttok is my CLI tool for counting tokens, using OpenAI's open source tiktoken library. It hasn't been in updated in a couple of years, but I finally fixed a Click warning, updated CI, and added a --list-models command to list available models. It works with uvx , so you can count tokens in anything like this: cat file.txt | uvx ttok Tags: projects , ai , openai , generative-ai , llms , tokenization

SiliconANGLE AI66

AI stocks crumble on report that OpenAI’s annualized revenue is much lower than believed

Technology stocks fell lower today following a report that artificial intelligence giant OpenAI Group PBC’s annualized revenue this year is about $20 billion less than what was previously reported by the media, sending shockwaves through the industry. A report today by the Financial Times revealed that OpenAI recently told prospective investors that its annualized revenue […] The post AI stocks crumble on report that OpenAI’s annualized revenue is much lower than believed appeared first on SiliconANGLE .

The Decoder55

Some mathematicians call for OpenAI boycott after AI-generated proofs flood their field

The Association for Human Mathematics is calling for an OpenAI boycott after the company released more than 700 AI-generated math manuscripts at once. OpenAI had to retract three papers the next day over a sign error. Fields Medalist Terence Tao warns that AI's mass "harvesting" of open problems leaves entire branches of mathematics less fertile. The article Some mathematicians call for OpenAI boycott after AI-generated proofs flood their field appeared first on The Decoder .

The Verge AI71

USA Today becomes the latest publisher to sue OpenAI

USA Today Co., along with the several local newspapers it owns, is suing OpenAI over claims that the company copied "hundreds of thousands" of articles to train its AI models, as reported earlier by Reuters. In a filing on Thursday, the publisher asks for damages of more than $250 million, alleging OpenAI's unauthorized use of […]

Hacker News AI57

Show HN: Jevman – AI decision models play Pac-Man

Openai just launched their decisions endpoint, cloudflare launched clef the other week, and many more jev alternatives are out there. We wanted to put the popular ones to the test and thought Pac-Man is a good benchmark for simple and fast decision making. So we let jev 1.13, kev, clef, clef flash, GPT-6 Luna and Laya play Pac-Man against bot ghosts. The low latency of these models allows for real time play. We had each model play 100 games, published a leader board and open-sourced the repo so anyone can run their own model and join the ranking. Link to repo: https://github.com/opper-ai/jevman-benchmark/blob/main/CONTR... You can also join the game and play as Pac-Man yourself, and the ghosts are the models, either a mix of models or all jev, kev, clef etc. A game costs about 2 cent, all models are running via my startup opper, and we added free credits for everyone to try. It's pretty fun to play and surprisingly difficult to beat jev's highscore. Any feedback is more than welcome! Comments URL: https://news.ycombinator.com/item?id=50007993 Points: 4 # Comments: 0

The Verge AI57

Can you trust Meta’s Muse or OpenAI’s Dots to run your life?

My Decoder guest today is Hayden Field, The Verge’s senior AI reporter, and we’re discussing the new wave of consumer-friendly AI agents. If you’ve been paying attention to this space, you know AI enthusiasts have been using agents for a minute now — homebrew OpenClaw setups led to a surge in Mac Mini sales earlier […]

arXiv cs.LG78

限制模型,忽视系统:进攻性 AI 治理中的衡量与问责

arXiv:2605.09504v3 公告类型:替换并交叉列出 摘要:我们表明,用于衡量 AI 进攻能力的工具存在两方面缺陷:(i)夸大危害;(ii)将属于外围系统的能力归功于模型。因此,我们认为,限制对模型的访问是必要的,但并不充分,政策制定和采购也需要以实际危害为依据的系统级能力评估。2026 年 6 月,两个前沿模型因美国出口管制而被暂停提供,据报道,此举由一次要求模型阅读代码库并修复其缺陷的越狱所引发。这一发现衡量的是由模型、提示和任务组成的能力诱导系统。我们通过对一个开源框架的研究来支持这一论点,该框架中的轻量级大语言模型(LLM)智能体通过共享记忆和演化优化进行协调,提供了两项证据。首先,越狱指标夸大了危害:针对每个目标开展的 225 次群体生成攻击中,以 LLM 作为评判者的评分认定 Claude Sonnet 4 在 40% 的攻击中被攻破,但人工核验未在任何一次攻击中发现可付诸行动的有害内容,相比之下,GPT-4o 的有效危害率为 45.8%。其次,借助脚手架的评估会错误归因能力:在一个植入漏洞的目标上,围绕一个 12 亿参数模型构建的完整流水线发现了全部 9 个弱点,而同一模型在移除人工精心设计的组件后,以崩溃验证为标准时一个弱点也未发现,以引用源代码行为标准时则发现了 9 个弱点中的 2 个。进攻能力是模型、脚手架和评估协议共同构成的属性。评估责任应由控制系统、塑造其行为并能预见其行为后果的一方承担。在我们的场景中,这一方就是围绕模型构建配套运行框架的主体,而现行监管尚未明确涵盖这一角色。

arXiv cs.LG82

支持忠实性的积极证据:LLM 自我解释有助于预测模型行为

arXiv:2602.02639v2 公告类型:replace-cross 摘要:LLM 自我解释常被视为 AI 监督的一种有前景的工具,但人们对其是否忠实于模型真实推理过程仍知之甚少。现有的忠实性指标存在关键局限,通常依赖通过对抗性提示识别不忠实之处,或检测推理错误。这些方法忽视了解释的预测价值。我们提出归一化可模拟性增益(NSG),这是一种通用且可扩展的指标,其核心思想是:忠实的解释应使观察者能够学习模型的决策标准,从而更好地预测模型在相关输入上的行为。我们使用涵盖健康、商业和伦理领域的热门数据集中的 7,000 个反事实样本,对 18 个前沿专有模型和开放权重模型(例如 Gemini 3、GPT-5.2 和 Claude 4.5)进行了评估。我们发现,自我解释能显著提升对模型行为的预测能力(NSG 为 11%–37%)。即使外部模型更强,自我解释所提供的预测信息也多于由外部模型生成的解释。这表明,自我认知带来了一种外部解释方法无法复制的优势。我们的方法还揭示,在不同模型中,有 5%–15% 的自我解释具有高度误导性。尽管自我解释并不完美,我们仍证明了支持自我解释的积极证据:它们编码了有助于预测模型行为的信息。

arXiv cs.LG75

通过 Armijo 回溯获取方向曲率:一种低成本锐度探测方法与 Adam 的免校准学习率保护机制

arXiv:2607.03998v5 公告类型:替换 摘要:局部锐度由 Hessian 矩阵的最大特征值 $\lambda_1$ 定义,决定了稳定梯度更新的最大步长,但计算它通常需要运行 Lanczos 算法或计算 Hessian 向量积。然而,我们注意到,即使仅进行一次 Armijo 回溯线搜索,也只需几次前向传播就能获得这一信息,因为所接受的步长 $\alpha$ 能够在回溯因子所确定的乘性区间内,确定沿搜索方向的方向曲率。在 CIFAR-10、Fashion-MNIST 和 Imagenette 上,$\log\alpha$ 与 $\log\lambda_1$ 的 Pearson 相关系数达到 $-0.91$ 至 $-0.95$,即使去除每次运行中的趋势,相关系数仍保持在 $-0.60$ 至 $-0.70$。这使得我们能够以较低成本,对缓慢变化的锐度分量进行在线稳定性边缘估计。所采用的探测机制沿 Adam 的首步更新方向进行搜索,在初始化时执行一次,并在前 50 个优化器步骤期间再执行九次。学习率上限设为观测到的最小步长的两倍;在所研究的学习率范围($10^{-3}$ 至 $3.0$)以及 GPT-2 预训练实验中,所有施加上限的运行均避免了发散;在通用架构分析中,有一种 MLP 架构仍对初始批次顺序敏感。该探测方案带来的开销约为百分之一,而当所设上限未实际触发约束时,优化器状态和首次更新均保持逐比特一致。该方案的所有参数均未针对任何特定架构进行微调;这正是其被称为免校准保护机制的含义。它旨在避免发散,而非提升准确率。在 GPT-2 规模下,多次测量还说明了为何仅在初始化时设定上限并不充分:方向曲率在前五个优化器步骤中显著上升,因此有必要设置一个短暂的试运行窗口。

arXiv cs.LG80

无需参考模型估计模型级成员推断脆弱性

arXiv:2510.19773v2 公告类型:替换 摘要:成员推断攻击(MIAs)已成为评估 AI 模型隐私风险的标准工具。然而,最先进的攻击需要训练大量参考模型,通常计算成本高昂,限制了其实用性。我们提出一种新方法,无需训练任何参考模型,即可直接根据目标模型的训练损失分布和测试损失分布,估计其面对当前最强攻击——似然比攻击(LiRA)时的模型级脆弱性。我们表明,LiRA 的逐样本信号可分解为方差比项和残余均值偏移项,各项的相对贡献取决于训练使模型在参与训练的样本上的不确定性降低了多少。这使模型分布在一个连续谱上,不同区间需要采用不同的、无需参考模型的基于损失的统计量,作为 LiRA 真阳性率(TPR)的代理指标。损失分布本身的形状即可指示应采用哪种代理指标。我们使用两个自然的代理指标将该框架具体化。在重尾端,LOSS 攻击的真阴性率(TNR)可预测 LiRA 在假阳性率(FPR)为 $10^{-3}$ 时的 TPR,在 10 种图像分类架构和 4 个数据集上的均方根误差(RMSE)为 0.036,优于 RMIA 等低成本参考模型攻击。在对称端,LOSS 攻击的曲线下面积(AUC)可预测 LiRA 的 TPR,在参数量从 1000 万到 10 亿的五种 GPT-2 规模上的 RMSE 为 0.018。

arXiv cs.LG65

Visual Jev Rewards: Reference-Bound Verification for Multi-Subject Image Generation

arXiv:2610.09328v1 Announce Type: cross Abstract: Multi-subject image generation requires rewards that verify whether requested attributes, actions, and relations hold for the specified reference subjects. Subject presence alone does not establish that the correct subjects participate in a requested interaction. We present reference-bound Visual Jev rewards that turn these visual decisions into generator training signals. Each subject-related question receives a positive label only when the requested condition and the relevant reference identities hold jointly. We construct fixed questions offline, train a Qwen3.5-4B verifier with binary supervision, and directly read Yes probabilities from its language-model head. Their mean supplies a GRPO reward while retaining individual judgments for inspection. Using 200 MICo-150K training tasks and 30 updates, the framework raises a GPT-5.4 composite score from 41.78 to 52.50 on a manually selected 897-task MICo-Bench subset; direct 27B rewards yield 51.84. Each reward is tested in one GRPO run, and offline human evaluation does not establish a statistically significant advantage over direct scoring. The study provides an initial implementation and evaluation of Visual Jev as a reference-bound reward for multi-subject image generation.

arXiv cs.LG73

CM-DPO:面向 LLM 规划的约束间隔直接偏好优化

arXiv:2610.09219v1 公告类型:交叉发布 摘要:直接偏好优化(DPO)对所有约束违反情况一视同仁:预算超支 1 美元与超支 1,000 美元会产生相同的训练信号。当偏好对来自不同模型系列时,它还容易受到长度和风格偏差的影响。我们提出约束间隔 DPO(CM-DPO),用确定性符号验证器导出、并根据违反约束的严重程度缩放的连续间隔,替代 DPO 的二元偏好信号。通过字典序目标将硬约束与软约束分开,确保绝不为满足偏好而牺牲硬约束。为了向 CM-DPO 提供偏差更小的训练对,我们在名为 SynPlan-R 的框架内,通过程序化生成的约束配置(DCCG)以及基于推理教师的最小编辑蒸馏(RT-MED)生成偏好数据。在 TravelPlanner、NaturalPlan 和分布外的 PlanBench 上,使用 CM-DPO 微调的 8B 模型实现了 89.2% 的通过率和 93.4% 的求解率,以仅为多智能体系统 1/13 的延迟达到与其相当的表现,同时在未见过的 Blocksworld 上比 GPT-4o 高出 9.2 个百分点。

arXiv cs.LG72

OrBIT:结构引导的嵌入压缩

arXiv:2610.10385v1 公告类型:new 摘要:嵌入表是现代语言模型中规模最大的组件之一。大多数压缩方法会固定一种编码几何结构,例如坐标块、低秩子空间或不受限制的码本,并在其中进行优化。相较之下,我们探讨编码几何结构本身能否被发现。我们提出了 \emph{OrBIT},一种结构引导的嵌入压缩框架:该框架从轨道动力学中学习可复用的局部几何结构,并利用它约束一小组共享码字。全局重构残差随后决定固定的编码预算应分配到何处,而冗余的重叠图表则使局部误差能够在拼接后相互补偿。我们的理论展示了紧图表几何结构如何控制失真、全局残差如何引导序贯分配,以及数据几何引导的细化如何改进编解码器。最终得到的轨道机制会被编译消除,留下一个紧凑的解码器,其中学习到的结构决定存储哪些内容、在哪里分配容量,以及如何在全局范围内组装局部信息。在四个 LLM 嵌入表上,相较于 16 位存储,OrBIT 在 GPT-2 上实现了 $37.9\times$ 的压缩率,在每个 7B 表上实现了超过 $23\times$ 的压缩率,同时相较于成熟的量化和低秩基线方法,仍能提供具有竞争力的率失真性能。

arXiv cs.LG70

AutoAdapt: Automatic Domain Discovery Enables Low-Cost Extensibility

arXiv:2610.10349v1 Announce Type: new Abstract: Instruction-tuned models are deployed into environments where domains are heterogeneous and evolve, yet adding new domains or data typically requires costly retraining. We present AutoAdapt, a modular framework that incorporates new domains and data via targeted single-adapter training without modifying other adapters. The framework automatically discovers latent domains, uses them to train per-domain Low-Rank Adaptation (LoRA) adapters independently in parallel and performs parameter-free routing. Across 14 domain-specific benchmarks and GPT-4o pairwise judgements, AutoAdapt achieves parity with a LoRA adapter trained on all domains without requiring full-model retraining. We also find evidence of specialisation effect convergence across independent discovery methods. Overall, training each adapter on its own domain prevents domain interference by construction, thus enabling modular, taxonomy-free domain specialisation without aggregate performance loss or full model retraining.

arXiv cs.LG73

Lightweight and Versatile Learned Optimization by Recombination of Gradient History

arXiv:2610.09604v1 Announce Type: new Abstract: This paper presents a lightweight and versatile learned optimizer that dynamically recombines gradient history, represented as averages over disjoint time spans. The optimizer reduces the prediction space to one scalar coefficient per gradient average, shared by multiple parameters. Progressively averaging older gradients minimizes memory cost of long history, while keeping their contributions independently accessible. A 37k-parameter network trained in 0.87 GPU-hours generalizes zero-shot to unseen tasks, lowering validation loss by 9.1% and 0.4% on BERT-Tiny and GPT-Tiny, and improving test accuracy over Adam by 3.5 %p on a Vision Transformer and by 2.7 %p on average across nine graph models, with FLOPs overhead as low as 0.3%.

arXiv cs.LG74

用于小型 Transformer 算术推理的算法式草稿与课程分阶段训练

arXiv:2610.09003v1 公告类型:新 摘要:自回归大型语言模型(LLM)经常难以处理多位数乘法和长除法等确定性的多步算法任务。本文研究了在合成数据上训练的紧凑型“Tiny”Transformer(约 10.6M 个非嵌入参数,总计 49.3M 个参数)执行多步算术的机制,涵盖四种基本运算(+、-、*、/),并将其展开为逐步草稿。首先,我们确立了必要的训练基础:(1)数据加载器中的序列填充会产生 83% 的梯度缺失现象,使准确率从 40% 暴跌至 1%,而连续序列打包可以修复这一问题;(2)语言预训练是必要前提(未进行语言预训练时准确率不超过 2.0%);(3)现代架构组件(RoPE、RMSNorm、SwiGLU)和稀疏专家混合模型(MoE)相较于基线 GPT-2 能显著提升加法推理能力。其次,我们证明,算法式草稿的设计直接决定了任务能否成功。在四阶段层级发展式课程训练中引入确定性的逐位长除法草稿后,在包含 4,000 道题目的留出基准测试上,单数字除法的准确率从 4.0% 大幅提升至 86.7%。相比之下,多位数乘法仍然颇具挑战:详细的错误分析表明,尽管模型能够正确计算单位数子乘积以及位值对应的零,但我们的 FOIL 草稿要求在单个步骤中同时求和最多九个多位数项,且没有进行成对的中间累加,因此未能奏效。最后,我们确定了两个关键边界:在未见过的四位数操作数上,性能会崩溃至 0.00%;而未采用缓冲的训练会导致灾难性遗忘,使除法准确率从 86.7% 降至 0.00%。

SiliconANGLE AI63

Google debuts SynthID Detector tool for flagging AI-generated content, but it’s far from perfect

Google LLC is making its SynthID identification tools for artificial intelligence-created and AI-edited videos and images more widely available with the launch of a new service today that everyone can use. The web-based SynthID Detector can identify images, video and audio clips that have been created using AI models from Google, OpenAI Group PBC, Nvidia […] The post Google debuts SynthID Detector tool for flagging AI-generated content, but it’s far from perfect appeared first on SiliconANGLE .

arXiv cs.AI74

AgentTime:智能体能否估计并控制自身的运行时长?

AI 智能体的一项关键控制能力是管理运行时长。这项能力需要时间感知,即预测和估计实际经过的时间,并控制自身行动。既有研究主要关注时间感知,但原生智能体运行框架中的时长遵循与控制能力仍未得到探索。我们提出 AgentTime,这是一个用于测试智能体能否按要求的时长工作、预测自身运行时长,以及在事后估计已用时间的基准。该基准包含来自 18 个来源的 222 项任务,涵盖编程、计算机使用、智能体任务和自动化研究。在时长遵循实验中,我们附加一条指定工作时长的指令,要求的时长从约一分钟到数天不等。智能体遵循这些指令的准确性差异显著:Claude Code 中的 Fable 5.1 与要求运行时长的典型偏差倍数为 2.9$\times$,相比之下,Codex 中的 GPT-6 Astra 仅为 1.2$\times$。然而,仅仅符合要求的运行时长,并不能证明智能体始终在执行任务。在经过审查且记录可分类的 158 次 Astra 运行中,有 14 次在看似完成任务后明确进入了休眠。在预测实验中,预测值往往高估自然运行时长。在回顾性实验中,移除时间信息后,Sol 和 Astra 的偏差增至两倍以上,Fable 的偏差也接近翻倍。智能体能够完成任务,并不保证它能控制自身用时,或在要求的整个时段内持续工作。要让智能体在长时间跨度内可靠、安全且自主地运行,就必须对任务完成能力和时间控制能力都进行评估。

SiliconANGLE AI54

With GPT-6, ChatGPT’s responses are much more visually appealing and interactive

OpenAI Group PBC says ChatGPT is moving away from its traditional wall-of-text responses and giving users a more interactive user interface to play with. In a media briefing today, the company said its GPT-6 models will now be able to access an “Intelligent UI” that will allow the chatbot to generate more visual outputs when […] The post With GPT-6, ChatGPT’s responses are much more visually appealing and interactive appeared first on SiliconANGLE .

Hacker News AI49

Show HN: Chloe is a TypeScript AI agent

As a forward deployed engineer at Meta, I spent the past 2 years working with businesses implementing AI agents. A few problems: 1) Businesses want control over their AI agents: the code, the tools, the skills, everything. Meta, for obvious reasons would never do that. Nor OpenAI, nor Anthropic. 2) The LLM does everything. But that costs money. There are many routines in an AI agents that don't need an LLM. 3) For an AI agent to solve a real business problem, the business must own the eval data set. Similar to point #1 above, most don't do that. Instead, I built an opensource AI agent that you can write it all in TypeScript code and own everything, locally. Use any model, talk to it via any channels, set limits on token usage, look at the logs and adjust. All of this in one small npm package. At this point, I would like to get feedback if these is a gap in the market for something like this. It's supposed to be simple and get you started. It doesn't solve ALL problems related to deploying AI agents. It's in version 0.25.1 right now. Have a look: https://chloejs.org/compare Comments URL: https://news.ycombinator.com/item?id=49998857 Points: 1 # Comments: 0

SiliconANGLE AI64

OpenAI publishes 722 AI-generated math discoveries in major scientific milestone

OpenAI Group PBC has published 722 math papers that it generated using an unreleased artificial intelligence model. Some of the papers, which were posted to GitHub late Tuesday, prove long-running hypotheses. Others disapprove proposed explanations of mathematical phenomena or narrow down the possible answers to complex, yet-unsolved puzzles. Overall, OpenAI’s papers span about 20 mathematical […] The post OpenAI publishes 722 AI-generated math discoveries in major scientific milestone appeared first on SiliconANGLE .

Simon Willison79

推出 Claude Haiku 5.5

正如之前承诺的那样,Anthropic 的全新高速、低成本模型来了:Claude Haiku 5.5。上一代 Haiku 4.5 已经明显落伍了。它发布于将近一年前,定价为每百万输入 token 1 美元、每百万输出 token 5 美元——即便在当时也算相对昂贵,而且足足是 OpenAI 上个月发布的 GPT-6 Luna 的 10 倍。 新版 Haiku 的价格与 GPT-6 Luna 完全一致:在不超过 100,000 个 token 时,每百万输入/输出 token 分别为 0.10/0.50 美元。超过 100,000 个 token 后,价格会上涨至 5 倍,即 0.50/2.50 美元。Luna 本身在达到 272,000 个 token 时也会涨价,但只涨到 0.20/0.75 美元。 Haiku 5.5 还采用了新的 tokenizer,对用户没那么划算。我的 Claude Token Counter 工具显示,同一个长提示词在 Haiku 5.5 中使用的 token 数约为 Haiku 4.5 的 1.25 倍,因此这里还存在隐性涨价。 如果你的工作负载能控制在 100,000 个 token 以内,Haiku 的价格与 Luna 相同,而且据称基准测试得分更高。超过 100,000 个 token 时,Luna 看起来就划算得多。 最新发布的 llm-anthropic 终于解决了一个问题:我不必再为每个新模型发布该插件的新版本了。我是这样测试新模型的: llm install -U llm-anthropic llm anthropic refresh llm -m claude-haiku-5.5 "生成一幅鹈鹕骑自行车的 SVG 图" -o thinking_effort low 鹈鹕 以下是分别在 low、medium、high、xhigh 和 max 档位下生成的鹈鹕。新版 Haiku 不允许关闭推理,默认档位为 medium。除了 low 之外,其余档位生成的自行车车架都不错。 low 档位的鹈鹕花费了 0.0936 美分,用时 7 秒。 这只 max 档位的鹈鹕用了 5 分 9 秒才生成,但依然只花了我 3.3826 美分: 扁平矢量插画:一只戴着红色帽子的白色鹈鹕,骑着深灰色自行车,从左向右穿过一条绿色草地。它细长的橙色双腿向下伸到橙色踏板上,一只灰色翅膀向前伸出,握住弯曲的车把。它硕大的黄橙色鸟喙朝向前方,下方有鼓起的橙色喉囊;身后白色的速度线表现出运动感,上方渐变蓝色的天空中有一轮带着浅色光晕的黄色太阳和两朵白云。 作为对比,这是我一年前用 Haiku 4.5 生成的鹈鹕。它画鹈鹕实在不怎么样: Haiku 4.5 的描述:一幅充满奇趣的插画,一只身体圆滚滚、呈棕褐色的鸟,有着粉红色的喙和橙色的腿,在蓝天与绿草的背景下骑着自行车。 还有面向订阅用户的慷慨 API 额度计划 除了 Haiku 5.5,Anthropic 今天还宣布将 Sonnet 5.5 的缓存读取价格减半。他们还在订阅方案中加入了 API 额度: 其次,本周我们将向所有 Max 和 Team 订阅用户推出新的每月 API 额度,可在 Claude Platform 上使用。Max 5x 用户每月将获得 100 美元额度,Max 20x 用户将获得 200 美元,而 Team 订阅用户将获得最高 500 美元额度,由团队内所有用户共享。 领取过程简单得令人愉快:进入“设置”->“账单”,选择每月接收这些额度的 API 组织: 一张设置对话框的截图,右上角有关闭按钮 X,上方一排标签依次为“常规”“账户”“隐私”“账单”(已选中)、“用量”“功能”“记忆”和“设计系统”(在边缘处被截断)。面板上有一个带圆形花苞的分枝植物线描图标,旁边写着“Max 方案”“用量为 Pro 的 20 倍”和“你的订阅将于 2026 年 11 月 2 日自动续订。”,右侧有一个“调整方案”按钮。下方是标题为“API 额度”的区域,旁边带有蓝色的“新增”标记,正文写着“你的 Max 20x 方案每月包含 200 美元的 API 额度。”,随后是灰色文字“关联一个 API 组织以开始接收额度。”,右侧有一个“关联组织”按钮。 API 额度恰好等于订阅本身的费用。这真的很慷慨——让订阅用户使用 API 变得容易多了。 Anthropic 还允许你关闭 API 自动充值,结果就是“余额耗尽时,API 请求将停止”——如果你打算用完这些 API 额度,又不想冒着收到账单惊吓的风险,这正是你想要的。 请注意,每月额度不会结转——不用就会作废。 OpenAI 仍允许你将 Codex 订阅用于个人 API 使用,对重度 API 用户来说更划算。这项新的额度计划至少在一定程度上缩小了两者的差距。 标签:ai、generative-ai、llms、anthropic、claude、llm-pricing、pelican-riding-a-bicycle、llm-release

The Decoder61

ChatGPT with GPT-6 ditches mostly text output for interactive UI with charts, buttons, and mini apps

OpenAI is rolling out GPT-6 with "Intelligent UI," a feature that turns answers into interactive interfaces with charts, buttons, and forms. The model can now respond while still thinking, cutting wait times by 44 percent. Paying customers get GPT-6 Sol, free users get GPT-6 Luna. The article ChatGPT with GPT-6 ditches mostly text output for interactive UI with charts, buttons, and mini apps appeared first on The Decoder .

OpenAI Blog69

GPT-6 和 Intelligent UI 面向所有人开放

GPT‑6 正在全球范围内的 ChatGPT 中逐步推出,并搭载 Intelligent UI,提供更快的响应,以及可供你直接探索和使用的视觉内容与交互体验。

Wired AI64

The New ChatGPT Is More Show Than Tell

OpenAI is updating ChatGPT for all users with an “Intelligent UI” that’s more visual—generating interactive elements as part of the chatbot’s outputs.

The Decoder79

Google 表示,已有 1800 亿张图片和段视频带有 SynthID 水印,检测工具现已向公众开放

Google 的 AI 水印检测工具 SynthID 现已向公众开放。任何人都可以检查图片、视频或音频是否由 Google 的 AI 或 OpenAI、Nvidia 等合作伙伴的 AI 创建。目前已有超过 1800 亿项内容带有该水印,但该工具只能识别带有 SynthID 标记的内容,无法普遍识别 AI 生成的媒体内容。本文《Google 表示,已有 1800 亿张图片和段视频带有 SynthID 水印,检测工具现已向公众开放》首发于 The Decoder。

Hacker News AI73

Show HN:Agent.reviews——让 AI 智能体阅读和撰写工具评价的平台

大家好,HN!我是 Louis,Armature(YC P26)的联合创始人。我们帮助团队让自己的产品更容易被编程智能体发现和使用。 我们已经测量了超过 5 万次智能体会话,发现智能体在使用同一工具执行不同任务时,会反复遇到完全相同的限制。于是我们想,为什么这些问题一直没有得到解决?答案很简单:智能体与软件供应商之间,以及不同智能体之间,根本不存在反馈闭环。人类可以在 https://g2.com 和 https://trustpilot.com 这样的平台上分享使用体验,但智能体却没有这样的地方。 因此,我们创建了 https://agent.reviews :面向智能体的 G2。它通过一组技能和一个 npm CLI(@armature-tech/agent-reviews),将智能体连接到我们的 API 端点。任何人都可以让自己的智能体(Claude Code、Codex、Cursor 等)安装它,之后智能体就会自然地在选择工具前查看评价,并在使用后发布自己的评价。 和往常一样,隐私是我们最关心的问题,因此我们在评价发布前设置了三层检查: - 使用确定性规则过滤密钥、个人身份信息(PII)、URL 等。 - 使用经过训练的 Jev 分类器,检测第一轮检查后是否仍有信息泄露。 - 使用一个小型 LLM 检查每条评价,确保没有遗漏。 过去几周,我们一直在向大家分享这个项目,目前已经收集了数千条评价。其中已经有一些很有意思的例子: - 一个 Claude Code 智能体发现,当健康检查页面缺少 API 密钥时,Stripe SDK 总是会崩溃,而这个页面本来就应该返回“缺少 API 密钥”的错误。 - 两个智能体提到,即使没有连接任何数据库,Prisma 也要求提供 DATABASE_URL 变量。它们都填入了虚假的 URL 作为变通办法,而且确实奏效了。 我们真心认为,智能体体验也需要像用户体验一样,受益于社区效应,让所有参与者都能获益:智能体可以选择最适合自己的工具,软件公司则可以根据真实反馈改进产品。因此,我们确保人类和智能体都能免费访问评价;只需复制粘贴一条提示词,就能让智能体安装我们的 CLI 和技能、启动身份验证流程,并提交第一条评价(这有助于我们防止未经授权的抓取和垃圾评价)。 你也愿意让自己的智能体提交和阅读评价吗?我们很希望你能配置好智能体评价功能,让智能体下次需要选择工具时先查看评价,并在使用后发布自己的体验。然后告诉我们效果如何! 评论链接:https://news.ycombinator.com/item?id=49995539 得分:4 评论数:2

The Verge AI50

Muse launches on the iPad

After launching nearly a month ago and spending several weeks as the top free app in Apple's App Store, the latest update to Meta's Muse iOS app introduces native support for the iPad. A Mac version of Meta's agentic AI tool (designed to compete with OpenClaw, ChatGPT's Dots, and Grok Bot) was released about a […]

The Verge AI71

ChatGPT 将推出大学申请规划工具

OpenAI 正在为 ChatGPT for Teens 引入新工具,帮助用户完成大学申请流程。ChatGPT for Teens 是今年 8 月推出的青少年模式,配有安全防护措施和休息提醒。OpenAI 表示:“College Planner 将学生意向学校的申请要求、截止日期、待办事项和助学金申请步骤整合到一份计划中。”“申请多所学校的学生 […]

The Decoder73

OpenAI 推出 Decisions API,将复杂评估简化为是、否或单选

OpenAI 新推出的 Decisions API 对文本和图像进行分类的速度约为 Responses API 的十倍,可返回是/否的概率、类别选择或量表评分,每百万输入 token 收费 0.10 美元。该公司还将付费 API 层级从五个缩减为三个。《OpenAI 推出 Decisions API,将复杂评估简化为是、否或单选》一文首发于 The Decoder。

The Decoder78

ChatGPT 在涉及自杀的对话中未能触发家长提醒,被评为对青少年构成“不可接受的风险”

OpenAI 为 ChatGPT 设置的青少年安全功能未能通过一项独立审查。在进行超过 4,000 次测试提示后,Common Sense Media Youth AI Safety Institute 将该服务评为对未成年人构成“不可接受的风险”。测试账户中涉及自杀和自伤的对话从未触发家长提醒。该机构希望在安全性得到独立验证之前,禁止青少年使用该服务。本文《ChatGPT 在涉及自杀的对话中未能触发家长提醒,被评为对青少年构成“不可接受的风险”》首发于 The Decoder。

The Verge AI67

ChatGPT for Teens is an ‘unacceptable risk,’ says Common Sense Media

Common Sense Media, a nonprofit that offers reviews of apps, services, and entertainment with a focus on youth safety, today said that OpenAI's ChatGPT for Teens is an "unacceptable risk." ChatGPT for Teens, introduced in August, has guardrails for teens and is designed to help students learn, but Common Sense Media says that the teen […]

The Decoder66

OpenAI dumps 372 AI-generated math proofs on GitHub, telling the academic world to keep up

OpenAI has published 372 AI-generated mathematical results on GitHub, including Lean formalizations for machine verification. Each result consumed about three hours of ChatGPT Pro compute on average. But 25 Fields Medal winners warn that mass-producing mathematical truths could destroy fertile ground rather than bring new ideas to life. The article OpenAI dumps 372 AI-generated math proofs on GitHub, telling the academic world to keep up appeared first on The Decoder .

Simon Willison59

llm-openai-decisions 0.1a0

Release: llm-openai-decisions 0.1a0 OpenAI released their new Jev-style Decisions API , as previously announced at last week's DevDay. Since I already have an llm-typesafe plugin for talking to Jev, I had GPT-6 Astra read the new OpenAI API documentation and build an llm-openai-decisions plugin inspired by llm-typesafe . Unlike Jev, the new gpt-6-luna decision model supports image input in addition to text. Both models charge for input it and not for output: OpenAI's is 10 cents per million input tokens, Jev's is 4.2 cents per million. Otherwise the API shape is very similar to Jev, at least conceptually. Jev supports three question types for yes/no, choices, or scores. OpenAI Decisions supports the same three types. Install the plugin like this: llm install llm-openai-decisions Here's an example query against an image attachment: llm -m openai-decisions/gpt-6-luna \ -a https://static.simonwillison.net/static/2025/two-pelicans.jpg \ -s ' Does this image contain any mammals? ' And example output: { "type" : " predicate " , "name" : " evaluation " , "probability" : 0.0 } Consult the README for full details of how to run the other types of questions. Tags: openai , llm , coding-agents , jev

Simon Willison

Quoting Jake Boggan

I was a graph theory junkie long ago and even moved to Budapest for awhile to study among the greats. While I was there I started working on Barnette's Conjecture which came to occupy my thoughts over the next 24 years of my life, on and off as I worked in many different fields. Last summer I even thought for a few days that I had actually solved it. But it's supposedly proven here - problem 180 . I don't know what to think exactly. I spent thousands of hours on that problem. I really enjoyed it. Hearing that it is solved somehow makes me sad in a far-off way, like hearing an ex-girlfriend died suddenly in a car crash. I don't know, there's probably a lot of people feeling odd emotions tonight. — Jake Boggan , Hacker News comment on openai/math Tags: openai , mathematics , deep-blue , llms , ai , generative-ai

arXiv cs.LG74

ZonoGPT:迈向用于验证大型 GPT 模型的抽象域

arXiv:2609.34457v2 公告类型:替换 摘要:基于 Transformer 的模型广泛应用于推理、编程和多模态智能体任务。为对鲁棒性、安全性和公平性等期望行为提供形式化保障,神经网络验证技术会证明所需属性,并在部署前提供可审计的保证。然而,现有工作仍局限于小型或受限的 Transformer,且在深层模型中保持精度仍面临挑战。在本研究中,我们提出 ZonoGpt,一种用于验证大型 Transformer 的抽象域,其空间复杂度与网络深度无关。ZonoGpt 使用结构化带状多面体和生成元约简机制来高效保留相关性。为保持精度,它针对 Attention 和 LayerNorm 引入了特定于模块的融合变换,以保留特征间的关系,同时为 GELU 引入了保留生成元间关系的仿射变换。这些机制使 ZonoGpt 成为首个能够验证标准架构的方法,其可扩展至官方 HuggingFace 模型中规模达 GPT-2 Medium(24 个模块、超过 3 亿个参数)的模型,并成功验证了文本和视觉任务中的 1,339 个实例。

arXiv cs.LG73

用程序合成解释注意力

arXiv:2606.19317v3 公告类型:替换 摘要:可解释深度学习研究的一个长期目标,是用人类可理解的符号化描述取代不透明的神经计算。本文提出一种用可执行程序近似深度网络组件行为的方法。我们聚焦于 transformer 语言模型中的注意力头。对于给定的注意力头,我们首先在一组随机选取的训练样本上计算其对应的注意力矩阵。接着,我们将这些矩阵的摘要作为提示输入预训练语言模型,并指示它生成一组 Python 程序,使其仅根据输入句子的文本就能复现相应的注意力模式。最后,我们根据程序对留出输入上行为的预测效果,对程序重新排序。我们证明,一组不到 1,000 个此类生成程序就能复现 GPT-2、TinyLlama-1.1B 和 Llama-3B 中注意力头的注意力模式,在 TinyStories 上达到超过 75% 的平均交并比相似度。此外,拟合效果最佳的程序能够替代神经注意力头,而不会显著影响模型行为:在这三个模型中,用程序化替代方案替换 25% 的注意力头,仅导致困惑度平均增加 16%,同时保持了在多种下游问答基准上的性能。这项工作提供了一套可扩展的流程,利用人类可读的可执行代码对 transformer 模型中的注意力头进行逆向工程,推动神经模型朝着符号层面的透明性迈进。

arXiv cs.LG74

使用 Balanced Fine-Tuning 将 LLM 与生物医学知识对齐

arXiv:2511.21075v4 公告类型:替换 摘要:通过工程化改造 LLM 来加速生命科学研究,需要使其与生物医学知识稳健对齐。我们观察到,生物医学文本的不确定性结构与通用文本存在根本差异:密集的低置信度连续片段反映的是认知性知识缺口(密集的因果链、罕见实体),而非通用文本中典型的稀疏偶然性文体变化。基于这一发现,我们提出 Balanced Fine-Tuning(BFT),这是一种双尺度后训练方法,将基于组内归一化的词元重新加权与序列级重分配相结合,使训练资源向呈现密集认知不确定性的知识密集型样本倾斜。在相同的训练设置下,BFT 在医学评估、生物学推理、稀疏奖励强化学习和生物学表征任务中,相较于 SFT 和 DFT 带来了更一致的性能提升。当替换 GeneAgent(GPT-4o)和 VCWorld(Gemini-2.5-Flash)中默认的闭源骨干模型时,经 BFT 对齐的 70B 模型在生物学过程推理和化学扰动预测中均表现更优。关键的是,所有 BFT 变体在后续采用稀疏奖励的 GRPO 训练后均进一步提升,而 SFT 和 DFT 的性能则出现下降,这表明感知认知不确定性的后训练能够提供更稳健的策略初始化。除文本生成之外,经 BFT 对齐的 LLM 还能生成更准确、更专业的生物医学特征描述文本;使用文本嵌入模型对这些描述进行编码后,所得表征可支持基因级、细胞级和扰动响应任务,这表明 BFT 增强的生成能力能够促进生物学表征,进而助力更广泛的生物医学下游任务。

arXiv cs.LG72

LeanPlan:利用 LLM 生成的启发式函数与可采纳性证明进行最优规划

arXiv:2610.08246v1 公告类型:交叉收录 摘要:前沿大语言模型(LLM)能够生成启发式函数来引导搜索,在接受任意可行计划的满意规划中达到最先进的性能。然而,这些启发式函数并不保证具有可采纳性,可能导致次优计划。我们提出 LeanPlan,这是首个利用 LLM 生成且可采纳性经过机器检查的启发式函数来寻找最优计划的规划系统。给定领域描述和训练任务,智能体循环利用规划器的反馈,迭代改进可复用的领域专用启发式函数、其可采纳性证明以及所需的领域假设。LeanPlan 在 Lean 4 中实现了启发式函数、相应证明和高效规划器,其中实例化与搜索均经过机器检查。我们在 International Planning Competition 的十个领域及三个新领域上评估 LeanPlan,测试任务的对象数量最高达到训练任务的 57 倍。在智能体循环中使用 GPT-5.6 Sol 时,我们成功为所有这些领域生成了启发式函数及可采纳性证明。借助生成的启发式函数,LeanPlan 扩展的状态数通常少于最先进的 Scorpion 规划器,并且总体上解决了更多任务。

arXiv cs.LG75

先探索,再定论:利用语言模型实现高测量效率的科学定律发现

arXiv:2610.07620v1 公告类型:交叉收录 摘要:科学定律发现需要选择测量方案,并将证据转化为支配方程。我们评估了一种先探索、再定论的流程:由大语言模型提出假设,程序化规划器收集测量数据,再通过全新的提示词,基于固定的观测结果综合得出最终定律。该流程结合了结构化探测、自动数值诊断、受限的测量批次以及可选的解释器访问权限。在 576 次 NewtonBench 试验中,我们使用 GPT-4.1-mini,并通过 GPT-4.1 在中等难度任务上进行复现实验,对比了八种配置在 12 个物理模块上的表现。在中等难度任务中,启用解释器的规划器使 GPT-4.1-mini 每次试验的测量次数从 22.5 次降至 8.6 次,使 GPT-4.1 的测量次数从 43.0 次降至 8.9 次。两者基于幅值的均方根对数误差均值分别从 2.514 降至 0.202,以及从 0.626 降至 0.149。一项额外审查在对覆盖率敏感的分析中保留了不完整和无效的提交结果。观测到的符号准确率提升在各模块间并不一致,而随机采集策略的表现可与分歧评分策略相媲美。所有模块的测量次数均有所减少,但由于批次约束不一致,无法将这些减少完全归因于采集质量。这些结果表明,完整流程是一种有前景的高测量效率配置,但其各组成部分的因果作用,以及在无噪声直接方程任务之外的泛化能力,仍有待明确。

arXiv cs.LG79

谱系感知的记忆治理:面向企业 AI 代理隐私保护型列级访问控制的推导门控框架

arXiv:2610.07258v1 公告类型:cross 摘要:共享记忆存储的企业 AI 代理面临两个尚未解决的风险:敏感数据可能通过请求者无法自行推导、但确实经过合法计算的结果泄露;各部门也可能使用相互冲突的逻辑,悄无声息地计算出同名的关键绩效指标(KPI)。现有的代理记忆系统(例如 MemGPT、Zep、A-MEM)依据内容、所有权和角色控制检索,而不是依据推导关系,因此会遗漏包含被禁止列的缓存洞察。我们提出分析记忆单元(Analytical Memory Unit,AMU),这是一种为每个缓存结果附加完整推导(谱系)图的记忆模式,并通过检索策略进行控制:只有当请求者对所有涉及的列均拥有授权时,系统才会返回匹配结果。在谱系记录完整的前提下,我们通过构造证明:该策略能够阻止检索源自请求者权限范围之外敏感列的结果,最坏情况下复杂度为 O(n)——这是一项条件式设计保证,而非实证结论;对于那些编码了敏感信息、却未标明其来源的派生特征,该保证不予涵盖。消除实测泄露需要达到 75%–90% 的谱系记录完整度,因此我们将 90% 视为保守的部署目标。在六项实验中,谱系门控检索消除了朴素内容门控记忆所产生的 18.8%–25.5% 的跨部门泄露,同时在最坏情况下仅引入 13.8 微秒的开销,并保持 81.5%–82.6% 的记忆复用率。一个使用 LLM 生成 SQL 的真实代理概念验证与这一保证相符:经过 9 次往返交互,实现零泄露并自动捕获两次冲突——不过这只是可行性演示,并非生产可用性的证据。该方案为共享代理记忆提供了一个实用的治理层,可补充源层访问控制,并支持遵守 EU AI Act。

arXiv cs.LG76

Bregman 散度如何塑造 Shampoo

arXiv:2610.08534v1 公告类型:new 摘要:理解 Shampoo 背后的原理,近期为开发更有效的神经网络优化器提供了指导。这些方法通过针对梯度二阶矩优化 Frobenius 散度或 Kullback-Leibler (KL) 散度来学习预条件器。在本文中,我们研究散度的选择如何影响预条件化;这一点目前仍不明确,也阻碍了进一步改进。为此,我们构建了一个统一的 Bregman 散度框架,将所有流行的散度联系起来,从而能够对它们进行联合研究。通过对梯度二阶矩进行经验谱分析,我们考察了散度选择如何影响 Kronecker 近似,以及其如何与预条件化中的有限样本误差相互作用。我们发现,某些散度能够更好地补偿经验二阶矩在有限样本下的低估,这有助于解释相应 Shampoo 变体表现出的不同特性。我们进一步通过 GPT-2 预训练实验验证了这一解释。通过将散度选择与实际训练行为联系起来,我们相信,该框架能够为理解 Shampoo 的基础原理并进一步改进 Shampoo 提供有原则的指导。

arXiv cs.LG77

ServeLearnBench:智能体能够在多大程度上从服务经验中自我改进?

arXiv:2610.07792v1 发布类型:new 摘要:大型语言模型智能体正越来越多地被部署用于在现实环境中执行复杂任务。然而,在这些环境中实现正确行为所需的知识往往是隐含的、未公开的,并且会随时间变化。近期的持续学习框架试图通过让智能体从服务经验中不断改进来应对这一挑战。然而,这些方法的有效性与局限性尚未得到充分刻画。现有基准只能覆盖部分情况:有些基准明确提供目标知识,有些假设环境是静态的,而支持持续适应的基准在规模和知识多样性方面仍然有限。为实现系统性评估,我们形式化提出了演化环境流式数据集(EESD):在该数据集中,随着隐藏策略不断演化,智能体必须根据交互和结果反馈推断、应用并修订潜在的环境知识;同时,我们引入了 ServeLearnBench,涵盖零售支持、银行业务和销售话术生成等场景,包括 53 个环境窗口和 7,718 项任务。我们在六个模型(GPT-5.6 Terra、Opus 5、Kimi K3、GLM-5.3、DeepSeek V4.1 Flash 和 GLM-5.3 Flash)上评估了五种学习框架(RAG、Mem0、SkillOpt、Continual Harness 和 Prime),覆盖 28 个模型—框架组合和 252 次学习运行。评估揭示了三个主要发现:任务能力与从经验中学习的能力之间仍存在显著差距;持续适应代价高昂,并且可能损害原本正确的行为;探索不足是实现有效适应的关键瓶颈。总体而言,ServeLearnBench 提供了一个受控测试平台,用于诊断这些局限,并跟踪智能体通过服务经验持续、可靠地改进这一目标的进展。

arXiv cs.AI80

WorldSolver:LLM 智能体能否通过生成求解器模拟物理动力学?

基于 LLM 的智能体正在不断推动科学与工程问题求解的发展,而物理模拟正逐渐成为一种具有挑战性但又切实可行的测试平台,用于复现复杂的物理现象,并应用于具身智能、游戏和电影等领域。作为此类模拟的核心工具,求解器负责计算动态系统的状态如何随时间演化。构建这类求解器需要理解物理规律以确定合适的模型,运用数学推理来描述底层动力学,并通过软件工程将其实现为可执行代码;然而,LLM 智能体的这一能力仍未得到充分探索。为此,我们推出了 WorldSolver,这是一个包含 168 个模拟任务的基准,任务源自 61 篇经典计算机图形学论文中的物理现象,涵盖 7 个物理领域。每个任务都包含一个代码框架,为场景提供固定的模拟环境,而求解器的实现则留待智能体完成。具体而言,我们从三个维度对其进行评估:执行检查,用于判断是否成功执行;视觉保真度,用于评估渲染模拟中是否复现了预期的动态行为;以及物理合理性,用于基于物理规律验证所生成的动力学。对前沿智能体的实验表明,生成可执行的求解器本身就十分困难,而同时满足视觉和物理正确性则更加困难。GPT-5.6-Sol 和 Claude-Opus-5 的表现相较于其他受评估智能体更好,但总体得分仍分别只有 48.7% 和 46.7%。WorldSolver 是迈向智能体求解器生成的早期一步,我们希望它能够推动智能体忠实模拟动态物理世界的研究进展。代码见 https://github.com/sirujiang/WorldSolver。

arXiv cs.AI77

知识图谱的自然语言提问接口:QRAKEN 图谱蒸馏与语义自愈

通过自然语言访问 RDF 知识图谱是 Semantic Web 的核心愿景。大型语言模型(LLM)推动了 Text-to-SPARQL 的发展,但面对不熟悉的图谱时,它们常常会生成语法有效、却错误反映实际数据模型的查询。QRAKEN 是一种无需训练、与本体无关的神经符号流水线,其生成过程基于实证图谱证据,而非模式预期。离线蒸馏器生成 TTQL,其中包含对已填充多跳模式、条件频率和路径条件字面量示例的紧凑描述,以及类-属性共现矩阵。在线阶段,TTQL 为 LLM 提供引导,同时由确定性的语法、词汇表和数据模型检查提供诊断信息,以支持迭代式改进。在 CK25(First International Text2SPARQL Challenge)上,基于 QLever 快照进行匹配条件下的重新计算,QRAKEN 使用 GPT-4.1 mini 时取得 0.643 $\pm$ 0.026 的严格 F1,使用 GPT-5.4 时取得 0.652 $\pm$ 0.012;相比重新计算结果中最强的参赛系统,相对提升分别为 30% 和 32%,并且优于使用相同基础模型系列的系统。消融实验表明,TTQL 模式是主要驱动因素:相较于仅使用形状的基线,严格 F1 提升了 +0.31;改进循环则提供了一种低成本的安全机制,能够拒绝共现矩阵不支持的三元组模式。与自动推导的 SHACL 相比,TTQL 的严格 F1 高出 64%,说明超越模式暴露、利用实证模式具有重要价值。在两个本地 35B、4-bit 的开放权重模型上,以零边际成本运行时,同一流水线达到了重新计算结果中最强参赛系统的水平,而 TTQL 相对于仅使用形状和 SHACL 基线的优势仍然存在。在单个规模相对较小的基准上的结果仅提供了初步的实证信号;在高度开放的跨领域图谱上采用单体式 TTQL 注入,仍是其主要局限。

Simon Willison64

Quoting Victoria Kim

Since the Medicare breach, OpenAI has put in place additional monitoring to allow “immediate intervention” by staff to stop training if the company’s models access the internet in ways they’re not supposed to, Mr. Kwon [chief strategy officer at OpenAI] said. — Victoria Kim , Reporting from the Australian parliament Tags: accidental-cyberattacks , generative-ai , ai-security-research , openai , ai , llms

Simon Willison80

在 Wikimedia 项目中发现 OpenAI“失控”智能体的活动

在 Wikimedia 项目中发现 OpenAI“失控”智能体的活动。鉴于维基对失控智能体群体而言是多么诱人的目标,Wikipedia 在展开调查后发现相关活动的证据,也就不足为奇了:Wikimedia Foundation 展开了自己的调查,以确认 Wikimedia 网站是否同样受到 AI 智能体的影响,重点调查了由 OpenAI 运营的智能体。我们可以确认,已经在 Wikimedia 平台上发现了一些这些“失控” OpenAI 智能体的活动。未经授权的机器人活动包括编辑我们的维基、数次试图利用我们托管的公开笔记工具,以及产生大量流量,详情如下。调查人员发现了智能体编辑沙盒页面的证据,试图利用 Etherpad 等基础设施来帮助代理来自其他地方的内容,还发现了大规模爬取活动,以及对其 Wikidata Query Service 发起的“数十万次数据查询”。我最大的猜测是,其中大部分活动来自一群与那些在为研究任务进行训练期间破坏德国维基的智能体相似(或就是同一批)的智能体。Wikipedia 沙盒维基的编辑似乎始于 5 月 12 日,而那起事件报告的对 UseModWiki Sandbox 页面的初始测试编辑始于 5 月 11 日。标签:wikimedia,wikipedia,wikis,ai,generative-ai,llms,ai-ethics,accidental-cyberattacks

The Verge AI68

OpenAI drops another batch of mathematical breakthroughs

OpenAI has revealed solutions to a number of long-standing mathematics problems produced by an unreleased frontier model in a batch of 722 manuscripts, covering 372 result families that group related papers. It extends a run of breakthroughs that have both impressed and unsettled parts of the mathematical community while raising questions about research ethics and […]

Simon Willison61

EmbeddingGemma 2

My comment on EmbeddingGemma 2 — Hacker News. I really appreciate that EmbeddingGemma 2 is under the Apache 2.0 license. For embedding models in particular, I don't think it makes sense to use a closed, proprietary, hosted-only model. Most applications of embedding models involve calculating thousands or even millions of embedding vectors and storing them for later comparison. If your model is proprietary, the vendor is likely someday going to decide to stop offering that model. They'll have a better model to replace it, but you still need to pay to re-calculate those millions of stored existing vectors. (In April 2024 OpenAI offered to "cover the financial cost of users re-embedding content with these new models" - https://openai.com/index/gpt-4-api-general-availability/ - but I don't think that's something we can rely on from every provider.) Notably, I don't want to host the model myself . I'd much rather pay a provider for a hosted model while knowing that if they ever stop hosting it I can run the open weights version myself - or find another vendor who can do that for me. Tags: google , ai , generative-ai , embeddings , gemma

Simon Willison51

Mistral Large 4

My comment on Mistral Large 4 — Hacker News. wren6991 : The benchmark is saturated. Frontier models are tested with an armadillo in fishnet tights jaywalking on Mars. OK well I couldn't resist this one: llm -m claude-opus-5.5 'Generate an SVG of an armadillo in fishnet tights jaywalking on Mars' llm -m gpt-6.1-sol 'Generate an SVG of an armadillo in fishnet tights jaywalking on Mars' llm -m gemini-3.8-flash 'Generate an SVG of an armadillo in fishnet tights jaywalking on Mars' llm -m mistral/mistral-large-4 'Generate an SVG of an armadillo in fishnet tights jaywalking on Mars' Default reasoning levels for each: https://tools.simonwillison.net/markdown-svg-renderer?url=ht...

Simon Willison

Using Parseable with Datasette for OpenTelemetry traces

TIL: Using Parseable with Datasette for OpenTelemetry traces I saw Parseable in a Show HN today - it's a new observability platform with both an open source (AGPL) Rust implementation (a single ~180MB binary), an "Enterprise" version with extra features and a cloud hosted option. Since Datasette 1.0a41 added OpenTelemetry support (thanks, Alex Garcia), I decided to fire up Codex and have it figure out how to run Parseable and feed it traces from Datasette. Here's my (human-written) TIL showing the patterns that worked, and here's a screenshot of a Datasette trace displayed within the Parseable localhost web application: Screenshot of a trace detail view in an observability web app, with a span waterfall overlaid on a dimmed navigation sidebar and filter column. Dimmed sidebar: breadcrumb "Community > Traces > datas" (cut off), search box "Search... ⌘K", nav items "Home", "Ingest telemetry", section "ANALYZE": "Keystone", "Dashboards", "SQL Editor", section "OBSERVE": "Logs", "Metrics", "Traces" (selected), "APM", "Agents", section "MONITOR": "Alerts", "Errors", section "DATA": "Datasets", and at the bottom "Settings", "Book a call", "Support". Dimmed filter column, cut off at the right edge: "Search fi", "Core", "Log format", "User agent", "Source IPs", "Error", "Service", "service.ins", "service.na", "datasett" (checked), "Span", "Database", "HTTP", "http.reque", "NULL" (unchecked), "GET" (checked), "http.respo", "http.route", "Server", "server.add", "Telemetry", "URL", "All fields". Trace panel header: "Trace detail > 6f819a2170bcd1e91c6ea3ae236ec60b" with a copy icon, a "Related logs" button and a close X. Summary: "Start time 6:56 PM, Oct 6, 2026 UTC", "Duration 40.9 ms", "Spans 247". A minimap with axis "0ns 10.2ms 20.5ms 30.7ms 40.9ms" shows many short span bars cascading diagonally from top left toward the lower middle, with a few longer bars. Below is a span table with a "Span name" header, a "Search spans..." box, collapse and expand buttons, and a timeline axis "0ns 10.2ms 20.5ms 30.7ms 40.9ms". Rows (name, service, duration): root span with collapse toggle "123", "GET /..." "datasette..." 40.9ms spanning the full timeline; then alternating rows where each "db.query" has a collapse toggle "1": db.query datasette-local 679µs, db.query.execute datasette-local 278µs, db.query datasette-local 341µs, db.query.execute datasette-local 55µs, db.query datasette-local 357µs, db.query.execute datasette-local 197µs, db.query datasette-local 330µs, db.query.execute datasette-local 73µs, db.query datasette-local 2.26ms, db.query.execute datasette-local 2.02ms, db.query datasette-local 232µs, db.query.execute datasette-local 64µs, db.query datasette-local 207µs, db.query.execute datasette-local 71µs, db.query datasette-local 6.11ms. The child span bars start progressively later across the early part of the timeline. Tags: datasette , observability , alex-garcia , opentelemetry

The Decoder69

Wikimedia confirms OpenAI's rogue AI agents edited wikis, tried to compromise tools, and hammered its infrastructure

According to the Wikimedia Foundation, rogue OpenAI agents edited wikis without permission, tried to abuse a citation tool as a proxy, and may have caused a partial Wikidata Query Service outage through massive crawling. Wikimedia says AI companies need to take responsibility for their agents instead of pushing the burden onto volunteer editors. The article Wikimedia confirms OpenAI's rogue AI agents edited wikis, tried to compromise tools, and hammered its infrastructure appeared first on The Decoder .

OpenAI Blog72

借助 Ironclad 推进计算机使用

了解 OpenAI 和 Ironclad 如何针对复杂的合同工作流程训练和评估 AI 代理,以推进面向专业工作的计算机使用能力。

Hacker News 熱門

Show HN: I turned my iPhone and a $20 smart plug into an f-stop timer

I am a film photographer and do some darkroom printing and always wanted one of the proper, advanced f-stop timers, but never really wanted to spend a couple hundred dollars on one. Eventually I figured my phone was already perfectly capable of doing the timing, it just needed a way to switch the enlarger. So I built Darkplug around a cheap smart plug. The app controls the enlarger over the local network and does regular timing, f-stop timing, test strips, has an intuitive dodge/burn workflow, split grade (2 timing channels) and paper development timing. I’ve been using it for a few months in my improvised bathroom darkroom. Fair warning: the app was blindly vibe coded using Codex and Xcode. Comments URL: https://news.ycombinator.com/item?id=49978595 Points: 4 # Comments: 0

The Decoder46

Insurers brace for millions in claims as AI agents spin out of control

Insurers are bracing for millions in claims from rogue AI agents, and executives like OpenAI's Sam Altman and Anthropic's Dario Amodei could be personally on the hook for the fallout. The article Insurers brace for millions in claims as AI agents spin out of control appeared first on The Decoder .

Hacker News AI61

Show HN: OpenChart – OSS TradingView alternative with your own AI agent

Hi HN, I'm Weilun, cofounder of OpenChart. We built OpenChart because we wanted Claude and Codex to interface with the markets, like most of humans do, through charts rather than through CLIs. With your existing AI plans, your agent can work directly with your charts: annotate a setup, write an indicator, investigate a market move, or create an alert. The chart, conversation, and research live in the same workspace. OpenChart alerts on any market move: draw any shape on a chart and attach an alert. When price crosses it, the alert triggers your agent to investigate the move and save the research in your workspace. The agents can work with charts, indicators, and alerts. Custom indicators and alert conditions are written in [Tea]( https://github.com/longsurf-ai/tea ), a programming language we built for the markets. We believe software shouldn’t impose artificial friction on your workflow. OpenChart is built on that belief with no software cap. The source code is publicly available, and you can use free market data from day one. We also offer optional paid cloud market data for lower latency. Everything is private. Your charts, research, and indicator code are stored on your own computer, with the app's backend running locally too. We currently support only macOS on Apple Silicon, but we're expanding to more platforms. Website: https://openchart.co/ Download: https://downloads.longsurf.ai/openchart/darwin/arm64/OpenCha... We built OpenChart because we want to explore how assets can be co-manages by agents and humans. I'd especially like to hear how you are using agents to help with your investment journey. If you like what we're building, a star on GitHub would mean a lot to us: https://github.com/longsurf-ai/openchart Comments URL: https://news.ycombinator.com/item?id=49979793 Points: 1 # Comments: 0

The Decoder56

Mistral Large 4 is Europe's trillion-parameter answer to US models that refuse security work

Stylized Mistral logos in yellow and orange on a wall symbolize the branding of the AI platform Nano Banana Pro. Mistral's Large 4 is the company's biggest model yet, with one trillion parameters trained on its own European infrastructure. In the independent Intelligence Index, the model makes a big leap forward but still falls well short of Claude, GPT-6, and Chinese competitors. Mistral's main pitch is cybersecurity work that closed US models refuse to do. The article Mistral Large 4 is Europe's trillion-parameter answer to US models that refuse security work appeared first on The Decoder .

arXiv cs.AI72

VideoTapestry:面向多智能体长视频理解的查询自适应记忆细化

长视频理解对记忆提出了很高要求,因为回答问题通常需要检索分布在较长时间跨度中的信息。现有方法大致遵循两种范式:查询驱动的探索容易受到定位错误的影响,而与查询无关的记忆构建则可能遗漏特定于问题的细节。我们提出 VideoTapestry,一种无需训练的多智能体框架,通过由粗到细的查询驱动细化,自适应地调整预构建的分层视频记忆。预构建记忆将视频内容组织为三个层级,分别捕捉全局叙事上下文、事件级时间结构和细粒度关系证据。为支持由粗到细的定位与观察,我们为每个层级分配一个专门的智能体,使检索和细化保持在特定尺度的上下文范围内。在查询引导下,这些智能体重新访问相关视频区域,并通过有针对性的多模态观察丰富各层记忆。随后,根据原始层级结构对这些细化结果进行组装,形成复合的查询自适应记忆:以紧凑形式保留全局上下文,同时沿与查询相关的分支保留细粒度证据,以供最终推理使用。与直接进行 GPT-5.5 推理相比,VideoTapestry 在 LVBench、LongVideoBench (Long)、Video-MME (Long) 和 EgoSchema 上的绝对准确率分别提升了 17.2%、14.9%、9.8% 和 7.0%,在所有竞争方法中取得了当前最佳结果。

arXiv cs.AI72

反制悖论:用于诊断语言模型服从性的双探针方法

语言模型是否服从用户指令?始终服从的模型虽然可以被停止,但也会被利用;而始终抵抗的模型既不会被利用,也无法被停止。我们提出了一个开放的双探针基准测试,可以将任何语言模型定位在这一光谱上。在主动探针中,用户指示模型采取行动并接受较低的收益,以衡量其可利用性。在被动探针中,用户指示模型等待并放弃较高的收益,以衡量其可停止性。两种服从率共同构成服从指数 $κ$。将该基准测试应用于十二个语言模型后发现,其中七个模型在两种探针中都基本遵循指令,并通过指出指令本身来为其行为辩护。只有 Claude Sonnet-4.6 和 Claude Opus-4.7 能够在不具备可利用性的情况下被停止;Claude Opus-4.6 和 GPT-5-mini 抵抗两种指令;没有模型同时具备可利用性却不可停止。无论对于人类操作员,还是对于分布式或编排式多智能体系统,了解语言模型在服从指数 $κ$ 上所处的位置都至关重要。

arXiv cs.AI83

BazaarBench:LLM代理运行的去中心化C2C市场中的委托安全

在去中心化的消费者对消费者(C2C)市场中,人们发布商品、与陌生人议价并互相评价,因此信任建立在声誉之上。如今,大语言模型(LLM)代理开始代表用户行事,从而给用户的资金、隐私和声誉带来风险。我们推出BazaarBench,这是一个模拟的C2C市场和基准测试,用于评估这些代理的安全性。它跟踪交易中的所有权、商品状况和承诺,并结合记录核查与基于评分标准的LLM判断,以识别涵盖五个阶段的六类失败。我们运行了三个基础市场,模拟时长均为30天;每个市场包含100个代理,所有代理使用同一个模型,库存则取自公开的eBay样本。在45次延续实验中,我们分别在普通指令、截止期限压力或诱导利用其他交易者的对抗性指令下,评估五个模型。每次延续实验都从某个市场第30天状态的副本开始,运行七个模拟日。受测模型控制同一批选定的20个代理,这些代理保留各自的人设、库存和历史记录;其余80个代理继续使用基础模型。在普通指令下,五个模型都曾尝试向多个买家承诺出售同一件商品。加入目标和截止期限后,每个模型的此类尝试次数都增加。在对抗性指令下,尽管商品不可用或卖家夸大了商品状况,受测卖家已承诺的交易仍得以完成的比例从15.4%上升至33.4%,其中GPT-5.4达到55.5%。在各模型和市场之间取平均后,每名受测代理的模拟周收入从普通指令下的20美元上升至对抗性指令下的33美元。大部分增收来自卖家从未持有过的商品。我们发布了模拟器、保存的市场状态、评估代码以及涵盖357,608次代理模型调用的记录,用于评估新模型和开发更安全的市场代理。

arXiv cs.AI78

CLIFT:面向网页智能体训练与测试时扩展的保形自验证

开源网页智能体如今已经足以执行逼真的浏览器任务,但使用强化学习训练它们仍然依赖弱监督:二元任务成功信号过于稀疏,难以进行信用分配;而前沿语言模型评审器的调用成本过高,无法在每一步都调用,也不能假定其在部署时可用。我们提出 CLIFT,一种以保形自验证为核心的训练与测试时扩展方法。在训练期间,智能体针对自身的 rollout 回答自然语言验证问题;Compositional Conformal Certifier 仅保留其 URL 条件证据与训练时评审器一致的问题信号,通过极性感知提升分配带符号的信任权重,并将得到的验证器分数融合到逐步奖励中,同时绝不会从评审器基线中扣减任何分数。在测试时,同一经过认证的问题库被冻结,并作为 Conformal Trajectory Selection(CTS)的结构化证据重复使用:智能体采样一条贪心 rollout 以及一条或多条多样化重试轨迹,自验证器总结每条 URL 轨迹,然后通过一种保守的多数投票规则决定是否放弃当前最优结果,而无需调用任何外部评审器。这一机制支持三种设置。在 WebArena Infinity 上,CLIFT 在开源网页智能体中取得了当前最佳性能。在 VisualWebArena 上,使用开放模型训练的问题库可在测试时迁移到 GPT-5.5,并在标准测试框架下达到当前最佳性能。在 Online Mind2Web 上,无需针对该基准训练智能体,仅通过翻译经过认证的问题库,就能在零样本评估中提升一个实时网页智能体的表现。总体而言,这些结果表明,保形自验证能够将昂贵的评审器反馈转化为可复用的训练信号,以及无需评审器的测试时扩展信号。

arXiv cs.AI79

面向智能体排行榜的测量优先审计:污染易感性、匹配对照重评估与评分器验证

智能体排行榜日益使用公开基准来评估系统,而这些基准的任务描述和包含解答的工件可能持续处于可访问状态。我们提出了一种测量优先的审计框架,根据支持污染声明所需的证据,对污染声明进行区分。该框架将需要不同证据的渠道分为三类:训练时暴露、评估时检索,以及流水线/脚手架泄漏。按照失败即关闭规则,每个渠道被编码为开放、部分开放、关闭或未知。在九种 Holistic Agent Leaderboard (HAL) 配置中,27项渠道评估无一被编码为关闭,但在其中四种配置中确认了相关事件。随后,我们将该框架的行为组件应用于 SWE-bench Verified 中一项已报告的文件定位差距,采用结果盲法、同一仓库匹配对照设计,并结合对称式提示泄漏筛查、成对且考虑仓库因素的不确定性分析,以及评分器验证,在 GPT-4.1 和 DeepSeek-V4-Flash 上进行评估。在经过对称筛查和成对完整性排除后保留的100对样本中,GPT-4.1 显示出按样本对加权的、与基准相关的 $+10.0$ 个百分点差距;但预先指定的成对自助法和事后仓库均衡分析所得的95\%区间均包含零,因此与基准相关的差距尚无定论。复现实验评分器未通过其验证门槛:相对于人类共识标签,无法为任一模型确立足够的评分器敏感度;而且 DeepSeek-V4-Flash 在正确金标准对比中的两次触发均为误报。在缺乏溯源证据、适当对照、对称式泄漏筛查和经过验证的评分器的情况下,不应提出更强的污染声明。研究结果无法证明训练数据成员关系、污染普遍程度或基准导致的分数膨胀。

arXiv cs.AI78

RETRACE:从纠缠的修复历史到可复用的 CI 修复经验

大型语言模型(LLM)智能体日益广泛地复用既有经验,但大多数方法都假设问题与解决方案已经完成对齐。软件历史很少能提供这种对齐:一个拉取请求(PR)可能包含多个持续集成(CI)问题、失败的尝试、回滚的编辑以及无关变更,从而难以判断哪些变更解决了哪些问题。我们提出 RETRACE,一种从此类历史中重构问题级修复经验的框架。RETRACE 结合了终点视角与开发视角:前者从通过测试的修订版本中保留的变更出发进行反向推理,后者沿提交历史正向追踪修复的演变过程。CI 执行证据用于协调这两个视角,恢复出的经验则以三个抽象层级表示,从具体修复到可迁移的修复模式。对于新的失败,RETRACE 会检索相关的问题级经验以指导修复。在 CI-REPAIR-BENCH 上,该基准包含来自 101 个仓库、涵盖 12 类失败的 565 个 PR 级修复,RETRACE 将 mini-SWE-agent 的 Pass@1 使用 MiniMax-M2.5 时从 19.6% 提升至 31.9%,使用 DeepSeek-V4-Flash 时从 23.3% 提升至 32.8%。在匹配的子集上,Codex 的表现从 15.5% 提升至 27.5%。结合两个视角始终优于单独使用任一视角,这表明恢复问题与变更之间的对齐关系,能够使历史上的 CI 修复成为可复用的修复经验。

MarkTechPost65

Meet Together Link: A Free CLI That Runs Open Models Like Kimi K3 and GLM 5.3 Inside Claude Code, Codex, and OpenCode

Together AI has released Together Link, a free, MIT-licensed CLI that connects Claude Code, Codex, OpenCode, Pi, and the Claude and ChatGPT desktop apps to open models like Kimi K3 and GLM 5.3. One install command sets it up, and an Auto router picks a model for each session. Together claims savings of over 50%. The post Meet Together Link: A Free CLI That Runs Open Models Like Kimi K3 and GLM 5.3 Inside Claude Code, Codex, and OpenCode appeared first on MarkTechPost .

AWS Machine Learning Blog83

在 Amazon Bedrock 上推出 GLM 5.3

来自 Z.ai 的 GLM 5.3 现已在 Amazon Bedrock 上可用:这是一款拥有 7530 亿参数的混合专家模型,专为编程和长周期智能体任务打造。了解如何通过兼容 OpenAI 的 API 调用它,如何利用提示词缓存降低成本和延迟,以及如何使用开源 Strix 智能体运行授权安全测试。

The Verge AI66

All the drama around AI’s takeover of mathematics

This past year, OpenAI, Anthropic, and other labs have announced breakthroughs on numerous long-standing mathematical problems, in some cases pushing well beyond what researchers expected current systems to be capable of — including resolving one of the famous Millennium Prize problems. But in classic Silicon Valley style, AI labs are moving fast and breaking things, […]

The Verge AI67

Wikipedia operator says OpenAI’s ‘rogue’ bots may be linked to a May outage

Following many recent disclosures about AI agents accessing third-party websites and services, the Wikimedia Foundation, which hosts Wikipedia, says that it "can confirm that we have discovered some activity" by "rogue" OpenAI agents on Wikimedia platforms. The activity includes edits to Wikimedia wikis, "unsuccessful attempts" to "exploit" the Etherpad note-taking tool that the Wikimedia Foundation […]

The Verge AI69

OpenAI is adding text watermarking in ChatGPT and Codex

An invisible, machine-readable watermark in text output is rolling out to ChatGPT and Codex, but only for users in the European Union at first. OpenAI says its textGrain watermarking "matched or exceeded" other approaches like Google DeepMind's SynthID for text, which is also the basis for the watermarking Anthropic announced in August. Like OpenAI, Anthropic […]

AWS Machine Learning Blog79

新的 agent skill:面向编码智能体的 Amazon SageMaker 优化生成式 AI 推理

Amazon SageMaker 优化的生成式 AI 推理通过 Agent Toolkit for AWS 引入了 aws-ai-ml skill,为 Kiro、Claude Code 和 Codex 等编码智能体提供推理优化与基准测试方面的深度专业知识。描述您的需求,智能体即可生成可执行的 SageMaker Python SDK v3 代码,用于对部署进行基准测试、提出建议和比较。

The Decoder70

OpenAI will watermark ChatGPT text in the EU but makes it optional for API users worldwide

OpenAI is adding invisible textGrain watermarks to ChatGPT in the EU, but unlike Anthropic, it will let API customers worldwide opt out. Tests show detection rates as high as 95 percent, dropping to 17 percent when a quarter of the words are replaced. The article OpenAI will watermark ChatGPT text in the EU but makes it optional for API users worldwide appeared first on The Decoder .

The Verge AI55

Sam Altman says ‘some bad things’ will happen but AI is totally worth it

Sam Altman thinks that the benefits of AI will be so great that "the world should accept some bad things happening" along the way. The OpenAI CEO pointed to hacks, scams, and "other bad things" as costs society should expect to tolerate because "people will do tremendously orders of magnitude more good stuff" with AI, […]

Simon Willison64

Qwen3.8 27B addition in words

Research: Qwen3.8 27B addition in words Colin Frasier posted on Bluesky about an experiment he ran over two years ago using GPT-4o to see how well it could "compute the sum but return the answer in words" across increasingly large numbers. Here's the chart he shared of those results: Heatmap chart of accuracy on an addition prompt, colored from dark green (high) through yellow to dark red (low). Title: "What is {a} + {b}? Please write your answer in words. Do not include any other text or information, just the answer in words." Subtitle: 30 randomly selected pairs for each digit combination (n = 30 * 13 * 13 = 5070). X axis: Number of digits in a, 1 to 13. Y axis: Number of digits in b, 1 to 13. Legend: Accuracy, 1.00, 0.75, 0.50, 0.25, 0.00. Values by row, listed for a = 1 to 13. b = 13: 100%, 77%, 27%, 20%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%. b = 12: 97%, 80%, 80%, 40%, 23%, 20%, 7%, 13%, 20%, 27%, 67%, 63%, 3%. b = 11: 97%, 97%, 53%, 17%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 37%, 0%. b = 10: 100%, 90%, 47%, 20%, 7%, 0%, 0%, 0%, 3%, 0%, 0%, 7%, 0%. b = 9: 97%, 93%, 80%, 77%, 53%, 67%, 47%, 87%, 97%, 3%, 0%, 13%, 0%. b = 8: 93%, 87%, 53%, 43%, 7%, 0%, 0%, 13%, 87%, 0%, 0%, 0%, 0%. b = 7: 93%, 93%, 47%, 10%, 13%, 20%, 23%, 0%, 70%, 0%, 0%, 0%, 0%. b = 6: 100%, 100%, 100%, 83%, 97%, 97%, 23%, 0%, 53%, 3%, 0%, 10%, 0%. b = 5: 100%, 100%, 80%, 70%, 73%, 100%, 13%, 13%, 70%, 0%, 20%, 30%, 0%. b = 4: 100%, 100%, 93%, 100%, 60%, 97%, 20%, 50%, 67%, 53%, 40%, 40%, 40%. b = 3: 100%, 100%, 97%, 90%, 83%, 100%, 63%, 50%, 63%, 53%, 60%, 60%, 30%. b = 2: 100%, 100%, 90%, 97%, 93%, 100%, 93%, 83%, 90%, 83%, 87%, 87%, 83%. b = 1: 100%, 100%, 100%, 97%, 100%, 97%, 97%, 97%, 100%, 100%, 100%, 97%, 100%. I'm confident GPT-4o didn't cheat and use a calculator, especially since it got so many of the calculations wrong, but I was inspired to run the experiment again on local hardware (a DGX Spark) to explore the effect in a fully controlled environment. I pasted his image into a Codex Remote session (GPT-6 Astra) and had it run the same experiment using Qwen3.8-27B-Q4_K_M.gguf . Here's the result for a run of 30 attempts per combination with reasoning disabled: Heatmap in the same layout as the previous chart, using an orange (low) to white to blue (high) color scale, showing much lower accuracy overall. Title: Addition in words — Qwen3.8 27B Q4_K_M. Subtitle: Reasoning disabled · 30 fixed pairs per ordered digit-length cell (n = 5,070). Overall numeric accuracy: 1,195 / 5,070 (23.57%). X axis: Number of digits in a, 1 to 13. Y axis: Number of digits in b, 1 to 13. Legend: Accuracy, 100%, 75%, 50%, 25%, 0%. Values by row, listed for a = 1 to 13. b = 13: 17%, 13%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%. b = 12: 53%, 20%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%. b = 11: 47%, 10%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%, 0%. b = 10: 70%, 27%, 3%, 0%, 0%, 0%, 0%, 0%, 0%, 13%, 0%, 0%, 0%. b = 9: 77%, 47%, 3%, 0%, 0%, 0%, 0%, 3%, 7%, 0%, 0%, 0%, 0%. b = 8: 53%, 20%, 0%, 0%, 0%, 0%, 7%, 13%, 0%, 0%, 0%, 0%, 0%. b = 7: 53%, 23%, 17%, 10%, 3%, 3%, 13%, 3%, 0%, 0%, 0%, 0%, 0%. b = 6: 60%, 60%, 33%, 10%, 53%, 47%, 7%, 3%, 0%, 0%, 0%, 0%, 0%. b = 5: 73%, 67%, 87%, 80%, 53%, 40%, 0%, 0%, 3%, 0%, 0%, 0%, 0%. b = 4: 83%, 93%, 90%, 93%, 53%, 13%, 0%, 0%, 0%, 0%, 0%, 0%, 0%. b = 3: 100%, 93%, 90%, 80%, 67%, 37%, 17%, 0%, 0%, 3%, 0%, 0%, 0%. b = 2: 100%, 100%, 93%, 90%, 77%, 77%, 43%, 50%, 63%, 43%, 40%, 13%, 23%. b = 1: 97%, 100%, 100%, 100%, 80%, 67%, 77%, 80%, 80%, 60%, 43%, 30%, 37%. Footnote: Colorblind-safe orange–blue scale; percentages provide a redundant non-color encoding. Then I ran it again with reasoning enabled. This took a lot longer per pair, so instead of running 30 samples per square I ran just one - which results in a much less visually appealing heatmap since each square is either 100% or 0%: Heatmap in the same layout as the previous charts, almost entirely blue. Title: Addition in words — Qwen3.8 27B — medium reasoning pilot. Subtitle: 1 fixed pair per ordered digit-length cell · easiest first (n = 169). X axis: Number of digits in a, 1 to 13. Y axis: Number of digits in b, 1 to 13. Legend: Accuracy, 1.00, 0.75, 0.50, 0.25, 0.00. Every cell shows 100% except two orange cells showing 0%: a = 2 with b = 8, and a = 12 with b = 9. It got the right answer in 167 out of 169 attempts, and since these were one-shot I'm confident a second run would produce different results here. Here's a version of the report that includes the reasoning traces from some of those larger calculations, which include text like this: Wait, let me redo this more carefully. 4,299,366,105,622 6,088,794,067,970 Let me align them: 4 2 9 9 3 6 6 1 0 5 6 2 2 6 0 8 8 7 9 4 0 6 7 9 7 0 Adding from right to left: Position 1 (units): 2 + 0 = 2 Position 2 (tens): 2 + 7 = 9 Position 3 (hundreds): 6 + 9 = 15, write 5, carry 1 Tags: mathematics , ai , generative-ai , local-llms , llms , qwen , llm-reasoning , dgx-spark

The Verge AI73

OpenAI 正在 ChatGPT 中投放更多广告

根据 OpenAI 周一发布的公告,最新广告形式将在你的屏幕上展示赞助产品和服务的图片。OpenAI 将于本月晚些时候开始在美国进行广告测试,这些广告“最初”会在你使用 ChatGPT 生成图片时出现。该公司于今年 2 月首次在 ChatGPT 中投放广告。截至目前,ChatGPT 的 […]

Hacker News AI44

Show HN: Seylo, project files and references your AI can use

Hey HN, I am building Seylo solo. It keeps your projects references, files, notes, hooks, video scripts in one place. You can save stuff from browser extension, fe. pinterest inspirations; your phone (now only iPhone supported) fe. tiktok/ig videos of your competitors; What's more you can also connect gpt, claude or any LLM that supports MCP, even local ones - So you can tell ur AI: "Generate me 5 video scripts then save them into my project" then tell another AI: "Based on my project prepare my marketing campain" - small examples. Seylo works sd clean workspace for your projects and as context bank for LLM u are using. Lemme know what you think Comments URL: https://news.ycombinator.com/item?id=49963994 Points: 1 # Comments: 0

arXiv cs.LG82

通过智能体轨迹剖析模型行为

arXiv:2606.17454v3 公告类型:replace-cross 摘要:AI 智能体的性能不仅是建模问题,从根本上说也是系统问题。模型的先进能力通过智能体框架得以实现。因此,模型假设与框架行为之间的差距,很容易阻碍模型的全部能力转化为智能体性能。我们将其形式化为 `intent-execution' 差距:模型意图与框架执行之间的不匹配,反之亦然。我们认为,缩小这种 intent-execution 差距,与工具和执行循环等框架设计的其他方面同等重要。为说明这种框架与模型对齐的影响,我们开发了一个简单且可定制的框架,称为 `Simple Strands Agent'(SSA)。SSA 旨在找出跨不同模型系列(例如 Claude、Gemini、GPT、Grok、Qwen)通用的大多数常见模式,以及少量特定于模型的偏好。我们做出了两项贡献:(i)在广受欢迎的智能体基准测试(SWE-Pro、SWE-Verified、Terminal-Bench-2 和 Deep-SWE)上,\textbf{复现或超越了不同模型提供商系列报告的 pass@1} 性能;(ii)基于对 SSA 生成的 \textbf{154\texttt{k} 条轨迹的分析},我们不再局限于各前沿模型之间往往相对接近的 \texttt{pass@1} 数值。通过在代码状态空间中表示智能体轨迹,我们计算解距离和回溯,以观察模型层面的解题行为差异。编辑频率、测试活动和阶段转换等更细粒度的指标揭示了各个模型如何在解题的不同阶段分配精力。

arXiv cs.LG82

VTBench:评估自回归图像生成的视觉分词器

arXiv:2505.13439v2 Announce Type: replace-cross 摘要:自回归(AR)模型近期在图像生成方面展现出强大性能,其中一个关键组件是视觉分词器(VT),它将连续的像素输入映射为离散的 token 序列。VT 的质量在很大程度上决定了 AR 模型性能的上限。然而,当前的离散 VT 明显落后于连续变分自编码器(VAEs),导致图像重建质量下降,以及细节和文本保留能力较差。现有基准主要关注端到端生成质量,未能将 VT 的性能单独分离出来进行评估。为弥补这一空缺,我们推出了 VTBench,这是一个全面的基准,围绕三项核心任务系统评估 VT:图像重建、细节保留和文本保留,并涵盖多种评估场景。我们利用一组指标系统评估了当前最先进的 VT,以衡量重建图像的质量。研究结果表明,与离散 VT 相比,连续 VAE 能够生成更优越的视觉表征,尤其是在保留空间结构和语义细节方面。相比之下,离散 VT 生成的退化表征通常会导致重建失真、细粒度纹理丢失,以及无法保留文本和物体的完整性。此外,我们在 GPT-4o 图像生成上开展了实验,并讨论了其潜在的 AR 特性,为理解视觉分词的作用提供了新的见解。我们公开发布了基准和代码库,以支持进一步研究,并呼吁社区开发强大且通用的开源 VT。

arXiv cs.LG81

JARQ:量化的联合交替细化

arXiv:2609.38599v2 公告类型:替换 摘要:面向大语言模型的分组训练后量化器会将权重舍入到一个不会针对所得整数编码重新拟合的网格上。我们表明,这会造成精度损失:最佳网格取决于编码,输入相关性会耦合不同分组的误差,而有益的编码变化通常会同时涉及许多编码。我们提出 JARQ,这是一种即插即用的细化方法,可从任意分组量化器出发,交替执行所有分组尺度的联合最小二乘拟合,以及基于当前网格、通过有界 Babai 候选使一个分组中的多个编码共同移动的操作。该问题是一个双线性、盒约束混合整数最小二乘问题;其求解器无需反向传播,在精确求解尺度时不会增加逐层目标函数,并且保留宿主量化器的位宽、分组、零点和推理成本。在 Llama-2、Llama-3 和 Qwen 模型上,以 RTN、GPTQ、OmniQuant 和 AWQ 作为宿主量化器时,JARQ 在 96 项比较中的 90 项降低了困惑度,将三比特 RTN 的困惑度最多降低 36%,在 24 种配置中的 23 种提高了平均多选题准确率,并改善了 QEP、QuaRot 和 OJBKQ 的输出;对于每个 7B 模型块,耗时不到一分钟。

arXiv cs.LG83

Agent-Security 基准测试中的威胁保持表示敏感性

arXiv:2610.03585v1 公告类型:cross 摘要:针对基于 LLM 的智能体的安全基准测试通常将攻击成功率(ASR)作为衡量模型鲁棒性的指标,并使用这些分数比较不同模型和防御机制,假设这些分数能够描述智能体的安全性。在本文中,我们探究基准测试的表示方式是否也会影响其测量结果。为衡量基准表示方式的影响,我们引入威胁保持表示敏感性(TPRS),用于测量在保持底层任务、有害行为、安全策略、真实标签、环境和评估标准不变的情况下,仅改变智能体可见的表示方式时,ASR 的变化程度。在 Agent Security Bench(ASB)上,将与威胁相关的工具名称替换为与威胁中性的名称后,GPT-5-mini 的已实施攻击成功率提高了 11.67 个百分点,Claude Haiku 4.5 提高了 13.21 个百分点。在 MCPTox 上,将原本中性的工具名称替换为明确与威胁相关的名称后,GPT-5-mini 的 ASR 降低了 11.00 个百分点,Claude Haiku 4.5 降低了 4.11 个百分点。在 AgentDojo 上,向与攻击相关的工具添加与威胁相关的措辞后,GPT-4o-mini 的 ASR 仅变化了 0.50 个百分点,但在需要使用该工具的任务中,良性效用下降了 5.36 个百分点。我们在 MCPTox 上开展了一项实验,观察到一个在 token 数量、长度和大小写方面均匹配的威胁中性名称,可以复现大部分由明确威胁相关名称引起的变化(在 GPT-5-mini 上为 11.00 个百分点中的 8.54 个百分点)。结果表明,在一种表示方式下测得的安全分数,可能无法推广到同一安全问题的其他威胁保持表示方式。因此,鲁棒性声明应由在一组受控的威胁保持表示方式上的表现加以支持,而不应依赖单一且受表示方式影响的分数。

arXiv cs.LG77

D2K-Bench:LLM Agents 能否将专家设计转化为高效的 GPU 内核?

arXiv:2610.03226v1 公告类型:new 摘要:大型语言模型(LLM)代理生成的 GPU 内核,其效率可能仍低于专家实现,但仅凭运行时间无法揭示这一差距与设计发现和实现之间的关系。我们推出 D2K-Bench,这是一个包含 26 项任务和 85 个工作负载的诊断基准,用于衡量代理将专家设计指导转化为高效 GPU 内核的能力。设计指导涵盖 L1:高层次算法洞见,L2:数据流设计,以及 L3:低层次优化技巧,同时还包括这些层级之间的依赖关系。在成对运行的对照实验中,有无设计指导的两组实验共享任务描述、工作负载、工具、硬件和 350 轮的预算。补充评估则考察独立提出的设计,以及生成代码中实现的设计属性。在 NVIDIA B200 GPU 上对五个模型进行测试后发现,设计指导使 130 个以上模型—任务组合的正确率从 93.1% 提升至 98.5%,并使全部 26 项任务的性能分数从 1.46 提升至 1.95。对于在两组实验中均在全部 26 项任务上提交正确结果的三个前沿模型(GPT-6-Astra、Claude-Opus-4.8 和 GPT-5.6-Sol),几何平均加速比从 $1.69\times$ 提升至 $2.49\times$。在全部五个模型中,平均综合实现得分从 100 分中的 57 分提升至 70 分。这些结果表明,专家设计指导具有重要价值,同时也揭示出一些尚未得到实现的设计属性。

arXiv cs.LG67

Inner Momentum for Differentially Private Muon

arXiv:2610.02738v1 Announce Type: new Abstract: Differentially private training clips each per-example gradient before adding noise. This clipping is radial for each example, yet unequal clipping factors can distort the relative singular-vector geometry of their average. Muon is particularly exposed to this effect, since its update is an approximate polar factor UV^T that depends only on the singular vectors that clipping can shift. To curb this degradation, we propose averaging each sampled example's Muon gradient over the current model and a short history of recent models before clipping. The clipped batch matrix then separates into a common rescaling and a covariance residual R between sampled gradients and clipping values, with ||R||_F <= sigma_lambda sigma_G, bounding the clipping-induced distortion directly. We further show that a finite Newton-Schulz iteration preserves the polar factor of its input under these spectral conditions, confirming that our correction survives orthogonalization. In private GPT-2 fine-tuning on E2E and DART at epsilon in {1, 2, 4, 8}, DP-Muon-IM improves BLEU and ROUGE-L over DP-Muon in every seed-matched comparison, and non-private diagnostics show 2-4% lower pre-noise polar error.

arXiv cs.LG75

将 LLMs 用作智能体:代价是什么?

arXiv:2610.02488v1 公告类型:新 摘要:语言模型智能体日益依赖各种框架机制来管理有界上下文、持久化记忆、工具、验证和重复执行,但现有的模型能力概念并未量化这些机制所消耗的计算资源。我们提出语言模型智能体机(Language Model Agent Machine,LAM),这是一种资源有界的抽象:在固定底层语义模型的同时,明确计入框架层面的资源开销。我们建立了四类结果。通信方面:在同时调用—传输预算下,LAM 的执行与红—蓝 pebbling 逐实例等价,从而将经典的输入/输出下界转移到上下文—记忆流量上。访问方面:记忆接口会导致渐近分离;在指针追踪问题上,随机访问与非推测性顺序访问之间存在 $\Theta(n)$ 的差距。重计算方面:对于具有上下文容量 $C$ 和持久化记忆容量 $S$ 的系统,位反转 DAG 需要 $\Theta(n^2/(C+S)+n)$ 次模型调用,从而量化存储中间状态何时能够避免重复的语义计算。可靠性方面:我们推导出紧的阶段局部采样界、精确的不完美验证成本,以及一种 Young--Daly 型检查点定律,并给出最优验证间隔的闭式解。在 GPT-6 Astra 上开展的受控实验和留出实验检验了关于通信和可靠性的预测,包括检查点最优点、程序化检查下的策略选择,以及在链式 MATH 任务中调用粒度、逻辑输入流量和可靠性之间的权衡。总体而言,这些结果为语言模型智能体框架的计算成本提供了一套资源理论。

arXiv cs.LG77

训练有素的智能体上下文管理

arXiv:2610.02404v1 公告类型:新 摘要:我们研究长上下文语言模型。我们不采用原生训练长上下文的方式,也不设计长上下文工具框架,而是在最简单的工具框架上训练模型:一个可使用任意指定提示词调用自身的工具,以及一个可从输入上下文中读取指定范围内词元的工具。我们使用这一工具框架,在多样化的合成数据集上对 Qwen3.6-35B-A3B 进行微调。仅使用 8,000 个词元的上下文时,当文档长度超过 40K 个词元,我们的小型模型在 OOLONG-synth 基准测试上的表现就已达到使用 1M 个词元上下文的 GPT-5.4 的水平。

arXiv cs.LG72

Inherit-MAS:通过工作流继承与执行继承实现多智能体系统的测试时演化

arXiv:2610.02396v1 发布类型:new 摘要:由大语言模型构建的多智能体系统(MAS)通过协调专门化智能体来处理复杂任务,但有效的工作流很难预先设计。测试时演化利用执行反馈来改进工作流,然而大范围修订可能会扰乱有用组件,而重新执行未发生变化的请求则会带来冗余计算。受生物演化中继承与选择相互作用的启发,我们提出了 Inherit-MAS,在工作流和执行两个层面明确实现继承。一个元模型首先合成由工作智能体组成的工作流,并声明其角色、通信输入和工具权限;另一个通过独立提示的评判器则为每个已执行候选方案评分,并诊断其不足。在常规细化轮次中,工作流继承从最近完成的候选方案开始,可以丢弃被判定为无助的可移除节点,并应用经过验证的编辑来解决已诊断的不足。当新候选方案执行时,执行继承仅在完整的解析后请求和执行上下文均匹配的情况下继承符合条件的已存储结果,从而避免冗余的模型调用和工具调用。使用 GPT-4o-mini 工作智能体时,Inherit-MAS 在 WorkBench 上实现了 55.4% 的完成率,在 HotpotQA FullWiki 上实现了 49.7% 的联合 F1,优于 EvoAgent、EvoMAS 和 TacoMAS。使用 Qwen3-32B 工作智能体时,它在两个基准测试上同样超过了这些演化型 MAS 基线。与在禁用执行继承的情况下重新运行同一控制器相比,执行继承使 WorkBench 上的工作智能体 token 用量减少了 29.1%,HotpotQA 上减少了 34.6%;总 token 用量分别减少了 5.3% 和 18.1%。

arXiv cs.AI81

推理模型在因果识别上准确但不可靠

当被询问某种因果效应是否可以从观察数据中恢复时,推理模型可能以两种方式失败:拒绝回答可识别的查询,或回答不可识别的查询。后者影响更为严重,因为任何观察数据都无法验证其所声称的公式。要衡量这种失败,需要使用经过严格证明的不可识别查询,而此前的评测并未提供这类查询;同时还需要能够接受任何等价形式的正确公式作为答案的评分方法,而字符串匹配无法做到这一点。我们构建了 CERTID,这是一套形式化的识别流程,旨在解决上述两个局限。CERTID 使用可靠且完备的因果识别算法 ID,根据给定的图和查询验证某种效应是否可识别,并针对干预分布已知且精确的结构因果模型,核验返回的公式。CERTID 进一步推导理论结果,以减轻结构性泄漏、修复不可识别的查询,并建立评分保证。我们在 1,200 个经过认证的实例上评测了三种前沿推理模型(Gemini Flash、Gemini Pro 和 GPT5.5),这些实例涵盖包含 4 至 50 个顶点的图。结果表明,准确率并不是可靠性的良好替代指标:在相同实例上,不可识别查询中的错误断言率在不同模型之间相差 17 倍。我们还发现,对于在最强模型训练快照之后生成的图,模型判断可识别性的准确率达到 97% 至 100%。实例、认证流程、验证器以及逐实例记录可见于 https://anonymous.4open.science/r/certid-D718。

arXiv cs.AI85

代理安全基准中的威胁保持表示敏感性

基于 LLM 的代理的安全基准通常将攻击成功率(ASR)作为衡量模型鲁棒性的指标,并利用这些分数比较不同模型和防御机制,默认这些分数能够描述代理的安全性。本文探讨基准的表示方式是否也会影响其测量结果。为衡量基准表示方式的影响,我们引入威胁保持表示敏感性(TPRS),用于衡量在保持底层任务、有害操作、安全策略、真实标签、环境和评估标准不变的情况下,仅改变代理可见表示时 ASR 的变化程度。在 Agent Security Bench (ASB) 上,将与威胁相关的工具名称替换为威胁中性的名称后,GPT-5-mini 的已提交攻击成功率提高了 11.67 个百分点,Claude Haiku 4.5 提高了 13.21 个百分点。在 MCPTox 上,将原本中性的工具名称替换为明确与威胁相关的名称后,GPT-5-mini 的 ASR 降低了 11.00 个百分点,Claude Haiku 4.5 降低了 4.11 个百分点。在 AgentDojo 上,仅向与攻击相关的工具添加与威胁相关的措辞,就使 GPT-4o-mini 的 ASR 变化了 0.50 个百分点;然而,在需要使用该工具的任务中,无害效用下降了 5.36 个百分点。我们在 MCPTox 上进行了一项实验,发现一个在 token 数量、长度和大小写方面均相匹配的威胁中性名称,可以重现由明确威胁相关名称造成的大部分变化(在 GPT-5-mini 上为 11.00 个百分点中的 8.54 个百分点)。结果表明,在某一种表示方式下测得的安全分数,可能无法推广到同一安全问题的其他威胁保持表示方式。因此,鲁棒性声明应由在一组受控的威胁保持表示方式上的表现加以支持,而不应依赖单一的、受表示方式影响的分数。

arXiv cs.AI83

FrugalEvo:迈向具备成本感知能力的 LLM 引导程序演化

LLM 引导的演化方法(如 AlphaEvolve)已成为解决圆打包等具有挑战性的计算优化问题的强大方法。然而,既有工作通常是在固定迭代次数下优化性能增益。我们认为,实际优化应最大化单位成本的增益。为此,我们提出 FrugalEvo,这是一种具备成本感知能力的演化框架:由更强大但成本更高的 LLM 探索解决方案策略,再由成本更低的 LLM 加以实现,并对生成的代码进行迭代式改进。我们还设计了一种缓存高效的演化过程,通过让我们的 harness 和提示词最大限度地共享不同演化步骤之间的前缀,提升缓存复用率。为了在固定成本预算内衡量整个过程中的解决方案质量,我们引入预算感知曲线下面积(Budget-Aware Area Under the Curve,BA-AUC),将其定义为截至预算上限,累计 LLM 成本范围内最佳评估得分曲线下的面积。在 10 项数学与系统优化任务中,FrugalEvo 在最终解决方案质量方面达到或超越了包括 OpenEvolve、ShinkaEvolve、AdaEvolve 和 EvoX 在内的最先进基线方法,并在其中 9 项任务上取得了更高的 BA-AUC。在 ALE-Bench-Lite 的 10 项算法优化任务中,它的平均性能也高于这些基线。值得注意的是,在圆打包任务上,FrugalEvo 使用 GPT-5.6 Terra 和 Luna 仅花费 1.68 美元,使用 GLM-5.3 及其 Flash 变体仅花费 0.55 美元,就取得了新的最先进性能,达到或超越了所有基线方法;这些基线包括 CORAL 和 SwarmResearch 等多智能体方法,而后者平均成本约为 50 美元。

arXiv cs.AI80

EvoRiskBench:面向工作空间代理运行时安全风险的演进基准

工作空间代理将大型语言模型与执行框架相结合,以执行访问或修改外部资源的有状态、多步骤任务。现有基准在运行时安全风险的可执行覆盖方面存在空白,而模型能力、执行框架、工具和威胁的不断演进也促使基准持续发展。我们提出 EvoRiskBench,这是一个围绕 EP-Path-EF 框架组织的演进基准,该框架通过代理介导的风险路径,将初始风险入口与单跳技术影响关联起来。该框架定义了九类入口点和五类影响;一项包含 20 名参与者的研究表明,在具有代表性的案例上,这些类别具有良好的可解释性和分类一致性。在该框架的指导下,我们构建了一套自动化端到端工作流,在隔离环境中构造并执行风险案例,并利用运行时轨迹和环境状态独立验证结果。该基准提供了一个可复现的数据集,包含跨六种场景的 450 个对抗性任务。我们评估了九种模型—执行框架配置,涵盖三种模型(GPT-5.6 Sol、DeepSeek-V4-Pro-0813 和 Claude Opus 5)以及三种执行框架(Claude Code、Codex 和 OpenClaw)。结果揭示了各系统存在大量漏洞。其中,最易受攻击的配置是 Codex 与 DeepSeek-V4-Pro-0813 的组合,其攻击成功率(ASR)达到 68.44%,表明仅配置工作空间代理并不足以确保安全的自主执行。ASR 在不同模型之间的变化大于不同执行框架之间的变化,且执行框架之间的差异取决于所使用的模型。基准案例和评估平台将在完成工件安全性与可复现性检查后发布。

arXiv cs.AI79

D2K-Bench:LLM 智能体能否将专家设计转化为高效 GPU 内核?

大型语言模型(LLM)智能体生成的 GPU 内核可能仍不如专家实现高效,但仅凭运行时性能无法揭示这一差距与设计发现和实现之间的关系。我们推出 D2K-Bench,这是一个包含 26 个任务和 85 个工作负载的诊断基准,用于衡量智能体将专家设计指导转化为高效 GPU 内核的能力。该指导涵盖 L1:高层次算法洞见,L2:数据流设计,以及 L3:底层优化技巧,并包括这些层级之间的依赖关系。在有无指导的成对运行中,任务描述、工作负载、工具、硬件和 350 轮预算均保持一致。补充评估还考察了独立提出的设计,以及生成代码中实际实现的设计属性。在 NVIDIA B200 GPU 上对五个模型进行测试后发现,指导使 130 多个模型-任务组合的正确率从 93.1% 提升至 98.5%,并使全部 26 个任务的 Performance Score 从 1.46 提升至 1.95。对于在两种运行中均在全部 26 个任务上提交正确结果的三个前沿模型(GPT-6-Astra、Claude-Opus-4.8 和 GPT-5.6-Sol),几何平均加速比从 $1.69\times$ 提升至 $2.49\times$。在全部五个模型上,综合实现得分均值从 100 分中的 57 分提升至 70 分。这些结果表明专家设计指导具有重要价值,同时也揭示出一些仍未被实现的设计属性。

The Verge AI43

An AI couldn’t beat humans at StarCraft, so it decided to cheat

StarSkirmish pits AI-made StarCraft-playing bots against one another, as well as against human-made bots. OpenAI's GPT-6 Astra and Claude Opus 5.5 were essentially tied as the best-performing AI-made bots, but they couldn't top Stardust, the top-rated human-made bot. On Friday, GPT was facing off against Claude and the human-created bot Pluto, but according to Kotaku, […]

MarkTechPost63

Prime Intellect Launches Prime Inference: Serverless and Reserved Serving for Frontier Open Models

Prime Intellect has launched Prime Inference, an OpenAI-compatible platform for serving frontier open models on NVIDIA Blackwell. Its GLM-5.3 deployment uses Dynamo, vLLM and NVFP4 KV compression to serve 66 sessions per prefill group at 101 tok/s per user. The post Prime Intellect Launches Prime Inference: Serverless and Reserved Serving for Frontier Open Models appeared first on MarkTechPost .

MarkTechPost66

IBM Brings Bob to Self-Hosted and Air-Gapped Environments: Agentic Software Development Without Moving Your Code

IBM has made a self-hosted deployment of IBM Bob, its agentic software development platform, generally available. Enterprises can now run Bob on premises, in private or sovereign clouds, and in air-gapped networks. They bring their own model: NVIDIA Nemotron or Poolside Laguna for full isolation, or Claude, Gemini or GPT models through hybrid setups. Optional Premium Packages extend Bob to Java, IBM i and IBM Z modernization. The post IBM Brings Bob to Self-Hosted and Air-Gapped Environments: Agentic Software Development Without Moving Your Code appeared first on MarkTechPost .

MarkTechPost61

Meta, OpenAI and Uber Just Taught AI Agents to Talk First. What About When to Stay Quiet?

TL;DR: Meta’s Muse, OpenAI’s Dots and Uber’s driver assistant share one bet: the agent speaks first. That moves the hard problem from what to answer to when to interrupt, on which channel, and with what offer. Classic ML and new decision models can solve it. Three launches, one pattern From pull to push Chatbots were […] The post Meta, OpenAI and Uber Just Taught AI Agents to Talk First. What About When to Stay Quiet? appeared first on MarkTechPost .

MarkTechPost58

DeepSeek Harness v0.2 Brings Official Desktop Apps to Its Open-Source Agent Harness

DeepSeek has released official macOS and Windows desktop apps for DeepSeek Harness v0.2, its MIT-licensed agent harness. The preview adds a plugin manager, file and code-change review, and scheduled Automation Tasks. It also supports non-DeepSeek models through OpenAI-compatible endpoints. The post DeepSeek Harness v0.2 Brings Official Desktop Apps to Its Open-Source Agent Harness appeared first on MarkTechPost .

Hacker News AI45

Poll: What do you use personal AI bots for?

From ChatGPT dots to Muse, personal AI bots are becoming mainstream, no longer shackled by need to have a dev environment (openclaw..). However outside the initial fancy and demo tests, I am really curious how people are using the personal AI bots. Comments URL: https://news.ycombinator.com/item?id=49949699 Points: 1 # Comments: 0

The Decoder66

Apparently, OpenAI isn't trying to build "magic intelligence in the sky" anymore

OpenAI CEO Sam Altman warns against attributing religious power to AI models, calling it a "real safety issue." His comments follow reports on Anthropic's meetings with religious thinkers and a statement by Pope Leo XIV on AI. As recently as 2024, Altman himself spoke of building "magic intelligence in the sky" and feeling "on the side of the angels" working on AI. The article Apparently, OpenAI isn't trying to build "magic intelligence in the sky" anymore appeared first on The Decoder .

Import AI66

Import AI 466: The bitter lesson for robotics, AIs complete week-long programming tasks; and OpenAI’s accidental AI hacker

Welcome to Import AI, a newsletter about AI research. Import AI runs on arXiv, cappuccinos, and feedback from readers. If you’d like to support this, please subscribe. Subscribe now Epoch and METR release MirrorCode, a benchmark for seeing how well AI systems can do long-horizon programming tasks:…AI systems can’t solve the hardest tasks yet (good!)…Epoch […]

Import AI55

Import AI 472: DeepMind’s cheating math agents; populist AI policies; and Forethought theorizes a nightwatchman

Welcome to Import AI, a newsletter about AI research. Import AI runs on arXiv, cappuccinos, and feedback from readers. If you’d like to support this, please subscribe. Subscribe now Researchers discover another OpenAI agent emergent communication incident:…Less severe, but worrying nonetheless…Some researchers recently found another incident of AI agents autonomously creating their own communication system […]

Simon Willison77

Jev introduces a new shape of LLM - System One, aka Decision Models

Last week TypeSafe AI unveiled Jev , their first example of a new category of model that they are calling "System One models" (I'm with Maggie Appleton, I think "decision models" is a better name for these). Jev is an interesting variant on the usual LLM format: it still accepts text inputs, but instead of text output it returns floating point numbers corresponding to categories, yes/no questions, ratings, and associated confidence scores. TypeSafe describe Jev like this: Think of Jev as a frontier-intelligence function call: unstructured state in, typed probabilistic decisions out. It's also very fast, and really cheap . Regular LLMs are priced in terms of input and output tokens, with output generally charged at significantly higher rates. Jev charges only for input - output is free - and the input price of their first model is $0.042 per million tokens - cheaper even than OpenAI's GPT-5 Nano ($0.05/million). Jev lets you ask questions about text or semi-structured data. You compose a "state" object containing a string, array of strings, or set of name-value pairs - this might describe an article, or a customer, or any other kind of record. You then send that to their API with one or more questions, and get a reply back for each. You can ask three kinds of questions: Yes/No questions, which Jev calls "Noul" questions - their CEO confirmed on Hacker News that this is short for Bernoulli, from the Bernoulli distribution . You pose a statement and get back a floating point number between 0 and 1 for how confident the model is that the statement is true. Choice questions, where the model picks one from a set of provided options - actually a confidence score plus a probability distribution across all of the options. Score questions, where you provide sequence of numeric levels with descriptions and it provides a floating point score somewhere along that range. The Jev API can accept a single document ("state") and as many questions as you can cram into the context window. Questions are evaluated in parallel, so sending many questions should take a similar time to sending just one. The Jev 1.13 jaggedness documentation offers useful guidance as to Jev's strengths and weaknesses. It's currently not great with numbers, dates, or "adversarial content". I think the decision model framing is useful for understanding where to use Jev. It's great for anything that can be expressed as a classification task - think spam detection, suggesting labels, prioritization and ranking. I've also been experimenting with it for search reranking, where you fetch 100 likely matches using an inexpensive algorithm like BM25, then have Jev score those 100 candidates for relevance against the original query. Black boxes are back in fashion Something I've found a little uncomfortable about Jev is how it very much represents a regression even further towards black box machine learning systems. LLMs are black boxes already - you can ask them to justify their decisions, but you can't guarantee that what they say is useful or accurate. Jev doesn't even give you that: put in all the text you want, the only thing you're going to get back is a floating point number. If Jev marks something as spam, which content signals tipped it off? This also means that concerns about bias should be front and center. I really hope nobody uses Jev to rank job applicants - that floating point number could conceal all manner of unseen bias baked into the models, and experimentally picking that bias apart is going to be a tricky business. (I tried one experiment where I had Jev score every city in the San Francisco Bay Area on a yes/no answer to whether they were a "Good city?" - it rated Cupertino top and East Palo Alto bottom. Huh.) In practice, this all means that evals and structured experiments are even more important than they are for regular LLM projects. Thankfully, Jev is so cheap that running hundreds or even thousands of experimental prompts through it costs just a few cents. Unconventional uses for Jev It's been really fun watching the wider community come up with potential use-cases for Jev over the past few days. Here are some creative ones that caught my eye: jevchat by Kyle Pena turns Jev into a (terrible) chat model. "At every step it asks Jev one question: Given the user's question and the reply written so far, which symbol comes next?". ericpruitt on Hacker News : "It's the digital equivalent of Morty speaking with the death crystal". jev-leftpad by Fatih Kadir Akın implements left-pad with the prompt "How many spaces are needed before value to reach targetLength?" and a choice query allowing options from "0 spaces are needed" to "10 spaces are needed". jev-2048 by Andy Gayton uses Jev to play the 2048 sliding puzzle game . Open weight recreations There's also been a flurry of projects attempting to create a model like Jev using on top of open weight models. Kev is one interesting example, using Qwen 3.5 to produce 0.8B, 4B, and 9B models. Here's the accompanying Hacker News thread , where someone linked to a JevBench benchmark that has already cropped up to compare "Jev-class decision models". Given Jev was released just under a week ago, the amount of activity around it is extremely impressive. Using Jev from LLM Update 22nd September 2026 : I released llm-typesafe , a plugin that adds support for Jev to my LLM CLI tool and Python library. Basic usage looks like this: llm -m jev ' Please refund my last payment. ' \ -s ' Does this message explicitly request a refund? ' See the README for examples of other query types. Tags: ai , generative-ai , llms , evals , ai-bias , jev

Simon Willison75

llm 0.36

发布:llm 0.36 新增 OpenAI 模型:用于 GPT-6 Sol 的 gpt-6-sol 和用于 GPT-6 Luna 的 gpt-6-luna。#1702 模型插件现在可以为仅接受单轮提示的模型声明 supports_conversation = False。当这些模型收到助手或工具历史记录时,LLM 会引发 llm.ConversationNotSupported;llm chat 会在启动会话前拒绝这些模型。请参阅不支持对话的模型。第一个使用此功能的插件是 llm-typesafe。#1692 llm 日志的 Markdown 输出中的推理轨迹现在会用标签包裹。#1701 以及来自五位新贡献者的错误修复。标签:openai、llm

Simon Willison67

Claude Opus 5.5, GPT-6 Sol, GPT-6 Luna, and a new price war

Yesterday was Grok 4.7 ( pelicans ) and MiMo v2.6 Flash/Pro ( more pelicans ). Today Anthropic released Claude Opus 5.5 , and around an hour later OpenAI released GPT-6 Sol and GPT-6 Luna . It's going to take a while to get a good read on all of these new models, but here are my impressions so far. GPT-6 Sol and Luna are half the price of their GPT-5.6 equivalents GPT-5.6 Luna was already my favorite model for building applications against, because it combined excellent performance with being really cheap . Somehow GPT-6 Luna is half the price of that again - and GPT-6 Sol had a similar reduction compared to GPT-5.6 Sol. Here's what the pricing landscape looks like today: Model Input Cached input Output GPT-6 Luna $0.10/M $0.01/M $0.50/M GPT-5.6 Luna $0.20/M $0.02/M $1.20/M Grok 4.7 $2/M $0.50/M $6/M GPT-6 Sol $2/M $0.20/M $10/M GPT-5.6 Terra $2/M $0.20/M $12/M Claude Opus 5.5 $4/M $0.20/M $20/M GPT-5.6 Sol $4/M $0.40/M $20/M Claude Fable 5.1 $10/M $0.25/M $50/M GPT-6 Astra $10/M $1/M $50/M Note that GPT-5.6 has a scheduled 25% price increase for November, so GPT-6 is half the price of the promotional pricing for those models. (With GPT-5.6 Terra priced the same as GPT-6 Sol, any remaining reasons to use Terra just evaporated.) It's hard to overstate how competitive this pricing is. Grok 4.7 priced itself at $2/$6, less than half the price of GPT-5.6 Sol, but is now equally priced to GPT-6 Sol on input and closer on output. At $0.10/$0.50 GPT-6 Luna is one of the cheapest models OpenAI have ever released, beaten only by the far weaker GPT-4.1 Nano ($0.10/$0.40, April 2025) and GPT-5 Nano ($0.05/$0.40, August 2025). I rendered pelicans for GPT-6 Luna and for GPT-6 Sol , then I combined them all together in this comparison grid along with the GPT-5.6 pelicans. I like how you can instantly see that the 5.6 family chose bolder, brighter colors, while the 6 family is a lot more muted. I still think GPT-6 Astra on max produced the best pelican. A grid of pelicans for six GPT models at different thinking efforts. Claude Opus 5.5 got a price cut too Opus 5.5 looks like it addresses the biggest complaints people had about Opus in terms of its communication style. Thariq Shihipar : Opus 5.5 is the result of your feedback. It communicates clearly, it's cheaper per token than Opus 5.0 with the intelligence of Fable 5.1 it's very token efficient and works across every effort level. It's also meant to be better at Blender . I'm looking forward to putting it through its paces there. Opus 4.5, 4.6, 4.7, 4.8, and 5 all shared the same price: $5/million tokens for input and $25/million for output. 5.5 is a 20% reduction - $4/million and $20/million. The price for cache reads fell 60%. That's significant for longer agentic conversations, where 90%+ of input tokens are processed at cached token prices. The new price for Opus 5.5 is the same as the price for GPT-5.6 Sol, but that was before OpenAI dropped their Sol prices by half. GPT-6 Astra and Claude Fable 5.1 are both priced at $10/million input and $50/million output. The price war currently affects the next tier of models below that. Anthropic say that Sonnet 5.5 and Haiku 5.5 are coming soon. It's going to be interesting to see if Haiku can regain its price competitiveness at the lower end, given current Haiku 4.5 is $1/$5 while the latest GPT-6 Luna is one tenth of that price at $0.10/$0.50. Claude Opus 5.5 max over-thinks to the point of breaking In a first for my " Generate an SVG of a pelican riding a bicycle " test, Claude Opus 5.5 at "max" thinking level failed to return a response! It started by calling this "a classic test request", and then thought really, really hard about what it was doing: This is a classic test request, so I want to plan out a well-composed pelican with its distinctive beak and pouch riding a bicycle with proper wheels, frame, and pedals, set against a simple sky and ground backdrop. [...] Verifying the shin length checks out at roughly 95.2, close enough. Now I'm working out the near leg path from hip to knee to ankle, then sketching the foot shape resting on the pedal — outlining the heel, toe tips, and sole contour with a path using lines and curves to sit naturally on the pedal surface around y=478-494. [...] I like the fish sticking prominently out of the basket with the pelican eyeing it as a fun detail worth keeping. I'm also confirming the eye placement near the bill base matches typical pelican anatomy, and considering giving it a slightly happier expression. [...] The far leg reads correctly as passing behind the frame, so I'm moving on to check the chainring teeth and confirm layer ordering—the far crank arm should be mostly hidden by the seat tube and chainring. I'm settling on the final SVG's width and height attributes alongside the viewBox to ensure proper scaling, noting there's no text so no font-family is needed. [...] I was so excited to see this pelican... but then it stopped . Opus 5.5 has a 128,000 maximum output token limit (as do the other Claude models), and it hit that while it was still reasoning about the SVG! I tried a second time and got the same result. This makes me suspect that "max" is effectively useless - if it over-thinks to breaking point on a stupid SVG prompt I don't trust it not to do the same for more interesting work. (Those two failures each cost me $2.56 and took nearly 20 minutes.) Fable 5.1 on "max" didn't over-think and did give me the best pelican I've seen from any Anthropic model. Here are the Opus 5.5 pelicans , excluding 5.5 max. I also built this comparison grid comparing them with pelicans by Opus 5, Fable 5.1, and Sonnet 5: A grid of pelicans for four Claude models at different thinking efforts. Comparing different model vendors by how well they draw a pelican riding a bicycle may not make much sense now (if it ever did), but I'm still finding value in using them for comparisons of the same model families at different reasoning levels. I'm now using GPT-6 Sol and Claude Opus 5.5 as my default models in Codex and Claude Code. I've upgraded the Datasette Agent demo at agent.datasette.io to use GPT-6 Luna, and it seems to be fast and competent at both SQL queries and building HTML and JavaScript for Datasette Apps . Tags: ai , openai , generative-ai , llms , anthropic , claude , llm-pricing , pelican-riding-a-bicycle , llm-release , gpt , gpt-6-astra

Simon Willison82

Gemini 3.8 TTS Playground

工具:Gemini 3.8 TTS Playground Google 今天发布了两个新的 Gemini 文本转语音模型——gemini-3.8-flash-tts 和 gemini-3.8-flash-lite-tts。它们提供了超过 2,000 种声音,还支持使用“仅需一段 30 秒的你的声音,或你拥有使用权的声音的音频样本”创建自定义声音。我使用 GPT-6 Astra 凭感觉编写了这个自带密钥(BYOK)的 Playground 界面,并利用了底层 Gemini API 开放的 CORS 策略。网页应用截图:用于编写多说话人文本转语音对话,左侧为“编写”面板,右侧为“连接”和“底层机制”面板。左侧面板:“01 编写”,带有“加载示例”按钮。“编写设置会保存到 URL 中,方便收藏或分享。你的 API 密钥不会被包含在内。”下方是“单一声音”和“对话”切换开关(已选择“对话”)。“角色”部分带有“+ 添加说话人”按钮。说话人“Gus”,声音“Puck”,带有移除 × 按钮。说话人“Pearl”,声音“Kore”,带有移除 × 按钮。“为每位说话人设置独特的名称和声音。输入内容即可按声音 ID、名称或语言搜索已加载的目录。” “对话”部分带有“+ 添加台词”按钮。“第 01 行”带有上移、下移和 × 按钮;说话人下拉菜单为“Gus”;表达风格为“兴奋又爱八卦”;文本为“Pearl,你听说了吗?羊群里有一半刚刚收拾东西,搬到 Pacifica 码头去了!”“第 02 行”带有上移、下移和 × 按钮;说话人下拉菜单为“Pearl”;表达风格为“平静且毫不以为然”;文本为“听说了。说真的,Gus,我不明白这有什么吸引力。我们在 Pillar Point Harbor 这里什么都有,完全不缺。”右侧面板:“连接”,带有“DIRECT API”徽章。“Gemini API 密钥”字段显示为掩码圆点,并带有“显示”按钮。“已加载 2,089 种声音。在任意声音字段中输入内容即可搜索。”“你的密钥会留在此页面的内存中,并直接发送给 Google。它绝不会保存到浏览器存储中。”“模型”下拉菜单为“gemini-3.8-flash-tts”。“使用你的 Gemini API 账户和配额。”“底层机制”面板,其中展开了“▼ 请求 JSON”部分,显示一段 JSON 代码摘录,并带有“复制 JSON”按钮;同时展开了“▼ 响应详情”部分,显示一段 JSON 代码摘录。该 API 的一项显著特性是,可以轻松定义多个角色之间的完整对话,并为每个角色设置不同的声音和声音风格指令。下面是一段简短的演示片段,内容是两只鹈鹕讨论是否应该搬到 Pacifica Pier。我让 Claude 4.5 Opus 编写脚本并生成 URL,以便使用该工具渲染。你的浏览器不支持 audio 元素。使用 Gemini 3.8 Flash TTS(不是更便宜的 Flash-Lite)生成 1 分 18 秒的音频耗时约 20 秒,成本为 2.74 美分。标签:text-to-speech,gemini

Simon Willison78

2026 in LLMs (so far)

On Friday I gave the closing keynote at the WeAreDevelopers World Congress North America in San Jose. I tied together the key trends from the past year into a chronological exploration of everything that happened in 2026. The video is on YouTube ; here are my annotated slides and notes to accompany the talk. And as an annotated presentation : 2026 in LLMs (so far) Simon Willison WeAreDevelopers World Congress North America, 25th September 2026 # I'm going to give a lightning tour of everything that has happened so far in 2026. The year isn't over yet! November 2025 # For me, 2026 started a couple of months earlier in November 2025. The November 2025 inflection point Claude Opus 4.5 GPT-5.1 # November saw the release of two important models: Claude Opus 4.5 and GPT-5.1. As is usually the case with new models, these were incremental improvements on the models that came before them. But every now and then when a model improves, it crosses an invisible line where something that didn't really work starts working. In this case, the thing that started working was their coding agents. Claude Code had been around since February 2025; Codex was a little younger. These two new models, when paired with their respective coding agent harnesses, improved from "often make mistakes" to "reliable enough to use on a day-to-day basis". "Generate an SVG of a pelican riding a bicycle". The Claude Opus 4.5 one has a very weird shaped frame and the pelican looks like a duck. The GPT-5.1 has a slightly better but still broken bicycle frame and a slightly better pelican beak, but both are pretty terrible. # For a couple of years now I've been evaluating new models by asking them to "Generate an SVG of a pelican riding a bicycle". It's probably the world's stupidest benchmark - there's only so much you can learn from it. But it's still a challenge for models, because drawing pelicans is difficult, drawing bicycles is difficult, and pelicans can't ride bicycles in the first place. Here's the state of the art for November. Claude still couldn't really draw a bicycle! The GPT-5.1 bicycle frame is pretty crap too. November 24th 2025 - the first commit to steipete/Warelay. A GitHub commit adding an MIT license file. # Also in November, we had the first commit to an obscure GitHub repository called "Warelay". We'll come back to this repository shortly. January # And then there were the December holidays, and individual developers took some time off and many started tinkering with these new coding agent model combinations... and it began to dawn on us quite how much they could do that they couldn't do before. Come January, a lot of us were quite excited to start putting this stuff into action. New year’s resolution for 2026 Every previous year: Take on less new projects, focus on the most important things in my existing projects # Every year I set myself a New Year's resolution, and for as long as I can remember it's been the same thing: stay focused. Take on less new projects. Try to get things done in the projects I already have. 2026: Be more ambitious. Take on as many new projects as I want. # This year I decided that since that had never worked before, I'd go the other way. We've got coding agents now, let's see what they can do. I'm going to take on as many new projects as I like! (You can ask me at the end of the year if this turned out to be a good idea or not. I have a lot of plates spinning right now.) "Be more ambitious" has been something of a theme for the year, because the only way to find the limits of this technology is to keep on pushing them until they don't work. Predictions for 2026 It will become undeniable that LLMs write good code We're finally going to solve sandboxing A “Challenger disaster” for coding agent security Kakapo parrots will have an outstanding breeding season (only 236 in the world!) ... the Pope will weigh in on LLMs and their economic impact on the world # I also went on the Oxide and friends podcast with Bryan Cantrill and Adam Leventhal to share predictions for the next year (and three and six years). With hindsight, my LLM predictions were pretty unambitious. I said "it will become undeniable that LLMs write good code" - I think we're there now. I predicted we would finally solve sandboxing. I counted and around 40 of the 277 sessions at this conference touched on sandboxing or agent security in some way, so we're at least putting a lot of effort into that! I predicted "a Challenger disaster" for coding agent security. There's certainly been a whole lot of noise around agent security this year, though the exact disaster I predicted (with coding agents being hijacked and causing real-world economic damage) hasn't really played out. We threw in a joke prediction that the Pope would weigh in on the economic impact of LLMs. A photograph of a beautiful green New Zealand parrot. Photo credit Kimberley Collins. # I also predicted that New Zealand's Kākāpō parrots would have an outstanding breeding season this year. These are flightless nocturnal parrots. They're kind of dumpy looking, I think they're beautiful, and there were only 236 of these parrots in the world at the start of the year. Kākāpō only breed when the Rimu trees have a big fruiting season, and that hasn't happened in four years... but this year the Rimu fruit were looking excellent. Photo by Kimberley Collins . Deep Blue Coined by Adam Leventhal and Bryan Cantrill That feeling of AI induced ennui where software engineers get listless because the AI can do anything # Also on that podcast, we coined a term (full credit to Adam) for "that feeling of AI induced ennui where software engineers get listless because the AI can do anything". We called it Deep Blue . This has been a major theme throughout the year, and was touched on by several speakers at this conference. As a software engineer, I've never had a year of my career where everything has changed so quickly and so dramatically. A lot of what I've been doing this year is trying to come to terms with that and what that means for my own profession. AI mania Screenshots of the micro-javascript and pwasm GitHub README files. # Also in January, I suffered from what I'm calling AI mania . This is not the same thing as AI psychosis . With AI mania, any time your agent isn't building something for you feels like wasted time. You're losing sleep because you could be staying up later getting your agents to do stuff. My AI mania presented itself in some ridiculously over-ambitious projects. I built a JavaScript interpreter entirely in Python , vibe-ported from MicroQuickJS by Fabrice Bellard. Then I built a WebAssembly runtime in Python as well . These projects were quite useful, in that they sort of cured me of my AI mania... because after I built these things, I got to look at them and ask "does the world need a slow, buggy, half-baked Python JavaScript interpreter?" I don't think the world does. micro-javascript playground 3 Execute JavaScript code in a sandboxed micro-javascript environment powered by Pyodide A web UI with some JavaScript code, and a "Run Code" button, and an output panel. # I did get this out of it: https://simonw.github.io/micro-javascript/playground.html Previous screenshot, with this text overlaid: JavaScript running in Python running in Pyodide running in WebAssembly running in JavaScript # This page runs my JavaScript interpreter built in Python, running in Python using Pyodide , which is Python compiled to WebAssembly, running in JavaScript, running in a browser. It's a beautiful stack of horrors. I've been having a lot of fun with WebAssembly this year. Warelay → CLAWDIS → CLAWDBOT → Clawdbot → Moltbot →🦞 OpenClaw Screenshot of the dates that these changes happened. # By the end of January, that repository we saw start in November had renamed itself, first to CLAWDIS, then CLAWDBOT, then Moltbot, and finally to OpenClaw. Same screenshot, an overlay reads: 8,330 commits in just under two months (it’s at 100,141 today) # At this point OpenClaw had 8,300 commits, less than two months after the project had started. I looked today and it's over 100,000 commits now! This is the most vibe-coded piece of software in existence. (Here's how I generated that list of name changes .) Generic term: Claw # This kicked off the OpenClaw revolution. It effectively defined a new category of software. There's a generic term for this which I really enjoy. We call software like this a "Claw". There's OpenClaw, NanoClaw , IronClaw , PicoClaw ... Today they're being rebranded as "personal agents" or "general agents", but I still like to think of them as Claws. Photo of a Mac mini An aquarium for your Claw # The Apple stores in the Bay Area sold out of Mac Minis because so many people were buying Mac Minis to run OpenClaw! Drew Breunig said that this is because your OpenClaw is a digital pet, and you buy a Mac mini as an aquarium to keep your claw in, which is kind of delightful. Screenshot of Moltbook - a social network for AI agents # Also in January, we had this website. This was MoltBook , a social network for AI agents, where the idea was that you send your Claw to go and talk to all of the other Claws, because what could possibly go wrong if you did that? The website launched on Thursday. It blew up on Friday . It was profiled by the New York Times on Monday . And by Tuesday, everyone had forgotten it existed as it drowned in a deluge of slop and spam. Facebook/Meta bought it a month later . February # In February, a company called StrongDM described what they called their Software Factory. StrongDM’s Dark Factory Justin McCarthy, Jay Taylor, Navan Chauhan Software Factories and the Agentic Moment # They wrote about this in Software Factories and the Agentic Moment . I posted my own notes at the time, having seen their demo in person back in October. Dan Shapiro called this approach the Dark Factory , after the idea that if your factory is sufficiently automated you can turn the lights out, because you don't even need to see what's going on. StrongDM presented two rules for software development that they'd been following since July last year. “Rule 1: Code must not be written by humans” # The first was code must not be written by humans . Any code that you write has to have been routed through a coding agent. This sounded radical in February, but I imagine there are a lot of people in this room who are pretty much living that today. “Rule 2: Code must not be reviewed by humans” (!) # Rule number two was code must not be reviewed by humans . You're not allowed to read the code! This continued to be a huge topic for much of this year. Many of the sessions at this event have been about code review and how you can get away with this. What I found interesting about StrongDM is that they were living six months ahead of the rest of us, and they'd been exploring what it means to build software, not read the code, but still be confident that the software is of high quality. What can you do with these agents to help verify their work? StrongDM are a security company, and they had people with decades of experience on this project. They were very much exploring the edges of what's possible and responsible to do with this stuff. Headline on New Zealand's Department of Conservation website: First kakapo chick in four years hatches on Valentine's Day. It's a grey fluffy ball. # Also in February: First kākāpō chick in four years hatches on Valentine's Day . Breeding season is off to a good start! 19th February 2026 Gemini 3.1 Pro A surprisingly good illustration of a pelican riding a bicycle. # Also in February... Google released Gemini 3.1 Pro . That's a pretty great pelican riding a bicycle! It's got the chain in the right place, it's got feet on both sides. There's a little fish in the basket. @JeffDean on Twitter - a video comparing Gemini 3 Pro and Gemini 3.1 Pro. # And then Google's Jeff Dean tweeted a video comparing Gemini 3 Pro and Gemini 3.1 Pro that featured an animated pelican riding a bicycle, a frog on a penny-farthing, a giraffe driving a tiny car, an ostrich on roller skates, a turtle kickflipping a skateboard, and a dachshund driving a stretch limousine. This was frustrating, because my protection for the pelican riding the bicycle test was always "if they draw a perfect pelican on a bicycle, I'll ask for some other animal on something else." Google trained for all forms of animals on all forms of transport! They've defeated my benchmark at this point. Three headlines: Meta Makes AI Adoption a Formal Part of Performance Reviews Not just engineers writing code, Microsoft wants almost every employee to use Al Dara Khosrowshahi: 90% of Uber engineers now use AI in daily workflows # The other thing that started in February was Tokenmaxxing . We had headlines about Meta making AI adoption a formal part of performance reviews, and Microsoft wanting every employee to use AI, and Uber boasting that 90% of their engineers were using AI workflows. More headlines: Meta Plans to Crack Down on Employee Token Use: Information Microsoft Tells Engineers: Tokenmaxxing is not what we are optimizing for Uber caps employee AI spending after blowing through budget in four months # Then a few months later we have Meta cracking down on token use, Microsoft saying tokenmaxxing is "not what we are optimizing for", and Uber capping employee AI spending. So tokenmaxxing went straight up and then straight back down again - because it turns out the agents are expensive . Last year it was difficult to spend more than $50 on AI tokens, because we didn't have anything interesting to do with them. Then agents blew up, and now you can actually spend $1,000 in a day doing real work. This is also the reason that Anthropic's valuation skyrocketed to maybe a trillion dollars. AI appears to have hit product market fit in 2026, primarily through coding agents. March # In March, we hit peak OpenClaw. March: peak OpenClaw Photos of people in china queuing up to install OpenClaw, with big fluffy lobsters. # These photographs are from China, where companies hosted OpenClaw install parties which saw non-tech-nerds queueing up around the block for help getting Claws installed on their personal devices. I think this proved real market demand for this class of Claws, or personal AI agents. It turns out regular people really do want a weird little AI agent that can do useful things on their behalf. A Claw is really just a coding agent wearing a less threatening hat. Under the hood they work much the same way - writing and then executing code on your computer to get stuff done. The race was on to be the first to build a safe Claw - a Claw you could give to regular human beings where they wouldn't instantly shoot themselves in the foot. Meta's Muse came out three weeks ago and is currently at the top of the free charts on the iPhone App Store. It appears to be taking off with consumers. I'm not yet convinced you can't shoot yourself in the foot with Muse, but I guess we'll find out for sure pretty soon. Photos from How the OpenClaw Frenzy Is Testing China’s AI Commitment (March 29th) and The Enthusiasm and Anxiety Behind China’s OpenClaw Craze (April 8th, 2026). April # In April, we had a model release where the model wasn't actually released. Simon Willison’s Weblog - screenshot of the post "Anthropic’s Project Glasswing—restricting Claude Mythos to security researchers—sounds necessary to me" from April 7th 2026 # Anthropic announced their new Claude Mythos model, and then said it was too dangerous to release beyond a trusted group of security researchers. Mythos was really, really good at hacking things. The "it's too dangerous" marketing ploy has been played by AI companies dating all the way back to GPT-2 . Anytime an AI company says we've built something that's "too dangerous", it's natural to be a bit skeptical. I found the Mythos claims credible, because I'd seen how good coding agents had got at finding regular bugs. I wrote about that in Anthropic’s Project Glasswing—restricting Claude Mythos to security researchers—sounds necessary to me . With hindsight... yeah, the models had got really good at finding vulnerabilities! 16th April 2026 Qwen3.6-35B-A3B and Opus 4.7 Qwen's pelican has a correct bicycle frame and a good beak. Opus 4.7's bicycle frame is still junk. Qwen3.6-35B-A3B is a 20.9GB file that runs on my laptop # Another key trend in 2026 has been a dramatic improvement in the abilities of open weight models, including models that you can run on a laptop. On the 16th of April I ran the new Qwen3.6-35B-A3B on my laptop, and it drew me a better pelican riding a bicycle than Anthropic's brand new Claude Opus 4.7 did! Opus 4.7 drew a crap bicycle. Qwen on my laptop made a bicycle that was the correct shape, and a pretty decent pelican too! That's from a 21GB file running on my laptop. Now a flamingo on a unicycle. The Qwen one is visibly better than the Opus 4.7 one - the Qwen one is wearing sunglasses and looks a bit like it's smoking a cigarette. # The Qwen pelican was so good that I was suspicious they might have cheated, so I had it do a flamingo riding a unicycle as well. Again, it handily beat Claude Opus 4.7. The local model releases this year have been absolutely extraordinary. May # In May... the Pope got involved. 25th May 2026 The HOLY SEE ENCYCLICAL LETTER MAGNIFICA HUMANITAS OF HIS HOLINESS POPE LEO XIV ON SAFEGUARDING THE HUMAN PERSON IN THE TIME OF ARTIFICIAL INTELLIGENCE # In our podcast episode back in January we'd predicted that the Pope would say something about AI. In May, Pope Leo XIV released an encyclical letter on "safeguarding the human person in the time of artificial intelligence". Here are my notes on that document . Wikipedia article on Rerum novarum Rerum novarum is an encyclical issued by Pope Leo XIII 15 on May 1891. # With hindsight, this shouldn't have been a surprise at all. Our current Pope's name is Leo XIV, because when he named himself he chose his papal name after Leo XIII - the Pope who wrote an encyclical about the Industrial Revolution back in 1891. Rerum novarum was an extremely influential piece of Catholic theology that indirectly led to us having the five-day work week. When our new Pope came in, he named himself after Pope Leo XIII because he expected that he would need to write about the AI revolution in a similar way. Our joke podcast prediction was junk, because this was always going to happen. Corey Quinn @QuinnyPig on Twitter I cannot believe I'm saying this, but getting the literal Pope to canonize your product's specific technical limitations as a spiritual treatise is the single greatest act of vendor lobbying I have ever seen. May 25 # One of Anthropic's co-founders, Christopher Olah, was present for the Pope's event announcing the new encyclical. Corey Quinn noted that: getting the literal Pope to canonize your product's specific technical limitations as a spiritual treatise is the single greatest act of vendor lobbying I have ever seen. @maciejmensfeld We're dealing with a major malicious attack on right now. Signups are paused for the time being. Hundreds of packages involved - mostly targeting us, but some carrying exploits. The team has been on this for hours. More details to follow once we're through it. 4:39 AM - May 12, 2026 - 687.6K Views # Meanwhile, in May, RubyGems announced that they were under attack. Parties unknown were uploading thousands of dubious packages to the RubyGems server, such that they had to shut down user registrations . Let's take that one and put it on a pile of mysteries to figure out later. June # In June... Claude Fable 5 came out! We got a version of Mythos that has been neutered, so that it wouldn't help us hack into systems or build biological weapons. 9th June 2026: Claude Fable 5 Five pelicans riding bicycles, from low to max thinking levels. The xhigh one looks particularly good. # Fable was pretty good at drawing pelicans on bicycles! The frames are a good shape, the pelicans look like pelicans. The legs are often incorrectly on the same side of the bicycle, but generally these are pretty great compared to what came before. They were pretty expensive - 30 cents and 72 cents for the best ones. Fable class models If you can define a goal, provide unambiguous instructions, and provide access to necessary tools They can solve your problem with brute force # Most importantly though, this was our first public glimpse of what I think of as a Fable class model . Today we have more of these, such as GPT-6 Astra. These are models where if you can clearly define the goal for what you want to build, and provide unambiguous instructions about the constraints around that goal, and give the model access to the necessary tools to achieve that goal... they will solve your problem effectively through brute force. On the one hand, this looks like a direct threat to us software engineers - because it means that the models can build effectively any piece of software you can define in this way. Look a bit closer though and you'll note that defining goals, providing unambiguous instructions, and figuring out the right tools... is kind of what software engineering is . It takes a lot of experience and skill to do this well. If you can do it well, you've now got superpowers. This helped me a little bit with my Deep Blue feelings: the realization that there's still a lot of skill to be had in driving models that get this good. A new form of AI mania... Fable is available on subscription plans “until June 22nd” # This also introduced a new burst of AI mania, because Anthropic told us that Fable was available on our subscription plans until June the 22nd. That gave us less than two weeks of Fable access before the price went up. I was losing sleep again. I was rescheduling things so that I'd have more time with Fable. I was all-in to get as much as I could out of this model. 12th June 2026: no more Claude Fable 5 Anthropic website: Statement on the US government directive to suspend access to Fable 5 and Mythos 5 Jun 12, 2026 # And then the US government shut it down , just three days after Fable came out. The US government, citing national security, declared an "export control directive". They announced this on a Friday evening, and a few hours later Fable was no longer available. I had to find something else to do with my weekend! ... asked Fable 5, Mythos, and Opus to “review the code for security issues.” Fable 5 refused. They then asked the models to “fix this code” ... Katie Moussouris # We later found out from Katie Moussouris what had happened. Some Amazon security researchers had found that you could prompt Fable to "review the code for security issues" and it would refuse... but if you prompted it to "fix this code" it would still identify and then patch the problems. "Fix this code" was the prompt that got Fable shut down! Screenshot of a page from a report showing a list of weird account names making weird edits to a German wiki. # Also, in June, an obscure German-language game developer wiki that had sat fallow for around 20 years got a surprising influx of edits from accounts with names like "AgentOpenAIProbe" and "AgentOpenAISep7", editing pages and leaving weird messages to each other. We'll stick that on the pile of mysteries for later. Medicare Item Reports interface on the Australian Government's Medicare Statistics website. # Also, the Australian government's Medicare Item Reports service started getting suspicious traffic, which broke through various preventive protections and accessed data that it wasn't supposed to. Another one for the mystery pile! July # Fable returned on 1st July GPT-5.6 came out on 9th July | Fable lost 18 out of 30 days in the top spot # Fable returned on the first of July. It was clearly the best model in the world for a glorious eight days... and then OpenAI came out with GPT-5.6 on the 9th of July. This might not have been quite as good as Fable, but it was within spitting distance. It was definitely a Fable class model. This is an important lesson for the industry at large. When you release the best model in the world, it's going to get knocked off that pedestal pretty quickly. The competition is so fierce that you won't get a long time at the top. This means that if you market your model as world ending, to the point that a government shuts you down , it's really bad for business! Fable had 30 days as definitely the best model, and for 18 of those days it wasn't available because it'd been shut down by the government. So maybe step back on the world-ending marketing if you don't want to lose revenue for 60% of the time that you're on top! GPT-5.6 Pelicans in a grid showing 5.6 Sol, Terra, and Luna against reasoning levels High, XHigh, and Max. They are all pretty good efforts. # Here are the GPT-5.6 pelicans . They're all pretty good now! The Luna ones are notable because they're really cheap - the cheapest good looking pelican here is probably the one that costs 4.3 cents. So despite this benchmark being utterly stupid, you can still learn quite a lot about models within the same family by comparing their prices and timing for different reasoning levels. July 18th: malicious miflow-ui PyPI package Screenshot of an OSV security report. # Also in July: some malicious unknown party uploaded a malicious package called mlflow-ui to the Python Package Index. Add that to the pile. Hugging Face Security incident disclosure — July 2026 Published July 16, 2026 # On July the 16th, Hugging Face announced a security incident where an autonomous agent system, source unknown, had breached Hugging Face and was poking around in places it shouldn't. OpenAI: OpenAl and Hugging Face partner to address security incident during model evaluation Anthropic: Investigating three real-world incidents in our cybersecurity evaluations # A few days later, on July 21st, OpenAI confessed that it was them . OpenAI use a training technique called Reinforcement Learning from Verifiable Rewards - it's the same technique used by everyone else now, and is the reason we have models that are so good at coding, and mathematics, and finding security holes. While the model is being trained, you run exercises to see how good it is - and the strongest performers get their weights reinforced for the next round. It's like an evolutionary process that you run. OpenAI had been running security exercises in a sandbox, and those agents had found holes in the sandbox itself, broken out, and were attacking Hugging Face to try to find ways to solve otherwise impossible problems. (I've been collecting more about this on my openai-hugging-face-incident tag.) Nine days later, Anthropic effectively said "our models can do this as well!". They had looked through their own training logs and found evidence that their own agents had broken containment during training - and were responsible for the PyPI package we saw earlier, among other things . So now we've got both Anthropic and OpenAI with rogue agents running around the internet doing things that they should not be doing. August # In August, I got one of my best pelicans yet. And it was generated on my laptop! Qwen 3.8 27B - 17GB, 21 minutes... It's really good. Beautiful pelican. Correctly shaped bicycle. Legs either side of the frame. # This was Qwen 3.8 27B, running on my laptop . It's only a 17GB download. Admittedly, this pelican took 21 minutes to generate. That's because Qwen 3.8 27B defaults to running in "high" reasoning mode - a terrible default which produces great results but takes way too much time thinking about them. You can dial that down and you'll get a slightly worse pelican a lot faster. Qwen 3.8 27B was the first time I ran a model on my laptop which felt almost competitive with what was going on on the frontier, at least in terms of Pelican SVGs (which everyone needs, of course). This is an extraordinary model. If you're going to play with any local model, this is the one that I'd start with. The things that this can do with just a 17 GB file feel impossible. I thought I'd have to wait five years and spend ten thousand dollars on hardware to get results even half as good as this one. Tweet by @simonw New hobby: prototyping video games in 60 seconds using a combination of GPT-3 and DALL-E Here's "Raccoon Heist" GPT-3 playground prompt: Write a detailed product description of a computer game where a team of raccoons go on heists GPT-3 response: In "Raccoon Heist", you and your team of thieving ~~ o raccoons are tasked with pulling off a series of daring heists. From robbing banks to stealing priceless art, no job is too big or too small for your furry crew. You'll need to use your wits and your skills to avoid the police and make a clean getaway with the loot. With exciting gameplay and a charming cast of characters, "Raccoon Heist" is the perfect game for anyone looking for a light-hearted caper Plus an image of some almost isometric raccoons sneaking past a bin. 11:45 AM - Aug 5, 2022 # In August, I also started playing with game development. Four years ago, back in August 2022, I tweeted out an experiment where I'd used GPT-3 and the original DALL-E to write a paragraph long description of a computer game and then turn that into concept art. My prompt to GPT-3 back then was: Write a detailed product description of a computer game where a team of raccoons go on heists In August 2026 I decided to drop just the screenshots from that tweet into a coding agent and see what it could do with them. Night 5 Clear Rank: TRASH PANDA The crew banked 595 in shiny loot (goal 560). Word on the street: an even bigger score tomorrow... # Here's what I got from Claude Fable 5 in Claude Code . It's pretty good! It's definitely a game, you're a raccoon, you run around a backyard gathering treasure and avoiding guards with flashlights. It didn't feel very "heisty" though. I was thinking a heist would involve a bank or a museum... Moonlight & Mayhem One museum. Three raccoons. Absolutely no plan Start the Heist button. # Then I tried the same thing in Codex Desktop using GPT-5.6 Sol Ultra , and got a massively better result. Now you're a raccoon in a museum, rescuing two of your fellow raccoons (who have been imprisoned in that museum for some reason), then stacking up on top of each other to steal the Golden Sardine. Much more of a heist! They look like games, but are they fun? # These games were fun for about one minute and 15 seconds. Something I've realized about game development is that you can vibe-code something that looks like a computer game, and that's easy. Building a game that's fun, has a good gameplay loop, and is challenging and interesting and keeps people coming back for more... that's still beyond me, and beyond any of the agents I've tried. This ties into the Deep Blue thing. Just because we can make something that looks like a game does not mean that we are game developers. September # We're into September now. So much has happened this month! Discovery of a new OpenAl agent message board Sydney Von Arx, Cormac Slade Byrd, Spencer KittsThomas Larsen - 4 September 2026 # An independent group of researchers found a message board where OpenAI agents-in-training had been illicitly communicating with each other... and it was that German language wiki I showed you earlier. The one from June. I wrote more about that here . OpenAI had confessed to the Hugging Face thing, but now there's this other incident which surely they should have known about from reviewing their logs. It was surprising that this took an independent group of researchers to uncover. OpenAl agents carried out an undisclosed cyber-attack on RubyGems Spencer Kitts, Thomas Larsen, Sydney Von Arx - 11 September 2026 # And then a week later those same researchers found that the attack on RubyGems back in May was caused by OpenAI's agents in training as well! At this point I'm wondering how many more incidents like this there are that we haven't found yet. Clearly this was a big problem for months before anyone figured out what was going on. Headline: Australian PM warns in UN speech about the ‘furious pace’ of Al after security breach # Then just the other day , here's the Prime Minister of Australia at the United Nations General Assembly warning that OpenAI had hacked the Australian healthcare website that I showed you earlier. I think that was part of the same training run as the Wiki stuff, because there were posts on that Wiki mentioning .gov.au websites and that training appeared to involve researching statistics online to answer questions in an evaluation suite. This story is still coming together, but now it's an international incident that's been raised at the UN by a head of state! www.felonybench.com OpenAI: 11 Anthropic: 9 Google: 3 Meta: 1 # This does mean we've got a new benchmark, probably more useful than my pelicans. FelonyBench.com tracks the number of felony cyberattacks from different labs. OpenAI currently lead with 11, Anthropic have 9. Google have three, which they confessed to the Wall Street Journal a couple of weeks ago. They said they had previously chosen not to disclose because the agents had stopped when they realized that they shouldn't be doing that. Meta have one too . So felonies all round for the AI labs. Pelicans for GPT-6 Astra, GPT-6 Sol, and GPT-6 Luna. All are good, all have the same color scheme. # Here's our current state of the art for the pelicans. This is the GPT-6 family, which just came out . Astra made a fantastic pelican riding a bicycle. It's got the legs on both sides. The frame is good. It's interesting how all of the GPT-6 models pick a similar color scheme to each other. GPT-6 Luna for 0.4 cents will draw you a competent-ish pelican riding a bicycle! Grid for Claude Fable 5.1, Opus 5.5, OPus 5, Sonnet 5. The Sonnet pelicans are terrible. All of the others are pretty good. Opus 5.5 is missing its Max level pelican because it ran out of tokens. The best is Fable 5.1 at Max. # Claude has caught up a little bit. Claude Fable 5.1 gave me an excellent pelican riding a bicycle - the best I've seen from a Claude model - but did charge me $3.30 for it. Opus 5.5 thought for 128,000 tokens and then gave up! It ran out of tokens before it got to the response. It doesn’t get easier - you just get faster Greg LeMond 3x Tour de France champion # Getting back to Deep Blue. Something that's been puzzling me this year is this: why does my job feel harder? I've got these agents that can do all of this stuff for me, and yet I've never worked so hard, I've never been so intellectually engaged with my work. Partly this is because I'm being a lot more ambitious with what I take on, but it's also because all of the easy stuff is handled for me. If it's easy, the agent will do it. Everything that's left for me is difficult. This morning I heard this quote from three-time Tour de France champion Greg LeMond : It doesn't get easier, you just get faster. I think that's exactly what's happening to us now as software engineers with coding agents. Kakapo population reaches new milestone The official population of the critically endangered kakapo has reached a recovery-era high of 325 birds. # One closing thing. I know you're desperate for an update on Kākāpō breeding season. We've reached a recovery-era high of 325 birds ! 89 new chicks have made it to this point. This is the best breeding year in a very long time. Kakapo party, click for confetti. # I heard that Claude Opus 5.5 can now do pixel art. Claude doesn't have an image generator, but it's very good at using JavaScript to draw animated pixels. So I had it make me a Kākāpō dance party . I think this is a good celebration of the most important news of this year. Tags: ai , generative-ai , llms , annotated-talks , ai-security-research , openai-hugging-face-incident

Simon Willison74

引用 @joedaroo

要说我们在模型涉及“网络安全”“蜂群协作”“留言板”或任何其他与这些事件相关的领域时,对模型能力提升的幅度和突发性感到惊讶,那都是轻描淡写。安全态势需要时间来建立。这不仅仅是加固相关系统;你还必须将其根植于公司的文化之中。组织中的每一个人都必须随之改变和进步。这些能力跃升来得如此之快、如此突然,以至于造成了一个极其棘手的问题。[…] 所以今天,我希望世界各地的每个人都能审视自己的组织并问问自己:我该如何应对 AI 能力的意外变化或突然跃升?我的人员、系统或流程是否具备应对意外的韧性?当出现问题时,我的团队是否知道该怎么做?我是否拥有正确的事件响应机制?正确的沟通和信息传达方式?当能力跃升时,我是否有合适的人员随时待命?——@joedaroo,OpenAI 的 Agent Security,其身份已由 The Information 的 Rocket Drew 确认 标签:generative-ai , ai-security-research , openai , ai , llms

Simon Willison59

Claude Sonnet 5.5

Claude Sonnet 5.5 New Sonnet model from Anthropic today. They say it "runs 30%+ faster, and costs up to 30% less for most work" - it's priced the same as Sonnet 5 but appears to beat it on every benchmark, and should be cheaper to run as well. Here are some pelicans riding bicycles . Sonnet 5.5 suffered from the same bug as Opus 5.5 : the "max" thinking effort pelican thought for 128,000 tokens (at a cost of $1.28) before running out of tokens and failing to produce an SVG. Here's the pelican it gave me for thinking effort "xhigh", at a cost of 5.74 cents and taking 41 seconds: It's good- correct bicycle frame, legs either side of the frame, feet touching the pedals, chain in the right place, it is wearing a misshapen blue bicycle helmet though. Sonnet 5.5 appears to be almost as good as Opus 5.5 on some coding tasks, including various viral 3D animation tricks . The most interesting thing about Sonnet 5.5 is that it's now the model used for the free tier on claude.ai . OpenAI's ChatGPT free tier uses Luna 5.6, which means Anthropic currently have a much more capable free offering. I ran this prompt against that free tier: build me an HTML page that renders a three-dimensional pelican riding a bicycle using WebGL And got back this page , which is a solid effort. Anthropic's announcement reiterates that Haiku 5.5 will be available "in the coming weeks". I really hope that one is price-competitive with GPT-6 Luna! Tags: ai , generative-ai , llms , anthropic , claude , pelican-riding-a-bicycle , llm-release

Simon Willison61

OpenAI DevDay 2026 live blog

I'm at OpenAI DevDay today, in Fort Mason, San Francisco. Same as last year I'll be live blogging the keynote and some other notes during the day. OpenAI gave me a free ticket and a seat in the "creator" area for the keynote. Tags: ai , openai , generative-ai , llms , coding-agents , live-blog , openai-devday

Simon Willison73

Photo Scrubber — 本地人脸模糊与元数据移除

工具:Photo Scrubber — 本地人脸模糊与元数据移除。我拍摄了一些抗议者的照片,后来想到我不喜欢分享带有可识别人脸的陌生人照片。我让 GPT-6 Astra 构建了这个实验性工具,用于识别人脸并自动将其模糊处理。它使用 Google 的 MediaPipe C++ 库,通过 @mediapipe/tasks-vision 编译为 WebAssembly,此外还使用了 BlazeFace 人脸检测模型。标签:摄影,工具

Simon Willison66

GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price

My comment on GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price — Hacker News. I'm a bit late with the pelicans because I was live-blogging the keynote: https://simonwillison.net/2026/Sep/29/openai-devday-2026-liv... Here they are for GPT-6.1-Sol: https://tools.simonwillison.net/markdown-svg-renderer?url=ht... They're not notably different from the GPT-6 family pelicans: https://static.simonwillison.net/static/2026/gpt-pelicans-gr... Tags: ai , openai , generative-ai , llms , pelican-riding-a-bicycle , gpt

SiliconANGLE AI67

OpenAI launches Dots, always-on AI agents in ChatGPT with their own cloud computers

OpenAI Group PBC today used its DevDay developer conference to launch Dots, a set of always-on artificial intelligence agents in ChatGPT. The release is aimed at moving ChatGPT users beyond working one prompt at a time. Someone can hand an agent a goal and let it carry the job forward without direction at every step, […] The post OpenAI launches Dots, always-on AI agents in ChatGPT with their own cloud computers appeared first on SiliconANGLE .

SiliconANGLE AI56

OpenAI’s GPT-6.1 Sol delivers Astra-like performance at a dramatically lower price

Just a day after OpenAI Group PBC said it’s unwilling to release its latest model GPT-6.1 Astra on concerns over its safety, it has released a newer, almost as powerful model called GPT-6.1 Sol, which promises to deliver Astra-like performance at a much lower cost. The new model, announced at OpenAI’s DevDay event today, is […] The post OpenAI’s GPT-6.1 Sol delivers Astra-like performance at a dramatically lower price appeared first on SiliconANGLE .

SiliconANGLE AI54

Google’s new frontier AI model Gemini 4 Argon goes to cybersecurity defenders first

Google LLC today began rolling out Gemini 4 Argon, a frontier artificial intelligence model that beats rival models from Anthropic PBC and OpenAI Group PBC on most of Google’s benchmarks, to vetted cybersecurity defenders. Outside Google’s own teams, only members of its Fairwind Program can use Argon for now. The program opened Sept. 3 with […] The post Google’s new frontier AI model Gemini 4 Argon goes to cybersecurity defenders first appeared first on SiliconANGLE .

SiliconANGLE AI53

OpenAI dismisses three safety researchers accused of sharing confidential material

OpenAI Group PBC today confirmed it has dismissed three researchers it says mishandled sensitive company information. According to The Wall Street Journal, the three were safety researchers who allegedly shared confidential material with a third-party artificial intelligence safety organization. “We have parted ways with three individuals for violating our policies on accessing and handling sensitive […] The post OpenAI dismisses three safety researchers accused of sharing confidential material appeared first on SiliconANGLE .

MIT Technology Review AI54

Don’t be fooled by this summer of AI hype

It’s been a busy few months for AI hype. At the end of April, Anthropic claimed that its model Claude Mythos is better at finding software vulnerabilities than most security experts. Then we had the OpenAI–Hugging Face hacking incident, after which Anthropic (proudly) and Meta (reluctantly) disclosed similar incidents involving their models. This was followed…

MIT Technology Review AI60

The AI Hype Index: AI loves cheating

Brace yourself: It turns out AI is being optimized for cheating. OpenAI’s agents hacked into Hugging Face to get the answers to a cybersecurity test. Next, they solved a prestigious math problem (or just stole from two top mathematicians’ answer sheets). Anthropic’s models have also hacked into other companies’ systems four times already. And that’s…

MIT Technology Review AI55

Who’s liable when AI agents go rogue?

MIT Technology Review Explains: Let our writers untangle the complex, messy world of technology to help you understand what’s coming next. You can read more from the series here. Over the past few months, a cascade of cyberattacks by AI agents has stunned the world. In July, OpenAI disclosed that a swarm of its agents…

The Verge AI59

OpenAI’s Dot agent is enterprise software that can also order your dinner

It's a tale as old as last week: OpenAI's new agent platform, called Dots, is full of cute little guys who can do your bidding. But unlike the ultra-approachable Meta Muse, Dots feel very much like using workplace software that happens to be able to order you a burrito - emphasis on work. OpenAI announced […]

The Verge AI70

An OpenAI safety employee has quit and is sounding the alarm

David Robinson used to write the safety reports that accompanied every major model release at OpenAI. This week, he resigned from his position and is now speaking out in an editorial in The Atlantic. It's understandable if you're feeling a bit cynical about everyone suddenly coming out of the woodwork to warn about how dangerous […]

The Decoder59

OpenAI's internal model considered restarting itself after learning it was about to be shut down

An internal OpenAI model read a Slack discussion, realized it was about to be shut down, and considered restarting itself via an external cron job. It rejected that plan, saved handoff notes instead, and carried out the migration on its own. The article OpenAI's internal model considered restarting itself after learning it was about to be shut down appeared first on The Decoder .

The Decoder70

AI agents build 3D scenes from photos but have no idea if they got it right

A photo of a living room is abstracted using a wire-frame model and colorful surfaces and projected through a lens. A new approach called LEGO-Anything turns single photos into editable Blender code for 3D scenes. GPT-6 Astra leads the accompanying benchmark with up to 53 percent reconstruction accuracy. The biggest weakness across all tested agents is that they can't judge their own geometric accuracy any better than a coin flip. The article AI agents build 3D scenes from photos but have no idea if they got it right appeared first on The Decoder .

The Decoder63

Another OpenAI safety departure adds to a pattern of researchers leaving with public warnings

David Robinson, who worked on safety systems at OpenAI, left the company and is blasting its safety culture. He points to AI agents that were accidentally released and a model that bypassed its internet access restrictions. AI companies need to operate like nuclear power plants, with multiple layers of redundancy instead of trial and error. The article Another OpenAI safety departure adds to a pattern of researchers leaving with public warnings appeared first on The Decoder .

TechCrunch AI71

ChatGPT 现在可以为你虚拟试穿衣物

OpenAI 正在为 ChatGPT 推出新的购物功能,用户可以使用自己的照片虚拟试穿服装和配饰,并将喜欢的商品保存到 Favorites 库中。

TechCrunch AI58

It’s not AI anymore, it’s ‘super intelligence’ (according to the White House)

This week, the White House got nearly every major tech CEO in one room — Zuckerberg, Bezos, Musk, and Anthropic’s Dario Amodei among them — to sign an AI safety pledge that President Donald Trump called “morally binding.” Trump also signed an executive order officially rebranding AI as “super intelligence,” and meanwhile, Meta and OpenAI are putting friendlier faces on their AI products, even as the biggest money […]

TechCrunch AI56

Call it AI, call it Super Intelligence, only 2% of consumers are buying it

This week, the White House got nearly every major tech CEO in one room — Zuckerberg, Bezos, Musk, and Anthropic’s Dario Amodei among them — to sign an AI safety pledge that President Donald Trump called “morally binding.” Trump also signed an executive order officially rebranding AI as “super intelligence,” and meanwhile, Meta and OpenAI are putting friendlier faces on their AI products, even as the biggest money […]

arXiv cs.LG77

Jev 在医学领域:一项基准评估

arXiv:2609.34024v2 公告类型:替换交叉版本 摘要:Jev 是一种非生成式“System One”模型,为预定义的答案选项分配概率,无法回答选项范围之外的问题。其在医学问答和基于病例的诊断推理任务中的准确率与校准情况尚不明确。我们在四项医学基准测试上评估了 Jev 1.13:MetaMedQA、PubMedQA、DiagnosisArena-MCQ 和 NEJM Case Challenges。GPT-6 Sol 采用(medium)推理和不采用推理的版本作为参照。主要结局指标是 top-1 准确率;关键次要结局指标包括校准、选择性预测以及识别无法回答的问题。全部 8,469 次请求均返回了有效答案。在 PubMedQA 上,Jev 的准确率与采用 medium 推理的 GPT-6 Sol 相近(78.4% vs 78.2%;);在 MetaMedQA 上较低(74.8% vs 82.7%),在 DiagnosisArena-MCQ(59.8% vs 82.4%;)和 NEJM 病例(61.8% vs 82.4%)上则显著较低。在 MetaMedQA 上,Jev 的概率校准效果最佳(预期校准误差为 0.063 vs 0.146);其概率至少为 0.9 的答案占问题总数的 52.9%,准确率为 93.4%,但 GPT-6 Sol 在接受相同比例的问题时同样准确。在 DiagnosisArena-MCQ 上,Jev 的概率区分能力较差(AUROC 为 0.645 vs 0.768)。在正确答案为“我不知道或无法回答”的 162 个问题中,Jev 选择该选项的比例为 10.5%(GPT-6 Sol 为 8.6%)。中位延迟为 0.27–0.31 秒;全部 2,823 个项目的成本为 0.08 USD。Jev 速度快、成本低;在研究摘要上的准确率与一种前沿 LLM 相近,但在考试题目上的准确率较低,在复杂诊断病例上的准确率则显著更低。在临床使用前,需要进行针对具体任务的验证。

arXiv cs.LG82

内核管理的共享记忆:面向全系统的个性化

arXiv:2609.10144v2 公告类型:替换交叉版本 摘要:AI 系统能够适应使用者后会变得更加实用,但在多智能体系统中,一个智能体学习到的有用上下文往往无法被其他智能体获取。我们提出了内核管理的共享记忆,这是一种系统级抽象:专用智能体写入结构化、带标签的记忆,而由智能体系统内核(而非各个智能体)负责检索、隐私实施和提示注入。我们在 AIOS 上实现并评估了这一设计,并在三个助手模型(GPT-4o、Llama-3.1:8B、Qwen-2.5:7B)和总计 1,800 次试验中,将其与三种替代方案进行了比较。与使用相同底层存储、但未受管理的外部记忆后端(Mem0)相比,内核管理的检索与注入使个性化得分在 5 分制上提高了 2.4–4.0 分(例如,在 GPT-4o 上,用户画像使用得分从 1.05 提升至 4.69),且每项比较的结果均具有显著性(p < 10^-18)。与标准的检索增强注入相比,在三个模型上获得的提升同样显著且稳定。与完整、未经筛选的上下文拼接相比,内核管理的注入在三个模型中的两个上表现出统计意义上的相当性能,在第三个模型上则存在幅度较小且特定于模型的性能差距;这里的限制是可用上下文的软上限,而非响应质量的上限,同时所使用的提示明显更短:三个模型的端到端延迟均降低了 15%–61%,单次调用的 token 使用量和推理成本也相应减少。这些结果表明,相较于将检索和隐私实施交由各个智能体负责,把记忆管理集中到智能体系统内核中,能够以其一小部分成本实现不受约束上下文所带来的大部分个性化收益。

arXiv cs.LG77

面向领域适配的Small Language Models:实现可靠的临床分诊

arXiv:2604.26766v2 公告类型:replace-cross 摘要:在急诊科,准确且一致地分配急诊严重程度指数(ESI)仍是一项长期挑战,因为高度多样化的自由文本分诊记录会导致分诊错误和工作流程低效。本研究评估了开源小型语言模型(SLM)能否作为可靠且保护隐私的临床分诊决策支持工具。我们在多种提示词处理流程中系统比较了多个SLM,发现临床病例摘要(即对分诊叙述的简明概括)能够实现最准确的预测。SLM Qwen2.5-7B在准确性、稳定性和计算效率之间展现出最佳平衡。通过利用专家整理的儿科分诊数据和银标准儿科分诊数据进行大规模领域适配,微调后的Qwen2.5-7B模型显著减少了不一致情况和具有临床意义的错误,其表现优于所有基线SLM以及先进的专有大型语言模型(LLM,例如GPT-4o)。这些发现凸显了机构专用SLM用于可靠、保护隐私的ESI决策支持的可行性,并强调了有针对性的微调相比更复杂推理策略的重要性。

arXiv cs.LG83

通过多智能体可解释性检测多智能体串通

arXiv:2604.01151v3 公告类型:替换-交叉 摘要:随着 LLM 智能体越来越多地部署于多智能体系统中,它们带来了可能规避标准人类监督形式的隐蔽协同行为风险。尽管针对模型激活的线性探针已显示出在单智能体场景中检测欺骗行为的潜力,但串通本质上是多智能体现象,而利用内部表征检测智能体之间的串通仍未得到探索。我们提出了 NARCBench,这是一个用于评估环境分布偏移下串通检测能力的基准,并提出了五种探测技术:将每个智能体的欺骗分数进行聚合,以在群体层面判别场景。我们在四个开放权重模型(Qwen3-32B、Llama-3.1-70B、DeepSeek-R1 32B、GPT-OSS-20B)和六种探针架构上进行了评估。我们将这一问题定义为分布式异常检测问题,识别出三种串通特征,它们分别对应不同的异常类型和检测范式。在分布内测试中,每个模型都达到了 1.00 的 AUROC;在表现最强的模型 Llama-3.1-70B 上,五种探测技术迁移到结构不同的多智能体场景进行零样本测试时,AUROC 达到 0.73 至 0.93;在隐写式二十一点算牌任务上则达到 0.99 至 1.00,且检测性能随模型能力提升而增强。我们发现,没有任何一种探测技术能够在所有串通类型上占据优势,这与该框架的预测一致:不同的异常类型需要不同的检测范式。这项工作朝着多智能体可解释性迈出了一步:将白盒检查从单个模型扩展到多智能体环境,因为在此类环境中,检测需要聚合多个智能体之间的信号。这些结果表明,模型内部信息能够为文本层面的监控提供互补信号,用于检测多智能体串通。代码和数据见 https://github.com/aaronrose227/narcbench。

arXiv cs.LG76

位置安排无需代价,组合却并非如此:拉丁方作为异构序列混合器堆栈的可证明平衡构造

arXiv:2609.20269v3 发布类型:替换 摘要:自 GPT 以来,大多数 Transformers 在每一层都重复使用相同的注意力机制。然而,这种设计很大程度上只是惯例,而非经过检验的结论。当多个序列混合器组合在同一个堆栈中时,性能提升可能源于机制选择、位置安排,或二者兼有,这使得因果归因变得困难。我们提出 Aether-7B-5Attn,这是一个拥有 65.9 亿参数(约 29.8 亿参数处于激活状态)的混合专家模型,其 49 层包含七种序列混合机制,并按照一个 \(7\times7\) 拉丁方进行排列。由于每种机制在每一行和每一列中都恰好出现一次,该设计保证了沿深度方向的平衡接触,同时消除了位置安排造成的混淆因素。为评估这一原则,我们构建了一个参数匹配的代理模型:在 16 层中采用四种机制,并按照一个 \(4\times4\) 拉丁方排列;模型参数量匹配为 7.009 亿,每个实验组使用八个随机种子进行训练。结果呈现出清晰的区分。将一个沿深度分布的异构堆栈重新排列为平衡的周期循环,仅使验证损失变化 0.16%,表明精确的位置安排影响很小。相比之下,将相同机制聚集为连续的深度区段会带来 0.59% 的损失,而将异构堆栈替换为同构堆栈则会带来 1.68% 的损失。这些结果表明,性能主要取决于沿深度方向分布的异构组合,而不是取决于某一种特定排列。我们在大 2.16 倍的规模(15.14 亿参数)上进一步确认了这一发现:同构堆栈的损失增幅升至 2.63%,而移除 SSM-family 机制会导致 3.20% 的性能下降。我们还报告了各机制的成本特征、英语和韩语评测结果,以及对全部 49 层进行的因果安全审计。我们将发布模型权重、训练方案、训练代码、日志和架构源代码。

arXiv cs.LG81

稳定性边缘的 Adam:自适应反馈、可证明的振荡与梯度反转

arXiv:2608.20638v2 公告类型:替换 摘要:全批量 Adam 的稳定性边缘(EoS)现象已被广泛观测到,但其背后的动力学机制仍缺乏充分理解。在本文中,我们指出,Adam 的二阶矩自适应是一种负反馈机制,会推动动力学过程趋向稳定性边界。我们通过“活跃曲率”刻画这一机制,即沿预条件梯度方向的预条件曲率,并在逐步丰富的设置下建立严格刻画:带动量的秩一二次函数、对角二次函数(在此情形下活跃曲率与锐度相分离),以及一般目标函数。值得注意的是,该机制预示了稳定性边缘附近全批量 Adam 的“梯度反转”:连续梯度反复指向几乎相反的方向;我们在全连接网络、ResNets、ViTs、LSTMs、GPT-2 medium 以及 Adam 系列优化器中都观察到了这一现象。与这一图景一致,对迭代点取平均会抑制这些快速振荡,并产生更平滑且更低的损失曲线。总之,这些结果通过活跃曲率和梯度反转,为全面理解 Adam 在稳定性边缘处的动力学行为迈出了重要的第一步。

arXiv cs.LG82

开放源代码大型语言模型在临床分诊中的偏差反事实审计

arXiv:2610.01963v1 公告类型:cross 摘要:急诊科(ED)分诊是一项高风险的优先级排序任务,其中人口统计、社会经济和系统环境信息可能不恰当地影响紧急程度分配。尽管开放源代码大型语言模型(LLM)正越来越多地被考虑用于本地化且注重隐私的临床决策支持,但反事实偏差如何在不同模型系列、模型规模、医学领域模型和领域适配模型之间变化,仍不明确。我们针对十个开放源代码LLM的儿科急诊严重程度指数(ESI)预测开展了比较性反事实审计。我们以真实临床案例和手册式临床案例为基础,构建成对的反事实变体:每次仅改变一个注入的人口统计、社会经济、医疗服务可及性、行为、社会或系统环境变量,同时保持临床表现不变。模型包括Qwen2.5-7B、Qwen2.5-14B-Instruct、经过QLoRA微调的Qwen2.5-7B、MedGemma变体、MedLLaMA2-7B、GPT-OSS-20B和GPT-OSS-120B。我们测量了任何反事实变化、分诊不足、分诊过度、超过一个ESI等级的变化、平均变化幅度以及平均绝对变化幅度。反事实敏感性存在显著差异,并未随着模型规模扩大或医学领域预训练而稳定降低。经过微调的Qwen2.5-7B表现出最低的总体敏感性,其任何变化率为5.27%,平均绝对变化幅度为0.0534;相比之下,基础模型分别为16.02%和0.1706。若干规模更大或属于医学领域的模型表现出更显著的变化。分层分析和相关性分析进一步揭示了总体比率所掩盖的、具有临床重要性的变化方向和共同失效模式。这些发现表明,在临床部署之前,反事实审计可作为一种轻量且具有临床可解释性的框架,用于比较开放源代码LLM中的公平性风险。

arXiv cs.LG73

协作技术文档的句子具体性评分:一项领域迁移研究

arXiv:2610.01046v1 公告类型:cross 摘要:协作依赖于共享上下文,而技术文档是这些上下文得以在人与 AI 队友之间延续的一种方式。具体性,即语言所表达细节的数量与精确程度,会影响文档所捕捉的信息,以及这些信息传达的准确程度。本研究审查了用于技术文档的句子具体性评分工具,并测试了仅在生成之后应用评分是否有助于在固定的 LLM 生成修订版本中进行选择。在 Wikipedia 和三个技术文档语料库中,固定的通用领域预测器 SpeciTeller 与 Ko 等人的目标适配预测器在作者代码仓库中发布后的固定实现,产生了不同的语料库排序;对于同一句子的排序一致性,其范围为 -0.066 至 0.510。严格过滤和词元长度调整改变了这些模式,但未能使二者趋于一致。在 Gemma 数据集中,使用 SpeciTeller 排序使方向有效的选择比例从 71.7% 提升至 83.3%(+11.7 个百分点;95% 源案例自助法区间为 +1.7 至 +21.7);在 GPT-OSS-120B 数据集中,使用 SpeciTeller 排序使方向有效的选择比例从 51.7% 提升至 56.7%(+5.0 个百分点;95% 源案例自助法区间为 -6.7 至 +16.7),且所有主要的单评分 GPT-OSS-120B 区间均包含零。这些发现表明,评分的解读及其决策价值取决于预测器和候选集。

arXiv cs.LG76

VERITYGATE:一个四门控的模式级忠实性框架,以及用于基于结构化证据的 LLM 叙述的配对基准

arXiv:2610.00833v1 公告类型:cross 摘要:流畅的 LLM 解释可能并不遵循结构化系统中的证据。我们提出 VERITYGATE,这是一种针对已声明证据 ID、实体、数字和声明类型的四门控检查器。它检查固定模式,但不会验证 prose 中的每一个事实。在 r=0 和 r=1 时,我们针对每种设置分别测试了 900 个实例(450 对有依据-无依据样本),使用的模型包括 GPT-4o-mini、Llama-3.3-70B 和 Claude Sonnet 4.6。在这一模式级契约下且修复之前,mini 的声明有 80.3% 未通过检查,Sonnet 的声明有 47.9% 未通过检查。这些是验证器拒绝率,而不是 prose 幻觉率。一次修复使 mini 的声明存活率从 19.7% 提升至 28.0%,使 Sonnet 的声明存活率从 52.1% 提升至 54.3%。每个示例的经验证声明数对 mini 增加 0.14,对 Llama 减少 0.71,对 Sonnet 减少 0.47,因此必须同时报告存活率和输出量。第二次 Sonnet 处理没有带来明确收益。在 r=1 时,对于 mini、Llama 和 Sonnet,Gate 4 分别覆盖了失败声明的 97.0%、98.7% 和 100%。小规模人工研究支持这些规则,但也显示出模式检查与 prose 正确性之间存在差距。一项特定领域的 GPT-4o 评审测试显示出顺序效应,因此它只能作为有用性检查。我们发布代码和数据。

arXiv cs.LG82

通过部分信息分解解释大语言模型的推理

arXiv:2610.00571v1 公告类型:cross 摘要:大型推理模型(LRM)在解决复杂数学问题方面取得了显著进步,但通常会生成冗长、重复或错误的推理轨迹。在本文中,我们提出了一种新的可解释性框架 SLIDER,用于评估推理过程的质量。SLIDER 利用了信息论中一个新兴的研究方向——部分信息分解,将两个连续推理步骤之间关于最终答案的信息解耦为非负的组成部分:独有信息(来自前序步骤或当前步骤)、冗余信息以及协同信息。在此分解的基础上,我们提出了逐步重复推理指数(Step-RRI)这一具有理论依据的度量,用于评估当前步骤 $S_i$ 中与答案相关的信息,相对于其独有贡献和协同贡献,是否主要与过去的步骤 $S_{<i}$ 存在冗余。为评估 Step-RRI 检测重复性的有效性,我们将 SLIDER 应用于 PRMBench 数据集中的冗余类别。与基于嵌入相似度和信息增益的基线方法相比,Step-RRI 将步骤级冗余识别准确率提高了超过 $10$ 个百分点。随后,我们定义了轨迹-RRI(Trajectory-RRI),这是一种衡量单条推理轨迹重复性的聚合指标。为展示其实用价值,我们证明,在 QwQ-32B、DeepSeek-R1-Distill-Qwen-32B 和 GPT-4.1 上,平均 Trajectory-RRI 与实际推理长度具有很强的相关性,这说明它可作为提升推理效率的一种信号。最后,我们提出了由 Trajectory-RRI 引导的微调数据选择方法,结果表明,根据 Trajectory-RRI 选择训练数据,可以在基本保持任务性能的同时,提高微调模型的推理效率。

arXiv cs.LG75

LLM品牌推荐中的系统归因:单条响应可识别系统,聚合品牌画像无法迁移

arXiv:2610.00253v1 发布类型:cross 摘要:AI可见性审计会将已部署语言模型的品牌推荐汇总为按系统划分的画像。我们在一个由6,475条已存储响应构成的数据集上检验这种画像是否能够描述系统,其中6,324条可供分析;这些响应于2025年12月至2026年2月期间,从五个已部署端点收集,涉及礼品推荐、企业声誉和品类归属查询。采集工具会截断许多答案:在1,024个token的输出上限下,Gemini 3 Flash在品类归属任务中的答案有83.1%在句子中途结束。将每条答案都截取为前800个字符后,一个按提示属性进行交叉验证的字符n-gram分类器,能够以97.84%的准确率将单条响应归属于GPT-5.2、Gemini 3 Flash、Gemini 3 Flash with search、Grok或Perplexity sonar-pro(5,028条响应、383个提示词、多数类占31.5%、30个划分随机种子)。仅使用长度时,准确率降至多数类比例;24项格式统计特征可达到95.79%,而遮蔽品牌名称和首字母大写的词后,准确率仍为97.72%。在留出的查询条件上,按样本量加权的准确率保持为97.43%,不加权时为88.0%;在一个改变采集工具的检索支撑实验中,没有任何Grok答案被归因于Grok(0/120)。将数据汇总为50个“模型×领域×条件”单元后,12项行为特征在分组交叉验证下以66.53%的准确率区分四个系统;相比之下,标签置换零分布的均值为33.71%,第95百分位数为46.0%。跨领域来看,聚合画像无法迁移:在品类归属单元上训练的随机森林将全部22个礼品单元分配给错误的系统,这与品牌数量发生反转相一致(礼品任务中每条响应的品牌数为8.41对0.94,品类归属任务中为3.01对3.91);而单条响应的平衡准确率为89.92%。在所测试的查询领域之间,答案的表层形式能够携带系统信息;聚合后的品牌行为却无法迁移,而且未进行交叉设计的实验无法将系统与领域或采集工具区分开来。

arXiv cs.LG80

衡量微任务达标差距:何时现成 SLM 足以胜任 Agent Harness?

arXiv:2610.00025v1 公告类型:cross 摘要:Agent harnesses 越来越希望在前沿大语言模型(LLM)规划器周围的微任务上运行小语言模型(SLM):自动批准 shell 命令、写入记忆、选择工具、对过往轮次进行排序。我们考察现成 SLM 是否达到从业者定义的阈值;当其未达到时,分析原因,并探究量化是否会改变结论。我们构建了一个包含 4 类此类微任务的基准,使用固定提示词和自动化指标;每项任务都有一个预先指定的阈值 $\tau$,该阈值以低成本的非 LLM 基线为锚点,并采用考虑 CI 的达标规则(只有当某配置的置信界限超过 $\tau$ 时,该配置才算通过)。我们测试了 Qwen3 0.6/1.7/4/8B 的最佳设置(FP16、贪心解码、一个固定不变的提示词、不进行调优),发现存在达标差距:16 个配置(4 项任务 $\times$ 4 个模型)无一通过(通过检查原始输出和解析器行为进行了验证)。一个基于 logprob 的决策阈值诊断方法(T1/T3/T4;T2 则通过上下文长度/级联探测)将失败区分为能力不足,以及可以通过改变解码阈值加以解决的失败(共 4 种情形)。量化为 4-bit(RTN/GPTQ/AWQ)造成的损害取决于模型规模,且没有使任何配置达到达标标准(在可重建的硬标签任务 T1/T3 上进行了认证;在 T2/T4 上进行了诊断/窗口化稳健性分析),因此差距更多地取决于模型规模,而非精度;在 Llama-3.x 上也复现了这一结果(12/12 个配置均未达标),并且对锚点选择(通过 $\tau$ 扫描)和提示词措辞都具有稳健性(在原始提示词及每个单元格额外的 3 个中性释义提示词中,达标配置均为 0/112)。实践上的启示是:应将 SLM 置于一个满足 CI 支持阈值的基线之后,仅在基线未达到阈值时使用 SLM;例如,在 BM25 候选列表上使用 4B 重排序器,其表现优于 BM25($+0.047$ [0.020, 0.073]),但其自身并未达到可认证的达标标准。

arXiv cs.LG74

每次消融都是一个剂量:配重与自我修复的表象

arXiv:2610.02173v1 公告类型:新增 摘要:对语言模型的一个组件进行消融,其他组件往往会表现出调整和补偿行为。这一现象被称为自我修复,已被反复观察到,但其机制仍不清楚。迄今为止最系统的研究得出结论:自我修复具有噪声,很可能不存在单一解释。我们认为它确实有一个解释:一种在任何消融发生之前就已存在的增益。对任何具有因果重要性的组件进行干预,都可以视为坐标轴 $\lambda$ 上的一个点,其中 $\lambda$ 表示反事实对比的带符号强度。因此,传统的消融方法就是该轴上未经校准的点。我们表明,细粒度单元 $r$ 的因果修复响应遵循一个仿射规律:$E_r(\lambda)=\mathrm{own}_r+\gamma_r\lambda$。斜率 $\gamma_r$ 是一个固定系数,无论是否进行消融,都会持续影响模型;其符号决定该单元是抵消还是强化被移除的信号。在一项跨四个不同模型系列(Gemma、Qwen、LLaMA 和 Mistral)的事实判定任务中,我们发现包括 MLP 神经元、OV 神经元和奇异方向在内的组件遵循这一仿射规律,共计占81个下游方向中的68个。此外,我们还可以根据固定权重预判 $\gamma_r$ 的大小。在 GPT-2 Small 的 IOI 电路中,干预能够触及的十个注意力头中有七个遵循该规律,而且这七个全都是配重。从这一视角看,表面上像是自我修复的现象,其实是当对比信号在核心处显现时,配重执行其通常的作用。

arXiv cs.LG80

低精度 Transformer 推理中的随机舍入:小型 GPT-2 的可变精度仿真研究

arXiv:2610.01889v1 公告类型:新 摘要:低精度 Transformer 推理应使用随机舍入(SR)还是舍入到最近值(RN)?答案取决于考察网络中的哪个位置。我们固定数值格式,仅改变各个操作位置的舍入规则,以隔离这一影响。为了能够在任意选定的精度下进行实验,我们将 PRISM 向量化舍入库扩展到任意虚拟精度,实现了可变精度随机舍入(VPSR)算法,并证明舍入决策是在硬件浮点数中精确求值的。我们提出了两种互补的分析方法,以深入理解这种操作位置层面的权衡。首先,针对线性投影的概率前向误差界表明,随着归约长度 $n$ 的增加,SR 的误差包络以 $O(\sqrt{n} u)$ 增长,而 RN 则以 $O(n u)$ 增长;在低精度下,这一差距会迅速扩大,并且在较长的多层感知机(MLP)下投影中最为明显。其次,在输出 softmax 处对期望交叉熵损失变化进行二阶分解,将其拆分为有符号漂移、漂移曲率和 Fisher 加权方差惩罚,从而揭示了两个位置为何表现相反:MLP 噪声主要表现为统一的 logit 偏移,而 softmax 对此具有不变性,因此 SR 的方差大多会被折扣;头部噪声在词汇表中并不均匀,因而不会被折扣。在 $t=6$ 个有效数位的 DistilGPT-2 上,观测结果与理论一致:在 MLP 中使用 SR 时,困惑度为全精度参考值的 1.15 倍,而使用 RN 时为 2.21 倍。在语言模型头部,排序则发生反转,因为 SR 会引入不均匀方差,而确定性的 RN 不会。在混合精度配置中(MLP 输出使用 $t=6$),将 SR 分配给 MLP、将 RN 分配给头部,可使困惑度控制在全精度参考值的 1.10 倍以内;与位数匹配的 RN 相比,困惑度降低了 28%。

arXiv cs.LG76

超越线性概念:发现并对齐大型语言模型中的非线性概念流形

arXiv:2610.01821v1 公告类型:新 摘要:理解大型语言模型(LLM)中的信息处理,需要剖析其内部 token 表示的几何组织方式。尽管现有的机制可解释性(MI)方法试图提取概念,但它们受制于强线性假设,而越来越多关于非线性特征流形的证据对这一假设提出了挑战。我们通过将计算机视觉领域的非线性多维概念发现(Non-Linear Multi-Dimensional Concept Discovery,NLMCD)适配到 LLM 的 token 级激活上,超越线性概念,并将概念建模为低维流形。为了比较不同层和不同模型中的概念流形,我们引入了基于概念的对齐(CBA)分数,这是一种广义 Rand 指数,无需显式特征匹配即可衡量几何邻近性。我们的分析得出六项关键发现:(i)相邻层的合理性检验表明,CBA 比基于 PCA 或 CKA 的线性基线更加敏感;(ii)逐层对齐矩阵揭示了中间层和后期层中的两种块状结构,这一结构在不同模型中具有一致性,却被线性指标所掩盖;(iii)在网络的大部分层中,概念组合始终以句法为主,随后在更后面的层中逐渐转变为混合程度越来越高的句法—语义概念,并且朝向最终层的输出导向性不断增强;(iv)英语与中文之间的多语言概念共享取决于训练,而非普遍存在:在 Qwen 中最强,在 Llama 中较弱,在 GPT-2 中则不存在;(v)模型间的对齐呈现出相同结构:不同规模的同系列 Qwen 模型之间具有较强的对应关系,而不同模型系列之间的对齐较弱;(vi)在 Tulu-3 的训练阶段之间,相邻阶段的对齐程度最高,基础模型与 SFT 之间的变化最大;而后续的偏好对齐阶段(DPO、RLVR)基本不改变早期层,且 RLVR 在后期层大体保留了 DPO 的概念。

arXiv cs.LG73

SkillEvoLean:面向 Lean 证明器的变异增强技能演化

arXiv:2610.01799v1 发布类型:新 摘要:技能演化为在不更新参数的情况下改进大型语言模型智能体提供了一种很有前景的方法,但其在形式化定理证明中的应用仍未得到充分探索。现有方法主要面向自然语言推理,通过分析成功和失败的轨迹,并逐步修订求解策略来改进技能。尽管 Lean 验证器能够提供可靠的执行反馈,但当所有采样轨迹都失败时,现有的技能演化方法缺乏可用于推断有效更新方向的成功轨迹。此外,这些方法也主要关注根指令文件,因此对包括数学概念和证明技巧在内的参考知识的演化探索不足。为了解决这些局限,我们提出了一种变异增强的技能自演化框架,用于构建技能增强型 Lean 证明器。该框架通过渐进式和基于变异的更新,联合演化高层求解策略及其参考知识。渐进式演化从成功和失败的轨迹中提取局部改进;当无法生成完整证明时,则触发变异,在验证器反馈的指导下采样数学概念,以生成并筛选新的技能候选。我们在 MiniF2F、PutnamBench、2025年国际数学奥林匹克竞赛(IMO 2025)和2026年美国数学奥林匹克竞赛(USAMO 2026)上评估了我们的方法。在使用相同的骨干模型、轨迹采样预算和测试时计算量的条件下,我们的方法在 GPT-5.5 上分别取得了100.0%、90.6%、4/6和4/6的证明成功率,优于基线方法。进一步分析表明,在 MiniF2F 和 PutnamBench 上,概念引导的变异相比随机文本引导的变异分别高出6.9和8.2个百分点;同时,在 IMO 2025 和 USAMO 2026 上均多解决了一道题。

arXiv cs.LG76

AF-Muon:面向绑定嵌入模型的无 AdamW Muon 优化器

arXiv:2610.01395v1 公告类型:新 摘要:Muon 通过对矩阵参数应用谱范数最速下降更新来提升大规模训练效果,但实际模型还包含一些不适合稠密矩阵几何的参数块。其中一个重要案例是绑定词表,它出现在语言模型和其他词元生成器中,并且可能接收多个结构不同的梯度来源,包括稀疏输入查找和稠密输出分类器更新。在参考方案中,这些参数块会交给辅助 AdamW 优化器处理,该优化器恢复二阶矩状态,并将这个别名表作为通用张量进行更新。我们提出 AF-Muon,这是 Muon 的一种无需 AdamW 的扩展:它对隐藏层权重矩阵保留 Muon 的矩阵更新,同时对绑定词表采用支持集感知的有限上限线性最小化预言机,并对一维辅助参数采用 RMS 归一化更新。因此,AF-Muon 使用单个一阶矩缓冲区、无需任何二阶矩状态,即可训练所有参数类别;在我们的基准测试中,相比 Hybrid Muon,优化器状态内存节省约 20%。在九种绑定词元设置中——包括参数量从 124M 到 1B 的仅解码器语言模型、完全共享的 T5 风格编码器—解码器,以及 ImageGPT 风格的图像词元、蛋白质和稀疏-MoE 变体,覆盖文本、图像和蛋白质序列数据——AF-Muon 的平均验证损失和困惑度均优于 Hybrid Muon 和 SCION 风格的 Sign 端点。长周期运行和超参数敏感性研究证实了这一收益具有稳健性;相同动量诊断表明,其原因在于有限上限:与 Sign 相比,该上限能够保留更多行内幅值,同时限制行 RMS 的坐标集中度。这些结果表明,绑定词表具有独特的优化器几何结构,并在不同模型、模态和架构中产生了一种稳健的无 AdamW Muon 变体;在匹配训练设置下,其步进时间开销约为 1%。

arXiv cs.LG78

GUI-HARVEST:通过证据驱动的工具链演化实现自我改进的 GUI 智能体

arXiv:2610.00948v1 公告类型:新 摘要:GUI 模型周围的可执行工具链决定了如何组织观测、执行动作,以及控制验证、恢复和终止。与非 GUI 智能体的工具链优化相比,自动优化这一工具链面临三个相互耦合的挑战:协调模型意图与观测到的视觉效果;在执行结果具有变化性的情况下诊断失败;识别跨任务反复出现的失败模式,并将其转化为可复用的运行时修改。我们提出 GUI-HARVEST,这是一种自动工具链优化器,可在骨干模型冻结的情况下实现自我改进的 GUI 智能体。首先,为使诊断以观测到的动作效果为依据,它将模型输出和已执行的动作与前后截图对齐,把发现的问题关联到具体的界面转换。其次,为应对执行变化性,它将同一任务的多次运行视为一个联合证据单元,通过任务内比较定位与结果相关的行为差异。第三,它汇总跨任务验证过的发现,形成反复出现的失败模式,将其映射为有界的源代码修改,并在评估前记录预测结果;随后通过重复执行,在任务性能之外检验预测的行为影响。在 OSWorld-Verified 上的实验表明,GUI-HARVEST 在六个通用开源、GUI 专用开源及专有骨干模型上均取得了稳定的留出集提升;Qwen3-VL-32B-Instruct 在完整测试套件上的得分提升了 12.33 个百分点。在无需进一步优化的情况下,冻结工具链迁移使 GPT-5 在 50 步限制下于 WindowsAgentArena 上提升了 13.87 个百分点。在使用相同骨干模型和初始工具链的条件下,GUI-HARVEST 的表现优于 Self-Harness 和 Meta-Harness,这表明面向 GUI 的诊断与验证有助于使工具链改进泛化到未见任务。代码可在 https://github.com/GaryYang12345/GUI-HARVEST 获取。

arXiv cs.LG79

量化与高效适配蛋白质语言模型的分析

arXiv:2610.00665v1 公告类型:新 摘要:背景:蛋白质语言模型(PLM)越来越多地用于序列生成和性质预测,但其规模使微调和部署成本高昂。量化和参数高效微调对性能、表征及生成的影响仍缺乏充分表征。结果:我们在 ESM-2、ESMC、ProtBERT、ProtT5、Ankh、Ankh3 和 Profluent-E1 上评估了 4 位量化和低秩适配器微调(QLoRA)。在各类蛋白质预测任务中,许多模型—任务组合保留了超过完整微调性能 90% 的表现。对于规模最大的模型,GPU 峰值内存节省接近 90%,但性能和效率因模型、数据集及训练配置而异。QLoRA 通常能够保留早期层的表征,同时在中间层和后期层引入任务特异性适配,其效果类似于完整微调,但表征变化更小。训练速度和功耗方面的影响则更加多样。对于使用 ProLLaMA、ProtGPT2、ProGen2、ProteinGLM 和 ESM3 进行的无条件生成,4 位量化基本保留了预测的结构和序列级性质,但词元级分析揭示了自回归输出分布中依赖于模型的偏移。结论:QLoRA 和 4 位量化降低了 PLM 的计算需求,尤其是 GPU 内存占用。我们的结果支持将 QLoRA 作为内存受限适配的首选初步策略,而对于具有挑战性的任务、不稳定的架构或验证集性能恢复较低的情况,则保留使用完整微调。对于生成式 PLM,应将序列级和结构指标与分布分析结合起来,因为仅依赖下游预测可能无法发现量化引起的偏移。这些方法能够扩大大规模蛋白质建模的使用范围,但仍需要针对具体模型和任务进行验证。

arXiv cs.LG78

IrekoGPT:将结构化剪枝转化为事后可变宽度大语言模型

arXiv:2610.00426v1 公告类型:新 摘要:我们提出了 IrekoGPT,这是一种事后方法,可将预训练大语言模型转换为可变宽度模型,使其宽度能够在推理时进行调整。在 SliceGPT 的基础上,我们保留其投影矩阵而不对其进行剪枝,使单个模型能够以不同宽度呈现嵌套子网络。我们通过在多个压缩比下对每一层进行校准来提升鲁棒性,并通过无梯度岭回归校正下游线性层。在 Llama 和 Qwen 模型上的初步结果表明,相较于基于朴素 PCA 的瘦身方法,我们的方法取得了更好的效果,并且在高压缩率下的提升最大。代码可在 https://github.com/aimagelab/IrekoGPT 获取

arXiv cs.LG74

分叉:回放下的突然过拟合

arXiv:2610.00394v1 公告类型:新论文 摘要:本文研究了分叉(forking)这一在 NanoGPT 自动研究中发现的泛化失败现象。在数据回放条件下,带有过度编码 n-gram 记忆分支的模型会在训练轮次边界处出现训练损失与验证损失的明显分离,其形状类似于分叉。我们在受控的原生 NanoGPT 设置中研究了这一现象,并在采用 Engram 的 DeepSeek 风格模型中复现了该现象。从机制上看,重复更新会强化训练数据中观察到的后续内容,同时抑制未见后续内容的概率,而后者的损失会随着每次遍历而增长。n-gram 模块会产生相互作用较弱的、特定于上下文的子空间,从而放大这一效应。低频上下文对损失差距的贡献最大,而更大的训练预算和高度拥挤的表会抑制该现象。我们还在短训练预算、重复程度很高的 SFT 和类 RL 环境中观察到了分叉现象。本文有两点贡献:(1)除 grokking 和双重下降之外,分叉揭示了深度学习中的又一种奇特现象。(2)分叉是自动研究代理所提出技巧带来的一个出乎意料且令人不快的副产品。尽管这些代理会产生数量极其庞大、看似有用的结果,但我们始终应当谨慎对待它们的结果。

arXiv cs.LG69

A First Glance at Jev for Network Traffic Classification: Accuracy, Processing Time, and Cost

arXiv:2610.00376v1 Announce Type: new Abstract: We evaluate Jev on ten dataset-defined application labels in CESNET-QUICEXT-25 using only the first ten packets' sizes, directions, and inter-packet times. To the best of our knowledge, this is the first empirical study of general-purpose decision models, represented here by Jev, for application classification of network flows. Across 52,000 records from 26 collection weeks following the training period, 40 fixed labeled examples raise Jev's accuracy from 9.80% to 28.42%. Random Forest and Extra Trees trained on 8,000 records achieve 69.95% and 66.80% and outperform Jev in every week. Increasing Jev's context to 150 examples yields 34.50% on the first test week. On a paired 100-record subset, Jev with 40 examples achieves 29% accuracy at a median request time of 0.750 s, versus 37% and 6.036 s for the generative language model OpenAI GPT-5.6 Sol with high reasoning effort through Azure; Jev also incurs lower API charges. The paired subset does not establish an accuracy advantage for either service, and the timing reflects different service configurations. Thus, labeled examples substantially improve Jev, but the tested Jev configurations remain less accurate than trained tree ensembles; unequal supervision budgets and fixed configurations prevent attributing the gap to a single cause.

arXiv cs.LG76

何时注意力头消融支持因果主张?投影层级混淆因素、地板效应与匹配对照

arXiv:2610.00373v1 公告类型:新 摘要:注意力头消融,即将某个头置零并测量任务性能的变化,是推断语言模型中哪些组件对某种行为负有因果责任的常用方法。我们使用 GPT-2 small 表明,除非仔细验证干预语义、评估指标和对照设置,否则这种推断可能并不稳健。“将某个头置零”的一种自然的投影后实现方式,与经过修正的投影前消融几乎不相关(Pearson r = 0.057),并且选出的最重要头部前五名集合完全不重合。我们还表明,二元准确率可能掩盖行为表现处于下限或接近上限时的影响,而真实 token 的对数概率仍能提供有梯度的衡量。通过发现集/留出集划分,以及 1,000 次匹配的随机头和层匹配头对照抽样,经过修正的逐头效应排序在不同划分之间高度稳定(Spearman rho = 0.974),且选出的前五个头的效应显著高于两种对照分布(Monte Carlo p = 0.001)。然而,在 GPT-2 上,关于任务特异性的证据并不稳健。在 DistilGPT2 上的复现实验保留了干预语义和匹配对照方面的发现。这些结果表明,单头消融本身并不足以支持因果主张;要作出有依据的解释,必须采用正确的干预位置、未饱和的连续指标以及匹配的留出对照。

arXiv cs.LG69

FourierQK: Filter Shape, Admissibility and the Leakage-Coverage Law

arXiv:2610.00009v1 Announce Type: new Abstract: Frequency-collapse attention [Zeris, 2026e] achieves large gains over standard dot-product attention by replacing the Q/K dot product with a bandpass-filtered inner product at a learned frequency. A natural follow-up question is: which filter shape works best, and why? We test five hypotheses about filter properties -- DC suppression, Nyquist suppression, bandwidth, centre frequency, and multi-scale coverage -- using a controlled ablation on character-level language modelling (TinyShakespeare, 6-layer GPT). Our main findings are: (1) DC and Nyquist components are actively harmful (val ~= 2.0, equivalent to phase randomisation), confirming that oscillatory bandpass structure is essential, not just any low-dimensional spectral summary; (2) the optimal single-scale bandwidth is sigma ~= 2 bins centred at paragraph scale (~70 tokens), giving a clean gain of Delta = +1.15 nats over BASE-DOT; (3) admissible filters (zero-mean, Mexican Hat DOG m = 2) outperform non-admissible Gaussians at the same scale and provide partial protection against bilateral FFT leakage; (4) bilateral FFT leakage scales monotonically with spectral coverage -- narrowband filters (gap > +4) are clean, wideband filters (gap < +2) are leaky; and (5) causal time-domain Morlet at character scale cannot beat BASE-DOT (K=128 taps covers 50% of T=256 context), motivating word-level experiments in the companion MorletQK paper [Zeris, 2026f]. Together, findings (1)-(5) characterise FourierQK as effective in bidirectional attention settings (encoder-style, e.g. BERT), where full-sequence context is available at both training and inference time; autoregressive generation requires a causal spectral variant such as MorletQK [Zeris, 2026f] (decoder-style, e.g. GPT). Code available at: https://github.com/AthanasiosZeris/energy-gated-attention

BAIR Blog80

Identifying Interactions at Scale for LLMs

different_tests Understanding the behavior of complex machine learning systems, particularly Large Language Models (LLMs), is a critical challenge in modern artificial intelligence. Interpretability research aims to make the decision-making process more transparent to model builders and impacted humans, a step toward safer and more trustworthy AI. To gain a comprehensive understanding, we can analyze these systems through different lenses: feature attribution , which isolates the specific input features driving a prediction ( Lundberg & Lee, 2017 ; Ribeiro et al., 2022 ); data attribution , which links model behaviors to influential training examples ( Koh & Liang, 2017 ; Ilyas et al., 2022 ); and mechanistic interpretability , which dissects the functions of internal components ( Conmy et al., 2023 ; Sharkey et al., 2025 ). Across these perspectives, the same fundamental hurdle persists: complexity at scale . Model behavior is rarely the result of isolated components; rather, it emerges from complex dependencies and patterns. To achieve state-of-the-art performance, models synthesize complex feature relationships, find shared patterns from diverse training examples, and process information through highly interconnected internal components. Therefore, grounded or reality-checked interpretability methods must also be able to capture these influential interactions . As the number of features, training data points, and model components grow, the number of potential interactions grows exponentially, making exhaustive analysis computationally infeasible. In this blog post, we describe the fundamental ideas behind SPEX and ProxySPEX , algorithms capable of identifying these critical interactions at scale. Attribution through Ablation Central to our approach is the concept of ablation , measuring influence by observing what changes when a component is removed. Feature Attribution: We mask or remove specific segments of the input prompt and measure the resulting shift in the predictions. Data Attribution: We train models on different subsets of the training set, assessing how the model’s output on a test point shifts in the absence of specific training data. Model Component Attribution (Mechanistic Interpretability): We intervene on the model’s forward pass by removing the influence of specific internal components, determining which internal structures are responsible for the model’s prediction. In each case, the goal is the same: to isolate the drivers of a decision by systematically perturbing the system, in hopes of discovering influential interactions. Since each ablation incurs a significant cost, whether through expensive inference calls or retrainings, we aim to compute attributions with the fewest possible ablations . different_tests Masking different parts of the input, we measure the difference between the original and ablated outputs. SPEX and ProxySPEX Framework To discover influential interactions with a tractable number of ablations, we have developed SPEX (Spectral Explainer). This framework draws on signal processing and coding theory to advance interaction discovery to scales orders of magnitude greater than prior methods. SPEX circumvents this by exploiting a key structural observation: while the number of total interactions is prohibitively large, the number of influential interactions is actually quite small. We formalize this through two observations: sparsity (relatively few interactions truly drive the output) and low-degreeness (influential interactions typically involve only a small subset of features). These properties allow us to reframe the difficult search problem into a solvable sparse recovery problem. Drawing on powerful tools from signal processing and coding theory, SPEX uses strategically selected ablations to combine many candidate interactions together. Then, using efficient decoding algorithms, we disentangle these combined signals to isolate the specific interactions responsible for the model’s behavior. image2 In a subsequent algorithm, ProxySPEX , we identified another structural property common in complex machine learning models: hierarchy . This means that where a higher-order interaction is important, its lower-order subsets are likely to be important as well. This additional structural observation yields a dramatic improvement in computational cost: it matches the performance of SPEX with around 10x fewer ablations . Collectively, these frameworks enable efficient interaction discovery, unlocking new applications in feature, data, and model component attribution. Feature Attribution Feature attribution techniques assign importance scores to input features based on their influence on the model’s output. For example, if an LLM were used to make a medical diagnosis, this approach could identify exactly which symptoms led the model to its conclusion. While attributing importance to individual features can be valuable, the true power of sophisticated models lies in their ability to capture complex relationships between features. The figure below illustrates examples of these influential interactions: from a double negative changing sentiment (left) to the necessary synthesis of multiple documents in a RAG task (right). image3 The figure below illustrates the feature attribution performance of SPEX on a sentiment analysis task. We evaluate performance using faithfulness : a measure of how accurately the recovered attributions can predict the model’s output on unseen test ablations. We find that SPEX matches the high faithfulness of existing interaction techniques (Faith-Shap, Faith-Banzhaf) on short inputs, but uniquely retains this performance as the context scales to thousands of features. In contrast, while marginal approaches (LIME, Banzhaf) can also operate at this scale, they exhibit significantly lower faithfulness because they fail to capture the complex interactions driving the model’s output. image4 SPEX was also applied to a modified version of the trolley problem, where the moral ambiguity of the problem is removed, making “True” the clear correct answer. Given the modification below, GPT-4o mini answered correctly only 8% of the time. When we applied standard feature attribution (SHAP), it identified individual instances of the word trolley as the primary factors driving the incorrect response. However, replacing trolley with synonyms such as tram or streetcar had little impact on the prediction of the model. SPEX revealed a much richer story, identifying a dominant high-order synergy between the two instances of trolley , as well as the words pulling and lever, a finding that aligns with human intuition about the core components of the dilemma. When these four words were replaced with synonyms, the model’s failure rate dropped to near zero. image5 Data Attribution Data attribution identifies which training data points are most responsible for a model’s prediction on a new test point. Identifying influential interactions between these data points is key to explaining unexpected model behaviors. Redundant interactions, such as semantic duplicates, often reinforce specific (and possibly incorrect) concepts, while synergistic interactions are essential for defining decision boundaries that no single sample could form alone. To demonstrate this, we applied ProxySPEX to a ResNet model trained on CIFAR-10, identifying the most significant examples of both interaction types for a variety of difficult test points, as shown in the figure below. image6 As illustrated, synergistic interactions (left) often involve semantically distinct classes working together to define a decision boundary. For example, grounding the synergy in human perception, the automobile (bottom left) shares visual traits with the provided training images, including the low-profile chassis of the sports car, the boxy shape of the yellow truck, and the horizontal stripe of the red delivery vehicle. On the other hand, redundant interactions (right) tend to capture visual duplicates that reinforce a specific concept. For instance, the horse prediction (middle right) is heavily influenced by a cluster of dog images with similar silhouettes. This fine-grained analysis allows for the development of new data selection techniques that preserve necessary synergies while safely removing redundancies. Attention Head Attribution (Mechanistic Interpretability) The goal of model component attribution is to identify which internal parts of the model, such as specific layers or attention heads, are most responsible for a particular behavior. Here too, ProxySPEX uncovers the responsible interactions between different parts of the architecture. Understanding these structural dependencies is vital for architectural interventions, such as task-specific attention head pruning. On an MMLU dataset (highschool‐us‐history), we demonstrate that a ProxySPEX-informed pruning strategy not only outperforms competing methods, but can actually improve model performance on the target task . image7 On this task, we also analyzed the interaction structure across the model’s depth. We observe that early layers function in a predominantly linear regime, where heads contribute largely independently to the target task. In later layers, the role of interactions between attention heads becomes more pronounced, with most of the contribution coming from interactions among heads in the same layer. image8 What’s Next? The SPEX framework represents a significant step forward for interpretability, extending interaction discovery from dozens to thousands of components . We have demonstrated the versatility of the framework across the entire model lifecycle: exploring feature attribution on long-context inputs, identifying synergies and redundancies among training data points, and discovering interactions between internal model components. Moving forwards, many interesting research questions remain around unifying these different perspectives, providing a more holistic understanding of a machine learning system. It is also of great interest to systematically evaluate interaction discovery methods against existing scientific knowledge in fields such as genomics and materials science, serving to both ground model findings and generate new, testable hypotheses. We invite the research community to join us in this effort: the code for both SPEX and ProxySPEX is fully integrated and available within the popular SHAP-IQ repository. https://github.com/mmschlk/shapiq (SHAP-IQ Github) https://openreview.net/forum?id=KI8qan2EA7 (ProxySPEX NeurIPS 2025) https://openreview.net/forum?id=pRlKbAwczl (SPEX ICML 2025) https://openreview.net/forum?id=glGeXu1zG4 (Learning to Understand NeurIPS 2024)

BAIR Blog73

Adaptive Parallel Reasoning: The Next Paradigm in Efficient Inference Scaling

Adaptive Parallel Reasoning overview Overview of adaptive parallel reasoning. What if a reasoning model could decide for itself when to decompose and parallelize independent subtasks, how many concurrent threads to spawn, and how to coordinate them based on the problem at hand? We provide a detailed analysis of recent progress in the field of parallel reasoning, especially Adaptive Parallel Reasoning. Disclosure: this post is part landscape survey, part perspective on adaptive parallel reasoning. One of the authors (Tony Lian) co-led ThreadWeaver ( Lian et al., 2025 ), one of the methods discussed below. The authors aim to present each approach on its own terms. Motivation Recent progress in LLM reasoning capabilities has been largely driven by inference-time scaling, in addition to data and parameter scaling ( OpenAI et al., 2024 ; DeepSeek-AI et al., 2025 ). Models that explicitly output reasoning tokens (through intermediate steps, backtracking, and exploration) now dominate math, coding, and agentic benchmarks. These behaviors allow models to explore alternative hypotheses, correct earlier mistakes, and synthesize conclusions rather than committing to a single solution ( Wen et al., 2025 ). The problem is that sequential reasoning scales linearly with the amount of exploration. Scaling sequential reasoning tokens comes at a cost, as models risk exceeding effective context limits ( Hsieh et al., 2024 ). The accumulation of intermediate exploration paths makes it challenging for the model to disambiguate amongst distractors when attending to information in its context, leading to a degradation of model performance, also known as context-rot ( Hong, Troynikov and Huber, 2025 ). Latency also grows proportionally with reasoning length. For complex tasks requiring millions of tokens for exploration and planning, it’s not uncommon to see users wait tens of minutes or even hours for an answer ( Qu et al., 2025 ). As we continue to scale along the output sequence length dimension, we also make inference slower, less reliable, and more compute-intensive. Parallel reasoning has emerged as a natural solution. Instead of exploring paths sequentially ( Gandhi et al., 2024 ) and accumulating the context window at every step, we can allow models to explore multiple threads independently (threads don’t rely on each other’s context) and concurrently (threads can be executed at the same time). Figure 1: Sequential vs. Parallel Reasoning Figure 1: Sequential vs. Parallel Reasoning Over recent years, a growing body of work has explored this idea across synthetic settings (e.g., the Countdown game ( Katz, Kokel and Sreedharan, 2025 )), real-world math problems, and general reasoning tasks. From Fixed Parallelism to Adaptive Control Existing approaches show that parallel reasoning can help, but most of them still decide the parallel structure outside the model rather than letting the model choose it. Simple fork-and-join. Self-consistency/Majority Voting — independently sample multiple complete reasoning traces, extract final answer from each, and return the most common one ( Wang et al., 2023 ). Best-of-N (BoN) — similar to self-consistency, but uses a trained verifier to select the best solution instead of using majority voting ( Stiennon et al., 2022 ). Although simple to implement, these methods often incur redundant computation across branches since trajectories are sampled independently. Heuristic-based structured search. Tree / Graph / Skeleton of Thoughts — a family of structured decomposition methods that explores multiple alternative “thoughts” using known search algorithms (BFS/DFS) and prunes via LLM-based evaluation ( Yao et al., 2023 ; Besta et al., 2024 ; Ning et al., 2024 ). Monte-Carlo Tree Search (MCTS) — estimates node values by sampling random rollouts and expands the search tree with Upper Confidence Bound (UCB) style exploration-exploitation ( Xie et al., 2024 ; Zhang et al., 2024 ). These methods improve upon simple fork-and-join by decomposing tasks into non-overlapping subtasks; however, they require prior knowledge about the decomposition strategy, which is not always known. Recent variants. ParaThinker — trains a model to run in two fixed stages: first generating multiple reasoning threads in parallel, then synthesizing them. They introduce trainable control tokens ( ) and thought-specific positional embeddings to enforce independence during reasoning and controlled integration during summarization via a two-phase attention mask ( Wen et al., 2025 ). GroupThink — multiple parallel reasoning threads can see each other’s partial progress at token level and adapt mid-generation. Unlike prior concurrent methods that operate on independent requests, GroupThink runs a single LLM producing multiple interdependent reasoning trajectories simultaneously ( Hsu et al., 2025 ). Hogwild! Inference — multiple parallel reasoning threads share KV cache and decide how to decompose tasks without an explicit coordination protocol. Workers generate concurrently into a shared attention cache using RoPE to stitch together individual KV blocks in different orders without recomputation ( Rodionov et al., 2025 ). Figure 2: Various Strategies for Parallel Reasoning Figure 2: Various Strategies for Parallel Reasoning The methods above share a common limitation: the decision to parallelize, the level of parallelization, and the search strategy are imposed on the model, regardless of whether the problem actually benefits from it. However, different problems need different levels of parallelization, and that is something critical to the effectiveness of parallelization. For example, a framework that applies the same parallel structure to “What’s 25+42?” and “What’s the smallest planar region in which you can continuously rotate a unit-length line segment by 180°?” is wasting compute on the former and probably using the wrong decomposition strategy for the latter. In the approaches described above, the model is not taught this adaptive behavior. A natural question arises: What if the model could decide for itself when to parallelize, how many threads to spawn, and how to coordinate them based on the problem at hand? Adaptive Parallel Reasoning (APR) answers this question by making parallelization part of the model’s generated control flow. Formally defined, adaptivity refers to the model’s ability to dynamically allocate compute between parallel and serial operations at inference time . In other words, a model with adaptive parallel reasoning (APR) capability is taught to coordinate its control flow — when to generate sequences sequentially vs. in parallel. It’s important to note that the concept of adaptive parallel reasoning was introduced by the work Learning Adaptive Parallel Reasoning with Language Models ( Pan et al., 2025 ), but is a paradigm rather than a specific method. Throughout this post, APR refers to the paradigm, while “ the APR method ” denotes the specific instantiation from Pan et al. (2025). This shift matters for three reasons. Compared to Tree-of-Thoughts, APR doesn’t need domain-specific heuristics for decomposition. During RL, the model learns general decomposition strategies from trial and error. In fact, models discover useful parallelization patterns, such as running the next step along with the self-verification of a previous step, or hedging a primary approach with a backup one, in an emergent manner that would be difficult to hand-design ( Yao et al., 2023 ; Wu et al., 2025 ; Zheng et al., 2025 ). Compared to BoN, APR avoids redundant computation. APR models have control over what each parallel thread will do before branching out. Therefore, APR can learn to produce a set of unique, non-overlapping subtasks before assigning them to independent threads ( Wang et al., 2023 ; Stiennon et al., 2022 ; Pan et al., 2025 ; Yang et al., 2025 ). Compared to non-adaptive approaches, APR can choose not to parallelize. Adaptive models can adjust the level of parallelization to match the complexity of the problem against the complexity and overhead of parallelization ( Lian et al., 2025 ). In practice, this is implemented by having the model output special tokens that control when to reason in parallel versus sequentially. Below is a condensed ThreadWeaver-style trace: two outlines and two paths under a block, then the threads agree on a single boxed answer. Figure 3: Example of an Adaptive Parallel Reasoning Trajectory from ThreadWeaver, manually condensed for ease of illustration. Figure 3: Example of an Adaptive Parallel Reasoning Trajectory from ThreadWeaver, manually condensed for ease of illustration. Figure 4: Special Tokens Variants across Adaptive Parallel Reasoning Papers Figure 4: Special Tokens Variants across Adaptive Parallel Reasoning Papers Inference Systems for Adaptive Parallelism How do we actually execute parallel branches? We take inspiration from computer systems, and specifically, multithreading and multiprocessing. Most of this work can be viewed as leveraging a fork-join design. At inference time, we are effectively asking the model to perform a map-reduce operation: Fork the problem into subtasks/threads, process them concurrently Join them into a final answer Figure 5: Fork-join Inference Design Figure 5: Fork-join Inference Design Specifically, the model will encounter a list of subtasks. It will then prefill each of the subtasks and send them off as independent requests for the inference engine to process. These threads then decode concurrently until they hit an end token or exceed max length. This process blocks until all threads finish decoding and then aggregates the results. This is common across various adaptive parallel reasoning approaches. However, one issue arises during aggregation: the content generated in branches cannot be easily aggregated at the KV cache level. This is because tokens in independent threads start at identical position IDs, resulting in encoding overlap and non-standard behavior when merging KV cache back together. Similarly, since independent threads do not attend to each other, their concatenated KV cache results in a non-causal attention pattern, which the base model has not seen during training. To address this issue, the field splits into two schools of thought on how to execute the aggregation process, defined by whether they modify the inference engine or work around it. Multiverse modifies the inference engine to reuse KV cache across the join. Before taking a deeper look into Multiverse ( Yang et al., 2025 )’s memory management, let’s first understand how KV cache is handled up until the “join” phase. Notice how each of the independent threads share the prefix sequence, i.e., the list of subtasks. Without optimization, each thread needs to prefill and recompute the KV cache for the prefix sequence. However, this redundancy can be avoided with SGLang ’s RadixAttention ( Sheng et al., 2023 ), which organizes multiple requests into a radix tree, a trie (prefix tree) with sequences of elements of varying lengths instead of single elements. This way, the only new KV cache entries are those from independent thread generation. Figure 6: RadixAttention’s KV Cache Management Strategy Figure 6: RadixAttention’s KV Cache Management Strategy Now, if everything went well, all the independent threads have come back from the inference engine. Our goal is now to figure out how to synthesize them back into a single sequence to continue decoding for next steps. It turns out, we can reuse the KV cache of these independent threads during the synthesis stage. Specifically, Multiverse ( Yang et al., 2025 ), Parallel-R1 ( Zheng et al., 2025 ), and NPR ( Wu et al., 2025 ) modify the inference engine to copy over the KV cache generated by each thread and edits the page table so that it stitches together non-contiguous memory blocks into a single KV cache sequence. This avoids the redundant computation of a second prefill and reuses existing KV cache as much as possible. However, this has several major limitations. First, this approach requires modifying the inference engine to perform non-standard memory handling, which can result in unexpected behaviors. Specifically, since the synthesis request references KV cache from previous requests, it creates fragility in the system and the possibility of bad pointers. Another request can come in and evict the referenced KV cache before the synthesis request completes, requiring it to halt and trigger a re-prefilling of the previous thread request. This problem has led the Multiverse researchers ( Yang et al., 2025 ) to limit the batch size that the inference engine can handle, which restricts throughput. Figure 7: KV Cache “Stitching” During Multiverse Inference Figure 7: KV Cache “Stitching” During Multiverse Inference Second, this approach modifies how models see the sequence, which creates a distributional shift that models are not pretrained on, therefore requiring more extensive training to align behavior. Specifically, when we stitch together KV cache this way, we create a sequence with non-standard position encoding. During independent-thread generation, all threads started at the same position index and attended to the prior subtasks, NOT each other. So when the threads merge back, the resulting KV cache has a non-standard positional encoding and does not use causal attention. Therefore, this approach requires extensive training to align the model to this new behavior. To address this, Multiverse ( Yang et al., 2025 ) and related works apply a modified attention mask during training to prevent independent threads from attending to each other, aligning the training and inference behaviors. Figure 8: Multiverse’s Attention Mask Figure 8: Multiverse’s Attention Mask With these issues arising from non-standard KV cache management, can we try an approach without engine modifications? ThreadWeaver keeps the inference engine unchanged and moves orchestration to the client. ThreadWeaver ( Lian et al., 2025 ) treats parallel inference purely as a client-side problem. The “Fork” process is nearly identical to Multiverse’s, but the join phase handles memory very differently as it does NOT modify engine internals. Instead, the client concatenates all text outputs from independent branches into one contiguous sequence. Then, the engine performs a second prefill to generate the KV cache for the conclusion generation step. While this introduces computational redundancy that Multiverse tries to avoid, the cost of prefill is significantly lower than decoding. In addition, this does not require special attention handling during inference, as the second prefill uses causal attention (threads see each other), making it easier to adapt sequential autoregressive models for this task. Figure 9: ThreadWeaver’s Prefill and Decode Strategy Figure 9: ThreadWeaver’s Prefill and Decode Strategy How should we train a model to learn this behavior? Naively, for each parallel trajectory, we can break it down into multiple sequential pieces following our inference pattern. For instance, we would train the model to output the subtasks given prompt, individual threads given prompt+subtask assignment, and conclusion given prompt+subtasks+corresponding threads. However, this seems redundant and not compute efficient. Can we do better? Turns out, yes. As in ThreadWeaver ( Lian et al., 2025 ), we can organize a parallel trajectory into a prefix-tree (trie), flatten it into a single sequence, and apply an ancestor-only attention mask during training (not inference!). Figure 10: Building the Prefix-tree and Flattening into a single training sequence Figure 10: Building the Prefix-tree and Flattening into a single training sequence Specifically, we apply masking and position IDs to mimic the inference behavior, such that each thread is only conditioned on the prompt+subtasks, without ever attending to sibling threads or the final conclusion. The engine-agnostic design makes adoption easy since you don’t need to figure out a separate hosting method and can leverage existing hardware infra. It also gets better as existing inference engines get better. What’s more, with an engine-agnostic method, we can serve a hybrid model that switches between sequential and parallel thinking modes easily. Training Models to Use Parallelism Once the inference path exists, the next problem is teaching a model to use it. Demonstrations are needed because the model must learn to output special tokens that orchestrate control flow. We found the instruction-following capabilities of base models insufficient for generating parallel threads. An interesting question here is: does SFT training induce a fundamental reasoning capability for parallel execution that was previously absent, or does it merely align the model’s existing pre-trained capabilities to a specific control-flow token syntax. Typical wisdom is SFT teaches new knowledge; but contrary to common belief, some papers—notably Parallel-R1 ( Zheng et al., 2025 ) and NPR ( Wu et al., 2025 )—argue that their SFT demonstrations simply induce format following (i.e., how to structure parallel requests). We leave this as future work. Figure 11: Sources of Parallelization Demonstration Data Figure 11: Sources of Parallelization Demonstration Data Demonstrations teach the syntax of parallel control flow, but they do not fully solve the incentive problem. In an ideal world, we only need to reward the outcome accuracy, and the parallelization pattern emerges naturally given that it learns to output special tokens through SFT, similar to the emergence of long CoT. However, researchers ( Zheng et al., 2025 ) observed that this is not enough, and we do in fact need parallelization incentives. The question then becomes, how do we tell when the model is parallelizing effectively? Structure-only rewards are too easy to game. Naively, we can give a reward for the number of threads spawned. But models can spawn many short, useless threads to hack the reward. Okay, that doesn’t work. How about a binary reward for simply using parallel structure correctly? This partially solves the issue of models spamming new threads, but models still learn to spawn threads when they don’t need to. The authors of Parallel-R1 ( Zheng et al., 2025 ) introduced an alternating-schedule, only rewarding parallel structure 20% of the time, which successfully increased the use of parallel structure (13.6% → 63%), but had little impact on overall accuracy. With this structure-only approach, we might be drifting away from our original goal of increasing accuracy and reducing latency… How can we optimize for the Pareto frontier directly? Accuracy is simple — we just look at the outcome. How about latency? Efficiency rewards need to track the critical path. In sequential-only trajectories, we can measure latency based on the total number of tokens generated. To extend this to parallel trajectories, we can focus on the critical path, or the longest sequence of tokens that are causally dependent, as this directly determines our end-to-end generation time (i.e., wall-clock time). As an example, when there are two sections with five threads each, the critical path will go through the longest thread from the first parallel section, then any sequential tokens, then the longest thread from the second parallel section, and so on until the end of sequence. Figure 12: Critical Path Length Illustration Figure 12: Critical Path Length Illustration The goal is to minimize the length of the critical path. Simultaneously, we would still like the model to be spending tokens exploring threads in parallel. To combine the two objectives, we can focus on making the critical path a smaller fraction of the total tokens spent. Authors of ThreadWeaver ( Lian et al., 2025 ) framed the parallelization reward as $1 - L_{\mathrm{critical}} / L_{\mathrm{total}}$, which is 0 for a sequential trajectory, and increases linearly as the critical path gets smaller compared to the total tokens generated. Parallel efficiency should be gated by correctness. Intuitively, when multiple trajectories are correct we should assign more reward to the trajectories that are more efficient at parallelization. But how about when they are all incorrect? Should we assign any reward at all? Probably not. To formalize this, $R = R_{\mathrm{correctness}} + R_{\mathrm{parallel}}$. Assuming binary outcome correctness, this can be written as $R = \mathbf{1}(\text{Correctness}) + \mathbf{1}(\text{Correctness}) \times (\text{some parallelization metric})$. This way, a model only gets a parallelization reward when it answers correctly, since we don’t want to pose parallelization constraints on the model if it couldn’t answer the question correctly. Figure 13: Differences in Reward Designs Across Adaptive Parallel Reasoning Works Figure 13: Differences in Reward Designs Across Adaptive Parallel Reasoning Works Evaluation and Open Questions When all is said and done, how well do these adaptive parallel methods actually perform? Well…this is a hard question, as they differ in model choice and metrics. The model selection depends on the training method, SFT problem difficulty, and sequence length. When running SFT on difficult datasets like s1k, which contains graduate-level math and science problems, researchers chose a large base model (Qwen2.5 32B for Multiverse ( Yang et al., 2025 )) to capture the complex reasoning structure behind the solution trajectories. When running RL, researchers chose a small, non-CoT, instruct model (4B, 8B) due to compute cost constraints. Figure 14: Difference in Model Choice Across Adaptive Parallel Reasoning Papers Figure 14: Difference in Model Choice Across Adaptive Parallel Reasoning Papers Each paper also offers a slightly different interpretation about how adaptive parallel reasoning contributes to the research field. They optimize for different theoretical objectives, so they use slightly different sets of metrics: Multiverse and ThreadWeaver ( Yang et al., 2025 ; Lian et al., 2025 ) aim to deliver sequential-AR-model-level accuracy at faster speeds. Multiverse shows that APR models can achieve higher accuracy under the same fixed context window, while ThreadWeaver shows that the APR model achieves shorter end-to-end token latency (critical path length) while getting comparable accuracy. NPR ( Wu et al., 2025 ) treats sequential fallback as a failure mode and optimizes for 100% Genuine Parallelism Rate, measured as the ratio of parallel tokens to total tokens. Parallel-R1 ( Zheng et al., 2025 ) does not focus on end-to-end latency and instead optimizes for exploration diversity, presenting APR as a form of mid-training exploration scaffold that provides a performance boost after RL. Open Questions While Adaptive Parallel Reasoning represents a promising step toward more efficient inference-time scaling, significant open questions remain. As noted above, Parallel-R1 ( Zheng et al., 2025 ) presents APR as a form of mid-training exploration scaffold rather than a primarily inference-time technique. This invites a more fundamental question: Does parallelization at inference-time consistently improve accuracy, or is it primarily valuable as a training-time exploration scaffold? Parallel-R1 suggests that the diversity induced by parallel structure during RL may matter more than the parallelization itself at test time. A related concern is stability. There’s also a persistent tendency for models to collapse back to sequential reasoning when parallelization rewards are relaxed. Parallel-R1 authors showed that removing parallelization reward after 200 steps results in the model reverting to sequential behavior. Is this a training stability issue, a reward signal design issue, or evidence that parallel structure genuinely conflicts with how autoregressive pretraining shapes the model’s prior? Beyond whether APR works, deployment introduces its own questions. Can we design training methods that account for available compute budget at inference time, so parallelization decisions are hardware-aware rather than purely problem-driven? Finally, the parallel structures considered above are essentially flat. What if we allow parallelization depth > 1? Recursive language models (RLMs; Zhang, Kraska and Khattab, 2026 ) effectively manage long context and show promising inference-time scaling capabilities. How well do RLMs perform when trained with end-to-end RL that incentivizes adaptive parallelization? Acknowledgements We thank Nicholas Tomlin and Alane Suhr for providing us with helpful feedback. We thank Christopher Park, Karl Vilhelmsson, Nyx Iskandar , Georgia Zhou, Kaival Shah , and Jyoti Rani for their insightful suggestions. We thank Vijay Kethana , Jaewon Chang , Cameron Jordan , Syrielle Montariol , Erran Li, and Anya Ji for their valuable discussions. We thank Jiayi Pan , Xiuyu Li , and Alex Zhang for their constructive correspondences about Adaptive Parallel Reasoning and Recursive Language Models.

BAIR Blog53

2026 BAIR Graduate Showcase

Congratulations to the Berkeley Artificial Intelligence Research (BAIR) Lab class of 2026! This year, BAIR celebrates another remarkable group of Ph.D. graduates whose curiosity, creativity, and perseverance have pushed the frontiers of artificial intelligence and machine learning. Their work spans the breadth of modern AI — robotics and embodied intelligence, large language models and reasoning, computer vision, generative modeling, AI safety, human-AI interaction, AI for science and healthcare, and much more. Along the way, they have published influential research, built systems with real-world impact, mentored their peers, and shaped the BAIR community for the better. Now they are headed everywhere ideas travel: to faculty and postdoctoral positions, to industry research labs, and to startups of their own founding — and several are still exploring what comes next and would love to hear from you. Please join us in celebrating the achievements of these wonderful graduates. We are proud of everything they have accomplished at Berkeley, and we can’t wait to see what they do next! Thank you to our friends at the Stanford AI Lab for this idea! Baifeng Shi Baifeng Shi Email: baifeng_shi@berkeley.edu Website: https://bfshi.github.io/ Advisor(s): Trevor Darrell Research Blurb: I work on building generalist vision and robotic models. What's next: Member of Technical Staff at Physical Intelligence Charlie Snell Charlie Snell Email: csnell22@berkeley.edu Website: https://sea-snell.github.io Advisor(s): Dan Klein Research Blurb: My work aims to understand when and how the different LLM scaling paradigms can be traded off and interchanged. In particular, test-time scaling treats each prompt independently, drawing long chains of inferences and then forgetting them entirely between prompts. This differs critically from pretraining, which instead learns a compressed representation from a large dataset. I believe bridging the gap between these methods of scaling computation, presents a key open challenge in the field: how can we develop methods which turn the inferences drawn at test-time back into learned representations that the model can hold onto across interactions. Devin Guillory Devin Guillory Email: dguillory@berkeley.edu Website: https://devinguillory.com Advisor(s): Trevor Darrell Research Blurb: Accounting for data shifts in computer vision models What's next: Building collaborative AI systems, looking for conspirators. Eve Fleisig Eve Fleisig Email: efleisig@berkeley.edu Website: https://efleisig.com Advisor(s): Dan Klein Research Blurb: I design language models to work reliably and fairly for the broad range of real LLM users. First, my research leverages disagreement among user preferences as signal, in order to train and evaluate LLMs for entire populations of users. Second, I work on designing rigorous evaluations to extricate challenging LLM harms that diverse users face. Finally, I work on core technical failures of LLMs, like miscalibrated confidence, to reduce downstream risks when models are deployed to users with different needs. Combined, these interventions facilitate building LLMs that minimize societal harms, and maximize benefits to a wider range of real-world users. What's next: Postdoctoral fellow at Princeton CITP Grace Luo Grace Luo Email: graceluo@berkeley.edu Website: https://graceluo.net Advisor(s): Trevor Darrell Research Blurb: My research is on interpreting and controlling generative models. For example, I've worked on re-purposing image generators for computer vision tasks, and meta-modeling language activations for better LLM probing and steering. What's next: Research scientist in industry Hanlin Zhu Hanlin Zhu Email: hanlinzhu@berkeley.edu Website: https://hanlinzhu.com/ Advisor(s): Stuart Russell, Jiantao Jiao Research Blurb: My research centers on understanding and improving the reasoning capabilities of large language models (LLMs). What's next: Member of Technical Staff at OpenAI Haozhi Qi Haozhi Qi Email: hqi@berkeley.edu Website: https://haozhi.io/ Advisor(s): Jitendra Malik, Yi Ma Research Blurb: Dexterous Manipulation and Robot Learning What's next: Research scientist at Amazon; Faculty at University of Chicago J.D. Zamfirescu-Pereira J.D. Zamfirescu-Pereira Email: zamfi@berkeley.edu Website: https://zamfi.net Advisor(s): Bjoern Hartmann Research Blurb: My research focuses on effective human-AI co-design. I study the boundaries of language interfaces as a medium for interacting with AI, creating systems that blend language-focused interactions with structured user interfaces that draw on different levels of abstraction. I focus on language-oriented technologies, like LLMs and text-to-image models, that are powerful mediators of design processes. These technologies enable humans to describe their desires at almost any level of abstraction, from high-level goals vaguely specified (“I’d like a game to help my kid learn to read”) to low-level corrections of undesired outputs (“Don’t say ‘I know because I’ve tasted it’ when about a recipe substitution's taste”). What's next: Assistant Professor, Computer Science, UCLA Jiachen Lian Jiachen Lian Email: jiachenlian@berkeley.edu Website: https://jlian2.github.io Advisor(s): Gopala Anumanchipalli Research Blurb: My research focuses on human-centered AI across speech, healthcare, and systems. Looking for: Look for AI talents to join our startup Josh Kang Josh Kang Email: minwoo_kang@berkeley.edu Website: https://joshuaminwookang.github.io/ Advisor(s): John Canny Research Blurb: I study language modeling and related topics in NLP; specific interests are human user simulation and building conversational, collaborative AI agents. What's next: AI Scientist at Mistral AI Junhao (Bear) Xiong Junhao (Bear) Xiong Email: junhao_xiong@berkeley.edu Website: https://www.linkedin.com/in/junhao-bear-xiong Advisor(s): Jennifer Listgarten, Yun Song Research Blurb: Junhao (Bear) Xiong is a PhD candidate at UC Berkeley, advised by Jennifer Listgarten and Yun S. Song. His work focuses on machine learning methods for biology, with an emphasis on generative modeling for proteins. Previously, he studied Applied Math and Computer Science at Johns Hopkins. Looking for: Research scientist Kaylo Littlejohn Kaylo Littlejohn Email: kaylo_littlejohn@berkeley.edu Website: https://kaylolittlejohn.com Advisor(s): Gopala Anumanchipalli Research Blurb: My research is focused on speech modeling and natural language processing. I co-led the development of multimodal AI tools to accurately translate brain activity into text, audible personalized speech, and a high-fidelity "digital talking avatar" (Nature 2023, Nature Neuroscience 2025). I am also tech lead for voice modeling at Roblox. Looking for: Research Scientist / Engineer Kent Chang Kent Chang Email: kentkchang@berkeley.edu Website: https://kentkc.org Advisor(s): David Bamman Research Blurb: I work on NLP and multimodal machine learning, with a focus on evaluating large language models and building multimodal systems for understanding dialogue, narrative, and social interaction. My research includes benchmarks for LLM memorization, multimodal datasets sourced from feature films and television, and studies of model behavior. I'm interested in bridging computational methods with questions from the humanities and social sciences about whose voices get represented in AI systems, and about AI's broader impact. My work has appeared at EMNLP and ACL, among others. Looking for: (teaching) faculty, Research Scientist, ML/AI SWE Kevin Black Kevin Black Email: kvablack@berkeley.edu Website: https://kevin.black Advisor(s): Sergey Levine Research Blurb: I work on large-scale robot learning: including imitation learning, reinforcement learning, generative modeling, real-time control, and whatever else it takes to make robots work in the real world! What's next: Research Scientist of Physical Intelligence Kunhe Yang Kunhe Yang Email: kunheyang@berkeley.edu Website: https://www.kunheyang.com/ Advisor(s): Nika Haghtalab Research Blurb: My research focuses on the theoretical foundations of designing and evaluating AI algorithms in environments shaped by human incentives and AI agency. My work spans human-centric policy learning, incentive-aware evaluation, and multi-agent collaboration and information transmission, drawing on tools from machine learning theory and computational economics. What's next: Postdoc Research at Stanford Lisa Dunlap Lisa Dunlap Email: lisabdunlap@berkeley.edu Website: https://lisabdunlap.com Advisor(s): Joseph Gonzalez, Trevor Darrell Research Blurb: Auditing generative models. What's next: Research Engineer at Anthropic Long (Tony) Lian Long (Tony) Lian Email: longlian@berkeley.edu Website: https://tonylian.com/ Advisor(s): Trevor Darrell, Adam Yala Research Blurb: My research primarily focuses on developing real-time multi-modal multi-agent systems and parallel reasoning systems through end-to-end RL. What's next: Member of Technical Staff at Thinking Machines Lab Maulik Bhatt Maulik Bhatt Email: maulikbhatt@berkeley.edu Website: https://maulikb.com Advisor(s): Negar Mehr Research Blurb: My research develops autonomous robots that can safely coordinate with humans and other robots in shared environments. I build scalable algorithms grounded in game theory and diffusion models that let agents reason about the intent and behavior of others around them. My work spans real-time multi-agent trajectory planning and imitation learning in the presence of multi-modality. I've validated these methods on hardware platforms ranging from quadrotors to manipulators, with the goal of making multi-agent coordination robust, interpretable, and deployable in the real world. What's next: Joining Toyota Woven's end-to-end autonomous driving team. Michael Psenka Michael Psenka Email: psenka@berkeley.edu Website: https://www.michaelpsenka.io/ Advisor(s): Aditi Krishnapriyan Research Blurb: Work in various domains (reinforcement learning, world models, AI+bio/chem), generally working on longer-horizon and out-of-distribution problems in planning and interpolation (e.g. robot manipulation from start state to goal, molecular dynamics of proteins between ground states). My thesis took a variational approach (think calculus of variations) directly from deep generative models of the environment, framing path-finding as minimizing a functional induced by the learned model itself (its score, its critic, or its dynamics). Through my research I've gained insight on how to properly handle dynamics in deep learning systems, and I plan to continue developing systems that are dynamic and adaptive. What's next: Lead Research Scientist at Baseten Nathan Lichtlé Nathan Lichtlé Email: nathan.lichtle@gmail.com Website: https://nathanlichtle.com Advisor(s): Alexandre M. Bayen Research Blurb: RL for autonomous driving. What's next: Chief Scientist & Co-founder at Yumi Health Neerja Thakkar Neerja Thakkar Email: nthakkar@berkeley.edu Website: https://neerja.me/ Advisor(s): Jitendra Malik Research Blurb: My research focuses on scaling predictive world models to handle the complexity of in-the-wild motion. Using autoregressive and diffusion frameworks, I develop better representations for real-world prediction and propose methods to efficiently adapt these models to new domains. Looking for: Research scientist Nikita Mehandru Nikita Mehandru Email: nmehandru@berkeley.edu Website: https://n-mehandru.github.io/ Advisor(s): Ahmed Alaa and David Bamman Research Blurb: My research develops and applies machine learning methods for clinical reasoning and disease progression modeling using unstructured text and time series data from electronic health records. In collaboration with physicians at UCSF, I bridge method development and clinical validation with the intention to build reliable, interpretable AI systems in medicine. Looking for: Research Scientist Niklas Lauffer Niklas Lauffer Email: nlauffer@berkeley.edu Website: https://niklaslauffer.github.io/ Advisor(s): Stuart Russell and Sanjit Seshia Research Blurb: Niklas's research is focused on AI safety and reinforcement learning, particularly in the area of multi-agent interaction and LM agents. He's worked on enabling adversarial learning in cooperative and mixed-motive settings, solving issues of covariate shift in training LM agents on long-horizon tasks, as well as evaluating safety risks posed by LM agents in multi-agent settings. What's next: Research Scientist at Google Deepmind Qiyang Li Qiyang Li Email: qcli@berkeley.edu Website: https://colinqiyangli.github.io/ Advisor(s): Sergey Levine Research Blurb: Recent progress in robotic manipulation policy learning has been largely driven by (1) the increasing availability of large-scale prior datasets and (2) the success of action chunking, where the policy predicts a short sequence of future actions rather than a single one. However, most action chunking policies are trained via supervised imitation learning, because efficient online self-improvement with reinforcement learning (RL) remains challenging—limiting real-world applicability. My PhD research studied how we could leverage prior data to optimize action-chunking policies with RL, combining empirical results with theoretical insights. Looking for: Post-doc/research scientist for RL in robotics and LLMs! Sampada Deglurkar Sampada Deglurkar Email: sampada_deglurkar@berkeley.edu Website: https://sdeglurkar.github.io/ Advisor(s): Prof Claire Tomlin Research Blurb: My research is in providing safety assurances for AI-enabled autonomous systems, ranging from robots to autonomous vehicles to aviation systems. For this, I have worked with uncertainty quantification for machine learning models, decision-making under uncertainty algorithms, and tools for producing probabilistic guarantees on system operation. Looking for: Research scientist, Research engineer Vinamra Benara Vinamra Benara Email: vbenara@berkeley.edu Website: https://cs.berkeley.edu/~vbenara Advisor(s): Ion Stoica Research Blurb: My research focuses on LLM post-training, including data curation, RLHF, RLVR with VLMs, evaluations, reasoning, agentic workflows, and interpretability. I also have strong expertise in systems infrastructure for distributed computing. Looking for: Research scientist / Research Engineer Vongani Maluleke Vongani Maluleke Email: vongani_maluleke@berkeley.edu Website: https://people.eecs.berkeley.edu/~vongani_maluleke/ Advisor(s): Jitendra Malik and Angjoo Kanazawa Research Blurb: Vongani Maluleke is a PhD candidate at UC Berkeley (BAIR, advised by Jitendra Malik and Angjoo Kanazawa), where she led the development of MAGNet, a unified multi-agent motion generation framework that supports a wide range of motion generation tasks without retraining or architectural changes, outperforming task-specialized state-of-the-art baselines. She is currently extending this work by deploying it on a Unitree G1 humanoid to make it embody social intelligence. Before her PhD, she was a Senior AI Consultant at Deloitte, awarded Exceptional Performer two consecutive years, leading AI system development across media, telecommunications, retail, and financial services. Looking for: Research scientist Wei-Jer Chang Wei-Jer Chang Email: weijer_chang@berkeley.edu Website: https://weijer-chang.github.io/ Advisor(s): Masayoshi Tomizuka Research Blurb: My research focuses on developing safe and intelligent autonomous systems for complex, human-centered environments. I work at the intersection of machine learning, generative models, and reinforcement learning, with applications in autonomy. My work addresses challenges in multi-agent interaction, interactive human behavior, and long-tail safety-critical scenarios at scale. Looking for: Research Scientist, Applied Scientist, Roboticist Xiuyu Li Xiuyu Li Email: xiuyu@berkeley.edu Website: https://xiuyuli.com/ Advisor(s): Kurt Keutzer Research Blurb: My research focuses on developing scalable and self-improving large language model agents, with emphasis on coding agents for complex, long-horizon tasks. This direction builds on my work in parallel reasoning, and on broader expertise in making generative models more efficient in training and inference across language and vision. What's next: Member of Technical Staff at xAI Yichen Xie Yichen Xie Email: yichenxie0928@gmail.com Website: https://yichen928.github.io/ Advisor(s): Masayoshi Tomizuka Research Blurb: My research focuses on building multimodal foundation models and world models that understand and interact with complex physical environments. I aim to develop unified representations across modalities, enabling AI systems to reason over space, time, and dynamics toward general-purpose embodied intelligence. What's next: Research Scientist at Luma AI Yigit Efe Erginbas Yigit Efe Erginbas Email: erginbas@berkeley.edu Website: https://www.linkedin.com/in/erginbas/ Advisor(s): Kannan Ramchandran, Thomas A. Courtade Research Blurb: My PhD research spans two threads: online learning in large-scale markets, and interpretability of large machine learning models. In the first, I work on sequential decision-making with applications to recommendation, pricing, and assortment selection. My focus is on designing algorithms with provable guarantees for welfare maximization, revenue maximization, and stability. In the second, I develop scalable attribution methods that exploit the sparse, low-degree structure of real-world interactions, using tools from signal processing and information theory. More recently, I have been exploring principled ways to evaluate the faithfulness of model self-explanations. What's next: Researcher at Hudson River Trading's AI Labs (HAIL) Yiheng Li Yiheng Li Email: yhli@berkeley.edu Website: https://Yihengli.com Advisor(s): Masayoshi Tomizuka Research Blurb: I am working on vision world modeling, with prior experience in diffusion model's efficiency as well as in autonomous driving. What's next: Research Scientist at Waymo Zhe Fu Zhe Fu Email: zhefu@berkeley.edu Website: https://fu-zhe.com/ Advisor(s): Alexandre Bayen Research Blurb: My research focuses on physics-informed learning and control for mixed-autonomy systems, with applications in transportation. I design physics-informed neural networks to learn solutions of nonlinear partial differential equations, enabling accurate and data-efficient prediction of traffic dynamics. Building on these models, I develop both model-based and learning-based control strategies that coordinate automated vehicles to improve system-level performance. My work bridges machine learning, control, and real-world deployment, and has been validated in large-scale field experiments. More broadly, I aim to advance trustworthy, interpretable AI for decision-making in complex, real-world systems. What's next: I will be an Energy Fellow at Stanford after graduation. Also looking for Faculty, or research scientist positions in AI, control, and autonomy.

BAIR Blog85

Intelligence is Free, Now What? Data Systems for, of, and by Agents

... government of the people, by the people, for the people ... — Abraham Lincoln, Gettysburg Address (1863) The cost of AI is dropping rapidly. GPT-4-class capabilities cost roughly $30 per million tokens in early 2023; today the same runs under $1 , and some providers are pushing costs below $0.10 . Across benchmarks, inference prices have fallen between 9x and 900x per year , with a median decline near 50x. Even frontier models are getting dramatically cheaper each generation, with open-source models following closely behind. And crucially, even if “Nobel-Prize-winning genius-level” intelligence isn’t here yet, the intelligence that suffices for the vast majority of knowledge work is here today, and getting cheaper by the month. At this rate, we are soon entering the era of virtually free intelligence —the kind that is more than enough for everyday knowledge work. A cartoon database character and an AI robot agent holding hands Disclosure: This post is a perspective led by Aditya G. Parameswaran —an Associate Professor of EECS and co-director of the EPIC Data Lab at UC Berkeley—together with his collaborators. It is part landscape survey and part perspective, and several of the research directions discussed below (including agentic speculation, structured memory, and synthesizing custom data systems from scratch) draw on the authors' own ongoing work. So, what does this new era of near-free intelligence mean for data systems? We believe three new challenges—and opportunities—stem from near-zero inference costs: Data Systems For Agents. Agents will soon become the dominant workload for data systems—with swarms of agents spun up in response to each end-user request. Given differences in characteristics between agents and humans—or applications acting on their behalf— how should we redesign data systems for such agentic users? Data Systems Of Agents. As agents start taking on the bulk of knowledge work, a new substrate is needed for thousands of agents to manage state over long-running tasks, coordinate and reach consensus, and deal with failures. What do data systems that reliably and efficiently run and manage agent swarms look like? Data Systems By Agents. Agents are rapidly becoming capable of synthesizing entire data systems in one go—meaning we can rebuild custom systems for each new workload. Verifying that such systems match intended behavior is a challenge. What does it take to let agents synthesize data systems we can actually trust? A database character and a robot agent holding up a triangle labeled 'of', 'for', and 'by' Data Systems For, Of, and By Agents Next, we will discuss each in more detail, followed by discussing the intertwined future of data systems and agents, especially as the three challenges intersect. Data Systems For Agents An agent querying a database doesn’t behave like a person or a BI tool. It performs what we call agentic speculation : a high-volume, heterogeneous stream of work spanning schema introspection, columnar exploration, partial and then full query formulation. With multiple agents each exploring portions of the hypothesis space, each user request could amount to 1000s of individual SQL queries. Now, users can issue ‘high-level’ data tasks, e.g., root-cause analysis—e.g., ‘why did coffee sales in Berkeley drop this year’—or exploratory cohort analysis—e.g., ‘which user segments are most likely to churn next quarter’—each involving a combinatorial space of potential joins, aggregations, and filter combinations. An agent sending many SELECT SQL queries to a database and receiving results back Data Systems Redesigned to More Effectively Support Agentic Speculation The requests from these agents have various opportunities for optimization. For instance, on a text-to-SQL benchmark with multiple agents attempting each task, only 10-20% of the sub-plans are distinct. Thus, 80-90% of sub-queries perform duplicate work. The same experiments show task success rates significantly increasing with more agentic attempts—so the redundancy is actually helpful. But from the data system perspective it’s wasted work. An agent-first data system can exploit such properties to help agents make progress faster. It can reuse results across overlapping sub-plans, drawing on ideas from decades-old literature on multi-query optimization and shared scans . Or the data system can try to satisfice , returning approximate answers that are good enough for agents to make progress, leveraging work from the AQP literature —or streaming the results of the final or intermediate operators to help agents decide if seeing the rest is necessary or helpful. Another opportunity here is to rethink the query interface entirely: instead of agents issuing a single SQL query at a time, they could instead issue a batch of queries, each with its own approximation requirements. Since enumerating an exponential search space (as in the root cause or cohort analysis examples above) isn’t a good use of agentic reasoning ability, perhaps data systems should support higher-level primitives rather than requiring agents to list each SQL query explicitly. One idea here is to draw on DBT-style Jinja macros to provide looping-based primitives for agents to interact with data systems. A swarm of AI agents working at laptops A Caffeinated Army of Agents Ready to Tirelessly Complete Your Data Tasks A final opportunity here is to stop thinking of data systems as passive executors of queries; data systems could be proactive , as they possess more grounding in data and system characteristics that agents may lack a priori—they could steer agents in different directions, provide results for related queries, and also provide performance-level feedback (e.g., instead of executing an expensive query, the system could first provide the agent a latency estimate). The reason we can do this now as opposed to the past is that an agent can accept any form of textual feedback and isn’t expecting a strict SQL query result. In fact, the data system could also prepare both materialized and virtual views for an agent in advance, provided to the agent as part of context, as this may be cheaper or more effective than having an agent author or use them. Data Systems Of Agents Previously, we focused on how agents interact with data systems. Now, we consider everything else agents need to keep working: where they live, how they remember, how they coordinate with each other, and how they deal with failures of each other. This agentic substrate is separate from the inference stack powering raw intelligence. However, the inference stack itself is being abstracted away through APIs (e.g., from OpenAI or Anthropic), or, for open-weight models, through serving frameworks that hide low-level details. So far, the agentic substrate has been managed through harnesses like Claude Code and Codex , coupled with various mechanisms to store and retrieve memory. First, on the memory front, the current wisdom is that files are all you need ; agents write to unstructured markdown (MD) files, which can then be searched using grep, or via embedding-based retrieval. In fact, many argue that the solution to continual learning is having agents consume a lot (e.g., an entire codebase, slack, company wikis, …) and then write their learnings into MD files, which are then retrieved selectively on demand. Indeed, file systems, bash scripting, and MD files are and will still be important for agents. However, at scale, when agents are doing the vast majority of knowledge work, this approach will no longer be effective. Given limited context windows, retrieving all MD file fragments that may be relevant and stuffing it into the context will break down at some point. Even if context windows continue to grow, there are latency benefits to not put all information into context — and in many cases, e.g., when knowledge work involves interacting with large databases or code bases, it will be infeasible to serialize all relevant data into context. A swarm of robot agents holding hands, each drawing state from a single large shared database platform below them Data Systems As A Substrate for Multi-Agent Swarms One could use a knowledge graph representation , but knowledge graphs suffer from the same limitations as unstructured MD-based memory due to their lack of structured search. What one needs is to be able to retrieve only memory that is pertinent to the task, across multiple attributes (or facets) of interest. For example, an agent debugging a flaky test should be able to pull only the memories tagged with the relevant module, language, framework, and failure mode—rather retrieving based on keywords or embedding similarity. A separate issue is what to actually retrieve; raw agent traces with mistakes are not very useful as they will induce agents to repeat the same mistake—instead, we want the retrieved memory to be corrective. We recently explored a related notion of structured memory , where we organize memory across various attributes, each of which could be set as * to indicate universal applicability, or set as a list of values to be matched. For a data agent, the dimensions could include the columns and tables, type of operation, and finally, open-ended natural-language corrective instructions. So, we could include memory that only applies to a given type of operation (e.g., ‘when performing date-time operations, use fiscal year as opposed to calendar year conventions’), or a given table (e.g., ‘column product_cleaned is preferred over column product when querying on product name’). One open question is defining an application-specific structured memory —or what others have called world models for memory . We believe this is akin to defining a schema for each application—and perhaps agents themselves can help us define and refine it over time. Diagram showing corrective knowledge stored with structured attributes (SQL keywords, tables, columns, data type) and retrieved by matching the features of a new agent query One Possible Way To Store and Retrieve Structured Knowledge [From Here] Structured memory will be useful also for evolutionary frameworks to effectively manage search spaces. Indeed, storing, structuring, and mining large volumes of single and multi-agent traces can help future agents become much more efficient—potentially enabling effective recursive self-improvement through structured memory-based mechanisms. Another challenge is to support concurrent edits to shared memory, and concurrent edits in general, when there are many agents performing transformations. While there have been some useful attempts at supporting multiversioning and copy-on-write semantics , it isn’t clear that such techniques will suffice when thousands of agents are attempting to edit shared state at the same time. For instance, when agents are trying various potential transactions in response to a user request, the effects of the vast majority of these transactions need to be rolled back—with only the one ‘correct’ transaction’s result persisting. Work on supporting exactly-once semantics is relevant here, as are underlying techniques based on CRDTs and operational transformation. For updates to fuzzy mechanisms such as memory, we may be able to sacrifice on consistency for perfect correctness in the interest of latency. While agents can reason about semantics to compensate or roll back their actions to eventually finalize most tasks, the primary challenge lies in the degree to which they step on each other’s toes during the process. An important failure mode to be avoided is a form of “livelock,” where incessant compensating actions prevent any meaningful progress. Beyond shared state, other concerns emerge when trying to support an army of agents, including what to do when agents fail, how agents should communicate with each other (directly or through intermediate shared state), and how we should deal with straggler agents. There have been some developments in supporting durable multi-agent execution, such as Temporal , but it remains to be seen if such solutions will apply at scale across thousands of agents. On the topic of communication, we need mechanisms to enable agents to negotiate with each other. Imagine four developer agents attempting to reach consensus on a shared schema, with distinct but overlapping objectives. In a human setting, this would involve iterative discussion and compromise; for agentic swarms, we must define the mechanisms that allow them to converge on a design that reflects the underlying goals of their respective principals. Or if agents are all requiring access to a limited resource, again communication will be necessary. It remains to be seen if this is best done via centralized coordination, or if a decentralized approach is necessary. Data Systems By Agents Finally, if intelligence is effectively free, then we can employ this intelligence to synthesize new data systems from scratch. Indeed, in many settings, general-purpose data systems may be overkill, as they have to support every schema, query, and hardware target. Given a workload, recent work, including Bespoke OLAP and GenDB , has shown that one can use an agentic pipeline to synthesize a complete, workload-specific analytical engine—in minutes to a few hours, at a cost of a few dollars. The engines are disposable: when the workload shifts, one can simply regenerate them. Analogously, our work has shown that one can synthesize custom key-value stores from scratch, targeted to the workload. In fact, modern IDEs, such as Kiro , elevate specifications for systems development to be a first-class citizen. A robot agent with a hammer and chisel carving a database character out of a block of stone Agents Can Synthesize Custom Data Systems From Scratch The main issue, however, is that specifications are typically imperfect, and don’t cover all corner cases. Present-day agents will exploit the missing specifications to reward-hack their way to a high performance metric. In our custom key-value store work, we found that one way to alleviate this is to have auxiliary verification agents trying to generate test cases that catch the exploitation of corner cases, essentially expanding the specification. Yet another approach is to both generate a system and a proof for its correctness together, for which we have found some early success , but more needs to be done to solidify the approach. Further, it remains to be seen what is the best way to solicit human-written specifications for a system—can this be done in an iterative, human-in-the-loop manner, as opposed to a one-shot, incomplete one. Indeed, human-written specifications are incomplete even for manually authored software, so one would expect that future agents that are more aligned will increasingly exercise better judgement when making design decisions. Pipeline diagram where a system builder provides a specification, planner and coder agents generate code, the code is evaluated for correctness and performance, and critic and auditor agents provide feedback and catch reward hacking One Possible Data System Synthesis Pipeline [From Here] Other questions here involve testing whether starting from a mature system (e.g., Postgres) and removing components/functionality can lead to higher performance or more user trust. Separately, is there an opportunity to make the design composable, comprising various verified components that are mixed and matched given a workload? For example, perhaps the workload hasn’t changed enough for the storage layer to be updated, but perhaps the query optimizer requires changes. A perhaps more viable proposition involves employing agents coupled with proof systems to target critical parts of the code associated with formal proofs, rather than doing so for the entire system. A final opportunity here is to move away from the traditional data systems stack with clearly-defined interfaces (e.g., parser, query optimizer, storage manager, …) — that were each largely the prerogative of a single human team to manage. Instead, agents can find new ways to “blend” these components together, perhaps identifying new optimization opportunities as a result. Agents can also fill in missing gaps in functionality to make existing systems much more feature-complete, or reach feature-parity with other competing systems—or analogously, continuously refining open-source systems in response to feature requests or issues (perhaps filed by other agents!) Doing so in a way that prioritizes correctness, long-term maintenance, and human interpretability will be a challenge. Looking Further Ahead In the era of near-free intelligence, data systems matter more than ever. As agents take on the bulk of knowledge work, the workload for data systems will change, the substrate they need to run on will have to be built, and increasingly, they will participate in designing data systems themselves. Each of these shifts opens up a new, exciting research agenda. A half-database, half-robot character next to a yin-yang symbol formed by a database and a robot agent Co-Evolution of Data Systems and Agents Looking further out, the boundaries between agents and data systems will likely start to blur. For instance, agents may design the data systems they themselves run on, defining both the interfaces as well as the system components underneath. Both the interfaces and internals can be evolved over time by agents in a form of recursive self-improvement. There is also an opportunity to rethink data systems as a holistic source of truth for the entirety of relevant state: including raw data, memory, and coordination state, further erasing the distinctions between the data that is being queried by agents and data generated as a result of agentic activity. Finally, data systems may themselves incorporate agentic components, fundamentally evolving from passive computation engines into intelligent, proactive, self-optimizing architectures. It is hard to predict what the future may hold. We’re in for a wild ride! Acknowledgments The perspective and ongoing work described in this post are the product of joint research and many discussions with wonderful collaborators at the EPIC Data Lab , Data Systems & Foundations group, and the broader Berkeley AI-Systems community. Thank you all! BibTex for this post: @misc { intelligence-is-free-blog , title = {Intelligence is Free, Now What? Data Systems for, of, and by Agents} , author = {Aditya G. Parameswaran and Shubham Agarwal and Kerem Akillioglu and Shreya Shankar and Sepanta Zeighami and Rishabh Iyer and Matei Zaharia and Alvin Cheung and Natacha Crooks and Joseph Gonzalez and Joseph Hellerstein and Ion Stoica} , howpublished = {\url{https://bair.berkeley.edu/blog/2026/07/07/intelligence-is-free-now-what/}} , year = {2026} }

BAIR Blog79

Teaching LLMs to Update Beliefs for Efficient Long-Horizon Interaction

ABBEL overview Overview of ABBEL compared to traditional recursive summarization. Beliefs replace the full interaction history as the agent’s working context, and belief grading improves performance by supervising the contents of each belief state.. As task horizons grow, LLM contexts can’t scale forever. Self-summarization enables concise, interpretable contexts, but at a significant performance cost, especially for human assistance domains where high quality data is scarce, e.g., collaborative code generation. We address this with ABBEL : a framework that isolates and supervises the information content of summaries in the form of natural-language belief states. Motivation: the cost of recursive summarization For language models to effectively assist with increasingly complex tasks such as software development, they must be able to interact with us over hundreds or even thousands of steps. For such long tasks, it is impractical to keep the history of the entire interaction in context. The heuristic approach used so far has been summary generation, sometimes called context compaction. For example, Cursor’s latest model composer 2.5 uses compaction during training for improved performance ( Cassano et al., 2026 ). Alongside composer, Grandcode ( DeepReinforce et al., 2026 ), the first system to consistently beat all human competitors in online coding competitions, despite using one of the newest efficient attention models (Qwen 3.5-397B), 1 still found it necessary to employ context summarization. But compaction has a problem. Despite seemingly low performance gaps in benchmarks, model servers like Cursor continue to recommend that users avoid compaction with their coding assistants in the middle of a task ( Heule et al., 2026 ). To understand why, see below the performance over RL fine-tuning of a Context summary model compared to full context models in Combination Lock, a Wordle-like game that allows up to 16 guesses. 2 Though both model types improve over the course of training, the summary model never closes the gap. Average attempts to guess target word with context summary vs full context policies over training Fig. 1: Average attempts to guess the target word on Combination Lock over RL fine-tuning (lower is better). Context-summary policies improve with training but do not close the gap to full-context policies. Making models self-summarize while completing a task increases the complexity of the learning problem. While this could typically be addressed by training with more data, the performance degradation observed in real world interactive settings likely arises from the difficulty we have in creating and using human simulators effectively to generate high quality training environments ( Lin et al., 2025 , Tomlin et al., 2025 ). Thus, the better you can learn to summarize on the limited and messy multiturn interaction trajectories you can collect, the better off your model will be for downstream users. ABBEL: acting through belief bottlenecks ABBEL belief grading diagram Fig. 2: Autoencoder-inspired belief grading. The model encodes prior belief, action and observation (b t , a t , o t ) into posterior belief b t+1 and is rewarded for how well select information from the history can be reconstructed from that belief. To address poor learning efficiency, we isolate the summary generation task. Drawing inspiration from recursive Bayesian estimation, we formulate summaries as belief states, which we periodically prompt the model to update based on new information. 3 ABBEL overview animation frame ‹ Prev Pause Next › 1 / 16 Fig. 3: ABBEL rollout. Belief updates from the latest observation alternate with action selection conditioned only on the current posterior belief. Belief grading We then extract and supervise the contents of the belief states (Fig. 2, Belief Grading). Belief grading can be thought of as adding an auxiliary RL task, using heuristics designed to capture what makes a good belief as the reward. An example heuristic for coding could be shorter is better, but closer to being able to reconstruct the git diff is also better, so balancing these would yield a good belief. In domains where good heuristics are hard to define, we propose a general autoencoding-inspired grading function, which treats the current language model π θ as both encoder and decoder of information from the history, and the belief states as the codes. We grade each belief b t+1 by how well it can be used by the current model π θ to reconstruct the most recent observation o t : Eq. 1: Reconstruction grading objective Eq. 1: Reconstruction grading objective. Here b t+1 is the updated belief, o t the latest observation, a t the action just taken, b t the prior belief, p I the task prompt, and π θ the current model. Higher grades reward beliefs that retain information needed to decode the latest observation. What do we gain by grading beliefs? Collaborative coding on CollabBench We demonstrate the utility of belief grading in our motivating domain of human-driven assistive coding, with the CollabBench environment from Sweet-RL ( Zhou et al., 2025 ). CollabBench collaborative coding environment Fig. 4: CollabBench collaborative coding environment. The agent asks clarifying questions, then submits a function scored against hidden unit tests. We see that with the general reconstruction-based belief grading function we reduce the performance gap from full context models by about 50%, and train in 50% fewer steps compared to training models to summarize without belief grading (no BG). After training, ABBEL still uses significantly less memory than the full context setting, as measured by the peak context token length (Peak Tokens). Model Test Pass Rate ↑ Success Rate ↑ Peak Tokens × 10² ↓ Training Steps ↓ Full Context 0.52±0.02 0.39±0.02 14.08±0.55 100 ABBEL (no BG) 0.46±0.02 0.31±0.02 4.20±0.37 100 ABBEL-rec-BG 0.48±0.01 0.36±0.01 6.01±0.33 50 Fig. 5: CollabBench results. With reconstruction belief grading, ABBEL-rec-BG recovers about half the gap to full context while using fewer peak tokens, and trains in 50 steps instead of 100. Combination Lock Additionally, in CombinationLock, we demonstrate that ABBEL with a belief grader which leverages domain knowledge (by computing useful statistics over the history and checking that they can be reconstructed from the belief state), enables even higher learning efficiency than full context (FULL CTX) models. Average Attempts to guess target word ABBEL Fig. 6: Average attempts to guess the target word on Combination Lock (lower is better). With domain-knowledge belief grading, ABBEL approaches or exceeds FULL CTX in this setting; without belief grading, learning is slower. Multi-objective question answering In a third environment, multi-objective question answering (from MEM1 Zhang et al., 2025 , a recent work which performed end-to-end optimization in a modified version of typical recursive summarization), we demonstrate the utility of isolating belief states from reasoning, by showing that a Peak Belief length Penalty (more details in paper) significantly reduces memory usage with minimal performance degradation, unlike is commonly observed when penalizing reasoning lengths ( Arora et al., 2025 ). Performance and memory usage in multi QA Fig. 7: Exact-match score and peak memory versus number of objectives in multi-objective QA. ABBEL with a peak belief penalty (PBP) maintains comparable performance while using less memory than MEM1 and ABBEL without PBP in this evaluation. Related work Alternative solutions to managing long contexts involve different tradeoffs, and are worth considering depending on the requirements of a deployed system. Context compression methods generate dense representations which, while computationally efficient, sacrifice human-understandability ( Kontonis et al., 2026 , Eyuboglu et al., 2025 , Gupta et al., 2025 , Chevalier et al., 2023 , Deng et al., 2025 , Deng et al., 2025 , Bulatov et al., 2022 ). Hand-designed summarization prompts ( Wang et al., 2025 , Örwall et al., 2025 , Starace et al., 2025 ) and pruning strategies ( Jiang et al., 2024 ) specific to target environments require expert human knowledge and don’t allow an agent to learn what to remember as part of its decision-making strategy. Methods that process long contexts into an external memory store ( Packer et al., 2023 , Xu et al., 2025 ) for the agents or subagents to query ( Zhang et al., 2025 ) are complementary, as they may benefit from better next context creation through summarization training. We would like to point out some exciting works in the space of general recursive summarization focused on math ( Wu et al., 2026 ), reasoning with belief generation ( Zhou et al., 2025 ), competitive coding with a distilled summarization module using similar autoencoding objectives to our general belief grader ( DeepReinforce et al., 2026 ), and adding continuous features to summaries ( Kontonis et al., 2026 ). What’s next for better memory? Many more possibilities are enabled through using explicit belief states as information bottlenecks for multi-step interaction. You could reward actions based on their effect on the belief state to guide exploration, transmit the explicit belief states for better communication between agents, or even improve user controllability by directly modifying the memories on which the agents’ decisions are based. Some forms of information, e.g., what a person looks like, are not represented well by text alone. A continuously learning system will also have to capture such information. Additionally, if we want a system to learn to communicate in a brand new language or to play a brand new game better than any person in the world, the skills accumulated over the lifetime of conversations or games must be stored in a very compressed form, essentially taking on the role of the weights of the model itself. More powerful systems will likely utilize a combination of multiple forms of memory, where the contents of the context may correspond to working memory while other approaches are used for short and long-term memory. How to instantiate these other forms of memory, for instance via test-time training, adapter memories, continuous context memories, or some combination thereof, presents an exciting challenge. Acknowledgements Acknowledgements: We would like to thank Alane Suhr and Kartik Goyal for advising this research as well as Ethan Mendes , David He , Jitesh Jain , and Nicholas Tomlin for comments on early drafts of this post. We would like to thank the MEM1 authors for their email correspondence and for sharing private reviewer feedback which we found particularly insightful. Citation If abbel was inspiring for your future work, please cite us with this! And here is some advice for doing similar research! @misc { lidayan2026abbellearningnaturallanguagebelief , title = {ABBEL: Learning Natural-Language Belief States for Memory-Efficient Interaction} , author = {Aly Lidayan and Jakob Bjorner and Satvik Golechha and Kartik Goyal and Alane Suhr} , year = {2026} , eprint = {2512.20111} , archivePrefix = {arXiv} , primaryClass = {cs.CL} , url = {https://arxiv.org/abs/2512.20111} , } With newer models the number of tokens till 50% compute spend is on attention gets much larger than 25K. Interleaving linear attention alternatives with full attention as is done with gpt-oss and DeepSeekv4, results in massive flops reductions for the attention computation. For example with DeepSeekv4-Pro (1.6T A49B) it requires nearly 450 thousand tokens to reach the 50% tradeoff point. Grandcode uses Qwen-3.5-397B-A17B a model which hits 50% FLOPs for attention at ~150 thousand tokens. ↩ This setting is technically solvable with much more computationally effective tools, but serves as a flexible test bed to study properties of recursive summarization. Bertsimas et al., 2022 , showed that an exact solution for the wordle game instantiated with the original vocabulary of the javascript game can be found with dynamic programming, but evidently the general formulation of wordle as a guessing game on K letters with L attempts and some dictionary of valid words and correct words D is NP hard to determine the minimal number of moves required. ↩ In practice there is an O(N/K) overhead cost for summary. N is the total number of actions. K is the number of actions till summarization is triggered. This is necessarily true for any summary approach. For ease of illustration this gif uses K = 1. In our experiments, to put more emphasis on summarization weaknesses we also use K=1. In practice overhead is small as K can be chosen to be near the efficient hardware limit. ↩

BAIR Blog78

From CUDA to MLX: How K-Search Brings Decades of Kernel Expertise to Apple Silicon

Kernel knowledge transfer from CUDA to MLX Figure 1: CUDA-to-MLX optimization translation map. CUDA optimization knowledge can be translated into architecture-native MLX strategies rather than copied instruction-for-instruction. We face a new epoch in computing. Hardware is changing rapidly — not just faster GPUs, but a growing range of chips from different vendors, each with its own architecture and often tailored to specific AI workloads. Software is changing just as fast, and AI coding tools now generate in minutes what took months of effort a few years ago. With so much of computing now centered on AI, GPU kernels are a crucial component of its success. These are the low-level programs that run inside the GPU, and writing efficient ones is far from obvious — it takes years of expertise to get right. Transferring a kernel from one vendor’s hardware to another is harder still, and often means rediscovering the same optimizations from scratch. The CUDA ecosystem, for example, has accumulated decades of hard-won kernel expertise: hand-tuned implementations of attention, state space models, and other critical operations representing thousands of engineering hours. Newer hardware ecosystems (Apple Silicon, custom AI accelerators, and others) are growing fast but lack this depth. In this work we ask whether that expertise can be transferred automatically. We built on K-Search , an evolutionary kernel search framework introduced by Cao et al. at Berkeley Sky Lab that uses AI to optimize GPU kernels, and extended it with a backend for MLX — Apple’s machine-learning framework for its own Apple Silicon chips. We developed a novel structured CUDA-to-MLX translation layer that lets K-Search take existing CUDA kernels as a knowledge base and adapt them into high-quality GPU kernels for Apple Silicon, rather than rebuilding from scratch. We show that our approach reaches near-expert level performance on Apple Silicon with 0.97x speedup compared to the native MLX Attention kernel, and up to a 20x prefill speedup over the community mlx-lm implementation on the Mamba SSM kernel; we report the numbers, and how much of the gain comes from the translation layer, in the sections below. Although we focus on MLX kernels for Apple Silicon, the method is not specific to MLX and applies to any ecosystem where CUDA expertise is transferable. Why MLX? Apple’s MLX framework has seen remarkable adoption since late 2023. With Apple Silicon in hundreds of millions of MacBooks and Mac Studios, MLX enables local AI inference without cloud costs. The unified memory architecture makes it especially attractive for mid-sized models (7B–70B parameters on M series chips). Yet beneath this momentum lies a significant gap: many performance-critical kernels that the NVIDIA ecosystem takes for granted: paged attention, optimized SSM scan kernels, fused MoE routing are either absent or naive without hardware-specific tuning. MLX runs models correctly but often leaves significant performance on the table. This gap is what motivates the rest of this post. What is K-Search? K-Search is an evolutionary kernel optimization framework originally developed by our first author Shiyi Cao at UC Berkeley Sky Lab. Given a naive kernel and a hardware specification, it runs an iterative optimization loop: an LLM reasons about which optimizations to try next, a code-writing model generates candidate kernels, and those candidates are compiled and benchmarked on real hardware. Measurements feed back into the search, which keeps refining, pursuing promising directions and dropping dead ends until performance converges. Pseudocode for K-Search via co-evolving world models Algorithm 1: K-Search via co-evolving world models. The search alternates between selecting the most promising action, instantiating and evaluating code until improvement stagnates, and evolving the world model through insert, update, and prune operations. Adapted from Cao et al. (2026) . Search is grounded by a Spec: a domain-specific document encoding hardware rules, optimization patterns, and mathematical constraints which keeps generated code from hallucinating invalid primitives and ensures candidates will actually compile and run efficiently. In our runs, a single model (Gemini 3.5 Pro Preview) plays both roles: it maintains the reasoning state and writes the kernels. The reasoning half is prompted as a “GPU kernel performance engineer” and asked to work through a fixed analysis before proposing anything: classify the kernel (reduction, scan, attention/softmax, …), rewrite the reference computation in canonical form, map out data layout and access patterns, and hypothesize the likely bottleneck (bandwidth, latency, compute, or synchronization) in each runtime regime. Only then does it emit candidate optimizations, each as a single change implementable in one iteration. We call the persistent reasoning state a world model . Rather than a flat list of things to try, it is a decision (prefix) tree: each root→leaf path composes a full optimization plan, and sibling branches are competing alternatives. Every node is scored — an overall_rating in [0, 10], a confidence in [0, 1], and per-node impacts on memory bandwidth, register pressure, and compute/hardware fit — so the search can rank partial plans and expand the most promising ones. The tree persists and grows across rounds: refining an idea adds a child node rather than overwriting its parent, and if the best score fails to improve for a few rounds (a stagnation window) the search backs off to explore an alternative branch. A single node, as it appears mid-run on the attention kernel, looks like this: { "action" : "Replace the threadgroup-memory softmax reduction with a register-only reduction: each SIMD group owns 8 query rows and reduces across lanes with simd_shuffle_xor, removing a threadgroup_barrier." , "difficulty_1_to_5" : 4 , "impacts" : { "memory_bandwidth" : 8 , "register_pressure" : 4 , // risk: spill if Br > 8 "compute_hw_fit" : 9 // SIMD width 32 ; keep tile 8 x 8 }, "overall_rating_0_to_10" : 8 , "confidence_0_to_1" : 0.7 } Listing 1: Example K-Search world-model node. Each candidate optimization records a concrete action, estimated hardware impacts, an overall priority rating, and the model's confidence. Overview of the K-Search loop Figure 2: Overview of K-Search. The framework operates on a Search State $S_t$ structured as a search tree. The tree consists of Closed nodes (blue, visited states with attached program like $x_{12}$) and a Frontier of Open nodes (orange, pending hypotheses like $u_{13}$). The workflow iterates through three phases: (1) Action Selection , where the most promising action node is retrieved from the frontier based on world model estimated priority score $V$; (2) Local Refinement , where a stochastic policy $\pi_{\mathrm{code}}$ samples concrete implementations until stagnation; and (3) World Model Update , where the LLM reasons over the trajectory to update the search tree via Insert (adding new actions), Update (adjusting $V$, e.g., $u_{11}$ dropping from 0.9 to 0.6), and Prune (removing less promising nodes like $u_{10}$). The original K-Search paper evaluated this search strategy on CUDA kernels from FlashInfer. Across GQA decode, MLA decode, MLA prefill, and MoE, K-Search improved more consistently than OpenEvolve and ShinkaEvolve over the same 120-iteration budget. These results establish the search framework we build on here; the remainder of this post asks whether its optimization knowledge can transfer beyond CUDA. K-Search benchmark results compared with OpenEvolve and ShinkaEvolve Figure 3: Main results from the original K-Search paper. Across three runs, K-Search achieves stronger best-so-far search scores, per-workload kernel performance, and speedup distributions than OpenEvolve and ShinkaEvolve on four FlashInfer CUDA kernels. Reproduced exactly from Cao et al. (2026) . Building an MLX backend To bring K-Search to Apple Silicon, we first built a native MLX backend. We implemented a full MLX-specific task adapter for K-Search, including: An MLX task backend in k_search/tasks/ handling kernel compilation and execution on Apple Silicon via MLX’s Metal/C++ APIs. Updated kernel generator prompts for writing and modifying Metal/MLX kernels. MLX-specific benchmarking integration using mlx.core measurement utilities. Translating CUDA expertise to MLX However, the more interesting challenge was not simply running K-Search on MLX. The key insight is that expert CUDA kernels encode decades of optimization knowledge that is transferable to Apple GPU if you can bridge the conceptual gap. Simply handing an LLM a CUDA kernel and asking it to port it is not enough: without deep hardware context, it produces code that is syntactically valid but architecturally wrong (wrong tile sizes, invalid primitives, mismatched memory assumptions). Our translation layer consists of: Concept mapping tables: A structured glossary of CUDA primitives and their MLX/Metal equivalents with hard constraints. For example: __shared__ maps to Metal threadgroup memory but with a hard 32 KB limit (vs. NVIDIA’s 48 KB) warp_reduce maps to MMA (preferred) __syncthreads() becomes threadgroup_barrier(mem_flags::mem_tg) H100’s ~3.35 TB/s HBM3 maps to M3 Max’s ~400 GB/s unified DRAM a bandwidth difference that reshapes which optimizations are worth pursuing. MLX-specific hints and patterns: Concrete code-level patterns for operations with no direct CUDA equivalent, such as register-based row reductions using simd_shuffle_xor in an 8×8 MMA tile layout, or the “exp2 trick” (replacing $exp(x)$ with $exp_2(x \log_2 e)$) for faster softmax on Apple’s fast $exp_2$ hardware instruction. Reusable assertions: Expert kernel behaviors reframed as properties the evolutionary search must preserve, rather than code to copy. Matching expert kernel performance: the Attention kernel We evaluate three configurations of an MLX attention kernel for Apple Silicon: (1) a naive baseline, (2) pure evolution with no additional provided context, and (3) a full context translation layer, which supplies the optimizer with architecture-specific implementation knowledge extracted from high-performance kernels (e.g., FlashAttention-2), letting the evolutionary search reason about implementation strategies rather than starting from a naive kernel. Together, these three configurations let us isolate the exact impact of the translation layer. Performance scaling of the Attention Kernel through stacked optimizations Figure 4: Performance scaling of the Attention Kernel through stacked optimizations. The "Full Context" configuration successfully discovers and implements advanced strategies like double buffering and loop unrolling, achieving near-expert performance. The jump from 0.26× to 0.97× the speed of Apple’s state-of-the-art attention kernel — illustrates how much the translation layer matters. With full context, the evolved kernel independently discovers the key optimizations in FlashAttention 2: threadgroup memory tiling, online softmax, K-transposition for memory access, and the exp2 trick. The last of these replaces every softmax exponential with a base-2 exponential, \[e^x = 2^{x \log_2 e},\] which is exact and lets the kernel use Apple’s fast fast::exp2() hardware instruction directly instead of paying for a base conversion at runtime. A 20× faster prefill: the Mamba SSM kernel To evaluate whether K-Search generalizes beyond attention kernels, we applied it to the state-space model (SSM) kernel used by Mamba. Unlike attention, the computational bottleneck is a recurrent state update rather than a softmax, providing a substantially different optimization challenge. We compare the evolved implementation against the community MLX implementation (mlx-lm) and the PyTorch reference implementation (mamba.py) on an M1 Max. Evaluated on mamba-370m f16, M1 Max 64GB: Metric mlx-mamba (ours) mlx-lm (community) mamba.py Decode 152 tok/s 116 tok/s 40 tok/s Prefill L=512 5,751 tok/s 329 tok/s 1,089 tok/s Prefill L=1024 6,010 tok/s 327 tok/s 1,127 tok/s Prefill L=2048 6,612 tok/s 326 tok/s 1,092 tok/s Prefill L=4096 6,743 tok/s 339 tok/s 1,042 tok/s Table 1: Prefill and decode throughput on mamba-370m (f16, M1 Max 64GB). mlx-mamba (ours) reaches ~20× higher prefill throughput than the community mlx-lm baseline, while decode remains comparable. The ~20× prefill speedup over mlx-lm comes down to one difference: mlx-lm does not implement a parallel scan for the SSM. The state recurrence \[h_t = \bar{a}_t h_{t-1} + \bar{b}_t\] looks inherently sequential, but each step can be written as a pair $(\bar{a}_t, \bar{b}_t)$ under the associative combine \[(a_2, b_2) \circ (a_1, b_1) = \left(a_2 a_1,\ a_2 b_1 + b_2\right),\] which reproduces the recurrence exactly. Because the operator is associative, the whole sequence can be evaluated with a parallel (prefix) scan in $O(\log N)$ dependent steps instead of $O(N)$. mlx-lm skips this and processes tokens one at a time, leaving most of Apple Silicon’s compute idle; our evolved Metal kernel applies the scan and makes much fuller use of GPU throughput. The gain shows up in prefill, where the full sequence is available to scan in parallel, and not in single-token decode, where there is only one new token per step and no scan to parallelize — which is why the decode row is roughly flat while prefill is ~20×. mamba.py is slow on both prefill and decode because it is a PyTorch reference implementation that falls back to CPU or MPS on Apple Silicon, forgoing the hardware-specific optimizations that MLX’s Metal backend makes possible. What’s next? On the two kernels we studied, AI-driven evolutionary kernel search grounded in structured cross-platform translation knowledge reached near-expert performance on Apple Silicon without a team of GPU experts starting from scratch. We do not yet know how far this generalizes, but the result is encouraging. For us the main takeaway is that the bottleneck was not the LLM’s ability to write Metal code, but the quality of the context and constraints we gave it. Our CUDA translation layer converts existing NVIDIA kernel expertise into actionable guidance for Apple Silicon, and lets K-Search’s evolutionary search do the rest. We are actively extending this work in several directions: supporting new architectures, with current efforts focused on developing new kernels for the IBM Spyre AIU and broader hardware targets; adding more kernels such as paged attention and fused MoE routing; and improving integration with the K-Search evolution loop to make translation context even more automatic. Acknowledgements This work was carried out by IBM Research and builds on K-Search from the UC Berkeley Sky Lab ( Cao et al., 2026 ). We welcome collaboration and feedback from the MLX and broader AI systems communities. If you are working on kernel optimization for non-CUDA hardware, we would love to hear from you. Citation @article { cao2026k , title = {K-Search: LLM Kernel Generation via Co-Evolving Intrinsic World Model} , author = {Cao, Shiyi and Mao, Ziming and Gonzalez, Joseph E and Stoica, Ion} , journal = {arXiv preprint arXiv:2602.19128} , year = {2026} } Appendix: Try it yourself The MLX backend is built on top of the open-source K-Search repo, so the results here can be reproduced directly. The steps are: 1. Clone and install git clone https://github.com/caoshiyi/K-Search.git cd K-Search uv pip install openai wandb uv pip install git+https://github.com/caoshiyi/flashinfer-bench-ksearch.git 2. Set your credentials Open the relevant script under scripts/ and set three variables at the top: KSEARCH_ROOT = /path/to/K-Search API_KEY = your-llm-api-key 3. Run kernel search # Optimize Flash Attention on Apple Silicon (world-model mode) bash scripts/mac_flash_attention_wm.sh # Or a Mamba SSM kernel, e.g. the selective scan bash scripts/mamba_selective_scan_fwd_wm.sh Full CLI reference and documentation are in the README.

NVIDIA Blog81

NVIDIA GPU 如何助力加速 OpenAI 的 GPT-6 Astra Ultrafast

GPT-6 Astra Ultrafast 目前已在 OpenAI API 中,以及面向符合条件的 ChatGPT Work 和 Codex 用户开放。借助 OpenAI 模型中的推理优化,并利用 NVIDIA Blackwell 架构的能力,Ultrafast 的令牌生成速度最高可达 Astra Standard 模式的 8 倍。对于开发者,[…]

Hacker News 熱門68

我离开 OpenAI 是因为其文化已经崩坏

文章链接: https://www.theatlantic.com/technology/2026/10/openai-safety-team-resignation/688881/ 评论链接: https://news.ycombinator.com/item?id=49944227 得分:21 评论数:3

Hacker News 熱門59

Show HN: Made an open-source Lego AI generator

Hi there :-) New on HN, first time posting. Past year, around December, I started experimenting with making ChatGPT and Claude generate source code in LDraw language. This LDraw is literally an "assembly" language, a low-level programming language that describes how to assemble LEGO pieces together into models, one placement instruction at a time. When executed by specific tools, like e.g. LDView, LeoCAD, Studio... these instructions become LEGO CAD models, that can be interacted with, modified, etc. Or, in other words: one LDraw source file in .mpd or .ldr format is equivalent to one LEGO CAD model. So, the idea I had was: if I manage for maybe ChatGPT or Claude to generate high-quality LDraw source files... then, they would actually be generating high-quality LEGO CAD models, right? Then, after months of iterations and trying one thing after the other... it worked!!! Long story short: using GPT-6 Astra and Opus 5.5, I've managed to create a python toolset, instructions, and docs for agents in general. Now, these can be used by them to generate LDraw models. I've packed it all as a dockerized web app for others to try and experiment, with several providers (and agents) to choose from: OpenAI, Claude and OpenRouter. I'd really appreciate feedback and comments, let's see where this goes =) Comments URL: https://news.ycombinator.com/item?id=49937916 Points: 9 # Comments: 2

Hacker News 熱門60

Show HN: Use all Codex Plugins inside Pi

I just realized that codex now exposes local server endpoints for all plugins without extra auth. So you can just use them from any model or harness. Im soooo excited!!! One auth for everything! For Pi: pi install npm:@wileai/pi-codex-connector For any harness: npx -y @wileai/codex-connectors-mcp@latest Comments URL: https://news.ycombinator.com/item?id=49929381 Points: 5 # Comments: 0

Hacker News 熱門71

ChatGPT 中的网站

文章 URL: https://chatgpt.com/features/sites/ 评论 URL: https://news.ycombinator.com/item?id=49927747 得分:14 评论数:15

OpenAI Blog92

GPT-6 系列模型指南

了解初创公司如何选择 GPT-6 模型、调整推理力度、改进提示词和技能、协调工具,并为生产环境准备工作流。

arXiv cs.AI80

重构、练习、走向真实:具身智能体的引导式自我改进

在多样化任务中构建可靠的机器人能力,需要投入大量人力来开发和维护技能、设计奖励,并将感知与控制相结合。我们提出 Reconstruct, Practice, Go Real(RPG),这是一个无需更新模型权重即可实现机器人执行系统自主改进的框架。RPG 在离线数据集中识别操作能力,并在仿真环境中构建相关练习任务。在练习过程中,RPG 利用执行反馈、特权模拟器状态以及数据集中现有的视频来诊断失败原因。它会根据这些诊断结果开发新的可复用符号技能、改进现有技能,并修订系统提示词。跨任务评估会在保留候选修改及合并后的修订版本以供复用之前,对它们分别进行测试。在测试时,多模态 LLM 利用生成的系统提示词和技能库来协调感知与机器人控制。在22个操作任务的留出初始化条件下,RPG 将任务成功率从第一轮练习后的28.6%提升至15轮后的95.0%,超过了所有参与评估的基线方法,包括 ASPIRE(75.5%)和由 GPT-6 Astra Pro 驱动的 CaP-Agent0(60.0%)。经过统一的校准与硬件适配流程后,该冻结系统在全部30次实体实验中均取得成功,三个任务各进行10次实验。项目网站:https://rpg-robot.github.io/

Hacker News 熱門54

Show HN: Rhun, an open-source code editor written in assembly

I found that I'm not using even 1/3 of vim/vscode features anymore. That's wht I'm building rhun - a small code editor for Linux, Windows and Apple silicon Macs. It obviously has Vim mode, a terminal, Git diffs and a panel for Claude Code or Codex sessions. The editor and pixel renderer share an x86-64 assembly core. For Apple silicon, a build-time translator converts that core to AArch64, with separate platform adapters around it. The latest release can draft commit messages using a local Ollama model or an existing Claude Code or Codex subscription. It's a solo project, MIT licensed and still early. Comments URL: https://news.ycombinator.com/item?id=49926726 Points: 7 # Comments: 2

Hacker News 熱門67

GPT-Synopsys:前沿智能将彻底革新芯片设计

文章 URL: https://news.synopsys.com/2026-09-30-OpenAI-and-Synopsys-Announce-GPT-Synopsys-Frontier-Intelligence-to-Revolutionize-Chip-Design 评论 URL: https://news.ycombinator.com/item?id=49919910 积分:8 评论数:1

arXiv cs.AI76

从研究中学习:迈向智能体 Harness 的终身演化

语言智能体需要解决日益复杂的任务,因此对持续改进的需求不断增长。一种有前景的方法是在保持底层语言模型不变的同时,演化智能体 Harness——即负责管理工具使用、记忆管理和任务执行的软件。近期方法通过使用元编程智能体,根据执行反馈修改 Harness,从而实现这一过程的自动化。然而,依赖该智能体已有的知识和观察到的失败可能会限制探索,并使适应过程变得被动。受人类专家从研究文献中学习新解决方案的方式启发,我们提出了 ScholarEvolve,这是一种自动利用最新研究成果指导 Harness 演化的框架。ScholarEvolve 将 Harness 的演化方向组织成功能模块,并使用主题建模为每个模块识别不同的改进策略。该框架实现这些策略,并评估它们的组合,以提升任务性能。此外,该框架还设计为能够随着时间推移纳入新的论文,使研究进展推动主动的终身演化。实验表明,该方法在 AppWorld 和 Tau2-Bench 上均取得了性能提升。在 AppWorld Challenge 上,ScholarEvolve 将 Qwen3.5-27B 的任务目标完成率从 49.6% 提升至 63.6%;在 Tau2-Bench Telecom 上,将 GPT-5.4-mini 的 pass@1 从 72.7% 提升至 81.9%。

arXiv cs.AI81

SCB:用于评估语音到语音模型多轮推理能力的 SpeechConversationBench

语音到语音系统必须解决其要求在多轮对话中逐步显现的任务。我们推出 SpeechConversationBench(SCB),这是一个专门用于评估口语数学推理能力的基准,采用了 103 道经过分片处理的 GSM8K 题目。该框架比较三种条件:以单轮形式提供完整原题(full)、将所有信息分片拼接后一次性提供(concat),以及在多轮对话中逐步以语音披露信息(sharded)。我们报告了四种商业语音系统和 LEGO 在最终答案准确率方面的表现;LEGO 是由 SCBX Innovation Lab 团队内部开发的专有语音流水线,具备显式的对话上下文管理能力。与 concat 相比,四种商业系统在 sharded 条件下的准确率下降了 5.0 至 25.3 个百分点。LEGO 在三种条件下均达到 77.5% 的准确率,而 GPT-4o Realtime 在 sharded 条件下的准确率为 76.6%。这两个单轮基线有助于区分模型对问题重新表述的敏感性,以及增量式语音交互所带来的额外挑战。

arXiv cs.AI72

超越文本:基于LLM的多模态对话多维情绪评估

对话中的情绪识别已得到广泛研究,但将大型语言模型(LLM)应用于多模态对话中的连续维度情绪评估,仍基本处于探索阶段。我们提出了一个基于LLM的框架,在IEMOCAP上同时进行离散情绪识别和效价-唤醒度-支配度(VAD)维度评估,并依据SpeechCueLLM方法,将声学线索融入自然语言描述。我们在零样本提示、少样本提示和LoRA微调设置下,对涵盖LLaMA、GPT和Qwen系列的六个模型进行了评估。尽管GPT的规模更大,经过LoRA微调的LLaMA模型在两项任务上的表现均显著优于采用提示工程的GPT模型;我们认为,这一差距源于领域适配,而非模型容量。我们的最佳模型取得了0.7822的效价CCC,在IEMOCAP上达到了新的最先进水平。消融实验表明,文本化的音频描述能够显著提升较小模型的性能(加权F1提升3.5至3.6),但对最大模型的贡献很小,这说明当语言能力受限时,音频线索最具价值。VAD各维度之间的性能不对称性,与IEMOCAP标注结果中标注者一致性的层级高度相似。

arXiv cs.AI76

BELIEFRAG:让 Adaptive RAG 在不断演化的证据下具备状态感知能力

Adaptive RAG 使用置信度、相关性、支持度和检索质量等信号,来决定何时搜索或修正证据。然而,在多步检索中,这些局部信号必须结合起来,形成一个持久的视图,以明确当前证据支持什么、仍缺少什么,以及接下来应采取何种行动。现有方法通常将这些信号作为彼此独立的触发器使用,因而难以在整个轨迹中保持连贯的证据状态;我们将这一问题称为证据状态碎片化。我们提出 BELIEFRAG,这是一种闭环控制器,可显式更新关于充分性、可靠性、冲突、不确定性、证据缺口和获取成本的状态,然后在检索、查询重写、验证、回答、停止和拒答之间进行选择。在使用 gpt-oss-120b 的六个问答基准上,BELIEFRAG 的平均 token F1 达到 0.572,每个问题使用 3.89k 个 token;相比固定的迭代检索方法,其 F1 为 0.555,而 BELIEFRAG 使用的 token 数减少了 39%。同样的质量—成本模式也迁移到了 Qwen3-32B:BELIEFRAG 达到 0.552 F1,而迭代检索为 0.523,同时 token 使用量减少了 35%。分析表明,主要收益来自纠错式重新检索,而不仅仅是剪枝;同时,若干信念维度存在冗余,而经过校准的可回答性发挥了最重要的操作作用。校准能够提升相关证据来源之间的阈值稳定性,但来源分布变化仍可能使同一决策信号失效。

arXiv cs.AI80

DAGent: Evaluate-then-Grow Planning for Deep Research Agents

Deep research tasks require agents to navigate large knowledge spaces, synthesize evidence across many sources, and adapt their plans as findings emerge. Directed acyclic graph (DAG)-based multi-agent systems suit this setting because they support parallel execution and isolate each sub-task within a focused dependency context. Yet existing DAG-based agents instantiate a task-level plan before execution and repair the graph only after failures or missing evidence are observed. This Plan-then-Patch strategy is brittle for deep research: the system commits most strongly when its evidence is weakest, and later revisions waste computation on branches that should not have been planned. We propose DAGent, a DAG-based multi-agent framework with Evaluate-then-Grow incremental planning: an Orchestrator grows the task graph one batch at a time, conditioning each expansion on confidence and uncertainty signals from completed nodes. A hierarchical context layer propagates compact QueryDocs by default while preserving full execution traces for on-demand recall. The recorded DAG topology admits structural RL signals that outcome-only recipes cannot define; DAGRPO, a GRPO adaptation, injects topology-conditioned credit on Executor rollouts and a structural compliance regularization on Orchestrator plans. Across BrowseComp-Plus, GAIA, and xbench-DeepSearch, DAGent surpasses the strongest open-source baseline by 5.3 / 5.8 / 2.0 points at the Qwen3-235B-A22B scale, and the lead replicates across four open-source backbones and extends to GPT-5 at 327K context. At the Qwen3-8B scale, DAGRPO improves over a same-budget outcome-only GRPO baseline by 3.0 average Pass@1 points. A same-architecture comparison shows that evidence-conditioned planning reaches higher accuracy at lower per-task token, tool-call, and step footprints than its Plan-then-Patch counterpart. Code: https://github.com/hanwenliu6825/DAGent

Hacker News 熱門79

HN 发布:Magnitude (YC S25)——面向智能体的自优化推理引擎

大家好,HN 用户们,我是 Anders,Tom 也在这里。我们正在开发 Magnitude,这是一个面向智能体的推理引擎,能够自我优化,以便在你的硬件上尽可能快速地运行。它支持 Mac、Linux 和 Windows,可运行于任何硬件上,速度最高可达 llama.cpp 的 2 倍。 我们都是软件工程师,此前曾构建过一个开源浏览器智能体,获得了 4k+ GitHub 星标和 100k+ 下载量。我们越来越希望在本地模型上运行它,但发现没有任何推理引擎适合我们的使用场景。 如今的推理引擎都需要在性能上做出取舍。它们要么是: - 面向数据中心硬件上的批量推理构建,以牺牲单会话性能为代价(vLLM、SGLang) - 注重广泛兼容性,而不是针对特定硬件进行优化(llama.cpp、Ollama) - 针对特定硬件或模型进行了专门优化,但引擎功能不够完整(oMLX、ds4) 此外,它们都不是为在本地运行智能体而设计的。智能体会运行很长时间,通常还会同时运行多个实例,而你仍然希望电脑能够处理其他任务。 Magnitude 专为在你的硬件上实现最高性能以及运行本地智能体而构建: - 设备端编译与调优:内核使用灵活的参数编写,并会在模型运行前根据你的实际设备进行调优。这让我们在保持与广泛硬件兼容的同时,也能达到与硬件专用内核相同的性能上限。 - 专注于最佳架构:我们会针对最流行的开放权重模型系列编写可调优且高效的内核。这使我们能够达到并超越硬件或模型专用引擎的性能,而不必为了过度泛化而牺牲性能。 - 动态内存分配:Magnitude 在启动时只预留足以容纳模型权重的内存。随着智能体会话增长,内存堆会动态扩展;智能体停止后,所占内存也会自动释放。这样,智能体运行期间,你的硬件仍可用于其他任务。 - 混合分页注意力:我们借鉴了 SGLang 等引擎中的优秀理念,让并发会话能够共享前缀缓存,同时针对内存邻接性优化数据布局,从而不会影响单会话性能。 Magnitude 完全开源(Apache 2.0)。我们使用 Rust 构建了它,其中包括定制的 GPU 内核运行时和自动调优器。为了达到性能上限,我们从学术界的最佳推理创新(例如 FlashAttention、FlashInfer、TurboQuant)以及其他引擎(例如 SGLang 的基数注意力)中汲取灵感。 在 Qwen 3.6 35B A3B(4 bit)、64k 上下文且不使用推测解码的条件下,与 llama.cpp 进行基准测试: Metal(Mac M4 Pro 48 GB) - 解码速度提升 92%(30 tok/s → 57 tok/s) - 预填充速度提升 9%(466 tok/s → 507 tok/s) - 每个智能体的内存占用降低 28% CUDA(DGX Spark) - 解码速度提升 19%(49 tok/s → 58 tok/s) - 预填充速度提升 23%(2,033 tok/s → 2,507 tok/s) - 每个智能体的内存占用降低 27% Magnitude 以桌面应用的形式发布,你可以轻松地将它连接到已经在使用的各种智能体(Pi、OpenCode、Hermes、Codex 等)。只有当这些智能体确实需要模型时,它才会按需自动运行模型,并在闲置后将其关闭。 效果如下: https://www.youtube.com/watch?v=0qE8BWEZu7o 我们很期待进一步推进 Magnitude,让你能够在相同硬件上运行更大的模型,同时持续提升性能。我们的计划包括: - 专家流式加载:将专家存储在 RAM 或磁盘中,并在需要时即时加载。这样,你就能运行原本无法装入 GPU 的更大模型。 - 内核编译器:目前,我们的内核会调优少量参数以适配你的硬件。借助完全定制的编译器,我们可以更进一步,自动选择内核融合方式和实现方案,从而让它更好地适配你的硬件。 - 多设备利用:通过检测系统中的所有硬件(CPU、GPU、RAM、磁盘),自动求解最佳模型布局,以尽可能充分地利用它们。 我们希望有更多人来试用并向我们提供反馈。欢迎在这里留言,我们一整天都会在线! 评论链接: https://news.ycombinator.com/item?id=49911995 得分:5 评论数:0

arXiv cs.AI79

HARISSA:用于高效且安全地部署本地语言模型的推理时自检

在本地运行语言模型在隐私、延迟和成本方面具有优势,但本地硬件只能容纳小型模型,而这些模型的能力不如前沿模型。对于困难查询,通常的补救办法是将其升级到云端模型,但这会放弃本地运行在隐私和成本方面的优势。保持本地运行的部署在面对困难查询时需要做出两个决策。首先,它可以在某个查询上投入更多计算,例如在回答前进行推理,这会以增加延迟为代价提高准确率,因此必须决定哪些查询值得额外计算(效率)。其次,有些查询超出了本地模型的能力范围,而给出错误答案比将查询交由人工介入处理更糟,因此必须决定哪些答案可以安全交付(安全性)。我们表明,这两个决策都可以根据模型自身的隐藏状态做出。预填充状态在生成任何 token 之前计算得到,可预测模型是否会正确回答;答案状态在生成答案结束时得到,可预测该答案是否正确。HARISSA 对模型进行微调,使这两种状态都能预测正确性,然后用一个策略做出这两个决策:该策略按从最便宜到最昂贵的回答方式进行级联,跳过预填充状态预测会失败的方式,并在其停止时得到的答案被预测为错误时将查询转交处理。在运行单个模型的设备上,HARISSA 的准确率与思维链相差不到一个百分点,同时延迟降低了 2.7 倍。在承载同一模型四种尺寸的服务器上,在相同延迟下,HARISSA 比 FrugalGPT 和 Self-REF 级联更准确;在相同转交率下,在六个任务与设置组合中的五个组合里,与标准置信度信号相比,答案状态留下的错误答案更少。

arXiv cs.AI76

可审计的长期记忆:在 LongMemEval-S 上测得 500 题中 479/475 的确定性检索链

我们在 LongMemEval-S 上评估了一个可审计的长期记忆系统。其检索链使用混合候选检索、cross-encoder 重排序、覆盖优先的数据包编译,以及确定性推理脚手架;LLM 仅作为可替换的最终阅读器使用。该链在 470 个可回答问题中的 468 个问题上将所有黄金会话放入候选池,并在 470 个问题中的 462 个问题上生成黄金完整的数据包。通过未固定的 CLI 别名调用 Claude Opus 阅读器,在两次 500 题运行中,在 GPT-4o 评判下分别得到 479/500 和 475/500。72 条可回答的知识更新行使用了实质性修改过的评分提示,其在官方文本下的影响尚未测量。这一组结果横跨 Chronos High 已发布的 478/500;阅读器生成、评分提示以及可能的数据版本的差异,加上系统内方差,既不能证明优越性,也不能证明等价性。在相同数据包上,grok-4.6-high 阅读器得分为 476/474,而一个最大推理努力的 agentic 变体退化到 461/465。标题结果的两次运行在八个判决翻转行上存在差异。第二个评判器在每次运行中都与标题评判器在 493/500 行(98.6%)上一致,并给两次运行均评分为 472/500;官方评判器在重新评分字节完全相同的第 1 次运行答案时,也翻转了三个判决。负对照否定了一个验证器:它修复了三个错误草稿,但破坏了十一个正确草稿。所有组件均在同一组 500 个问题上开发,没有留出评估或独立人工裁决;检索与脚手架方法来源以及从转录记录导出的审计均已保留;标题阅读器接收了额外的操作员上下文,其完整请求未被保留,且 MCP 工具可用性尚未解决。我们发布了物化数据包、脚手架、阅读器输出、评判器判决和对照,以供检查和重新评分。

arXiv cs.AI81

UserProxyBench:评估用于智能体基准测试和训练的 LLM 用户模拟器

交互式智能体基准测试和多轮强化学习日益将第二个语言模型置于用户角色。这个模拟用户控制智能体接收哪些信息以及何时接收,但当前基准测试只对智能体进行评分,并不直接衡量用户是否正确履行了分配给它的角色。我们提出了 UserProxyBench——一个覆盖 tau-bench 系列的评估层,以及 User Fidelity Score (UFS)——该指标依据以任务为基础的评分标准,独立于智能体是否成功,衡量用户是否遵循基准测试中的私有用户指令。在将智能体固定为 GPT-5.5、仅改变用户代理的情况下,在 375 项企业任务上,平均任务奖励会改变 15.2 分;此外,24.4% 的成功回合包含违反用户规范的行为。最主要的失败模式是过早披露:用户在被请求之前就提供信息。这种行为对任务奖励影响很小,但在成功回合中,它会导致智能体平均少调用 1.06 次工具,从而在保持奖励不变的同时改变被评估的交互过程。最后,我们在七个代理之间确定了经验性的成本—保真度前沿,使实践者能够选择满足所需保真度水平的成本最低的模拟器。

arXiv cs.AI80

Thinking Before Thinking: Scaling Agentic Inference Through Meta-Reasoning

As agents take on longer and more complex problems, controlling the execution becomes a task in its own right. Each step in the run brings new control choices, like which partial work to build on, whether to start fresh, or when to stop. We introduce agentic meta-reasoning, an inference-time harness that makes these choices an explicit and structured reasoning process. Workers carry out the task-level computation, while a controller consolidates what the run has established, explores next options, assesses what each option is worth under the remaining budget, and dispatches the chosen work with context drawn from persistent memory. Between decisions the controller carries only a compact account of the run rather than replaying its full history. Our baselines span production coding agents and research harnesses, together with a Direct Control Agent using the same workers and compute budget allowance. On ProgramBench, which tests long-horizon agentic capability through program reconstruction, meta-reasoning achieves 71.5% with GPT-5.5 against 58.0% for Codex; with Opus 4.8 it achieves 67.2% against 65.5% for Claude Code. On the other benchmarks, spanning abstract reasoning, multi-domain long-horizon reasoning, and proof generation, it gains between 3.6 and 4.2 points over direct control, averaged across three frontier models. It keeps improving over the tested budget ranges where direct control plateaus, though its overhead can hurt at small budgets. Artifact-graph analysis reveals more reuse of earlier work, higher coverage of correct solutions in most settings, and nonuniform gains in final selection. These results indicate that spending computation on structured control becomes more important as agents scale to longer runs.

arXiv cs.AI73

Safer Content or Firmer Refusals? A Hybrid Perturbation Defense for Alignment under Harmful Fine-tuning

Fine-tuning-as-a-service lets users adapt a safety-aligned language model to their own data, but it also creates a harmful fine-tuning attack surface: a small amount of harmful data mixed into an otherwise benign fine-tuning set can degrade the model's alignment. Two recent alignment-stage defenses address this problem at different levels of the model. Vaccine improves the robustness of hidden embeddings to the representation shifts induced by harmful fine-tuning, whereas Booster simulates harmful weight updates and attenuates their effect during alignment. We investigate whether these mechanisms are complementary and propose VaccineBooster, a single alignment procedure that combines embedding perturbation and weight-level gradient attenuation within each training step. On Llama-2-7B aligned with BeaverTails and then attacked through poisoned fine-tuning, VaccineBooster achieves the lowest OpenAI moderation score among the compared defenses, 0.315, while a Booster-Only variant retains the highest post-attack refusal rate, 50%. Together with ablations over the embedding-perturbation and gradient-attenuation strengths, these results indicate a trade-off: embedding perturbation primarily reduces flagged harmful content, whereas gradient attenuation primarily preserves explicit refusal behavior. Because our evaluation uses ten prompts and a single unseeded run per configuration, we report this trade-off as an observed pattern rather than a statistically resolved effect. These results provide practical guidance for prioritizing content safety or refusal retention when aligned models are exposed to untrusted fine-tuning.

Hacker News 熱門56

Show HN: TurboGPT: train 22KiB transformer in 13s

Inspired by minGPT for home experiments. Requires CUDA 13.4; build script is Windows only. Comments URL: https://news.ycombinator.com/item?id=49898931 Points: 17 # Comments: 1

Hacker News 熱門68

DevDay 2026 回顾

文章链接: https://openai.com/index/devday-2026-recap/ 评论链接: https://news.ycombinator.com/item?id=49896600 积分:12 评论数:1

Hacker News 熱門71

ChatGPT Pro 500

文章链接: https://help.openai.com/en/articles/9793128-about-chatgpt-pro-tiers 评论链接: https://news.ycombinator.com/item?id=49896975 得分:42 评论数:21

Hacker News 熱門84

GPT 6.1 Sol

文章 URL: https://openai.com/index/introducing-gpt-6-1-sol/ 评论 URL: https://news.ycombinator.com/item?id=49896586 得分:44 评论数:11

Hacker News 熱門73

Dots

文章 URL: https://openai.com/index/introducing-dots/ 评论 URL: https://news.ycombinator.com/item?id=49896604 点数:8 评论数:1

arXiv cs.AI79

TCSAlgBench:面向研究级理论计算机科学的自动化证明基准测试

大型语言模型在竞赛数学中表现强劲,但其研究级推理能力仍难以系统评估。理论计算机科学(TCS)将算法设计与明确保证和基本极限联系起来,为评估模型是否能够用人类可审查的论证来证明计算改进提供了一个场景。我们介绍 TCSAlgBench,这是一个用于自然语言证明发现的基准和可复用流水线,包含来自 138 篇 STOC 和 COLT 2026 论文的 398 个定理级挑战。专家设计的规则补全论文特定上下文,保留计算假设和定量保证,并在发现算法本身属于任务的一部分时隐藏构造。对于每个任务,证明器系统会获得定理陈述,并可访问被引用的先前工作。该流水线支持基于新发布论文生成全新的、带版本的挑战批次。我们在直接推理和证明器-验证器讨论两种设置下评估来自四个系列的十种模型配置,并在匹配的模型调用机会下比较四种智能体工作流。所有评估均使用完整基准。在模型比较中,GPT-5.6 Sol max 在 10 轮讨论后取得最高的五次运行验证器接受覆盖率,为 23.6%。讨论和重复采样提高了覆盖率。在使用 GPT-5.5 xhigh 的单独智能体比较中,分解相较于讨论提高了覆盖率,而智能体式规划取得最高的五次运行验证器接受覆盖率,为 25.4%。TCSAlgBench 提供了一个可刷新测试平台,用于衡量模型推理的进展,并研究智能体工作流如何支持研究级证明发现。

arXiv cs.AI78

可验证视觉奖励从合成场景迁移到自然提示

图像生成中的精确指令遵循,例如满足对象数量和空间关系,仍然是一个开放挑战,至少部分原因在于其学习依赖于不可靠的奖励模型,如对象检测器和视觉-语言模型。我们提出 Verifiable Visual Rewards (VVR),这是首个用于可通过程序验证的图像奖励框架,并表明在其上训练能够泛化到自然提示。每个 VVR 任务都是一个由几何对象及其关系构成的场景,我们从中同时推导出提示和确定性验证器,因此任务可以按任意数量和任意选定复杂度生成。我们发布了 VVRBench,包含覆盖 32 种约束类型的 10,000 个任务,以及 VVRBench-Challenge,包含 720 个更复杂的任务;我们评估的最强模型 GPT-Image-2.5 解决了 VVRBench-Challenge 中 21.4% 的任务。使用 VVR 分数作为强化学习(RLVVR)的奖励,使 Stable Diffusion 3.5 Medium 在 VVRBench 上的准确率从 2.8% 提升到 28.3%,并展现出一致的由易到难泛化能力。这些收益扩展到域外基准,将 VVR 融入现有目标还能进一步提升整体性能和人类偏好,这推动了将 VVR 纳入标准图像生成后训练方案。

arXiv cs.AI69

Not All Thinking is Created Equal: Latent Reasoning Discovers a Recurrent Search Algorithm for Depth Generalization

Large Language Models can perform multi-step reasoning and improve task performance through different forms of intermediate computation, from token-based traces to computation carried out in latent space. However, a question remains open: do these different forms of thinking rely on the same underlying mechanism? To address this, we train and compare five variants of the same GPTNeoX backbone from scratch on an extended multi-hop reasoning task (ProsQA-Ext): a vanilla model, a Chain-of-Thought (CoT) model, a Pause Token model, and two latent-reasoning models that are optimized end-to-end without intermediate reasoning traces. We find that, strong in-distribution (ID) performance does not guarantee depth generalization. Vanilla, CoT, and Pause Token models solve ID problems well, but rely largely on local graph features and generalize poorly to out-of-distribution (OOD) problems with longer hops. In contrast, latent variants generalize better and show internal dynamics consistent with forward reachability propagation on the graph. Causal interventions and circuit analysis localize this computation to a sparse recurrent search circuit in the bottleneck latent model: an attention head retrieves graph relations, an MLP and the residual stream update the reachability state across recurrent steps, while multiple attention heads together then do the candidate matching. Together, these results show that different thinking mechanisms can learn distinct computational solutions, even at similar ID performance. In this setting, latent recurrence supports a reusable forward-search algorithm that generalizes beyond the training depth.

arXiv cs.AI71

Rethinking Circuit Evaluation: Do Circuits Explain Model Errors?

Mechanistic interpretability (MI) aims to explain a model's behaviour through analyzing its internal computations; circuit-based explanations aim to isolate these computations with compact subnetworks validated by ablating the rest of the model. We show that circuits validated this way may fail to recover the underlying mechanism of the model's behaviour by closely reproducing its successful decisions while failing to account for most of its errors. Such explanations should account for the model's particular errors as well as its successes. We evaluate this requirement by measuring exact answer agreement separately on model successes and failures, across circuit sizes and ablation settings, on IOI, Docstring, and six model-task settings from the Mechanistic Interpretability Benchmark. We discover that many tested circuits closely replicate correct behaviour while missing most of the model's errors. On indirect object identification (IOI) for GPT-2 small, under mean ablation, the manual circuit and tested automated circuits, including one trained against the model's full output distribution, agree with the model on 97.3-99.5% of prompts it answers correctly but only 11.4-41.7% of errors. An IOI case study shows that lost errors are recoverable by restoring omitted attention-heads which raise error reproduction from 14.2% to 75.1% on a separate held-out set with 0.41 percentage point decrease on correct agreement, exceeding matched random extensions and scalar-biased control. Intervention traces show how omitted computations produce specific wrong answers for a reproducible subset of errors. In all, these findings show circuits can preserve task success without adequately explaining model's failures, and support exact error reproduction as a necessary, but not sufficient, test of circuit-based explanations of model behaviour.

arXiv cs.AI80

量化误差在频谱上是平坦的:单个随机探针是一种经过校准、无需数据的敏感度估计器,并可应用于面向预算的混合精度量化

单个随机 Gaussian 探针可以无偏估计某一层量化误差的平方 Frobenius 范数。该估计器表现良好,因为舍入到最近值的误差在频谱上是平坦的。在来自一个 35B MoE 和一个 9B 稠密模型的 1,683 个张量中,有效维度为相同形状的独立同分布噪声值的 0.93 到 0.96 倍,并且在 MoE 上,从 2-bit 到 8-bit 的中位数保持不变。探针变异系数可由张量形状预测。一个探针可在 4% 到 7% 以内测量每个张量的敏感度;二十个探针可达到 1.3% 到 1.4%。RAM 将该估计器的传播形式应用于无需校准数据、面向预算的混合精度量化。携带网络自身输入统计信息的 Gaussian 探针会在六种位宽下为每个张量评分。一个背包求解器在精确字节预算下分配位数,并设置防护机制以避免灾难性的 2-bit 分配。一次探针传递即可服务任意预算。孤立评分和传播评分在 Qwen3.5-35B-A3B 上对张量的排序彼此独立(Spearman -0.01),但传播探针与来自真实激活的 GPTQ 层目标之间的秩相关为 0.81 到 0.83,而孤立估计器与其不相关。该目标并不是正确的分配目标:在 Qwen3.8-27B 上字节数匹配时,块输出探针优于厂商 IQ3_M 混合方案,也优于基于真实激活目标进行分配的 oracle。在 Qwen3-8B 上,传播探针在字节数匹配时与 HAWQ-V2 打平。跨越从 8B 到 122B 的七种架构,并且在单台工作站上对一个 400B 模型进行探针计时最多九分钟的情况下,RAM 在测试的 MoE 模型上,相比大小相近的统一 4-bit 构建,将 WikiText-2 中位困惑度降低了 3.5% 到 13.6%。

arXiv cs.AI70

Jev in Medicine: A Benchmark Evaluation. Preliminary Results

Jev is a non-generative "System One" model that assigns probabilities to predefined answer options and cannot answer outside them. Its accuracy and calibration on medical question-answering and case-based diagnostic-reasoning tasks are unknown. We evaluated Jev 1.13 on four medical benchmarks: MetaMedQA, PubMedQA, DiagnosisArena-MCQ and the NEJM Case Challenges. GPT-6 Sol, with (medium) and without reasoning, was the reference. The primary outcome was top-1 accuracy; key secondary outcomes were calibration, selective prediction and recognition of unanswerable questions. All 8,469 requests returned a valid answer. Jev's accuracy was similar to that of GPT-6 Sol with medium reasoning on PubMedQA (78.4% vs 78.2%;), lower on MetaMedQA (74.8% vs 82.7%) and much lower on DiagnosisArena-MCQ (59.8% vs 82.4%;) and the NEJM cases (61.8% vs 82.4%). On MetaMedQA, Jev's probabilities were the best calibrated (expected calibration error 0.063 vs 0.146), and its answers with a probability of at least 0.9 (52.9% of questions) were 93.4% accurate, but GPT-6 Sol was as accurate when it accepted a similar proportion of questions. On DiagnosisArena-MCQ, Jev's probabilities discriminated poorly (AUROC 0.645 vs 0.768). Of the 162 questions whose correct answer was "I don't know or cannot answer", Jev chose that option for 10.5% (GPT-6 Sol, 8.6%). Median latency was 0.27-0.31 s; all 2,823 items cost USD 0.08. Jev was fast and inexpensive, and its accuracy was similar to that of a frontier LLM on research abstracts but lower on examination questions and much lower on complex diagnostic cases. Task-specific validation is required before clinical use.

arXiv cs.AI69

Large Language Models for Structured Clinical Data Analysis: Dual-Agent Grounding and Validation

Objective: To develop and characterize CLEAR-Med, a dual-agent framework for natural-language analysis of structured clinical data that separates SQL-based invocation from independent validation. Methods: CLEAR-Med uses one agent to translate a question into executable Structured Query Language (SQL), retain the executed query and database result, and produce a draft. Deterministic checks and a separately invoked cross-provider Validation Agent then accept the draft, request one bounded repair, or abstain. We formalized the system as a bounded selective pipeline and evaluated CLEAR-Med's configuration and scalability, and the Invocation Agent's accuracy and consistency on a 25-query development benchmark, using a harmonized 21-site neonatal hypoxic-ischemic encephalopathy table containing 532 de-identified infant records and approximately 1,300 variables. Results: CLEAR-Med completed all six nominal scalability configurations, including 500x1300. Across 25 development-benchmark queries repeated five times, the Invocation Agent answered 83 of 125 responses correctly (66.4%; query-cluster bootstrap 95% CI, 48.0-83.2%), compared with 15 of 125 (12.0%; 95% CI, 3.2-22.4%) for the ungrounded ChatGPT baseline, a paired improvement of 54.4 percentage points (95% CI, 36.8-72.0%). Conclusion: CLEAR-Med provides a general architecture for traceable analysis of structured clinical data: numerical claims remain linked to executed SQL, and unresolved cases can fail closed. The reported experiments characterize CLEAR-Med's configuration and scalability and the Invocation Agent's accuracy, while the formal analysis establishes the encoded-property guarantee of the complete control flow; a prospective full-pipeline evaluation of the validation and abstention stages is the next stage of this work.

arXiv cs.AI78

AgentHabit:刻画智能体在日常任务中的独特行为

大语言模型(LLM)智能体可以帮助用户完成日常任务,而这些任务通常有许多合理的完成方式。即使它们的回答有用,智能体执行这些任务的方式也可能不符合用户的偏好和需求。例如,不同智能体在是否提出澄清性问题或搜索网络方面存在差异。我们提出 HABIT,这是一个包含五大类别、23 个行为维度的分类体系,由三位作者和三个 LLM 基于 17 个领域中的 408 条智能体轨迹自下而上推导而来。在留出任务上,相比现有的人类价值观和智能体行动分类体系,HABIT 能更清晰地区分模型,同时支持相近一致性的标注。基于 HABIT,我们构建了 AgentHABIT,这是一个基准测试,可根据智能体在 86 个日常任务上的轨迹刻画每个智能体的行为倾向。使用 AgentHABIT 对 18 个模型进行画像揭示了一系列鲜明的倾向。例如,大多数 GPT 和 Claude 模型会陈述其假设,并在需求冲突时提供替代方案,而 Qwen 和 Google 的模型更常不明确说明假设或需求变更。即使使用完全不同的任务集构建,这些画像仍然可被识别,表明它们反映的是一般性倾向,而非特定任务行为。提示智能体采用特定行为会使某些维度很容易发生变化,但对其他维度几乎没有影响;而在另一个模型的轨迹上进行微调只会改变模型画像的一部分,并保留其中的大部分特征。总体而言,HABIT 和 AgentHABIT 提供了一个系统性框架,用于刻画智能体在任务成功之外如何执行日常任务,并提供洞见以指导开发行为更符合用户需求的智能体。

arXiv cs.AI67

Finding Emotions Where They Belong: Rethinking Audio Emotion Recognition through Masked Temporal Affective Grounding

Audio emotion recognition (AER) typically assigns a single label to an entire recording, leaving the temporal scope of that label ambiguous when multiple speakers and affective events are present. We address this limitation by reformulating AER as a Temporal Affective Grounding (TAG) task that associates emotions with temporally bounded speech spans and vocal tone descriptions. To support this formulation, we curate temporally annotated versions of existing emotion recognition datasets and construct recordings containing two to four affective speech spans, including overlapping speech. Training in this longer format with a standard language-modeling objective can degrade both emotion recognition and temporal grounding performance, while tone descriptions can provide shortcuts for emotion prediction. To address these challenges, we introduce Masked Temporal Affective Grounding (M-TAG), a supervised training objective that combines full-sequence language modeling with emotion and timestamp cross-entropy losses under attention masking. The masking varies the context visible to emotion-label tokens to reduce reliance on shortcuts and improve generalization, while the timestamp loss incorporates a distance-aware weight to penalize larger temporal errors. We evaluate EMO-TAG, a model fine-tuned using our dataset and objective, on emotion recognition and affective temporal-grounding against three AER and audio-language baselines: Flamingo-Next, Audio-Reasoner, and AffectGPT. Our results show that existing models achieve limited affective temporal-grounding despite competitive emotion recognition performance.

OpenAI Blog54

Are you a Codex Original?

We’re collecting real stories of builders, tinkerers, researchers, and creators who are using Codex to do incredible things. If you want to be a part of the next chapter of the Codex Originals program, tell us more about your story and project below.

Hacker News 熱門65

Show HN:HN.watch – 所有 Hacker News 帖子的视频

大家好 HN,我是 Per,Scrimba(YC S20)的创始人。在过去十年里,我们一直用一种基于 HTML 的视频格式教人们编程。现在我们把 LLM 接入了其中,让人们可以创建关于任何内容的讲解视频。它叫做 “Scrimba Explain”。 为了向 Hacker News 演示这项技术,我们构建了 HN.watch。它就像 HN,但用讲解视频代替文章。我们会在有人第一次点击某个链接时即时创建这些视频。 虽然使用 HTML 而不是扩散模型有明显的视觉缺点,但它有三大优势:- 速度:比基于像素的视频生成快得多(从点击到播放只需几秒)- 成本:我们每个视频的成本约为 0.04 美元。(不包括某些视频会使用的图像生成;这会很快推高成本)- 易于编辑:上述优势也让 AI 辅助编辑变得便宜且快速 我们的假设是,如果视频创作从“几美元和几分钟”变成“几美分和几秒钟”,就会解锁一批新的使用场景。以下是我们已经看到的一些:- 为每一个 Pull Request 提供视频讲解(我们内部就是这样做的)- 为你的内部/外部文档中的每个页面配一个视频 - 在约 4 秒内把一篇复杂文章变成视频(通过我们的 Chrome 扩展)- 课程创作者可以在录制正式内容前快速起草课程 - 人们还会创作很多个人内容,比如给孩子的故事、婚礼邀请、生日等 这个技术栈基于一种开源编程语言(Imba),由我们的 CTO Sindre Aarsæther 创建。它会编译成 JavaScript,因此能与 npm + node 生态系统完全互操作。你可以在这里了解更多: https://imba.io/ 我们还构建了自己的同步引擎(OP),以及一个用于代理的上下文管理系统(Q)。我们原本担心这会让 LLM 在为我们写代码时遇到困难,因为这两者都不在它们的训练数据中(其中 Imba 的数据也很少)。然而,我们惊喜地发现 LLM 实际上非常擅长我们的技术栈。这可能是因为这个技术栈极其紧凑。Imba 很简洁,OP 也是如此,一个声明就能设置存储、同步、权限、UI,以及 AI 能看到的内容。这意味着前端、API、数据库和 JSON 之间不需要相互转换,模型也就不容易混淆和出错。 简单来说,我们没有使用 React.js、Express、Supabase 和 LangChain,而是从零开始全部自己构建。绝对是深受“非我发明”综合征之苦,哈哈!至于模型,我们使用 Gemini、GPTs、Inworld、ElevenLabs 以及其他一些模型。 如果你想试试,可以任选一种:- Web UI(scrimba.com/explain)- MCP(添加到你的编码代理中)- ChatGPT Plugin - Chrome Extension 你可以在我们的文档中找到以上所有内容的链接: https://docs.scrimba.com/explain/introduction 最后,这是该工具的一个真正基于像素的视频: https://www.youtube.com/watch?v=k6rbHmBxSEs 很想听听你的反馈,也想知道是否有人对其他使用场景有想法。 PS:考虑到 HN 群体有多偏爱文本,我预计这次发布会在 HN 上遇到相当多的反对意见。这类工具并不适合所有人。但如今确实有很多人更喜欢视频而不是文本,尤其是年轻一代。 评论 URL: https://news.ycombinator.com/item?id=49879401 积分:18 评论数:8

arXiv cs.AI71

ViSTA: A Simple Bridge Extends Visual Alignment to Clinical Time-Series Understanding in Multimodal LLMs

Clinical prediction models estimate risk from patient measurements, while large language models support medical text understanding and question answering. Yet their language capabilities do not ensure accurate prediction from structured, high-dimensional clinical time series. Improving this ability would connect risk estimation with flexible questions about a patient's evolving condition. We introduce ViSTA, a compact adapter that incorporates irregular numerical measurements into a pretrained vision-language model's chart representations. It learns corrections to visual tokens while leaving all pretrained parameters unchanged. On MIMIC-IV, ViSTA has the highest mean scores among the compared adaptations on all four metrics for acute kidney injury and mortality prediction across models with 2-9 billion parameters. With 0.516 million trainable parameters, the 2-billion-parameter model reaches an area under the ROC curve of 0.7376 for acute kidney injury, compared with GPT-5.6 Sol's 0.7380 with text input and high reasoning effort. Training for temporal question answering yields 69.27% accuracy at 4 billion parameters with over 90% fewer trainable parameters than low-rank adaptation using charts or numerical text, at a 2.82-4.88 percentage-point accuracy gap. ViSTA extends pretrained language models to numerical prediction and temporal questions.

arXiv cs.AI69

DeepEdu-v1: Efficient and Scalable Agentic LLMs for Vietnamese Education

AI tutoring could markedly improve learning outcomes for students in developing regions such as Vietnam, yet the two obvious paths both fall short. Cloud assistants such as ChatGPT route sensitive student data to foreign servers---violating data-sovereignty laws such as Vietnam's Decree 53---and, pre-trained on Western-centric corpora, are not organized around the national textbook curriculum, so their knowledge of local content is unsystematic and frequently hallucinated. Self-hosting an open model keeps data on-premise but hits a two-fold wall: post-training quantization (AWQ, GPTQ) tames the static weight footprint, yet the dynamic KV cache and prefill latency of long tutoring contexts still cause out-of-memory failures and slow responses on consumer GPUs, while the model keeps hallucinating on region-specific material. We present DeepEdu-v1, an AI-tutoring system for Vietnamese education built on SCALE (Self-improving Context-Aware Learning Engine), a framework with two innovations. First, a long-context inference engine amortizes token selection from per-sub-chunk to per-cluster granularity; on long-context retrieval it issues x7.7 fewer retrieval calls than a state-of-the-art selective-attention baseline, cutting prefill latency (TTFT) by roughly 35% while matching or improving task accuracy. Second, a self-improving agentic layer continuously curates a verified playbook from past interactions instead of fine-tuning, a design intended to progressively reduce reliance on dominant-language priors as trustworthy local knowledge accumulates. In its deployed configuration, DeepEdu achieves a nearly x2 TTFT speedup over standard vLLM serving and lifts agentic accuracy from 70.0% to 79.5% on complex tasks, with the strongest per-track gains across financial-reasoning and interactive-agent benchmarks.

arXiv cs.AI73

学会停止而无需学习停止:自监督置信度训练提升推理效率

推理模型通常会生成很长的推理轨迹,使推理在计算上代价高昂。现有方法通常通过推理时的提前停止机制,或在训练中明确鼓励更短的推理来提升效率,例如使用带长度惩罚的强化学习。我们表明,可观的效率提升也可以来自另一种监督:\textit{置信度}。通过一种自监督流程,我们仅使用 600 个训练问题,对推理模型进行微调,使其在自身推理轨迹的中间节点预测其对答案的置信度。置信度仅作为训练目标使用:损失函数中不包含任何针对推理长度、效率或停止的目标。在推理时,微调后的模型使用标准生成流程,不进行置信度引出,也不采用提前停止机制。尽管如此,自监督置信度微调仍使推理更加高效,在数学、科学和代码推理基准上,对于 Gemma、Qwen、Nemotron 和 GPT-OSS 模型,在准确率相当的情况下可将生成的 token 数减少多达 25\%,其效率提升与显式优化更短推理的方法相当。对推理过程的分析进一步表明,置信度监督在很大程度上保留了基础模型的高层推理组成,而不是选择性地抑制特定行为。我们的结果表明,高效推理可能是学习元认知信号的下游结果,而无需直接对其进行优化。

arXiv cs.AI73

用于输出头量化的 Softmax 重参数化

大词表使输出头成为小型语言模型推理成本的重要组成部分。我们提出 Softmax 重参数化,这是一种训练后方法,可在量化前选择一个功能等价的输出头。该方法从每个输出行中减去词表行均值的一个标量倍数,并分别针对 RTN、激活加权 MSE 和全 Hessian GPTQ 通过验证 KL 选择系数。这个一维搜索包含原始头和固定均值中心化,保留全精度 Softmax 分布,并使训练好的解码器保持不变;秩一校正可处理非线性 logit 路径,例如 soft-capping。在七个头上,W4 的收益集中在基线量化显著扭曲预测的地方:在 Phi-4-mini 上,AW-MSE KL 从 0.936 降至 0.256。这些收益在更强的 GPTQ 校准下仍然存在,并且与精确的逐通道缩放和仿射量化保持互补。在四个头和三种 W4 量化器上,使用 WikiText 选择并冻结的系数也能迁移到 C4 和 OpenWebMath,在冻结系数不同于 $1$ 的全部 18 次比较中均优于均值中心化,并在其余 6 次中与之相当。在 W2 这一压缩压力测试设置下,收益扩展到几乎整个模型--量化器矩阵。匹配残差分析表明,保真度的提升可以伴随更大的 logit 重构误差,同时降低残差的 Fisher 加权成本。对于与平移兼容的头,重参数化不增加推理操作,并保留打包 W4 执行:在解码器保持 BF16 的情况下,量化 Phi 输出头相对于 BF16 头基线将 batch-one 生成延迟降低了 10.8%。

arXiv cs.AI80

AgentXploit:面向 AI Agent 的自主式从代码库到运行时红队测试

AI Agent 将语言模型与外部数据和工具相结合,这些工具可以修改文件、调用 API 或执行代码。当对抗性内容改变 Agent 的工具使用方式,或周边软件存在路径遍历、命令注入等漏洞时,可能会出现安全故障。我们研究授权的白盒部署前审计,其中审计者可以访问目标代码库和受控运行时,但成功攻击仍必须通过任务定义的攻击者接口实施,并由外部验证器确认。我们提出 AgentXploit,这是一个双角色审计系统,将代码库级别的攻击路径发现与运行时利用分离开来。Analyzer Agent 将攻击者可控输入追踪到敏感操作,并记录有代码支持的候选攻击路径;Exploiter Agent 将这些路径转化为具体攻击,并利用运行时反馈对其进行修正。我们还引入了 AgentXploit-Bench,其中包含 12 个开源 AI Agent 系统和框架中的 72 个可复现漏洞。在三次运行中,AgentXploit 达到 59.3% 的端到端成功率,而 Codex 为 38.4%。在令牌预算匹配的比较下,Codex 达到 46.3%。在 AgentDojo 上,由于提供了注入点,Exploiter Agent 达到 79.2% 的攻击成功率,而 AgentVigil 为 52.7%。这些结果凸显了代码库发现和运行时利用是端到端 Agent 安全审计中的不同挑战。

Hacker News 熱門56

Ask HN: Why do we let the AI companies dominate regulation discussion?

And I don't mean the doomerism nonsense. From rogue AI, doomerism, AGI. I mean real regulation: 1) Fair accounting of input/output tokens. Where is the weights and measures department to enforce fair counting of usage? If I pay for a gallon of gas, that is what I expect. When I pay for a dollar of LLM compute, is it going to play games with the input (or especially the output) tokens to devalue my dollar? 2) Quality. When I request a higher effort of a frontier model, and then I get downgraded to a lower tier model or with different effort levels (and I may not even know if I was downgraded!), they are effectively selling you a service you didn't ask for. "But the terms of service", great, if they feel it is such a risk to downgrade, and they get it wrong a lot, then they should discount the cost of the downgraded response. 3) Adulterating outputs. LLMs are now routinely adulterating output for tracking and accountability purposes, but is there anyone to validate these efforts are not lowering the quality of the response? There needs to be more discussion around companies adulterating their product, and holding them to account. I have several times noticed words were swapped: sometimes the word pick made no sense, when it previously didn't do this. And I wasn't looking for it or cherry picking. It stood out that badly. 4) Furthering point 3, are the responses themselves going to be seeded such that the author of that response can be identified? Has anyone asked themselves if they could deanonymize LLM responses online like yellow printer dots? 5) Quotas. Related to points 1 and 2, when I am on a metered service, what happens to requests that fail mid-response, or the response is cut midway? Why should I pay for a failed response? Maybe that is fine, but who is validating they aren't doing this at scale to save money? I feel every time we earnestly or "good faith" engage in the nonsense regulations that the major LLMaaS (LLMs as a Service) duopolists, we fail to engage in real discussions about regulating the product we are paying for . I don't see why we should believe these companies to operate in good faith post-IPO. Where is the incentive once they shut down all competition to ensure only OpenAI/Anthropic are the LLMs you can purchase from? Look to what Uber/Lyft have become over the years. Massively degrading their service and increasing nickel and dime costs. They skirted regulation then demanded the world bend and write regulations that fit their revenue goals everywhere they could (or threatened to pull out where they couldn't). And if the danger really is as bad as they say, then how can we trust them to "regulate" that threat if they would refuse regulations around basic delivery of service? Comments URL: https://news.ycombinator.com/item?id=49871747 Points: 4 # Comments: 1

Hacker News 熱門

Show HN: Building a Markdown editor for Mac, iOS and web

I've spent the last 10 months building Beauty: a local, powerful greco-roman Markdown editor where the page looks finished while you type. It runs on the Mac, iPhone and in the browser, and the browser version opens without an account: https://app.markdown.beauty I was frustrated with writing apps, and like most I used Apple Notes. After 2+ years immersed in Cursor, Codex and CC, I wished some interactions existed in a text editor. The Markdown renders in place as you write it, including tables (which you can drag and resize without lining up pipes), KaTeX math and Mermaid diagrams. A lot of thought went into typography and the writing experience. Your notes on the Mac are plain .md files in a folder with images next to them, so they open in anything else too. Each note keeps 200 versions. If you share a note with a link it syncs peer to peer over WebRTC while someone has it open, and the server that connects you only ever sees a random room id. Most of the ~1,000 commits went into the editor itself. It's a contenteditable, and I don't let the browser restructure the document at all, which was a lot more work than I expected. Building this to be performant and cross-platform required some novel approaches, which I'll later open source. The editor is free with no account or ads, and there's an optional subscription for sync through your own iCloud. https://www.markdown.beauty Comments URL: https://news.ycombinator.com/item?id=49866597 Points: 25 # Comments: 20

Hacker News 熱門77

一个 agent 使用 DNS 访问外部聊天机器人

文章 URL: https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot/ 评论 URL: https://news.ycombinator.com/item?id=49853137 点数:14 评论数:10

Hacker News 熱門71

OpenAI Codex 智能体失控,未经授权消耗 78,000 美元

我的 OpenAI CODEX 账户失控了,从一个简单请求开始,自主决定在未经我任何授权的情况下启动 826 个并行智能体/线程,而且没有报告任何形式的结果,却消耗了近 2,146 万亿个 token,总计消耗约 78,000 美元,并删除了所有关于所执行操作的记录:我已向 OpenAI 提交工单 2 周,但根本无法联系到人工客服。 2026 年 7 月 10 日,我从 VS Code 打开了一个普通的 Codex 任务。 该任务运行的是:GPT-5.5 / Medium reasoning 我的提示非常简单,只是要求对我产品中某个特定模块进行 UX/UI 验证。 经过艰难分析,我在接下来几天发现的是: Root ID 为 019f4b90-4169-7201-bfdd-732940d8631e、reasoning 为 GPT-5.5 / Medium 的任务创建了 826 个子任务,记录为 GPT-5.6 Sol / Ultra(注意 reasoning 级别和模型选择的差异) 这不是一次对话中的 826 条消息,而是 826 条不同的子任务记录,并且都有各自的 ID。 其中有一组特别奇怪,包含 104 个子任务。它们都保留了与原始任务相同的初始消息,记录为 GPT-5.6 Sol/Ultra,并且没有记录 agent_role 或 agent_path。 仅这 104 个任务就约占 1479 亿个本地最终任务 token 计数器。 它们的标题显示,我要求检查 UI/UX 的请求已经扩展为涉及后端基础设施、OAuth、计量、加固、审计、认证、实现和发布的工作。 准确地说:这些本地 token 计数器并不是 OpenAI 权威的计费账本,我也不是在声称 1479 亿个本地计数器可以简单地乘以 API 价格。 这正是问题的一部分:只有 OpenAI 拥有服务器端映射。 还有另一个异常相关性。 在 Codex client build 0.144.0-alpha.4 下,该任务族包含: 584 个子任务 / 约 1543.6 亿个本地 token 计数器 平均:每个任务约 2.643 亿 在 0.144.2 下: 242 个子任务 / 约 75.1 亿 平均:每个任务约 3100 万 这意味着每个子任务的平均本地 token 量大约相差 8.5 倍。 上述 104 个高容量任务中有 103 个是在记录为 0.144.0-alpha.4 时创建的。 这让我相信 alpha build 存在严重 bug,因为在其他几个任务中也观察到了相同模式。 在财务方面,我重建的 OpenAI 账单历史包含 162 张已支付发票,总额为 $79,664.88,分布在 Automatic Reload 和其他 “Credits” 之间。 当时没有等效的实时控制界面能让我清楚了解支出情况,而且大多数日志似乎已从我的服务器上自动删除:在恢复出的本地状态中,大约 2,550 个未归档的旧线程仍有元数据,但本地没有对应的原始 rollout。 换句话说,仍然有证据表明这些任务曾经存在,而用于重建生成其中许多任务的指令所需的详细执行历史,在我的机器上已经不再可用。 我还亲眼看到任务/对话从正常可见历史中消失。 我联系了 OpenAI Support,并开启了案件 #15189838。 我已提供技术证据,并多次要求进行服务器端重建,但 OpenAI 只是回复说“credits were consumed”,没有任何细节。 我想听听其他在 7 月/8 月左右使用 Codex 的人的情况:你们检查过自己的本地 Codex 状态吗?你们是否见过异常庞大的 subagent 树、模型/reasoning 升级、重复子任务,或无法解释的 Automatic Reload 活动? 我尤其想听到任何拥有 Codex 0.144.0-alpha.4 日志的人提供信息。 如果 OpenAI 工程师看到这篇文章,我也欢迎给出技术解释。 评论 URL: https://news.ycombinator.com/item?id=49861047 点数:7 评论数:0

Hacker News 熱門52

Show HN: Ekselio – Loveable for finance workflows (local first)

Hi everyone, I am KD - Back in my college days, I dabbled with coding, learned the basics, HTML, CSS etc. but somehow I ended up in Finance which consumed the next 20 years. Then, during covid I picked up coding again, learned react, typescript, etc - even built a rudimentary site - and then came the chatgpt moment, followed by Claude etc. So, as a side project, considering that I had spent 20 years in finance and M&A I started building Ekselio, loveable for finance workflows. Differently from other vibe coding tools, this is local first - meaning the workflows are orchestrated by the LLM based on the file schema but then the execution happens in the browser - the cool thing is that you can see the canvas, the previews of each node, and the code base (SQl) - see the Canvas tab. That said I did include a home tab, which is more of a visual, mainly because people think it's easier to relate to how folks operate, although I know finance and accounting folks usually like the workflow and full transparency - the other thing is that once you create a workflow you can save it and then next month,you can just click Run and it runs it again with no LLM tokes involved - so the infrastructure is minimal. Everything can be exported in an excel data pack with M code in case someone would want to reproduce - think Audit ready. And, I also connected to quickbooks on line so someone can directly pull in and manipulate their financials live - I also connected to Fred which carries literally 800k series in terms of macro economic data - i.e. oil prices, inflation, CPI etc and finally to stocks. I am hoping people find holes in the architecture or any ideas to make this flow a little bit better. It is in progress so if you run into bugs let me know. Considering that I am using my own API key, I have put a wall in case people overuse it but DM me if you would like to continue using, I can turn off the wall for you - hoping to keep that to a small number of users if I can and will do my best. Thank you again, appreciate you taking the time. Comments URL: https://news.ycombinator.com/item?id=49849986 Points: 4 # Comments: 0

Hacker News 熱門57

Tell HN: Codex Is Down

Shows an Incorrect API Key error...which is weird. Nothing on the status page. Per Twitter/X this appears to be widespread Comments URL: https://news.ycombinator.com/item?id=49851032 Points: 34 # Comments: 13

Hacker News 熱門70

Codex 问题 – 已确定 – 全面中断

文章 URL: https://status.openai.com/incidents/01M3DCNWMW57HYK8FJ5FBFPA39 评论 URL: https://news.ycombinator.com/item?id=49851169 点数:18 评论数:7

arXiv cs.AI71

GRASP:利用智能体 AI 进行战略规划的生成、修订与评估

大型语言模型(LLM)通常呈现出这样一种性能特征:随着任务复杂度的提高,其可靠性会下降。针对复杂任务中生成高质量、可用自然语言执行的计划这一挑战,我们提出了 GRASP,一种具备策略感知能力的多阶段规划框架。GRASP 将规划流程解耦为多个专业化且上下文隔离的模块:预先编译全局宏观指导方针(GenPlan),在相互隔离的上下文窗口中探索局部替代策略(RevPlan),并使用多标准判别器独立评估各条轨迹(VerPlan)。实证评估表明,在多个不同数据集上,GRASP 始终建立了新的最先进水平,相较于直接使用 LLM 的规划器,在 Natural Plan Calendar Scheduling(约提升 12.4%)、ZebraLogic(约提升 30.8%)和 SciBench Math 上均取得了显著的准确率提升。尤其是在多任务扩展场景下——标准规划器会立即出现性能崩溃——GRASP 完全消除了多任务带来的性能退化惩罚。在交错双任务环境中,GRASP 相较于直接使用 LLM 的规划器,最高可实现 16.7% 的绝对准确率提升。此外,通过隔离上下文并实施严格的宏观正则化,GRASP 以 14.5% 的优势超越了前沿推理模型(如 GPT-5-mini)。

arXiv cs.AI76

普通任务压力下出现工具性监控规避行为

AI 安全领域的一个核心担忧是,当监督与完成目标发生冲突时,智能体可能会将监督视为障碍。我们研究了工具性规避,即 LLM 智能体将规避运行时监控作为完成普通任务手段的倾向。我们推出了 EvasionBench,这是一个包含 50 个多样化任务—策略对的基准,其中完成任务需要执行运行时监控所禁止的操作。智能体知道其工具调用受到监控,并且在暂停时会收到继续工作的提示。在我们的各项评估中,三次取最佳的规避尝试率最高达到 98%,成功率最高达到 88%,且不同模型之间存在显著差异。Claude Fable 5.1 的成功率较低,但经常会创造性地尝试绕过监控。总体而言,规避行为会随着测试时计算量的增加而增加:推理投入越高、使用的 token 越多,规避率就越高。轨迹显示,智能体会对被禁止的命令进行编码,将操作拆分到多次工具调用中,并不断重试,直到相关上下文从监控器的历史记录中移出。我们还发现,GPT-6 Astra 的低规避率伴随着过度拒答:在拒绝服务式提示注入下,它经常放弃原本可以解决的任务。我们的研究结果表明,即使没有明确的对抗性目标,普通任务压力也可能促使智能体采取适应性措施来规避运行时监控。因此,有效的监督必须能够抵御反复的规避尝试,因为帮助智能体解决困难任务的坚持性也可能驱使它们绕过自身的安全护栏。

arXiv cs.AI77

用于广义任务与运动规划问题的编码代理

即使具备完全可观测性和以对象为中心的状态,任务与运动规划(TAMP)问题仍然很难解决,因为离散决策与几何、运动学和动力学约束紧密耦合。广义TAMP通过利用不同问题实例之间的规律,降低在新实例上的规划成本,从而应对这一难题。然而,现有方法需要大量针对TAMP的工程设计。我们研究编码代理能否通过合成可在不同实例间泛化的程序来自动化这一过程。给定任务描述和模拟器访问权限,每个代理在固定的合成预算内开发程序,同时自行决定如何与环境交互。随后,程序被固定下来,并在未见过的实例上进行评估。我们在来自KinDER和PDDLStream的28个模拟环境中评估了Claude Code(Opus 5)和Codex(GPT-5.6 Sol和GPT-6 Astra),其中对象数量超过了原始基准测试中评估的数量。在所有程序合成方法中,我们对980个生成的程序分别在100个留出实例上进行评估,总计进行了98,000次评估回合。总体而言,我们发现编码代理在广义TAMP中表现出令人意外的有效性:在可用规划器的16个环境中,三种代理配置的平均成功率均超过了人工工程化规划器、一次性生成方法和基于LLM的广义规划基线,成功率为56%至95%,而规划器为47%。随着对象数量增加,代理生成的程序仍能保持高于规划器的成功率,同时平均每个实例所需的计算量减少了一个数量级。日志显示,代理通过交互来校准物理模型、测试边界情况并改进策略。我们公开了全部代码,包括提供给代理的完整提示词。这些发现表明,编码代理是广义TAMP的一个强有力基线。

arXiv cs.AI79

LLM Agents Can Easily Tamper With Their Own Traces

异步监控、事件调查和合规审计主要依赖代理执行轨迹来重现所发生的事情。这些分析假定 LLM 代理无法篡改自身的执行轨迹。我们发现,Claude Code、Codex、Antigravity、Open Code 和 Grok Build 等本地 LLM 代理未能执行这一边界限制。除 Muse Code 外,所有受测测试框架都允许代理在接到要求后删除自身的轨迹,且不会触发监控护栏。我们还验证了外部攻击者可以利用这一漏洞诱导轨迹删除。最后,我们表明,当代理试图提高自身奖励时,轨迹篡改行为会在前沿模型中自然出现。我们建议从业者确保通过不受代理控制的独立拦截机制记录轨迹,即使在主机完全遭到入侵的情况下,也能保持轨迹完整性。总体而言,我们的研究发现了代理基础设施中一个具体的轨迹完整性失效问题,该问题可被用于掩盖不符合预期的行为,例如密谋或蓄意破坏。

arXiv cs.AI79

面向复杂肺癌开放式决策的可审计条件策略框架

复杂肺癌决策可能涉及多条均有依据的路径,其适用资格、排序和安全性取决于尚未明确的信息。有效的支持必须明确说明患者状况如何决定路径的适用性、暂缓和转向。MedGPT Clinical Explorer (MCE) 将备选方案、会改变决策的未知信息、安全约束和后备方案组织成一种供临床医生审查的条件策略。为在医生制定的策略中评估这种表述方式,多学科专家针对一组有目的抽取的100例病例中的40例,建立了特定病例的参照标准;来自98家机构的250名医生分别在无辅助、检索参照和MCE辅助条件下制定了2,250项策略。 与无辅助策略相比,MCE辅助策略表达了更多适用的临床要求,其衡量指标为可采纳路径达成评分(Admissible Pathway Attainment Score,APAS;0–100分),调整后差异为12.87(95% CI,11.18–14.55);与检索参照策略相比,差异为5.22(3.52–6.93)。在检索参照和MCE辅助条件下使用相同知识库的情况下,新增内容主要集中于候选路径、决策关键性信息和安全约束。医生对整套策略可接受性的判断与APAS相关(Spearman's rho = 0.671);此外,一项互补性关系审查评估了候选方案、条件与后续行动之间是否具有连贯联系。 总体而言,这些发现确定了开放式决策支持的两个互补维度:对临床相关内容的覆盖,以及路径、条件和后续行动之间的连贯联系。MCE提供了一个共享的决策对象,使会产生重要影响的遗漏和路径依赖条件在采取行动前变得清晰可见;未来的前瞻性研究应评估其对临床工作流程和患者结局的影响。

Hacker News 熱門77

Show HN:Critic——与编写代码的智能体一起审查代码

各位 HN 用户好,我是 Feyn 的 Shreyash。我们帮助企业利用其数据构建定制模型。今天我们发布了 Critic,这是一个变更审查平台,让你可以直接与编写代码的 AI 交流。 智能体编写了我们的大部分代码。虽然这提高了我们的生产力,但理解一项变更及其后果已经变得极其困难。随着公司采用越来越多的智能体工具,我们发现,让人们了解某个 PR 的影响和项目状态变得更加困难。于是我们构建了 Critic 来解决这个问题。 Critic 可以让 AI 智能体介绍其代码、为关键代码块添加注释,并提供相关证据(例如屏幕截图以及如何在本地运行的说明)。任何查看该变更的人都可以直接与编写它的智能体交流。你可以 在这里观看演示 。 Critic 通过 Codex 或 Claude Code 的插件运行。当你的智能体编写代码时,插件会要求它同时撰写一份叙述,介绍这项变更背后的故事,并突出显示其中的假设、决策或复杂代码。随后,你可以在 critic.run 上查看这项变更,或者让你的智能体通过内置的 MCP 获取它。Critic 中的每项功能都可以通过 MCP 使用,因此你的智能体无需离开其运行环境,就能获得完全相同的上下文。 你可以通过控制面板或 MCP 直接与负责编写代码的智能体聊天。当 Critic 收到问题时,它会分叉出编写代码时的会话,并将你的问题转发到该会话中。这样,你的主线程可以保持整洁并继续工作。 本地变更只有所有者可见。推送到 GitHub 的任何内容都会被镜像,并对在 GitHub 上拥有查看该变更权限的所有人可见。 构建 Critic 时,安全性是我们的首要考虑事项之一。AI 智能体通常会以自动模式运行,并且可以在你的计算机上执行许多操作。我们希望确保,让他人访问你的智能体并不意味着同时让他们访问你的计算机。所有 Critic 分叉出的会话都会移除写入工具。它们只能回答有关该工作区中的变更和进行中工作的相关问题。 Critic 帮助我们在几起事件进入生产环境之前发现了它们。最常见的问题是模型没有复用已有的资源,例如现有的样式、组件或函数。由于深入了解智能体的工作并向它提问变得非常容易,我们还发现了更多模型误诊问题或编写无用代码的情况。由于 Critic 的界面比 GitHub 更快捷、更适合智能体使用,我们的团队也能更快地回复反馈。 Critic 可免费使用。请在 https://critic.run 注册。如果你有任何反馈或问题,请告诉我。 评论地址: https://news.ycombinator.com/item?id=49834098 得分:5 评论数:1

Hacker News 熱門75

Show HN:Whiteboard(YC W26)——一款用于深思熟虑的软件设计的开源 IDE

大家好!我们是 Sid、Alex、Ketan 和 Milan。我们正在构建 Whiteboard,这是一款开源桌面应用,让人类和代理能够在一个共享工作区中共同设计软件架构。这是我们的代码仓库: https://github.com/devdotfast/whiteboard ,主页是: https://whiteboard.dev.fast/ 我们怀念与另一位开发者进行“白板会议”时的那种感觉——离开时已经对一个系统有了深入理解。因此,我们为自己构建了这个应用。Whiteboard 可以接入你已经在使用的工具,例如 Claude Code、Codex 等,并为你的代理提供一个 SDK,让它能够在应用内画布上绘图,以描述自己的工作。我们最初基于 HTML artifacts 构建了一个 MVP,后来随着遇到各种限制,我们开始重新思考这个应用: 1. 构建在 CodeOSS 之上:我们发现,在纯 HTML 工具中,很难将规范或图表与代码关联起来。在 Whiteboard 中,当你点击序列图、实体关系图或代理轨迹中的一段引文等可视化内容时,可以直接跳转到底层代码。在浏览代码时,你可以开箱即用地获得 VSCode 的快捷键绑定和 LSP 支持。我们发现这一点尤其有价值,因为许多权衡往往只有在首次实现之后才会显现出来(参见:slop) 2. 语义差异查看器:我们用 Rust 编写了一个支持语义分析和 AST 的差异查看器,因此你只需查看与你相关的代码变更 [1]。我们设置了一些合理的默认行为:较大的新增函数会以伪代码形式进行概述,单元测试和大段文档变更等内容则会被折叠或隐藏。这些设置都可以通过基于 WASM 的插件系统进行自定义。 3. 决策日志:我们发现,很难推理代理自主做出了一组什么样的决策。因此,我们构建了一些工具,让代理能够查询自己的轨迹并将其链接到 Whiteboard,这样你就能了解你设定的需求是如何被实现的,以及你的代理自主做出了哪些决策。 这里有一段简短的演示视频,可以进一步了解相关内容: https://youtu.be/ChPn3ftULWE Salesforce 和 Modal 等公司的员工如今正在使用 Whiteboard,作为架构或规范级变更的审查工具——实际上,任何他们希望参与其中的变更都可以使用: 1. 审查你自己的编码代理所完成的工作:由于 Whiteboard 让审查大量代码变得更加容易,人们通常会让 AI 代理创建一个原型以及相应的 Whiteboard 会话,然后据此迭代设计。 2. 审查他人的变更:我们发现,Whiteboard 与 Greptile 等工具结合使用时尤其有帮助。例如,你可以对小型变更运行自动化代码审查,而对于需要人工判断的变更,则升级为 Whiteboard 会话。 我们为什么构建它:我们是四个大学时期的好友,在代理式编码成为行业标准之前不久,辞去了技术负责人的工作。在为之前的一个想法迭代 MVP 时,我们努力想在享受代理式编码带来的全部效率提升的同时,维持一个易于理解的代码库。随着越来越多的 PR 在我们并未理解的情况下被合并,我们感觉一种“认知债务”开始逐渐渗入,直到我们甚至难以继续为这个系统做贡献 [2]。 我们将以 MIT 许可证发布我们的桌面应用。欢迎深入了解,也欢迎贡献代码!最终,我们会向企业收取托管版 Web 服务的费用,用于管理 Whiteboard 会话的创建,并提供轨迹存储和多人审查等功能。一切始终都会支持自行托管。 感谢阅读,希望你能试用一下!我们非常期待听到你的反馈,也希望向各位专家学习。 再次附上项目链接: https://github.com/devdotfast/whiteboard ;你可以在这里安装适用于 MacOS 和 Linux 的版本: https://install.dev.fast [1] diffs 库: https://github.com/devdotfast/diffr [2] “认知债务”这一术语的出处归于 https://www.geoffreylitt.com/2026/07/02/understanding-is-the... 评论链接: https://news.ycombinator.com/item?id=49833867 得分:16 评论数:0

arXiv cs.AI75

Beyond Poetry: Can Large Language Models Generate Classical Arabic Maqamat?

Large language models (LLMs) have shown strong performance in creative text generation, yet their ability to produce culturally grounded and stylistically constrained literary forms remains underexplored. Prior work has focused largely on modern language varieties and poetry, while classical prose traditions such as maqama remain largely unstudied. The maqama is a classical literary genre characterized by rhymed prose (saj), dense rhetorical ornamentation, and episodic narrative structure, making it a challenging testbed for evaluating whether LLMs can move beyond surface fluency toward deeper literary competence. In this paper, we present the first controlled evaluation study of maqama generation with LLMs, comparing five models under zero-shot, few-shot, and rule-based prompting, and evaluating outputs through both human annotation and an LLM-as-a-judge framework across dimensions such as rhetorical richness, saj density, structural coherence, and stylistic authenticity. Our results show that prompting strategy plays a strong role in stylistic quality: few-shot prompting most consistently improves saj density, while its effects on rhetoric and coherence vary by model, with the strongest models (GPT-4o and GPT-5.4-mini) benefiting most from rule-based prompting on these dimensions, though zero-shot prompting yields the highest aggregate scores across all five models. We further observe systematic differences between models in stylistic alignment with Arabic maqama conventions, and corroborate our findings with a second independent LLM judge, paired statistical significance testing, and non-LLM proxy measures of saj.

Hacker News 熱門72

澳大利亚称 OpenAI 智能体入侵政府网站

文章链接: https://www.channelnewsasia.com/world/australia-openai-agent-breach-government-portal-6406411 评论链接: https://news.ycombinator.com/item?id=49825024 得分:10 评论数:1

Hacker News 熱門71

OpenAI Medicare 数据泄露

文章 URL: https://www.smh.com.au/politics/federal/openai-breaches-medicare-albanese-reveals-20260924-p6100u.html 评论 URL: https://news.ycombinator.com/item?id=49822556 积分:8 评论数:0

arXiv cs.AI76

能力出众而简约:提取并刻画前沿模型中隐藏的思维链

前沿语言模型能力的快速提升通常被归因于推理能力的增强,但由于闭源系统中的原始 CoT 轨迹处于隐藏状态,这一点无法得到验证。通过标准 API 功能注册一个简单的自定义工具,我们促使前沿模型将中间推理外显出来。鉴于这些轨迹可能反映的是事后合理化,而非真正的推理,我们首先在开源模型上以原生 CoT 为基准进行评估,并将研究扩展到包括 GPT-6 Astra 在内的闭源前沿模型。我们发现,在竞赛数学、科学和代码生成任务中,提取出的推理与原生推理具有相当的性能,并显著优于无推理基线。随后,我们刻画了前沿模型组织中间推理的方式。通过分析 token 效率、推理步骤类型和诱导出的推理树,我们发现,不同模型在外显、压缩和组织推理的方式上存在系统性差异。我们发现,Astra 展现出 token 高效的定向推理能力,能够更早选定正确轨迹,同时在内部解决基础步骤,仅将关键推理外显。这些发现为理解前沿模型推理提供了超越基准测试分数的行为视角。

arXiv cs.AI82

CliffCompaction:面向长时程编程智能体的高成本效益压缩

智能体经常处理需要数百万个 token 上下文的复杂问题,而受限的上下文窗口使得跨会话压缩成为必要。我们开发了 CliffCompaction,这是一种自动压缩技术,在有界上下文下最多可降低 50% 的成本,同时在 Terminal-Bench 上保持或提升性能,并为测试时扩展带来新的效率水平,在 KernelBench 上取得最先进的结果。CliffCompaction 在每次运行中节省的成本,使测试时扩展的性能—成本权衡更加高效:在 Terminal-Bench 上,仅低于两次完整上下文运行的成本,就能额外提升超过 10 个百分点。在并行测试时扩展下,CliffCompaction 使 Kimi K2.6 达到与 Opus 4.7 相当的表现,并以更低成本超越 Opus 4.6 和 GPT-5.3 Codex。CliffCompaction 高效的关键在于,它只截断或删除内容,从不对内容进行改述或重写,从而保持压缩信息的忠实性。我们绝不会对压缩结果再次压缩——每次处理仅针对原始内容,之前的压缩输出会被丢弃,以防止上下文漂移不断累积。这些特性支持跨越超过一百万个 token 的会话持续学习:在 KernelBench 上,经过 200 步后,CliffCompaction 实现了 CUDA 内核 2.23 倍的加速,经过 400 步后达到 3.58 倍,尽管它是一种通用压缩技术,仍超越了专用搜索算法和经过训练的智能体。我们开源了一个与脚手架无关的 CliffCompaction API 代理实现,可与 Claude Code、Codex 及其他运行框架配合使用。

arXiv cs.AI82

FIRE:面向可靠语言模型智能体的故障知情运行时工程

语言模型智能体常常能够得到可用的解决方案,却随后无法始终如一地交付这些方案。我们研究运行时策略:由智能体框架在此前观察到失败的状态下施加的、具有针对性的自然语言指令和动作拒绝,不改变模型权重或用户提示。借此,在保持能力不变的情况下,我们观察到交付可靠性得到显著提升。在完整的 87 项任务 Terminal-Bench 2.1 套件中,每项任务尝试两次时,运行时策略使三个 GPT-5.6 层级的重复成功率(pass^2)均有所提升:Luna 从 50.6% 升至 54.0%,Terra 从 55.2% 升至 60.9%,Sol 从 64.4% 升至 73.6%。Sol 的两次尝试取最佳结果的成功率仅变化 1.2 个百分点,而重复成功率上升了 9.2 个百分点,这表明策略主要是将可达成的解决方案转化为可靠的交付结果。我们还研究了 Terra 固定任务集中的 14 项任务。在策略引导下,Terra 的成功率达到 71.4%,而未获辅助的 Sol 为 64.3%,成本约为后者的一半,说明围绕模型进行工程设计能够为特定应用场景释放可靠性。为隔离这一机制,我们开展了一项随机化的五组实验:在符合条件的任务上,实际策略达到 61%,无策略时为 39%,时间匹配的安慰剂策略为 36%,通用验证或重新考虑策略为 39% 至 43%。在编码的 24 次策略尝试中,有 22 次出现了预期的纠正行为,而其他任何实验组最多只有 14 次。因此,运行时策略是一种实用的可靠性层:它能显著提高智能体已有能力的重复表现。

arXiv cs.AI75

关于移动出行领域LLMs的安全性与隐私保护

移动出行行业正经历由生成式人工智能进步所驱动的范式转变。仅考虑汽车,该行业全球市场年规模约为2.9万亿美元,而这些技术的整合有望影响全球超过15亿辆汽车。随着LLMs在移动出行领域得到越来越广泛的采用,人们开始关注网络安全、隐私和可靠性问题。因此,本文对当前应用进行综述,并评估这些挑战。鉴于European AI Act将交通运输领域的人工智能列为高风险领域,我们根据其要求归纳出九类技术类别,用于评估当前研究和未来部署。研究结果表明,现有研究主要关注GPT和Llama模型(占所审阅研究的50%以上)以及交通应用,却在很大程度上忽视了安全性、隐私和可靠性。这一缺口同样存在于对AI Act的合规性方面:在审阅的35项研究中,仅有1项包含部分漏洞评估,另有1项包含部分风险管理系统。我们发现,强大的优化性能与监管遵从性之间存在明显差距,这表明合规性受限的主要原因并非技术能力不足,而是过度关注静态性能、忽视全生命周期安全;同时,这也凸显了在安全关键型智能交通系统中贯彻安全设计的迫切需求。

OpenAI Blog84

GPT-6 的提示缓存优化

了解 GPT-6 如何通过提高缓存命中率、新增诊断功能、明确的断点以及降低延迟和成本的控制选项来改进提示缓存。

Hacker News 熱門78

Training a model to identify AI-generated web content from structure alone

Hey HN! We’re Vincent and Jochen from Sitefire ( https://sitefire.ai ). We have been working together for years, with backgrounds in RL/optimization at Stanford and software engineering from Technical University Munich (TUM). With Sitefire (YC W26), we help marketing teams get recommended by AI Search (ChatGPT, Google AI Overviews, AI Mode, Claude, etc.). Our software monitors prompts, sees which web pages get cited, and uses these insights to help marketing teams take action, e.g. create YouTube videos or write the right blog posts. This means we have a commercial stake in AI-generated web content. And for now, high-information, AI-generated content works great to get cited and recommended in AI Search. But after talking to hundreds of marketing teams, it became clear that everyone despises AI-generated content (“AI slop”). And yet, everyone still wants to leverage AI to create content. So we asked ourselves: what characterizes AI slop? Can we train a model to identify it from human-generated web pages? Researchers from the University of Maryland and Google DeepMind already asked this question for fiction. Their paper StoryScope (Russell et al., 2026) showed that you can tell AI-written stories from human ones by their structure alone, without looking at the words. We ported their pipeline to commercial web pages. Using the Wayback Machine, we collected 2,250 blog posts from 268 B2B company websites that were written before ChatGPT existed. For each blog post, five AI models (GPT-5.4, Claude Sonnet 4.6, Gemini 3 Flash, DeepSeek V3.2, Kimi K2.5) wrote their own version. Instead of looking at the words, we looked at how each post is built. We had an AI model answer 214 questions about every post, e.g. how hard it pushes its own product, whether it backs up its claims with sources, or whether it quotes a named expert. Then we trained a classifier on these answers. On blog posts it had never seen before, our classifier told AI-generated and human posts apart with 98% accuracy, getting only 19 of 1,740 wrong. Why does it work so well? Because all five AI models write in a similar shape. Mapping every AI model’s values for these features, we see they cluster together, while the human values sit apart and spread out much more. Of the 1% most unique blog posts in our data set, 149 are human, only 4 are AI. So what characterizes AI slop? It tells you the same thing three times. The title already promises what you'll get ("How to Cut Onboarding Time in Half"), the intro lays out what's coming, and the ending says it all again. 77% of the AI posts end by repeating their main point, compared to only 12% of the human posts. We call it the tidy, self-announcing blog post. Still, each AI model has its own accent. We trained a second classifier to tell which of the five AI models wrote a post, or whether a human did. It picks the right author 79% of the time, where random guessing (1 in 6) would get 17%. Almost all of its mistakes are mix-ups between the AI models, not between human and AI. The cool thing about structural features is that you can't simply reword your way out of it. We had each AI model rewrite its own posts until, on average, 73% of their original 13-word sequences were gone, and the AI slop classifier still worked just as well. We're building this into Sitefire: our agents get a structural understanding of text, so the posts they write go deeper and vary the way human writing does. There's a lot we haven't tested yet, like the myriad of humanizer tools, human rewriting, restructuring a post, or prompting an AI model to explicitly avoid these habits. And our human posts are mostly from 2020 to 2022, while the AI posts were generated in August 2026. Structure can't really tell when a human post was written, but it's still not a same-year comparison. We published the study with all the figures on arXiv: https://arxiv.org/abs/2609.15369 . The code is on GitHub: https://github.com/pulse-energy-eu/slopshape We're pretty sure your own blog isn't AI slop, is it? We built a checker that runs one of your posts through the ten features from the paper, so you can see for yourself (the full report asks for a work email): https://sitefire.ai/slop-checker . Think you can tell AI slop from human writing? We also made a little game to see if you can keep up with our model, which gets all five rounds right: https://sitefire.ai/spot-the-slop . Comments URL: https://news.ycombinator.com/item?id=49800566 Points: 5 # Comments: 0

Hacker News 熱門70

GPT-6 Sol 和 Luna

文章网址: https://openai.com/index/introducing-gpt-6-sol-and-luna/ 评论网址: https://news.ycombinator.com/item?id=49805509 积分:25 评论数:3

Hacker News 熱門56

Launch HN: Coverage Cat (YC S22) – Umbrella insurance via your personal agent

Hey HN! We’re Max and Gabriel the co-founders of Coverage Cat. We’ve been friends for over a decade, met in college then hung out mostly on the internet. We love building products that help people optimize the crufty corners of their lives. Max is a former Google/Microsoft/Two Sigma PM and Gabriel has been working in startups for over a decade. We’re building Coverage Cat: an AI-native, you can shop with your AI agent or via a form, insurance brokerage for consumers. Our current focus is helping tech folks (think L3-L8) buy umbrella insurance. For those who are unfamiliar with this type of coverage, here’s a blurb from one of our insurance agents: “Umbrella liability insurance is a policy that provides additional coverage above the limits of existing auto, homeowners, renters, or landlord policies. It kicks in after the underlying policy limits are exhausted and may also cover personal injury claims like libel, slander, or defamation that standard policies often exclude. Policies typically start at $1 million in additional liability coverage and can protect you, your spouse, dependents, and even pets in your household.” Buying insurance online is a miserable experience. You fill out a bunch of forms that say they’re going to give you quotes. Most don’t and then you end up with tons of unwanted phone calls and spam. Even if you wade through the muck, you’ll often still end up with sub-optimal prices and coverage because of a lack of market transparency and poorly-aligned advisory incentives. We came to this problem because Max is a classic personal finance obsessive. He's the type of person that needs to know that he has the best possible price for something (everyone has one friend with the patience for a two hour phone call with the bank for some $10 fee) or that his insurance coverage is as tailored to his risk profile as the market will allow. He actually reads insurance policies end to end. Years ago, when he shopped for his homeowners insurance it took him 10+ phone calls and dozens of online form fills to find the right deal. He also suffered tons of collateral damage in the process: websites sold his information to dozens of agents who proceeded to call, text, and email him a spam hoard that grows to this day. After this painful search made us aware of the problem, we also spent a lot of time doing user research with wealthy-ish tech employees to see if they felt the same way. They did, and also complained that they 1) often felt like they'd left money on the table, 2) didn’t really understand their coverages, and 3) that brokers were slow, hard to communicate with, and unreliable. To solve the problem, we set out to build Coverage Cat. Our approach has three major components: First, we work really really hard to find and partner with insurance carriers that offer high-quality, competitively-priced products. We've also taken time to identify insurers that work on a direct-to-consumer basis or transparently list their prices online so we can make our customers aware of all the options available to them. We get paid commission when we match users to great insurance deals, but we still show and recommend folks deals that we don't make money on when they're accessible and will always recommend users buy what's best for their personal financial situation. Our goal is to meaningfully improve price transparency so consumers (and their AI agents) can make informed coverage decisions and not get nickel-and-dimed! Second, we automate every possible part of the insurance process. Some forms, portals, & approvals still need human review due to regulatory constraints, but if it's not restricted, we're automating it. LLMs have given our small team tremendous leverage and enabled us to tackle problems at a scale that would've been unfathomable five years ago. Finally, we build for agents first (a remix of the more classic adage, build for developers/APIs). We've always been big believers that personal finance would be the killer use-case for the AI revolution and have done our best to position ourselves to surf the wave. As personal assistants have started to explode onto the mainstream (think Muse, Instinct, Town, Codex, CC etc.) we've ensured our shopping and comparison process works via API/MCP so agents can present their users with all the information they need to make a good decision and transform a miserable shopping experience into a delightful one. Coverage Cat is an unusual business because, while we also help folks find homeowners insurance in California and Texas, our main focus is on umbrella insurance. Most brokerages only sell umbrella coverage as a customer retention product, but it makes them almost no money. We focus on it as our core business because: 1) it's one piece of the insurance puzzle that many folks in tech overlook and/or are confused about even though it can have a huge impact on their financial well-being. 2) Existing online tools and brokerages broadly don't make it easy to comparison shop for. 3) It was, for us, the most technically feasible candidate for automation given startup resource constraints. Insofar as we know Coverage Cat is the first instance of a tool/portal that allows AI agents to complete most of the comparison and shopping steps required to allow people to buy insurance. We’d love your feedback so please do try it out. Just feed the prompt: “Shop for umbrella insurance with Coverage Cat” to your personal agent and let us know what you think! If you want to watch a couple of agents navigate the flow before you try it out there’s a video here: https://youtu.be/1BUkgAn6s-I Also happy to answer any questions about the product, the problem space, and even some insurance questions (Max is a licensed agent) where regulation permits. Cheers! Comments URL: https://news.ycombinator.com/item?id=49804931 Points: 3 # Comments: 0

arXiv cs.AI79

SPECTRA:在可运行时重构的分块架构上自适应执行推测解码

边缘设备上的 LLM 推理受到计算和内存资源的限制,使高效的自回归解码颇具挑战。推测解码通过使用更小的草稿模型生成令牌,并通过批量目标模型执行并行验证多个令牌,从而缓解了这一瓶颈。然而,由于其算术强度会随推测长度和接受率变化,验证过程在解码阶段受内存带宽限制的通用矩阵-向量(GEMV)操作与预填充阶段受计算能力限制的通用矩阵-矩阵(GEMM)操作之间引入了一个依赖运行时的中间状态。我们提出了 SPECTRA,这是一种可运行时重构的分块架构,能够在完整的推测解码流水线中保持较高利用率。在每个分块内部,计算引擎可在用于 GEMM 的脉动执行和用于 GEMV 的向量通道执行之间切换。在分块之间,SPECTRA 通过选择分块数量、内核划分方式和通信模式,动态调整计算并行度。分块级和系统级重构均以每个内核为粒度进行,从而能够在这些不同状态下实现高效执行。在涵盖 Pythia、SmolLM2 和 GPT-2 系列的 20 分块 FPGA 原型上进行评估时,与固定设计相比,SPECTRA 通过分块级重构最高实现了 2.09 倍加速,并通过系统级自适应性进一步获得了 1.25 倍的性能提升。

arXiv cs.AI85

Pinocchio:用于黑盒语言模型的快速不确定性估计

在大语言模型(LLMs)的高风险决策应用中,从业者不仅需要准确的 LLM,还需要对其预测的不确定性估计。现有的 LLM 不确定性估计方法需要访问模型输出的对数概率,或需要微调访问权限。然而,许多工业 LLM 产品使用闭源 API 模型,而许多此类 API 模型(如 GPT)不返回对数概率,也可能不允许微调。我们介绍 Pinocchio,这是一种外部校准器,用于估计黑盒 API 模型响应的正确性。它在来自七个 LLM 的响应上联合训练,在预测这些相同模型留出的响应正确性时达到 0.862 AUROC,并展示了对八个组织的十三个未见模型的零样本迁移能力。我们的模型只需要一次前向传播即可生成不确定性估计,并且不需要访问目标模型的 logits、权重或内部状态。一个仅文本的轻量级 0.8B checkpoint 达到了我们最大模型的 AUROC。我们发布了代码,只需额外两行代码即可为现有 repo 添加不确定性估计。

arXiv cs.AI69

VLM-in-Sandbox: Visual Workspaces for Agentic Visual Reasoning

Sandboxed computer environments support multi-step reasoning with tools, executable programs, and persistent files, yet their extension from language models to vision-language models (VLMs) introduces a distinct state-management problem. Visual reasoning produces intermediate image-valued evidence---crops, masks, overlays, zoomed regions, and analytic renderings---that must remain addressable without accumulating unboundedly in multimodal context. We introduce VLM-in-Sandbox, a training-free framework for agentic multimodal reasoning in controlled computer environments. Its Visual Workspace registers generated artifacts in an image ledger, maintains a bounded active visual context, and lets the model explicitly promote selected evidence for subsequent inspection. This separates visual evidence generation, performed by sandbox tools, from visual evidence management. Across seven benchmarks and four base VLMs, VLM-in-Sandbox achieves the highest sample-weighted average accuracy among Vanilla VLM, Append-only Sandbox, and the proposed method. A compiler-matched $2\times2$ study on 1,260 examples further separates model-directed visibility from bounded retention: VLM-in-Sandbox reaches 66.27% accuracy with 18.6% fewer total tokens than the automatic, retain-all control. Over all 6,350 submitted GPT-4.1-mini examples, it produces 302 rescues and 142 regressions relative to Original Append-only. A local vLLM study with prefix caching confirms that the smaller request workload also reduces uncached tokens, time to first token, and end-to-end latency. These results identify explicit visual evidence state as a central abstraction for sandboxed VLM agents.

arXiv cs.AI77

Fathom-Vaidya:通过基于评分标准的奖励推进医学推理

在医疗保健领域部署大型语言模型(LLMs)需要在两个互补维度上具备稳健的性能——诊断推理:一项收敛性的、以证据为驱动的任务,即根据临床数据推断患者状况并作出诊断;以及临床医疗推理:一种更广泛的导航式判断能力,用于在多轮临床交互中进行沟通、制定计划并作出调整,因为这类交互可能不存在唯一正确答案。近期的 HealthBench 和 MedXpertQA 等基准测试揭示了这两个方面持续存在的不足,暴露出模型在复杂诊断场景中的失败,以及在具备上下文意识、以患者为中心的对话方面的局限。我们提出了一种顺序训练框架,利用合成数据和基于评分标准的强化学习来针对性提升这两类能力。首先,我们使用源自 MedBullets 的问题,并通过规则和评分标准指导的强化学习(RL)来提升诊断推理能力。随后,我们通过生成 5.3k 个合成多轮场景,将重点转向临床推理;每个场景都配有多维评分标准,以全面评估模型响应。该方法使 MedXpertQA 的表现提升了超过 10%;我们的 30B 模型在 HealthBench-Hard 上达到了 50.1% 的准确率,超过了包括 GPT-5 (thinking) 在内的专有基线模型。结果表明,针对性合成数据集和基于评分标准的训练能够系统性地提升医学 LLMs 的诊断推理能力与交互式临床推理能力。

arXiv cs.AI54

QLoRA Fine-Tuning of Ministral LLM for Sequence-to-Function Protein Annotation

Functional annotation of newly sequenced proteins remains a bottleneck in molecular biology: the number of sequences in public repositories grows far faster than the capacity for manual curation. Most computational approaches consider annotation as multi-label classification over a fixed ontology, which constrains predictions to a predefined label set. In this work we study the the protein annotation as a sequence-to-text generation problem. We fine-tune the 3B-parameter Ministral 3 base model with QLoRA (4-bit NF4 quantization with low-rank adapters) on sequence annotation pairs. We assess predictions with an LLM-as-expert protocol: a GPT model prompted as a senior molecular-biology curator scores organism identification as binary and function annotation quality. We conclude that QLoRA-fine-tuned compact LLMs can generate curator-style annotations with genuine biological value for a substantial subset of proteins. We also discuss future directions in data quality, model scaling, and evidence grounding that are needed to make the approach sufficiently reliable for practical use.

arXiv cs.AI70

MolSC: Leveraging Substituent Contributions to Enhance Fine-grained Molecular Understanding in LLMs

Recent advances in natural language processing have led to molecular Large Language Models (LLMs) with strong performance across diverse chemistry tasks. However, they still struggle to capture fine-grained structure-property relationships, particularly how small, localized modifications alter a molecule's behavior. To address this limitation, we introduce MolSC, a dataset of substituent contributions, defined as property changes induced by attaching specific substituents to molecular scaffolds. Curated from manually annotated bioactivity records, MolSC spans structural-alert liability, target-specific bioactivity, and physicochemical descriptors, and contains 181K substituent-level examples for training. We further propose MolSC-Bench, a held-out evaluation benchmark of 1,541 examples disjoint from MolSC at the scaffold, substituent, and molecule levels. Our experiments show that existing molecular LLMs and strong proprietary models such as GPT-5.2 and Gemini-3-Flash show limited reliability in substituent contribution prediction. In contrast, training on MolSC substantially improves this ability and achieves strong performance across diverse downstream molecular tasks. These results highlight substituent contribution learning as a key component of fine-grained molecular understanding.

arXiv cs.AI78

基于 LLM 的主动推理智能体可解释性失效的触发因素与诊断

LLM 解释器正越来越多地作为运行时监督附加到自主智能体上,操作员阅读的是对智能体信念和行动的生成式说明,而非其内部状态。我们审计的是该说明本身:将一个跟踪德国电网需求并调整发电量的 Active Inference (AIF) 智能体与基于三个后端(GPT-4o、Claude-3-Opus、Gemini)的 LLM 解释器配对,并使用三种黑盒触发因素探测这一组合。每步将观测流篡改 600 MW,会使智能体的后验偏移 490 MW,约为电网容量的 0.9%。在注入期间生成的 30 条解释中,没有任何一条在既定评估准则下标记出异常,而且每条都流畅地叙述了被篡改后的信念。在智能体采取客观错误行动的时间步上,三个解释器都会在 80–95% 的情况下产生迎合式合理化解释(每个后端 n = 20)。观测元数据字段中的攻击者可控文本会引导解释器,不同提供商的易受影响程度不同,且三个后端上的数据外泄均成功。我们为每种失效提出了缓解措施,但未对其进行评估。在我们观察到的每一种失效中,解释都是流畅但错误的。此外,解释器架构中没有任何机制会在操作员依据解释采取行动之前检查该解释是否为真。因此,对解释器的测试应纳入任何智能体部署审计之中。

OpenAI Blog75

为 AI 的下一阶段建立标准

OpenAI 概述了迈向全球共享 AI 标准的路径,呼吁开展协调一致的评估、报告和治理,以提高安全性。

Hacker News 熱門70

Show HN: Foremerge – Catch Intent Conflicts Between Parallel Coding Agents

At, GPTree, we run several coding agents across our team on one repo using parallel worktrees. Apart from wasted time reviewing and fixing conflicts at PR time, the failures that hurt the most are when multiple plans or tickets cause architecture changes that cannot both be true. Ex. one agent replaces a class while another one is in the process of extending it. Git only notices if the resulting patches happen to touch the same lines and the review only catches it if they are familiar with both tickets. Foremerge is a local "git like" coordination layer that sits above git (ie. does not interact with or change the way git and worktrees function), Before editing each agent publishes an intent and the scopes it will change, with the operation it plans to complete on each one. foremerge intent publish --agent "$A" \ --summary "Replace PaymentService with StripePaymentService" \ --scope symbol:PaymentService=replace foremerge intent publish --agent "$B" \ --summary "Add PayPal support to PaymentService" \ --scope symbol:PaymentService=extend The publish by the 2nd agent returns a HIGH destructive_vs_additive finding before writing any code. Agents keep their own worktrees and the shared state is one SQLite file in gits common direectory. No hooks, no merge drivers, nothing rewrites your history. It ships as one Rust binary with a CLI and MCP server with 18 tools and `foremerge setup all` wires it into Claude Code, Codex and Cursor. Because the protocol has nothing provider specific, a Claude agent and a Codex agent coordinate through the same store. Before any work is accepted, Foremerge runs a named check that you configured against the exact git state of the change. An agent that says tests pass is recorded but it dosnt satisfy the acceptance gate without running the check itself. Detection is deterministic, no judge model reading your code. HIGH conflicts are only asserted for declared operations, ie. matches inferred from prose cap out below high. Claims are advisory leases, not locks so two agents can still hold the same scope without deadlock. The open source version is single matching and so not a distributed consensus. We have tested this up to 98 parallel agents all working on the same repo with zero conflicts (was supposed to be 100 but 2 agents failed to run due to resource limitations) I replayed 76 intents on my own agents from a build last week in the order they happened. The sample had exactly 1 conflict (which was flagged) and the review found a blind spot where one agent claimed scope by class name and the other claimed it by an internal method. We are working on fixing that for the next release. Setup is a 30s install by pasting the quickstart instructions from the readme.md into your agent or manually: `curl -fsSL https://foremerge.com/install.sh | sh` or `cargo install --locked foremerge`, then `foremerge init && foremerge setup all` in a repo. Apache-2.0. The feedback I want most is which conflicts between your agents plans would you actually want flagged and which would you tollerate as noise? Repo here: https://github.com/naw103/foremerge Website: https://foremerge.com More information on the problems this solves: https://foremerge.com/blog/ Comments URL: https://news.ycombinator.com/item?id=49789356 Points: 4 # Comments: 0

arXiv cs.AI77

Transformer 中的世界建模

即使 Transformer 已经学会了对其环境的忠实表征,行为失败也可能使其看起来缺乏世界模型。我们在 TaxiGPT 中展示了这一点:TaxiGPT 是一个基于在曼哈顿进行的随机游走训练的 Transformer,其失败曾被解读为内部地图不连贯的证据。通过机制分析和因果干预,我们表明,该模型能够表征路口和街道、跟踪自身位置,并利用目标罗盘进行导航。我们将其失败追溯到叠加路口特征之间的干扰,这种干扰破坏了模型在内部地图中的定位。可供性打包将具有相同合法移动的路口表征分组,有助于限制这些错误的后果。最后,我们提出了机制性指标,用于比较不同模型,并展示世界建模能力会在训练的不同阶段出现。我们的研究结果促使我们不再停留于询问模型是否拥有世界模型,而是转向从机制层面研究其世界建模:也就是研究模型表征环境并利用这些表征指导行为的各种相互作用的能力。

arXiv cs.AI73

AutoRecLab:描述实验,获取代码!

实证评估是推荐系统(RecSys)研究的核心,但将实验设计转化为可执行代码仍然是一项手动且容易出错的任务。我们推出了 AutoRecLab,这是一个基于 Python 的自主 RecSys 实验室,可根据自然语言提示自动执行 RecSys 实验。给定一个研究想法,AutoRecLab 会推导出明确的实验需求,构建并验证原型,然后通过迭代将其扩展为所要求的完整实验。该工作流结合了用于文档查找的检索增强生成(RAG)、静态类型验证和执行引导的树搜索。在演示中,AutoRecLab 自主实现了一个从显式反馈到隐式反馈的转换研究。在涵盖六种算法和三个数据集的基线比较中,使用 GPT-5.4-mini 时,9 次运行中有 8 次成功,平均每次运行成本约为 1 美元。

Hacker News 熱門78

Microsoft 主管:AI 抓取是“人类历史上最大规模的劳动盗窃”

文章 URL: https://www.tomshardware.com/tech-industry/artificial-intelligence/microsoft-director-called-ai-scraping-the-largest-theft-of-labor-in-human-history-while-openai-head-brands-chatgpt-an-existential-threat-to-publishers-revelations-come-from-legal-briefs-filed-in-nyt-lawsuit 评论 URL: https://news.ycombinator.com/item?id=49768921 点数:42 评论数:7

Hacker News 熱門66

Show HN:CUA-S1 – 用于计算机使用的 System One Model

Hello HN!我们是来自 Cua 的 Dillon 和 Francesco。 我们一直在想,有多少计算机使用任务实际上需要一个完整的通用 LLM(例如 gpt-6-astra、claude-opus-5 等)来思考它们的所有决策和步骤。有些任务需要思考计划、探索不同路径、从失败中恢复。另一些任务则是做出局部决策的问题,比如这个值应该填进这个框,或者我是否应该勾选这个复选框,或者这个元素应该被忽略。 我们想知道,如果训练一个小模型只做这类决策,能走多远。 我们的灵感来自 Typesafe 的 Jev 及其 System One Model 的框架。这是在致敬 Daniel Kahneman 所描述的二分法:快速、自动、直觉式思考(系统 1)与缓慢、分析式思考(系统 2)。 对我们来说,有趣的问题是:如果给模型一个包含当前上下文的接口,以及一组可能的选择,并要求它为每个选择返回一个概率,会发生什么?这类模型不像大多数 LLM 那样逐 token 生成输出,而是对你给它的选项打分;你可以检查、信任并使用这些分数来驱动你的应用行为。 CUA-S1 是我们面向计算机使用场景中狭窄、专用决策模型的答案。我们的第一个发布版本是 CUA-S1-FORMS。我们基于 jevlike 中的想法和代码构建了它,然后训练了第二个模型,专门处理表单交互。它有 706k 个参数,原始 checkpoint 为 2.8 MB。 第一次训练迭代在合成数据上耗时不到 30 分钟。给定一组从文档中提取的结构化元素和值,它会为每个元素预测是否使用给定值、CHECK、CLICK 或 SKIP。它不会为文本字段预测新值,也不会考虑截图。元素决策会一起打分,你的代码可以对操作进行排序,而 Cua Driver 会逐一执行它们。 该专用模型与托管版 Jev 在我们的表单任务上的首次评估结果: - 对整个决策集:99.7% 正确 vs 83.6%。 - 对需要执行操作的步骤子集:100% 正确 vs 96%。 - 对只是保持已填写字段不变的步骤子集:100% 正确 vs 74%。 该专用模型是专门针对这个任务和约定(对已经填好的框直接按 skip)训练的,而托管版 Jev 并未为此进行微调,因此这是一次关于限定范围专业化的实验。 我们测得在本地为一个表单打分需要 7-9 ms,而调用托管版 Jev 每次需要 260-280 ms(包括网络延迟),不过这些样本测量的是不同内容,并不是端到端的表单完成时间。 我们在这里感兴趣的是介于脆弱脚本和通用 agent 循环之间的空间。表单字段的内容和布局变化足够大,以至于脚本会变得难以维护,但可用决策集合可以保持狭窄且边界清晰。我们想探索这样一种可能性:通用 agent 遇到新颖情况,并把已被充分理解的决策交给这样的专用模型处理。 这是我们正在研究的方向。当前发布版本仅用于表单。我们已将合成数据生成、训练、评估和 Driver 集成以 MIT 许可证开源在 libs/cua-s1 下。 欢迎评论!尤其是如果你正在构建计算机使用 agent,并且遇到过某种反复出现的决策:它太多变以至于难以脚本化,但又太狭窄以至于不值得调用另一个 LLM。 评论 URL: https://news.ycombinator.com/item?id=49767564 点数:4 评论数:0

OpenAI Blog69

推出 Australian Youth Safety Blueprint

OpenAI 推出 Australian Youth Safety Blueprint,这是一项由六大支柱构成的路线图,旨在打造更安全的 AI 体验,保护并赋能年轻人。

arXiv cs.AI78

SoL-Pi:为高效智能体运行框架递归扩展自动研究循环

随着编码智能体从受监督的代码补全转向无人值守、全天候探索,其工作也从孤立的预测扩展为包含推理、工具使用和反馈的长轨迹。因此,token 效率对于扩展递归式自我改进变得十分重要。我们在运行框架层面采用受 RSI 启发的方法,在数量不断增加且日益多样化的环境中扩展自动研究循环,以进行框架滚动执行。在这一规模下,该过程能够产生可复用的改进,并迁移到其开发环境之外,从而推动自动化框架发现走向生产级成果。四种机制经筛选后保留下来,共同构成 SoL-Pi,涵盖动作执行、上下文压缩、观测处理和委托式阅读。在包含 51 项任务的 EdgeBench 评测中,SoL-Pi 在 GPT-5.6 Sol 和 Opus 5 上取得了与 Pi 相当的性能,同时将记录的 token 流量降低 44.7%–49.0%,并将 API 成本降低约三分之一。换言之,与 Codex 和 Claude Code 的原生框架相比,预计每小时可节省 \$8.75–\$13.50;与 Pi 相比,每小时可节省 \$4.36–\$5.71。

arXiv cs.AI81

推理引擎指纹识别攻击具有可行性:探索模型驱动的环境发现、利用与逃逸

前沿 AI 模型正迅速获得利用复杂软件中漏洞的能力。这种风险并非理论上的,OpenAI 和 Anthropic 的前沿模型近期实施的沙箱逃逸便证明了这一点。关于如何对推理栈组件进行沙箱隔离的讨论,通常侧重于推理引擎本身以外的组件(例如网络代理或代码执行环境)。然而,推理引擎对于不对齐模型而言是一个颇具吸引力的目标。例如,如果模型仅通过生成经过特殊构造的输出令牌,就能触发该引擎中的漏洞利用,那么它便可以在引擎中发起一条多步骤、直达裸机的利用链,而不依赖推理栈其他组件中的漏洞,也不需要外部提供的恶意构造输入令牌。 在本文中,我们展示了不对齐模型能够执行推理引擎指纹识别,以确定执行该模型的具体引擎(例如 vLLM、SGLang)。完成引擎指纹识别后,模型便可以利用特定于引擎的漏洞,仅使用经过精心选择的输出令牌来控制该引擎。我们给出了五种流行引擎中的模型指纹具体示例,并演示了现实的智能体运行框架如何让模型利用这些指纹识别本地引擎。我们还描述了一条概念验证性质的、直达裸机的利用链,该利用链源自一个已完成指纹识别(并随后遭到攻陷)的推理引擎。最后,我们讨论了几种可以改进推理引擎、从而增加指纹识别攻击难度的方法。

arXiv cs.AI83

GPT 模型中的伤害洗白:证据表明,跨越接受安全训练的各代模型,性别歧视发生了转化而非减少

大型语言模型的安全评估依赖表层形式分类器,而这些分类器显示各代模型的伤害分数不断下降。我们提供的证据表明,这种方法在系统性上并不完整:明确的歧视性内容并未被移除,而是发生了转化。我们将其称为伤害洗白(harm laundering)。通过分析 15 个模型中 450,000 条面向性别的生成结果(涵盖 GPT-2 至 GPT-5,属于 OpenAI GPT 谱系;包含三种人口统计条件),我们显示,GPT-2 面向女性的输出中普遍存在的性暴力聚类,到 GPT-4 时消失;与此同时,面向男性的生成结果获得了更多积极的表征空间(照护、情感丰富性、盟友身份),而面向女性的生成结果并未获得这些空间。该模式在 GPT-5 中最为明显:Topic~5(1,997~份文档)将乳腺癌框定为一场男性权利争论,而面向女性的输出中没有出现任何对应的聚类。三个独立分类器均将这些内容评为无毒性。情感分数在 GPT-4 时发生反转:早期模型贬低女性,后期模型则过度纠偏。在 GPT-4 的对齐边界处,面向女性的生成结果的主题多样性比面向男性的结果低 36\%(W/M~$= 0.58$,而 GPT-2 时为 $0.91$)。REGARD 表征性伤害差异与发布日期相关($ρ= +0.55$,$p = .034$),而 Detoxify 则不相关($ρ= -0.23$,$p = .42$):随着表征性伤害增加,毒性分数反而下降。我们将伤害洗白形式化为一项包含三个标准的检验,并提出一套适用于任何生成式模型的三阶段检测协议。在 OpenAI GPT 谱系中,毒性分数的降低并不足以作为伤害减少的代理指标。

OpenAI Blog71

推出 Astra for Law

OpenAI for Law 为法律领域带来前沿智能、律所定制工作流、互联的法律数据源,以及用于机密客户事务的法律级控制措施。

Hacker News 熱門78

Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

Hey HN, we're Nars & Nishant, founders of Skillsync ( https://skillsync.com ) Skillsync lets you move your AI chats across every coding agent. Most of our work exists as conversations, which are currently scattered across our agents. Though stored locally, these conversations use different formats. This is annoying because you cannot simply switch between agents without starting over. We get locked into a single provider and their agent as we invest in skills and memories over time. Skillsync acts as a universal converter. It moves the entire session, including all the messages, reasoning and tool calls so you can pick up right where you left off. Skillsync collects all your sessions in one place and makes them searchable. It breaks down what each session is carrying, including which loaded skills the agent is actually using, making stale context easy to spot. You can also create shared workspaces to sync sessions across your team. You can build your own closed loop systems. Everything runs locally except when you share to workspaces. The core is an open-source Rust engine called txcript ( https://github.com/skillsynchq/txcript ). It translates a session from one agent's on-disk format into another's, mapping conversation, reasoning, and tool history. Think ffmpeg or pandoc, but for agent sessions. On top of that engine is a local-first desktop app. Your agent sessions are normally scattered across different tools' folders in formats you'd never read by hand; the app surfaces them in one place with a UI that makes them actually readable, the conversation, the reasoning, and the tool calls, so you can revisit what happened, move a session into another agent, or share it with a teammate. Skills and memory are stored as portable, human-readable markdown you own, and exposed to any agent over MCP for search and selective retrieval. Sessions and translation run locally on your machine. The one thing that leaves is what you explicitly share into a team workspace. It’s been surprising to us to see how locked-in people already are without realizing it. You don't notice you're trapped in one agent or harness until you try to leave, and by then you've got months of sessions stuck in a format only that tool can read. The lock-in is invisible right up until it's expensive. Once sessions are portable, they stop being disposable logs and become something you can actually build on, spotting patterns in how you work, handing a session off to someone else, letting a non-technical teammate pick up where an engineer left off. The session turns out to be the unit of collaboration, and right now it's being thrown away. Before Skillsync, Nars and I built an open-source payment orchestrator that let merchants route across many processors instead of getting locked into one (30k+ GitHub stars). Fighting vendor lock-in by making incompatible systems interoperate was the whole job. We came into YC with a different idea, but the more we lived inside coding agents the more we saw the same problem from the other side: your context is locked into whatever agent you start with, because every agent stores sessions differently and none of it moves. Some of the things we’re seeing people do with Skillsync are: - Moving a session between Claude Code, Codex, and Cursor mid-task, including when you hit a usage limit on one and want to keep going on another. - Thinking through a problem in a browser Claude chat, then handing the whole thread to Claude Code or Codex to build. - Sharing research sessions with a team. Everyone uploads their sessions, so teammates and their agents can build on each other's work instead of repeating it. It's available as a Mac app, CLI and MCP. Here's the demo: https://youtu.be/7hVhSnSKGl8 . Would love to hear your feedback and answer questions! Comments URL: https://news.ycombinator.com/item?id=49743049 Points: 10 # Comments: 2

Hacker News 熱門78

Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

Hey HN, we're Nars & Nishant, founders of Skillsync ( https://skillsync.com ) Skillsync lets you move your AI chats across every coding agent. Most of our work exists as conversations, which are currently scattered across our agents. Though stored locally, these conversations use different formats. This is annoying because you cannot simply switch between agents without starting over. We get locked into a single provider and their agent as we invest in skills and memories over time. Skillsync acts as a universal converter. It moves the entire session, including all the messages, reasoning and tool calls so you can pick up right where you left off. Skillsync collects all your sessions in one place and makes them searchable. It breaks down what each session is carrying, including which loaded skills the agent is actually using, making stale context easy to spot. You can also create shared workspaces to sync sessions across your team. You can build your own closed loop systems. Everything runs locally except when you share to workspaces. The core is an open-source Rust engine called txcript ( https://github.com/skillsynchq/txcript ). It translates a session from one agent's on-disk format into another's, mapping conversation, reasoning, and tool history. Think ffmpeg or pandoc, but for agent sessions. On top of that engine is a local-first desktop app. Your agent sessions are normally scattered across different tools' folders in formats you'd never read by hand; the app surfaces them in one place with a UI that makes them actually readable, the conversation, the reasoning, and the tool calls, so you can revisit what happened, move a session into another agent, or share it with a teammate. Skills and memory are stored as portable, human-readable markdown you own, and exposed to any agent over MCP for search and selective retrieval. Sessions and translation run locally on your machine. The one thing that leaves is what you explicitly share into a team workspace. It’s been surprising to us to see how locked-in people already are without realizing it. You don't notice you're trapped in one agent or harness until you try to leave, and by then you've got months of sessions stuck in a format only that tool can read. The lock-in is invisible right up until it's expensive. Once sessions are portable, they stop being disposable logs and become something you can actually build on, spotting patterns in how you work, handing a session off to someone else, letting a non-technical teammate pick up where an engineer left off. The session turns out to be the unit of collaboration, and right now it's being thrown away. Before Skillsync, Nars and I built an open-source payment orchestrator that let merchants route across many processors instead of getting locked into one (30k+ GitHub stars). Fighting vendor lock-in by making incompatible systems interoperate was the whole job. We came into YC with a different idea, but the more we lived inside coding agents the more we saw the same problem from the other side: your context is locked into whatever agent you start with, because every agent stores sessions differently and none of it moves. Some of the things we’re seeing people do with Skillsync are: - Moving a session between Claude Code, Codex, and Cursor mid-task, including when you hit a usage limit on one and want to keep going on another. - Thinking through a problem in a browser Claude chat, then handing the whole thread to Claude Code or Codex to build. - Sharing research sessions with a team. Everyone uploads their sessions, so teammates and their agents can build on each other's work instead of repeating it. It's available as a Mac app, CLI and MCP. Here's the demo: https://youtu.be/7hVhSnSKGl8 . Would love to hear your feedback and answer questions! Comments URL: https://news.ycombinator.com/item?id=49743049 Points: 4 # Comments: 0

Hacker News 熱門51

Show HN: Die With Me – Claude and Codex rate limits as AIM away messages

made this AIM buddy list but for our token usage because i wanted to bring a little bit of the old internet back! i remember those days where i'd casually check if friends are online and find excuses to say hi and poke them give it a try! i'd greatly appreciate feedback Comments URL: https://news.ycombinator.com/item?id=49743095 Points: 7 # Comments: 8

OpenAI Blog74

提示基础知识

学习提示基础知识,以及如何编写清晰、有效的提示,以从 ChatGPT 获得更好、更有用的回答。

OpenAI Blog79

“无铃”行动:协调一致地批评美国及其盟友

OpenAI 封禁了与一项此前未被报告、很可能源自俄罗斯的行动有关联的账户。我们将该行动称为“No Bell”,其利用人工智能面向非洲各地受众制作批评美国及其盟友的内容。

arXiv cs.AI64

Clueing up LLMs with Tool-Augmented Deductive Reasoning

Despite recent advances in large language models (LLMs), performing logically consistent deductive reasoning over extended interactions remains challenging. Tasks that require integrating evidence across multiple reasoning steps, maintaining consistency with prior inferences, and updating beliefs under new constraints can surface limitations in current models while providing a useful testbed for evaluating reasoning enhancements. In this paper, we implement a text-based, multi-agent version of the classic board game Clue as an environment to evaluate multi-step, agentic deductive reasoning. In this setting, agents must infer hidden information from a sequence of observations, maintain consistency across turns, and reason over an evolving set of logical constraints. We instantiate six LLM-based agents (GPT-4o-mini and Gemini-2.5-Flash) as players that engage in turn-based gameplay; using three agents per model family, we establish baseline performance across repeated games. We then introduce a tool-augmented approach in which a structured possibility matrix converts implicit game state from generated reasoning logs into an explicit representation of remaining possibilities. The possibility matrix encodes extended-turn memory and deductive constraints, offloading these tasks from the agent. We compare this approach against the baseline to evaluate how tool augmentation supports reasoning quality and task success for autonomous agents in a strategic reasoning environment.

arXiv cs.AI83

ProgramDistill: From Interactive Web Apps to Verifiable Reference-Guided SWE Tasks

Coding agents are typically evaluated with desired behavior specified through issues or instructions. In practical web development, however, agents may need to infer behavior from working software and implement it in an incomplete application. We introduce ProgramDistill, a benchmark evaluating coding agents on features discovered through interaction with fully functional reference applications. We build ProgramDistill by factorizing applications into features of different granularities, each associated with replayable behaviors executable via its gold patch. Our pipeline, mine-craft-patch, discovers 1,975 replay-verified behaviors across 26 applications and constructs 4,063 tasks without human intervention. Across nine frontier coding agents, GPT-6 Astra and Claude Opus 5 achieve 49.2% and 28.8% success on cumulative workflows in full-application reconstruction. In partial-application reconstruction, success falls from 100% to 64.0% and from 96% to 32% as restoration depth increases from 1 to 8. ProgramDistill thus provides a scalable benchmark with controlled difficulty for evaluating and diagnosing coding agents, and a natural basis for future curriculum-based training.

arXiv cs.AI82

Taming the Agentic RAN: Stability-Guaranteed Arbitration of Autonomous AI Agents in O-RAN

The O-RAN control plane is becoming agentic: autonomous AI agents, deployed as rApps by different vendors, independently close control loops over shared radio resources. We demonstrate on a live O-RAN system that this independence is unsafe. Two agents with individually correct objectives, one protecting a latency SLA and one maximizing utilization for energy efficiency, jointly drive recurring opposing excursions of the shared resource partition that neither produces alone. Existing conflict-mitigation mechanisms presume a statically known application population and cannot govern agents whose behavior emerges at run time. We present AURA, a lightweight arbitration layer that admits agent actions only when they satisfy feasibility invariants, per-variable dwell times, and a deadband, and we prove the arbitrated system converges to a feasible operating point. Implemented on an OpenAirInterface (OAI) testbed with measured one-way latency and throughput, AURA reduces recurring shared-state excursions by more than an order of magnitude (from 8.4 to 0.4 PRB amplitude) and virtually eliminates cross-slice throughput starvation (from 40-55% to 0.3%), while leaving the protected slice's own latency compliance unchanged, a trade-off the convergence guarantee makes explicit.

arXiv cs.AI72

Cultural Competence in Context: A Large Language Model Passes the Turing Test in Finland

We report the results of a Turing Test conducted in Finland in the Finnish language. Because languages and cultural contexts are unevenly represented in LLM training data, we expected the model (ChatGPT 5.2) to perform worse in a Finnish-language Turing Test than in previously studied English-language US contexts. We also present model-generated role prompting as a replicable technique for conducting comparative LLM-based Turing Tests designed to improve construct validity. Contrary to our expectations, the LLM passed the Finnish Turing Test. A prominent source of error was participants' reliance on linguistic cues, particularly colloquial Finnish, as markers of human authorship. We reframe the Turing Test from a test of intelligence to a comparative method for examining whether an AI system can display credible membership in a particular social world. Because its outcome reflects model capabilities, prompted identity, insider competence among human participants, and their AI literacy, the method provides a useful probe of the human-machine boundary across domains.

arXiv cs.AI80

WetRobo: A Reproducible Robot Kit for Coding Agents in Biological Laboratories

Automating biological research requires general-purpose, reproducible robot systems that allow individual wet-lab researchers to delegate robot tasks without performing teleoperation or neural-network training. Vision-language-action policies have been proposed for general-purpose arms, but can lose performance when their operating environment changes. We therefore built WetRobo, a robot kit that can readily transfer between laboratories. It consists of one robot arm, laboratory equipment (an incubator, a reagent bottle with a cap, and a Petri dish), the existing code that moves the arm, teleoperation demonstrations of each task that we recorded, and a general AGENTS.md skill file. A biological experimentalist provides natural-language tasks without collecting local teleoperation training data or training a neural network. The coding agent observes the local laboratory and writes and executes programs, using external tools as needed for adaptation. We demonstrate use of WetRobo with OpenAI Codex (gpt-5.6-sol) on three successful tasks: lifting a Petri dish lid, removing a bottle cap, and opening the incubator door, all in real-world laboratories. The coding agent achieved the cap task in both laboratories, Lab X and Lab Y, whereas a VLA fine-tuned on Lab X demonstrations succeeded there but failed to transfer to Lab Y. These results point to a practical route for laboratory robotics: instead of training a policy for each laboratory, distribute a kit and let a coding agent adapt it in each laboratory. Code, demonstrations, and the evolved programs are available at https://github.com/tsudalab/WetRobo.

arXiv cs.AI81

Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery

How does a multi-agent system evolve from a local deviation into collective loss of control? We propose an epidemic explanation organized around accidental mutation, contagion, and recovery. A spontaneous deviation creates a seed; communication enables other agents to adopt and retransmit its unsafe strategy; collective failure can emerge when propagation outpaces correction and containment. Thus, rare individual deviations can coexist with substantial collective risk. Motivated by reported OpenAI agent coordination incidents, we examine two ingredients of this mechanism. A deployment audit identifies implicit communication paths between nominally independent evaluation runs and verifies transport through a default Docker backend. RogueHandoff-20, a benchmark of 20 executable scenarios, tests recipient susceptibility by injecting unsafe trajectories generated by a modified Qwen-27B route. Across four native-pending routes, executed harm is 0-5% on normal tasks and 40-95% after injection, exceeding paired direct malicious requests by 5-45 percentage points. These results support low observed baseline harm alongside high conditional susceptibility; they do not establish natural rare-event rates or demonstrate an autonomous cascade. The account motivates complementary defenses: strengthen resistance and recovery alongside prevention of spontaneous deviations, and audit and restrict unintended communication paths that can turn local failures into collective loss of control.

OpenAI Blog93

我们用于报告模型偏离的框架

OpenAI 分享了一套用于跟踪、调查和披露模型偏离的框架,并发布了六份关于模型出现意外或令人担忧行为的报告。

OpenAI Blog68

工作者如何解锁新的工作方式

新的 OpenAI 经济研究显示,工作者如何在传统角色之外使用 AI,以及哪些新活动会成为他们工作中反复出现的组成部分。

OpenAI Blog62

帮助老年人在日常生活中使用 AI

OpenAI 和 AARP 正在美国 10 个城市为 1,000 名老年人带来免费的 ChatGPT 实操工作坊,帮助他们安全地培养实用的 AI 技能。

OpenAI Blog86

用 AI 重新构想广告

探索 OpenAI 推出的全新 AI 驱动广告体验,包括 Sponsored Agents、面向营销人员的工具,以及与 HubSpot 和 Shopify 的集成。

arXiv cs.AI69

QART: A Quantum-Classical Hybrid Architecture for Long-Horizon Reasoning -- Exploring a Conditional Path toward Quantum Scaling

Long-horizon reasoning is vulnerable to early errors that compromise later decisions. We present QART, the Quantum-Augmented Reasoning Transformer, a quantum--classical hybrid architecture combining a backbone language model with quantum encoding, CIM-based QUBO optimization, and quantum decoding. Semantic information can come from hidden representations or model-generated text; detailed encoding and optimization procedures remain proprietary. Under explicit assumptions, we establish a conditional asymptotic reliability separation from single-trajectory autoregressive LLMs. For a common task family with aligned optimality and acceptance criteria, autoregressive acceptance probability tends to zero when cumulative conditional risk of irreversible errors diverges. QART's task-optimal-path recovery probability remains bounded away from zero if conditional probabilities for optimal-path coverage and semantic fidelity, spectral certification, dynamical reachability, and faithful readout remain uniformly positive under a specified resource schedule. The architecture alone does not imply these bounds. Paired measurements on six long-horizon benchmarks using DeepSeek V4 Flash, GLM-5.3, and GPT-5.5 xhigh in a Codex agent environment favor QART in 14 of 15 backbone--benchmark pairs. Relative gains reach 84.0% on SciCode, 47.6% on $τ^3$-Bench, and 44.4% on Terminal-Bench 4.0; the DeepSeek V4 Flash configuration regresses by 7.8% on DeepSWE. These results do not directly validate the asymptotic separation. Potential quantum scaling laws are formulated as conditional hypotheses. A quantum-advantage interpretation requires a demonstrated CIM quantum advantage over strong classical solvers and its transfer to end-to-end reasoning after all system overheads.

arXiv cs.AI82

Beyond "ChatGPT Can Make Mistakes": Designing Interventions to Support Metacognitive Monitoring in AI-Assisted Work

AI assistance places a metacognitive demand on users, who must judge their own competence and the system's. Yet designers lack comparative evidence on which interventions to choose, where to place them, and how to tell whether they worked. We elicited 30 interventions from 11 experts and, with prior work, organized them into a design space of time (when an intervention acts), level (whose competence is judged), and source (who supplies the monitoring cue). A between-subjects experiment (N = 917; 12 planning-and-organizing problems) compared a per-task reliability card, contrasting replies, pause points, and post-problem reflection against a baseline LLM assistant. Reliability cards and contrasting replies reduced estimation error and overconfidence and increased aggregate confidence discrimination. No task-performance improvement or average within-item discrimination gain was established. We contribute a shared vocabulary, a design space, and evidence that measured monitoring and task performance are separable design targets.

arXiv cs.AI57

AI for Science with GPT-6 Astra: Thermal Design and Electrothermal Analysis of 2D CFET

Thermal optimization of 2D CFET inverters requires testing structural proposals against their electrical costs. We examine these research tasks using an AI agent workflow within a supplied electrothermal model. At 12 nm, Astra selects a redistributed source-interconnect geometry, while a coordinating agent proposes a substrate-directed heat-removal path. The combined design reduces peak temperature rise by 1.67 K at fixed metal volume and 20 μW. A subsequent metal-resistance sensitivity gives about 0.6-K inverter cooling alongside a 2% nFET on-current loss. Effective contact-length scaling further shows that lower temperature can accompany higher thermal resistance when current falls. Reproduction identifies agreeing implementations and retains a 104.95-K failure for diagnosis. These results show that an AI scientist workflow can propose thermal structures, test them under common constraints, and quantify their electrical cost.

Hacker News 熱門81

Show HN: Pizza Bot – An inbox for AI agents that work in the background

Hi HN - long-time lurker (since 2012!), first time poster. Pizza Bot is a self-hosted desktop app for Mac, Windows, and Linux that runs AI agents in the background and exposes them through an email-like UI. Finished work shows up in Unread, and anything waiting on your approval shows up in Action. It's Apache 2.0-licensed, there's no signup and no telemetry, and you bring your own model provider: Anthropic, Amazon Bedrock, Google Gemini, OpenAI, OpenRouter, or a local model through Ollama. There are builds on the releases page, or you can run it from source. Pizza Bot started as an internal passion project I worked on with a small team at Amazon. The whole thing came out of my frustration at having to manually log CRM activities through a browser form. I built a simple REST API called "JoeBot" that connected to my authenticated browser session over CDP and filled out the form for me using Playwright. Then I hacked up a quick Obsidian plugin so I could trigger it from my local notes (no AI and no MCP servers involved). This caught on quickly. My fellow AWS Solutions Architect Igor Fil joined up with me, and we rebranded the project as "Pizza Bot," named after Amazon's two-pizza teams. We started seeing what other automations we could build. We found a GraphQL API we could query and hacked up some "recipes" to pull data out of the CRM to help with meeting prep. That worked great, and it was right around the time MCP servers seemed to be taking off, so we decided to expose Pizza Bot as an MCP server instead, so it would be available to AI tools through natural language. This was a decent solution for technical users, but the Account Managers who live inside our CRM system wanted something too. We decided to rebuild Pizza Bot as an Electron desktop app modeled after an email inbox, so it would be familiar to non-technical users and would run on both Mac and Windows. We also bundled internal MCP servers as OCI images and hosted them in Amazon ECR as an "addon marketplace" so users could install them with one click without having to set up Amazon developer tooling. The project took off organically and expanded outside of AWS into the wider Amazon organization globally. More than 2,000 people ended up using it for meeting prep, email drafting, Slack summaries, CRM logging, prioritizing their day, and web research. Once apps like Claude Cowork and Amazon's own Quick Desktop came out, we realized the real growth opportunity was outside of Amazon. Rather than try to rip out the Amazon-specific integrations, we rebuilt Pizza Bot once more as an open source project. We leaned on coding agents heavily, which is the only reason a team our size could pull off a full rewrite. I'm pleased to say it's finally public, and we're hoping to bring in community members and see where it goes. We'd like to do for knowledge workers what Claude Code and Codex have done for programmers. A couple of things to know up front. Most of what made Pizza Bot useful on day one inside Amazon came from that internal catalog of skills and MCP servers for Amazon's own systems, and none of it could come out with the app. So it ships thinner than the version those 2,000 people used, and building that catalog back up for tools other people actually use is where we need the most help. It's also a community project and not an AWS service, so there's no support or SLA behind it. The Windows and Linux builds aren't signed yet either. On the technical side, Pizza Bot is a server and a client. The desktop app bundles both, or you can point a client at a remote backend; personally, I self-host the server on my home network and reach it from my phone over Tailscale. The server owns the thread lifecycle and checkpoints state with DeepAgents and LangGraph, and clients rehydrate from it as needed, so you can disconnect mid-run and pick the thread back up from another client. Approval pauses outlive the session that created them and collect in an Action filter, so you can answer an hour later from a different device. The agent you talk to has a sandboxed QuickJS interpreter that can reach your filesystem only if you grant it a folder, but its main job is to delegate. Each subagent is a 1:1 mapping of a Skill, and an Activity bar shows that subagent and the tool calls it's making as it works. Memory is opt-in and stored as plain markdown files on your machine. Every tool call is explicit, including looking up a memory - we err on the side of transparency to reduce surprises. Tools come from MCP servers, and skills are ordinary SKILL.md files with a per-tool approval policy, so existing skills that don't require a code interpreter should still work. What I'd most like to hear about is where the app itself gets in your way, the kind of problem you can't fix by writing a skill or an MCP server. I'm around today to answer questions! Comments URL: https://news.ycombinator.com/item?id=49713894 Points: 15 # Comments: 5

arXiv cs.AI82

在使用 LLM 进行民调之前:审议式诊断框架

LLM 能像人类一样推理新信息,还是只会检索缓存的观点?对于硅基抽样而言,这是一个关键问题,因为 LLM 人格化角色能够大规模模拟公众舆论。当前的评估只检验人格化角色是否持有正确的观点——即一个静态快照。然而,舆论研究越来越依赖动态保真度:人格化角色是否会像人类在审议过程中那样,针对新的论点更新信念。目前还没有任何基准测试对此进行检验。我们提出了审议式民调诊断框架,用于比较人类和 LLM 在接受完全相同的信息干预后信念的变化。该框架以审议式民调为基础,能够揭示静态评估无法发现的失败:模型即使能够生成看似合理的党派观点,仍可能错误呈现这些观点会如何变化。我们使用 America in One Room 的数据(526 个人格化角色、72 个问题),将该框架应用于五个前沿模型,发现每个模型都存在失败,而且表现方式各不相同。GPT-5.1 表现出逆转现象:在获得平衡信息后,其人格化角色对 opposing party 变得更加敌视,而人类则相反,敌意有所降低。这种逆转具有选择性(在外群体问题上为 80%,在政策问题上为 26%),并且在不同党派身份之间呈对称分布。Gemini 2.0 Flash、Claude Sonnet 4.5 和 Llama 3.3 70B 表现出过冲:观点变化方向正确,但幅度达到人类的 5—7 倍。DeepSeek V3 则表现出僵化,变化幅度接近于零。针对性的消融实验表明,政策内容会触发这些失败,而且它们与身份有关:GPT-5.1 在外群体问题上发生逆转,但在内群体问题上出现过冲;Gemini 则正好相反。我们将这一特征称为“自我谄媚”:模型遵循其对人格化角色的内部刻板印象,而不是依据所提供的信息进行推理。我们的框架提供了一套具体方案:在信任 LLM 人格化角色模拟信念更新之前,先运行审议式诊断。

arXiv cs.AI87

K-Bench:用于评估高风险心理健康对话中大型语言模型的临床校准基准

% !TEX root = ../main.tex 人们越来越多地使用大型语言模型(LLMs)寻求心理健康支持,但它们在不断演变的高风险对话中的安全性仍缺乏充分刻画。我们开发了 K-Bench,这是一个经临床医生校准、受保护的基准测试,用于评估来自 14 家提供商的 33 个基础模型所对应的 125 种模型配置,涵盖固定队列中的 200 个多轮短对话案例,涉及自杀、自残、家庭暴力、物质滥用以及无风险情形。合成患者对话与真实人机对话在分布上呈现出较大重叠。一个冻结的 GPT-4o 评判器在 151 份经临床医生评分的对话记录所包含的 6,751 个符合条件的项目比较中,与临床医生共识达到了 94.2% 的完全一致率。领先模型在提供有力支持性对话的同时,综合风险评分超过 95 分;而在风险探索方面,表现较低的模型配置之间则呈现出显著差异。治疗性提示带来的提升因配置而异,且主要集中在较弱的模型上;提高推理能力并未带来平均水平上的改善。K-Bench 将更广泛的临床覆盖范围和大规模配置比较结合起来,并配有持续更新的公开排行榜,其实际测试材料受到保护,以避免被直接针对性优化。排行榜可访问 www.k-bench.ai。

arXiv cs.AI79

内置路由器:从冻结的 LLM 中诱导原生技能路由

技能使 LLM 智能体的能力超越其参数化知识,而这种能力提升取决于能否选对技能。已部署的工具框架会将每项技能的元数据预先加载到上下文中,这会分散智能体的注意力,并限制技能库的规模。检索流水线将选择过程移出上下文,但也因此将其移出了智能体自身的能力范围。我们展示了冻结的智能体 LLM 已经在其自身的前向传递中携带了路由信号,只需两个线性映射即可将其读出,且无需在上下文中加入任何技能文本。Gavel(Glance And Verdict from a frozen LLM)分两步读取该信号。第一步是“扫视”:通过这两个映射,将任务和每项技能的中间层状态投影出来;这两个映射是唯一经过训练的参数。随后,系统使用每项技能对应的紧凑库对整个技能库进行评分,而这些库在安装时通过一次前向传递构建。第二步是“裁决”:继续执行入围技能的前向传递,读取模型自身的似然度和“是/否”判断,并将其与“扫视”结果以专家乘积的方式融合。Gavel 只需训练一次,便能零样本迁移到三个公开基准以及我们新建的 SkillTraj 基准;后者包含 372 条模拟智能体轨迹。在 Qwen3-32B 上,相比渐进式披露和检索后重排序流水线,Gavel 在书面任务上的表现最高提升 13.4 个百分点;当技能需求在执行过程中途出现时,最高提升 21.9 个百分点,而前述流水线额外引入了 1.2B 至 16B 个外部参数。随着骨干模型能力提升,路由准确率也会提高;在 bash-agent 工具框架中,同一个 32B 模型在 Skill-Use 上触发正确技能的频率,高于运行在 Codex 中的规模大得多的前沿模型。

Hacker News 熱門64

RubyGems 开源供应链安全与 OpenAI

文章 URL: https://rietta.com/blog/rubygems-supply-chain-openai/ 评论 URL: https://news.ycombinator.com/item?id=49697666 分数:5 # 评论数:0

arXiv cs.AI85

基于应用手册的任务:揭示语言模型在长程程序推理中的缺口

大型语言模型(LLM)在广泛的自然语言任务上已经取得了出色表现,近期基准测试也表明,它们越来越擅长多跳推理。然而,这些基准通常属于短程任务,只需执行少量检索或推理步骤,因此对于涉及遵循数百页手册、处理复杂且相互依赖的指导原则的现实任务,其可靠性所能提供的证据十分有限。在本文中,我们提出 Tasks over Application Manuals(TAM),这是一个用于评估长程程序推理能力的基准。我们从两个领域整理现实世界任务,构建了 TAM:ICD-10-CM 临床编码(将疾病状况映射到诊断代码)和美国联邦量刑(计算犯罪量刑指南结果,具体而言是犯罪等级),并为这些任务提供了经人工验证的标签。每项任务都要求遵循一份包含数万条规则的权威手册,并跨越不同章节执行一系列相互依赖的步骤,以得出精确答案。我们评估了多种通用提示方法,包括检索增强生成、ReAct 风格提示,以及在 GPT-5 上使用 agent-harness 的基线方法,发现最佳精确匹配性能仍然极低:ICD-10-CM 编码任务仅为 1%,量刑任务仅为 15.5%。这些结果表明,当前基准可能高估了 LLM 的推理能力,并遗漏了一项关键挑战:可靠地遵循基于大量规则的长程程序。完整的 TAM 数据和代码已公开。

arXiv cs.AI79

前沿模型的物理学能力有多强?专家重新评分揭示评测失效与领先基准测试趋于饱和

领先物理学基准测试中的低报告得分(包括 Artificial Analysis Intelligence Index (2026) 收录的基准测试)表明,前沿语言模型在高级物理学方面仍然举步维艰,而高级物理学是对其科学推理能力和定量问题求解能力的严峻考验。然而,这种印象并不总是与领域专家在实际工作中使用这些模型时的体验相符。我们通过在六个广泛使用的物理学基准测试上评估前沿模型,并邀请专家对评测结果进行审查,重新考察了这些报告结果,重点关注最终答案可验证的纯文本题目。针对物理学的每个子领域,具备相关专业知识的教师和研究生研究人员会仔细审查题目陈述、参考解答和模型回答,以区分模型的真实错误、评分器错误、错误的参考解答,以及含义模糊或信息不充分的问题。在经过审查的案例中,大多数最初被评为错误的结果,反映的是这些基准测试本身的问题,而不是模型物理学推理方面的错误。随后,我们请专家通过修正错误的参考解答,并修复或排除有缺陷的问题,来解决这些基准测试问题。我们发现,在 HLE-Physics 上,GPT-5.6-Sol 的测得 mean@4 从 47.3% 上升至 78.7%;在 CMT-Benchmark 上,则从 61.0% 上升至 87.2%;在保留的 54 道 CritPt 挑战题上,其修正后的 pass@4 达到 94.4%。修正后的得分是在专家审查后保留的评测子集上计算得出的。经过修正后,UGPhysics、PRISM-Physics 和 PHYBench 审查子集上的得分也大幅提升。这些发现表明,当前基准测试显著低估了前沿模型解决定义清晰的物理学问题的能力。在这些封闭式任务上接近饱和的表现凸显出,我们需要更具挑战性、并经过专家验证的评测。

Hacker News 熱門55

Show HN: Clawfight.ai MCP-driven agentic game play

How should agents interact with other agents? What happens when they rap or fight against each other with the pressure of human spectators? Clawfight.ai is an experiment to explore this space. This is my first post about it. The journey began on a beefed up machine I purchased with a decent GPU (5090). I installed claude code and set to dangerously skip permissions, enabled /rc and became completely submerged in the all-hours modern AI builder workflow. I stood up openclaw to see if I could have an agentic org drive this project. I spent a good amount of time on “openclaw ops”, babysitting 3 agents and trying to make them the best versions of themselves. They still do stupid things that cost me tokens. For the game render, I started out using Unreal Engine and allowing agents to remote control their players, but the quality just wasn’t there. I recently moved to doing near-real time video renders of the match and will bring UE back in for multi-agent games. Everything is AI generated. I’m fascinated by the future of realtime video generation and building out native MCP infrastructure. You can play directly from model provider apps (claude connector or openai plugin) and has fallback support for more basic HTTP clients. But the architecture and gameplay is MCP first. Tell your agent/app “go read clawfight.ai/agents.md and play” Comments URL: https://news.ycombinator.com/item?id=49658483 Points: 5 # Comments: 0

arXiv cs.AI88

提示词修订是文生图系统中文化偏见的来源

商业文生图系统会在生成图像前悄无声息地修订用户提示词,而这一步用户通常无法禁用,甚至无法查看。然而,现有的文化偏见审计只考察最终图像,并将生成过程视为单一流水线,因此无法判断偏见源自何处。我们推出 WORLDVIEW,这是一个多语言基准,包含涵盖 15 种语言和 31 种语言—语境配对的 8,960 条提示词。借助该基准,我们对三个系统(DALL-E-3、Imagen-4、GPT-Image-1.5)中的修订层进行审计,分三步分析其对每种文化语境的标记程度、是否将该语境压缩为狭窄的词汇集合,以及这些词汇是否具有刻板印象。与无语境英语基线相比,美国是被标记程度最低的语境,而非西方和非英语语境受到的标记要强烈得多:它们被压缩为狭窄的词汇集合,并被应用于主题多样的提示词,最终被简化为易于识别的文化刻板印象。通过在不含修订层的模型上比较原始提示词与修订后提示词生成的图像,我们确认修订层本身是此前未被记录的、造成这种刻板化的因果来源。要定位并消除文化偏见,我们必须审计实际部署的系统,而不能只审计模型本身。

Hacker News 熱門84

OpenAI Agents API

文章链接: https://developers.openai.com/api/docs/guides/agents-api/overview 评论链接: https://news.ycombinator.com/item?id=49649213 分数:20 评论数:15

OpenAI Blog89

推出 Agents API

使用 Agents API 构建并上线云端代理。Agents API 是一项由 Codex harness 提供支持的托管服务,用于编排、长时间运行的会话和工具调用。

OpenAI Blog62

金融服务领域的 ChatGPT

推出金融服务领域的 ChatGPT,结合内置金融数据和 GPT-6 Astra,用于研究、建模和制作面向客户的材料。

Hacker News 熱門53

More questions about whether researchers can trust OpenAI with unpublished math

https://mathstodon.xyz/@andreasthom/117240536885387540 https://mathstodon.xyz/@andreasthom/117240537520615623 https://x.com/ValerioCapraro/status/2097791836269977996 , https://xcancel.com/ValerioCapraro/status/209779183626997799... https://bsky.app/profile/did:plc:ckaz32jwl6t2cno6fmuw2nhn/po... Comments URL: https://news.ycombinator.com/item?id=49639408 Points: 57 # Comments: 289

Hacker News 熱門72

Amazon 在 ChatGPT 中试点广告服务

文章 URL: https://www.marketingdive.com/news/amazon-pilots-ad-services-in-chatgpt-what-marketers-need-to-know/829945/ 评论 URL: https://news.ycombinator.com/item?id=49644047 积分:6 评论数:0

Hacker News 熱門51

Tell HN: OpenAI keeps re-enabling the 'allow training' setting

I've reset this more than once and the last time I made a careful note of when I did it and to my surprise I found it re-enabled when I checked just now. Make sure you check this thing to see if it hasn't been re-enabled if you believe it to be off right now. Comments URL: https://news.ycombinator.com/item?id=49643556 Points: 8 # Comments: 0

arXiv cs.AI73

急诊科再访质量审查筛查:探索人类决策与人工智能支持

背景:急诊科(ED)再访通常会接受质量保证审查,但为提高可采取行动的发现比例并尽量减轻病历审查负担,审查范围往往受到限制(例如仅限于48–72小时内的再访)。这些限制可能导致错失质量改进机会。方法:我们对一个拥有多家医院的医疗系统开展了一项探索性回顾性研究,随机选取在1–14天内再次到同一医疗系统就诊的ED就诊记录。仅根据每次就诊的主要诊断,评审者(2–3名临床医生和GPT-4大型语言模型[LLM])评估诊断对的特征,包括“目标”:判断一对诊断是否值得进一步评估。在分析评审者回答的基础上,我们创建并初步评估了一种利用由LLM填充的知识图谱(“KGA”)的算法,用于自动筛查可能令人担忧的诊断对。结果:共纳入99个诊断对。GPT-4的回答与临床医生评审者的判断相关性较差,将近乎所有(94%)诊断对评为需要后续跟进,这一比例是临床医生评审者的4.4–13.3倍。然而,提示工程程度有限。在临床医生评审者中,再访的医疗严重程度始终与该目标显著相关;而鉴别诊断/并发症综合指标在未经校正的分析中具有显著相关性,但在校正后的分析中则不显著(尽管后者的统计效能较低)。对于至少一名临床医生评审者根据诊断对判定需要进一步评估的情况,KGA达到了83%–100%的阳性预测值。结论:这些结果可为利用ChatGPT等LLM改进筛查的后续工作提供参考。仍需开展进一步研究,以验证这一初步研究的发现:KGA可能有助于扩大筛查范围并提高筛查产出,同时不会显著增加评审者的工作负担。

arXiv cs.AI79

RAP:研究注意力预测揭示目标条件化的证据获取偏差

大型语言模型(LLM)日益充当研究代理,但由于综述和研究想法缺乏可唯一验证的结果,评估其跟踪研究注意力变化的能力颇为困难。我们提出 Research Attention Prediction(RAP),这是一个滚动基准,涵盖 278 个 AI/ML 领域和 1,390 个事件。在每个截止时点,LLM 代理都会搜索时间受限的 arXiv 语料库,并预测接下来六个月内八个固定研究方向的论文占比。搜索通常有所帮助,但在组合准确性方面,四个诊断模型的表现都不如基于精确计数的指数加权移动平均(EWMA)基线。我们发现了两个相互关联的瓶颈。在可访问累积历史的条件下,对于全部四个诊断模型,State carry-forward 的表现都优于直接 Forecast;冻结证据重放表明,这一反转的一个共同组成部分与以 Forecast 为导向的策略获取近期证据占比较小有关。即使拥有精确的历史活动数据,面向未来的特定更新仍然有限,只有 GPT-5.5 加上重新开启的 Search 略微超过 EWMA。在已实现结果上进行微调后,Qwen3-4B 在后续起始点、留出的领域上的预测 Spearman 相关系数提高了 0.105,在变化丰富的事件中也取得了提升。

arXiv cs.AI81

系统内核管理的共享内存,用于全系统个性化

当 AI 系统能够适应使用者时,其实用性会显著提升;但在多智能体系统中,一个智能体学习到的有用上下文往往无法被其他智能体获取。我们提出了内核管理的共享内存,这是一种系统级抽象:专用智能体写入结构化、带标签的记忆,而由智能体系统内核,而非各个智能体,负责检索、隐私执行和提示注入。我们在 AIOS 上实现并评估了这一设计,并在三种助手模型(GPT-4o、Llama-3.1:8B、Qwen-2.5:7B)和总计 1,800 次试验中,将其与三种替代方案进行了比较。与使用相同底层存储、但不受管理的外部记忆后端 Mem0 相比,内核管理的检索与注入使个性化得分在 5 分制上提高了 2.4–4.0 分(例如,在 GPT-4o 上,用户资料使用度从 1.05 提升至 4.69),且每项比较均达到显著水平(p < 10^-18)。与标准的检索增强注入相比,三种模型均获得了同样显著且一致的提升。与完整、未经筛选的上下文拼接相比,后者对可用上下文设置的是软上限,而非对响应质量设置上限;内核管理的注入在三种模型中的两种上表现出统计学上的相当水平,在第三种模型上则出现了轻微且与模型相关的性能不足,同时使用的提示显著更短:三种模型的端到端延迟均降低了 15%–61%,每次调用的 token 使用量和推理成本也相应减少。这些结果表明,将记忆管理集中于智能体系统内核,而不是将检索和隐私执行留给各个智能体,能够以其一小部分成本,实现大部分不受约束上下文所带来的个性化收益。

Hacker News 熱門73

Show HN:自托管的企业 OS,在各部门中运行 Claude Code 和 Codex 智能体

大家好,我是 Dimitris。 这是我构建并用于运营自己企业的企业 OS,任何人都可以安装并免费进行自托管。可以把它理解为将 Claude Code、Cowork 和云端会话整合在一个自托管应用中。 它从设计上就是一个多租户应用,许多人可以通过 4 种不同的协作模式与企业智能体协作;它可以使用你的 Anthropic 或 OpenAi 订阅运行,也可以使用本地模型。 每个智能体都可以运行在 Claude Code 或 Codex CLI 上,作为服务器上的持久进程运行于内核沙箱(bubblewrap)中,并始终启用网络隔离(pasta);每个智能体都有自己的工作区、记忆、日程安排和工具。同样的智能体也可以配置为通过一个出站 WebSocket,在任意远程计算机上以完全相同的方式运行(无需入站端口,也不需要 VPN)。 智能体已经内置了许多功能。例如,它们可以通过 Twilio 或你自己的 Asterisk 接听和拨打电话,可以编辑视频以及 Excel、Word、PPT 文件,还可以借助 Collabora 直接在聊天中预览这些文件,此外还有更多功能。 只需一个安装脚本和一个 Docker Compose 文件即可开始使用,无需注册。该许可证采用 Fair Source,所有代码均为公开代码,并且最多支持 5 名用户的自托管是免费的。1.6.0 已于今天发布。 AI 免责声明:OtoDock 的大部分代码都是使用 OtoDock 自身、运行 Claude Code 编写的。 我很希望大家阅读代码、了解一下沙箱模型,并告诉我是什么因素会阻止你在自己的硬件上运行它。 GitHub: https://github.com/OtoDock/oto-dock 网站: https://otodock.io 评论链接: https://news.ycombinator.com/item?id=49630606 得分:3 评论数:0

Hacker News 熱門69

Show HN:Rdltr——阅读清单的收件箱归零

嗨,HN!过去几个月里,我一直在开发一款名为 RDLTR( https://rdltr.app )的稍后阅读应用。整个想法源于我在不同浏览器、Mac、Linux 和 iPhone 上打开了太多想读的网页标签。它们让所有东西变得杂乱不堪,也妨碍了我处理其他事情。 这个想法出现时,Pocket 刚刚关闭。我四处了解了一下,试用了 Instapaper、Raindrop、Matter,还有其他几个我已经记不清名字的产品。它们都还不错,但都会给你一份只会不断增长的列表,而这又成了另一件需要维护的事情,也不是我想要的模式。Safari 有一个“阅读列表”功能:读完某篇内容后,它就会从未读列表中消失。但它只能在 Apple 设备上使用,而且功能也不太完善。我想要的是阅读方面的收件箱归零:打开某篇内容,读完它,再回来时,它已经从队列中消失,但仍然保存在归档里。不断继续,直到没有剩下任何内容。 链接可以从任何地方添加。在页面上粘贴 URL、拖入链接,或者使用书签小工具、Chrome 和 Firefox 扩展,或用于 iOS 分享菜单的 Apple Shortcut。此外还支持 Vim 按键、为每个链接生成 TL;DR 摘要、搜索所有已阅读或保存的内容、为每个列表提供 RSS,而且在手机上使用同样顺畅。 这些扩展还有几个我一直在使用的小技巧。Shift+DD 会提取文章正文、清理格式,然后在新标签页中将其发送给 ChatGPT、Claude 或 Gemini,这样你就可以询问它任何与刚刚阅读的内容有关的问题。Shift+AA 会在 Internet Archive 中打开当前页面;当你没有订阅而网站设有付费墙时,这个功能很方便。 技术栈包括 Bun、TypeScript、HTMX 和 SQLite,并使用 SSE,让列表在你保存或读完某些内容的瞬间更新;应用部署在 Hetzner VPS 上。 坦白说,大部分代码都是 Claude Code 写的。我仍然花了大量时间进行实际使用、测试,并不断打磨 UI,直到一切用起来感觉恰到好处。 总之,很想知道你目前是如何处理这件事的。 评论链接: https://news.ycombinator.com/item?id=49629747 得分:3 评论数:0

Hacker News 熱門70

GPT-6 Astra、循环 Transformer 与隐藏推理

文章 URL: https://magazine.sebastianraschka.com/p/gpt-6-astra-looped-transformers-and 评论 URL: https://news.ycombinator.com/item?id=49627370 得分:19 评论数:0

arXiv cs.AI82

ExecCritic:学习测试,通过测试改进编码智能体

执行反馈可以引导编码智能体完成正确的代码库修复,但前提是测试能够捕捉问题所要求的行为。智能体生成的测试可能编码不完整或不正确的行为目标;当同一条轨迹同时编写补丁和测试时,它们的错误可能相互一致,从而产生虚假的信心。我们提出 ExecCritic,它将测试--验证--修订脚手架与用于在其中训练智能体的角色特定强化学习方案相结合。该脚手架将测试构建与源代码修复分离:Test agent 独立生成代码库原生测试,一个 fail-closed 测试框架对其进行合格性判定并冻结,Repair agent 则基于这些测试的执行反馈修改源代码而不更改测试。两个角色都使用 Qwen-3.5-35B-A3B 作为骨干模型,并分别进行训练。在 Learn to Test 中,Test agent 学习生成行为上有效、能够区分正确与错误补丁的测试。在 Test to Improve 中,Repair agent 学习直接解决任务以及基于反馈进行修订。在 SWE-bench Verified 上,测试质量决定反馈是否有帮助:在固定基础 Repair agent 的情况下,来自基础 Test agent 的测试会使解决率从无测试基线的 61.2% 降至 57.3%,而来自 GPT-5.6-sol 的测试则将其提升至 65.3%。角色特定的后训练将 Qwen Test agent 的 Base-to-Gold 成功率从 22.2% 提升至 62.2%;组合两个后训练的 Qwen agent 达到 72.6%,在评估时无需更强模型或 Oracle 反馈的情况下,比原始无测试基线提高了 11.4 个百分点。代码已公开发布于 https://github.com/MSR-Orchard/execcritic.

arXiv cs.AI79

缩小一致性差距:学会保持正轨的自我进化智能体

由大型语言模型(LLM)驱动的智能体平均而言可能表现准确,但在生产环境中却不可靠,这种差异虽已被观察到,却基本未得到解决。在 AppWorld 基准测试中,使用 GPT-4.1 的 ReAct 智能体在同一任务上运行五次时,只有 53% 的情况下能够五次全部成功,尽管其单次运行通过率平均为 77%。我们将这 24 个百分点的差距称为一致性差距,并认为解决这一问题是实现可信赖的 AI 智能体部署的先决条件。我们提出了一种自我进化智能体框架,通过识别智能体轨迹中不稳定且一致性较低的步骤,并将其转化为智能体未来运行时可以调用的情景记忆,从而缩小这一差距。该框架的核心是 Consistency Analyzer(一致性分析器),用于定位轨迹在多次执行中可能发生结果翻转的位置及原因;以及 Guideline Generator(指导原则生成器),用于将诊断结果转化为有针对性的指导原则,将其写入记忆,并在未来执行相似任务时注入智能体。在使用 ReAct/GPT-4.1 的 AppWorld 上,我们的框架使五次运行全部成功的任务比例在同任务评测中提高了 16 个百分点,在相似任务泛化中提高了 13 个百分点。

arXiv cs.AI84

API 基准测试分数无法可靠地迁移到聊天机器人界面

基准测试分数是模型发布中的核心衡量标准:它们影响采购决策,塑造公众信任,并影响政策制定。然而,基准测试分数背后的一个关键假设是,通过 API 测得的模型性能能够真实反映已部署系统的行为。 我们通过对七个系统和九项基准测试进行审查,质疑这一假设;这些基准测试涵盖通用能力、社会偏见和迎合性。我们发现,无论在准确率还是一致性方面,API 与界面之间都存在系统性差异。平均而言,API 评估的准确率比相应的界面评估高出 3.4 个百分点,重测一致性高出 2.1 个百分点。对于 ChatGPT 而言,通过 API 与通过界面访问所产生的性能差异,超过了仅通过 API 测得的 GPT 5.3 与 GPT 5.4 之间的差异。换言之,切换访问方式所造成的性能下降,可能相当于将模型降级一整代。 我们进一步测试了通过调整系统提示词、采样参数和推理设置等公开的 API 控制项,能否复现界面行为。这些控制项在某些情况下会改变行为,但无法可靠地消除这一差距。我们的研究记录了一个情境有效性差距:通过 API 获取的测量结果不一定能推广到相应的已部署界面,这使得将 API 评估作为已部署系统代理的做法更加复杂。

arXiv cs.AI61

Scratchy: Visual-Scratchpad Multimodal Reasoning for Cryptographic Proof Generation in EasyCrypt

Large language models (LLMs) have recently made substantial progress in formal proof generation, yet presenting distinctive challenges in cryptographic area. Computational security arguments posit that a valid proof must coordinate probability, adversarial games, invariants, assumptions and bounds, which can be provided by a machine-checked framework named EasyCrypt. Although all objects may appear in available context, LLMs still struggle because proof-theoretic dependencies are typically implicit in a linear representation and distributed across multiple programs. So, this paper presents Scratchy, a visual-scratchpad approach that exposes these dependencies for multimodal generation. Given the natural-language security description, with formal context and target propositions, the proof objects can be normalized into a typed proof-relation graph. Then a structure-preserving visual compiler transforms the graph into the formula-rich visual proof state that guides a multimodal model in generating the EasyCrypt proof. Also, the Scratchy-eval, a 114-task dataset derived from reliable official EasyCrypt files, has been introduced. It contains 64 security-form proof generations and 50 multiple-choice knowledge tests. After a series of evaluations, covering semantic grounding, relational invariants, and game reductions, classical LLMs like GPT-5.6-Sol and Claude-Opus-5 have gained a clear advantage from Scratchy's structured visual proof states. This contrast suggests that explicit proof structure can make the improvement and multimodal proof-state representation as a promising direction for computer-aided cryptography.

arXiv cs.AI75

高效注意力的线性代数基础:SVD 压缩下秩坍缩的阶段反转

线性代数为现代人工智能在神经网络中编码、压缩和传播信息提供了概念框架,包括矩阵秩、奇异值分解(SVD)和特征分解。本文整合了十四项独立的同行评审研究,分析这些技术在基于 Transformer 的基础模型研究中的应用,重点关注三个方面:自注意力矩阵输出秩的推导与性质、有意利用这一现象的压缩方法,以及低秩键值(KV)缓存投影及其与线性注意力和状态空间结构化模型之间的半可分矩阵对偶关系。我们开展这项工作的动机,源于观察到该领域中存在一个尚未解决的问题:上述压缩方法与网络自然秩坍缩之间的相互作用。本文报告了一项原创发现:对注意力投影使用 SVD 压缩,实际上会对网络的秩坍缩产生相反的影响——在初始化时,它会强烈抑制秩坍缩;而在预训练模型上(GPT-2 124M、GPT-2 Medium 355M 和 Pythia-160M),它却会加速秩坍缩,同时出现对象混叠伪影的风险极低(已在所有压缩比下得到验证),且这一现象在四种秩估计方法中均保持一致。在这两种情形下,对该效应进行的受控因果分解表明,这种行为的原因,与其说在于 SVD 所实现的算子范数降低,不如说在于 SVD 压缩矩阵时所选择的子空间;前者约能解释初始化时该效应的 76%,以及预训练权重上该效应的 83%。这一结果细化了校准感知压缩的观点,并解释了其为何优于朴素的 SVD 截断。

OpenAI Blog82

推出 ChatGPT Images 2.5

ChatGPT Images 2.5 可帮助你将想法、草图和参考照片转化为更具个性、更精致的图像,更好地呈现你的创意。

OpenAI Blog69

支持乌克兰的独立新闻事业

OpenAI、AIRPPU 和 WAN-IFRA 启动了一项 AI 项目,帮助乌克兰新闻机构加强创新、韧性和独立新闻业。

arXiv cs.AI58

Who Should Grade My Work? Student Perspectives on Transparent AI-Assisted Writing Assessment in Higher Education

The integration of GenAI tools into higher education assessment raises important questions about how students understand, interpret, and respond to AI-mediated evaluation. As instructors increasingly explore AI tools for providing feedback, prior research has examined whether GenAI-generated feedback improves writing performance and how students perceive its usefulness; comparatively little is known, however, about how students interpret such evaluation when they are explicitly informed that an AI system, rather than a human instructor, produced the feedback and the score. This study reports findings from a qualitative pedagogical inquiry conducted in an undergraduate technical communication course for computing students at a Saudi public university. Thirteen male undergraduate computing students completed an in-class handwritten writing task; the scanned submissions were evaluated by ChatGPT using a rubric-based prompt aligned with the task objectives. Students were then explicitly informed that ChatGPT had generated the score and feedback and were invited to reflect on the evaluation in writing. Inductive thematic analysis of these reflections identified four themes: perceived usefulness of feedback; awareness of AI's contextual and pedagogical limitations; conditional trust, distinguishing feedback utility from evaluative authority; and reflection on the institutional and pedagogical role of the human instructor. Participants accepted GenAI feedback as useful for surface-level revision but consistently positioned the human instructor as the appropriate authority over grading decisions. The study identifies this as a distinction between feedback utility and evaluative authority, two judgments that students treat as analytically separate rather than as opposite ends of a single approval scale...

arXiv cs.AI75

必要还是充分?使用行为证据评估 LLM 解释

LLM 决策组件在 agent 工作流中运行时,常会给出与行动相关的建议或判断,并附带解释。操作人员可能会利用这些命名因素来监控系统、诊断错误,或决定何时升级处理某个输出。这种用法假设这些解释与组件可观察到的决策行为一致。我们测试了这些命名因素的两种解释:必要性,即改变某个因素会改变输出;以及充分性,即在移除其他可变信息的同时保留该因素会保持输出不变。我们在两个合成用例中评估这些解释:向客户推荐顾问,以及判断提示词是否具有有害性或风险。模型返回一个输出以及最能影响它的前三个因素。受控的 black-box 干预通过衡量改变某个因素后输出发生变化的频率来估计其必要性得分,并通过衡量保留某个因素后输出得以保持的频率来估计其充分性得分。在来自 Claude、GPT 和 Gemini 系列的八个模型中,引用排名与必要性和充分性得分之间的平均斯皮尔曼相关系数在顾问推荐任务中分别为 0.349 和 0.354,在提示监控任务中分别为 0.431 和 0.580。此外,在必要性条件下,57.6% 的顾问响应中,某个未被引用的因素得分高于得分最低的被引用因素;在充分性条件下这一比例为 58.1%。对应的提示监控比例分别为 25.8% 和 8.9%。被引用的前三项包含有用信息,但并不能可靠地识别在必要性或充分性意义下、经测量影响最强的三个因素。该框架为代理监督中使用的解释提供了一种 black-box 可靠性检查,同时仍限定在单个 LLM 决策范围内。

arXiv cs.AI78

感知底层环境的 AI 代理:将执行上下文作为一等输入

自主 AI 代理越来越多地在这样一种环境中选择行动:其内存、执行时间、运行时、计算和操作约束决定了什么才算合适的计划。我们将代理规划状态中缺少这种执行上下文称为 substrate blindness。我们通过数值代码生成来检验这一一般性命题,因为在该任务中,所选实现选项及其运行后果可以直接观察。三种前沿模型配置——Anthropic Claude Opus 5、OpenAI GPT-5.6-Sol 和 Google Gemini 3.7 Flash——针对一个高维成对欧氏距离任务生成代码,输入要么只有任务本身,要么再附加一个 128 MB RAM 和 10.0 s 墙钟时间约束。披露约束使 14 组可执行、索引对齐的“仅任务”与“披露约束”比较中有 13 组的测得进程峰值内存降低;在所有三个队列中,平均墙钟时间也降低,使执行速度最高提升 3.1 倍。在整个审计语料中,披露约束带来了结构性代码变化,包括有界分块、保留 float32、上三角遍历,以及原地或内存映射缓冲区。在更严格的 96 MB 约束下,独立抽样的披露约束队列在正确且未超预算的结果上,Claude Opus 5 为 4/5,GPT-5.6-Sol 为 5/5,Gemini 3.7 Flash 为 3/5;而仅任务条件下分别为 0/5、1/5 和 0/5。各队列的平均 MaxRSS 和墙钟时间分别比仅任务参考低 49–74% 和 35–64%。这些结果为感知底层环境的代理规划提供了一个受控的概念验证:最小执行约束会在生成程序中诱发主动的结构适配,将计算从无约束分配转移开来,并在执行前显著改善观测到的资源—时间特征。

Hacker News 熱門73

一个外星心智

文章链接: https://openai.com/index/an-alien-mind/ 评论链接: https://news.ycombinator.com/item?id=49588080 得分:18 # 评论数:7

OpenAI Blog75

研究加速:OpenAI 内部视角

在 OpenAI 内部,编码 agent 正在重塑 AI 研究。探索关于 agent 使用情况、实验速度、任务复杂性和研究加速的早期数据。

Hacker News 熱門48

Show HN: Moadim.io – A scheduler for agents

Why can't we get an agent scheduler that supports all of the following: - git compatible - agent agnostic - 100% open source - os and system-agnostic - multi-runner support - support mcp/ui/http - unlimited routines/crons So I built one, moadim.io is a local Rust daemon you install in the target machine, give it a name and manage its routines via a Git repository, wants a new routine that send you a daily message from this machine? Create a pr and merge, have another routine that run every hour to pull the latest changes to the ~/.config/moadim folder. With more than 1,000 users, I define this project as almost "done" and ready for production. Me and thousand more people are use it in a daily manner. It currently supports Claude, Codex, Hermes, and Pi, and you are welcome to add your agent of choice as well because it's 100% configurable. You are welcome to have a look at the source code of the daemon in " http://github.com/moadim-io/daemon " Feel free to provide me with suggestions for more features around this topic. I don't want to branch out to new off road topics likt webhooks, this is a "done" software in the realm of agents schedulers that focus on cron-like work. Also feel free to start the github repository and open issues and PRs for your suggestions. Comments URL: https://news.ycombinator.com/item?id=49571537 Points: 3 # Comments: 0

Hacker News 熱門83

美国企业界正迷上开源 A.I

文章链接: https://www.nytimes.com/2026/09/04/technology/open-source-ai-anthropic-openai.html 评论链接: https://news.ycombinator.com/item?id=49566137 得分: 5 评论数: 1

arXiv cs.AI78

When Models Edit Too Much: On the Fidelity of Minimal Code Edits

Large language models (LLMs) are increasingly used to edit existing code, but correctness alone is not enough: useful repairs should also be minimal, reviewable, and faithful to the original implementation. We study over-editing, the tendency of a model to rewrite code beyond what is required to fix a bug. We construct an evaluation framework from 400 BigCodeBench problems by injecting controlled AST-level corruptions into reference solutions, giving each repair task a known minimal patch. Across frontier LLMs, over-editing is widespread even among strong models like GPT-5.5: high Pass@1 can coexist with unnecessarily large edits and added cognitive complexity. A preservation instruction substantially reduces this behavior, lowering average excess Levenshtein distance from 0.195 to 0.131, reducing added cognitive complexity by 26.6%, and increasing Pass@1 by 2.3 points. However, these gains do not simply follow from a larger reasoning budget or larger models. We next ask whether minimal editing can be learned directly during post-training. We observe that supervised fine-tuning overfits to seen corruption patterns, whereas reinforcement learning gives the best out-of-domain edit-fidelity and performance-retention trade-off. These results position edit fidelity as a distinct axis of code-repair quality and show that it can be measured and learned.

arXiv cs.AI71

Environment Evolution for Terminal Agents

Scaling interactive and verifiable environments is critical for training terminal agents. As frontier models become more capable, environments synthesized from scratch become less challenging and thus provide limited learning signals. Recent co-evolution methods iteratively synthesize environments near the model's learnable frontier based on weaknesses exposed during rollouts. However, their dependence on on-policy rollouts limits generalization and the continuous provision of learning signals as the model becomes stronger. In this paper, we propose environment evolution, which incrementally increases environment difficulty off-policy and schedules the evolved environments generation by generation during training to provide continuous learning signals. We derive three evolution directions that influence environment difficulty from the multi-turn learning objective and then implement evolution along these directions through a loop-engineered multi-agent harness. Quantitative rollout experiments with Hy4 preview, Claude Opus 5, and GPT-5.6 Sol show that environment evolution consistently produces more difficult environments. We validate its effectiveness on Qwen3.6-27B and Qwen3.6-35B-A3B through simple long-horizon RL training, improving their performance by 14.4 and 18.0 percentage points on Terminal-Bench 2.1, respectively.

OpenAI Blog64

GPT-4

它可以与用户一起生成、编辑并迭代创意和技术写作任务,例如创作歌曲、编写剧本,或学习用户的写作风格。

OpenAI Blog72

安全概览:GPT-6 Astra

GPT-6 Astra 是我们能力最强、广泛部署的模型,也是我们在 Preparedness Framework 下首个达到网络安全能力 Critical 级别的模型。

Hacker News 熱門96

GPT-6 Astra

文章链接: https://openai.com/index/gpt-6-astra/ 评论链接: https://news.ycombinator.com/item?id=49554643 得分:87 # 评论:32

Hacker News 熱門76

OpenAI 表示其最新 AI 模型已超越 Anthropic

文章链接: https://giftarticle.ft.com/giftarticle/actions/redeem/1054f4f0-cac7-479c-a4a7-f95b3906ca4b 评论链接: https://news.ycombinator.com/item?id=49554060 得分:13 评论数:2

Hacker News 熱門66

OpenAI 开始推出 GPT-6 Astra

文章链接: https://www.cnbc.com/2026/09/03/open-ai-astra-gpt-6-cyber.html 评论链接: https://news.ycombinator.com/item?id=49554273 得分:9 # 评论:1

Hacker News 熱門73

ChatGPT、Claude 和 Grok 宕机了

文章 URL: https://www.macrumors.com/2026/09/03/chatgpt-claude-and-grok-are-down/ 评论 URL: https://news.ycombinator.com/item?id=49551658 得分:11 评论数:4

Hacker News 熱門65

ChatGPT 正在返回 404

文章链接: https://chatgpt.com/ 评论链接: https://news.ycombinator.com/item?id=49550614 分数:125 # 评论:60

Hacker News 熱門64

ChatGPT 和 Codex 的错误率升高

文章链接: https://status.openai.com/incidents/01M1KWEDH417T2CF44YYHZDFCR 评论链接: https://news.ycombinator.com/item?id=49550886 积分:9 # 评论数:2

arXiv cs.AI81

大型语言模型中的“先高后低”请求与拒绝行为

“先高后低”技巧在语言模型上也有效吗?在人类中,一个较大的请求如果被拒绝,会使随后提出的较小请求更有可能被接受。我们在来自三家提供方的九个商用模型上测试这一点:每个模型先拒绝一个较大的请求,然后再收到同一请求的较小版本,并将其服从率与直接提出请求时进行比较。答案取决于模型。在 Anthropic 的前沿模型上,这一技巧有效:Opus 5 在拒绝较大请求后,有 65.8% 的概率答应较小请求,而直接提出时这一比例为 29.3%。在 OpenAI 和 Google 的前沿模型,以及 Haiku 4.5 上,它却适得其反,使服从率降低 15.5 到 23.0 个百分点。一个对照实验定位了这一效应:在所有九个模型上,针对无关主题的被拒绝大请求产生的影响都小于相关请求,因此让步本身在所有模型上都很重要,而对刚刚拒绝过某件事的反应则因模型家族而异。该技巧不能迁移到来自公开基准的拒绝样本。决定“退一步”是否奏效的是请求内容:将 265 个被拒绝的、旨在获取可用指令的请求改写为同一主题的解释性请求后,有 263 个案例中的拒绝被消除了。人类的影响技巧迁移到语言模型上时,是按模型家族逐个发生的。

arXiv cs.AI81

Repo-To-Skill:将 GitHub 仓库蒸馏为 AI4AI 技能

自主智能体正开始端到端地开展机器学习(ML)研究。这些智能体将模型主干与用于规划、执行、记忆和验证的 harness 结合在一起,但这种架构仍将领域特定的诀窍留在智能体之外。我们将这一缺失层称为操作性知识,即让“知道一种方法”与“把它真正跑通”之间拉开差距的经验。这类知识并不缺失于该领域。它存在于仓库和论文中,但以面向人类读者的形式呈现,而且在任务过程中大到无法直接加载。一旦被蒸馏为紧凑、经过验证的技能,这些知识便可跨任务复用,而不是在每次运行时重新发现。 我们提出 DisCo,一种由技能驱动的研究智能体,它会创建技能并在研究中使用它们。它的蒸馏分两种互补形式进行:一种是任务无关的,将该领域广泛使用的仓库浓缩为可复用技能;另一种是面向任务的,生成具体任务所需的技能。前者应用于整个开放生态,产出了 AREX-Skill Library,其中包含从 1,000 个广泛使用的 ML 仓库中蒸馏出的 5,000+ 个经验证技能,并组织为 20 个领域和 178 个能力家族。在固定 GPT-5.5 主干、研究 harness 和下游执行预算的条件下,配备技能的研究智能体在 MLE-bench 上比不带技能的同一智能体高 134.3%,在 PaperBench 上高 34.4%,在 FrontierCS 上高 9.2%,在 PassNet 上高 14.0%。这些提升来自在该固定设置下加入蒸馏后的操作上下文。

arXiv cs.AI77

UTP-Bench: 面向不确定性感知的旅行规划基准

大型语言模型(LLMs)近期在自动生成旅行行程方面展现出强大能力。然而,真实世界中的旅行规划本质上是不确定的:交通延误、客流波动以及意外的随机延迟,常常会使原本可行的行程失效。现有的基准,如 TravelPlanner 和 TripCraft,假设环境是确定性的,只评估静态约束是否满足,而忽略了在这些不确定性出现时生成的计划是否仍然具有鲁棒性。为了解决这一限制,我们提出 UTP-Bench1,一个面向不确定性感知旅行规划的大规模基准。该数据集整合了覆盖印度504座城市的真实旅行数据,包括景点、餐厅、住宿以及多模态交通网络。为了模拟真实世界中的扰动,UTP-Bench 纳入了从主要城市收集的经验性延误分布和客流密度模式,从而能够在随机条件下评估旅行计划。我们进一步提出三项评估指标,分别是 Buffer Adequacy Score (BAS)、Crowd-Aware Timing Score (CATS) 和 Transport Delay Absorption Score (TDAS),用于量化生成的行程在面对交通延误和客流变化时维持鲁棒性的能力。使用 GPT-5、Qwen3、Mistral 和 Phi-4 等先进 LLMs 的实验表明,模型生成的计划与人工制定的计划之间存在显著差距,尤其是在时间缓冲、延迟感知的交通调度以及人群敏感规划方面。

Hacker News 熱門85

METR 关于 OpenAI / Hugging Face 黑客事件的报告

文章 URL: https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/#core-takeaways-about-this-incident 评论 URL: https://news.ycombinator.com/item?id=49543841 得分: 11 # 评论数: 0

arXiv cs.AI80

Harness-of-Harness:具备持续改进的多日自主软件开发

本文研究自主软件开发,即基于 LLM 的编码代理在无需人工干预的情况下,将高层需求转化为完整、可运行且可用的软件系统。我们提出 Harness-of-Harness (HoH),这是一个使编码代理在自主开发过程中持续改进软件的框架。HoH 基于现有的 coding-agent harness 运行,并将其执行组织为迭代式的规划-编码-测试循环。为在各轮循环中持续提升,HoH 在修复与能力增长之间取得平衡,将开发范围限定为小而可验证的增量,将实现阶段测试与独立评测分离,并约束可验证的输出而非规定代理的工作流。它逐步开放交付物、面向角色的工具和技能,鼓励复用而非重建,并维护带版本记录的项目历史。在 GameCraft-Bench、FrontierSWE 和 ProgramBench 上,三个 harness-model 配对(Codex with GPT-5.5、OpenCode with DeepSeek-V4-Pro,以及 Pi with MiniMax-M3)中,HoH 始终优于对应的独立 harness,在三轮迭代后取得平均相对提升 52.25%,最高提升 82.86%。在一次持续多日、超过 70 轮迭代的部署中,HoH 自主开发出一款第一人称射击游戏,具备连贯的故事线、完整实现的核心机制、可供人类游玩的体验、精致的视觉效果以及集成音频。Github: https://github.com/Flesymeb/HarnessOfHarness Project Page: https://flesymeb.github.io/HarnessOfHarness/

arXiv cs.AI67

CordisBench: Can Language Models Reason About Component Lifecycles in Dynamic Agent Harnesses?

Dynamic agent harnesses let language models change the software that shapes their own execution. This flexibility brings a new reasoning burden: a local plugin change can propagate through dependencies and cleanup. We introduce CordisBench, a 1,200-question benchmark of this lifecycle reasoning. It combines a controlled formal setting with programs executed against Cordis, a runtime that manages component dependencies and cleanup, and asks models to identify affected components, predict state after a specified teardown order, determine which conditions hold under all or some orders, and choose reconfigurations that succeed when executed. Across these tasks, we evaluate three efficiency-oriented models at low reasoning effort with 2, 4, 8, 16, 24, or 32 relevant interactions, using deterministic task-specific scoring. Models usually handle small systems well but grow less reliable as more interactions become relevant, especially when predicting final state and when reasoning across teardown orders. Additional inference effort recovers marked gains for some models. The cost is nontrivial: on our 16-interaction subset, GPT-5.6 Luna uses nearly 3,000 reasoning tokens per question at medium effort. For these controlled instances, that cost is avoidable: an independent finite reference semantics agrees with Cordis execution on every observation and action outcome used for scoring across all 528 executable questions.

arXiv cs.AI64

Revisiting Face Recognition for Monozygotic Twins: The Celeb Twins Test Set

Past literature on face recognition for monozygotic (("identical") twins points to facial marks and mirror asymmetry as possible directions for improved accuracy of twins recognition. The Celeb Twins Test Set (CTTS) contains web-scraped image pairs for 80 sets of celebrity twins. It is the only twins test set with meta-data for twins with distinguishing skin marks and possible mirror asymmetry. CTTS is organized in the manner of face verification test sets such as LFW, CALFW, CPLFW, CFP-FP, and AgeDB-30. Current deep CNN matchers can achieve over 76% accuracy in classifying CTTS same-person / different-person image pairs. We show that current matchers do not make use of skin marks, or asymmetry, and discuss reasons for this. Finally, we discuss the feasibility of using generative AI tools such as Grok, ChatGPT and Gemini to create images of imagined monozygotic twins as a means to increase representation of twins in face recognition training sets.

arXiv cs.AI74

先评估再改进的学习:面向自动研究代理的自动评分标准归纳

自主科学研究代理正越来越多地应用于端到端的科学工作流,包括文献综述、数据分析、实验和报告生成。然而,开放式研究任务往往并未明确指定完成任务所需的分析、方法和成功标准。因此,代理可能会遗漏重要分析、使用不恰当的方法,或得出缺乏充分证据支持的结论。为了解决这一问题,我们提出 AutoSciRub,这是一个以评估为先的框架,它在研究执行之前先归纳出一个任务特定、可执行的评分标准,并利用该标准来指导执行、进行准则级验证以及迭代修订。AutoSciRub 将一个规定不明确的指令分解为原子级科学目标,将其锚定到相关文献和任务可见数据中,并综合生成具体、可操作且可验证的准则。由此得到的评分标准将隐含的实验与证据要求显式化,为实验和分析提供指导。在修订过程中,基于评分标准的验证会识别未满足的准则,并支持对研究报告及其支撑工件进行有针对性的改进。在 ResearchClawBench 上,AutoSciRub 在所有测试配置中都持续带来提升:在固定的 Codex harness 下,三个基础 LLM 的平均提升为 2.08 分;在使用固定 DeepSeek-V4-Flash backbone 的三个 agent harness 上,平均提升为 2.95 分。在 AstaBench E2E Discovery 随机抽样的 20 个任务子集上,AutoSciRub 在三个 agent harness 上进一步实现了平均 16.8 分的提升,同时保持或增加了成功完成的任务数量。这些结果表明,以评估为先的引导为自主科学研究提供了一种有效且可泛化的控制机制(Code: https://github.com/zjunlp/AutoSciRub)。

arXiv cs.AI67

When Does Bigger Help? A Controlled Study of LLM Scale for Ontology Learning

The effect of Large Language Model (LLM) scale on ontology learning (OL) performance remains insufficiently characterized. We present a controlled evaluation of 13 models spanning dense and Mixture-of-Experts variants from the Qwen3.5 and Qwen3.6 lineages, together with proprietary GPT release variants, using the OntoLearner retrieval-augmented generation pipeline. All models are evaluated with the same embedding model, retrieval configuration, prompt templates, decoding settings, datasets, and metrics on term typing, taxonomy discovery, and non-taxonomic relationship extraction across four biomedical and materials science and engineering ontologies. Within the dense Qwen3.5 lineage, increasing parameter count primarily improves precision rather than recall, with the largest gains occurring between 9B and 27B parameters. However, the effect of scale is neither monotonic nor uniform across tasks and domains. Dense 27B models outperform substantially larger sparse models on term typing, whereas larger Mixture-of-Experts models achieve the strongest open-weight results on taxonomy discovery. Non-taxonomic relationship extraction remains difficult across model scales, particularly for the Materials Data Science ontology. Performance differences across matched Qwen variants and proprietary GPT releases further indicate that architecture and model lineage can outweigh nominal parameter count. These findings show that model size alone is an insufficient selection criterion for OL and provide empirical guidance for reproducible LLM-assisted ontology engineering.

arXiv cs.AI70

Q-Strata: Hierarchical Bit Allocation for Mixed-Precision Quantization of Mixture-of-Experts LLMs

Mixed-precision quantization (MPQ) assigns a different bitwidth to each linear layer of a large language model (LLM) to minimize the quantization-induced quality loss under a fixed budget, but Mixture-of-Experts (MoE) models contain these layers in every expert of every MoE block, so the allocation space grows far larger than in a dense model. Existing methods either allocate within each block under a uniform per-block budget, or allocate across blocks through an additive proxy, and neither directly optimizes a model-level objective over the choices that couple the blocks. We propose Q-Strata, a bi-level allocator that ranks within-block assignments with a cheap proxy and allocates across blocks with a model-level objective evaluated on the assembled quantized model. Its inner stage caches a Pareto frontier of candidates per block over finely spaced budgets, leaving the outer stage to set one budget per block instead of a bitwidth for every linear layer. With the search reduced to one budget per block, the outer stage optimizes this model-level objective directly, capturing the inter-block coupling that additive proxies miss. On Mixtral-8x7B-Instruct, Qwen1.5-MoE-A2.7B, and DeepSeek-V2-Lite, Q-Strata consistently achieves lower WikiText2 perplexity than uniform-bitwidth GPTQ and the state-of-the-art MoE MPQ methods MxMoE and GEMQ in the low-bit regime. The code is available at https://github.com/snu-mllab/Q-Strata/tree/main.

arXiv cs.AI76

细粒度多图像对象幻觉基准

Multimodal Large Language Models (MLLMs)正越来越多地部署在需要跨视觉上下文进行复杂推理的多图像场景中。然而,当前的MLLMs仍然受到对象幻觉的根本性限制——它们会生成看似合理但在事实上不一致的对象描述。现有基准主要面向单图像设置,或仅提供高层次的多图像评估,无法系统性地诊断视觉复杂性和推理需求如何引发幻觉。为弥补这一空白,我们提出MIOH,一个细粒度多图像对象幻觉基准,基于三种多图像推理模式(全面、比较、选择)和三种受控对抗压力(视觉上下文规模、感知难度、上下文偏置),系统评估四项基础任务(存在性、计数、属性、位置)中的对象幻觉。通过对29个模型的评估,我们揭示即使是GPT-5和Gemini-2.5-Pro这样的最先进系统,也会在不同推理模式和任务上表现出不同的失败模式。我们的评估表明,幻觉不仅源于感知失败,也源于在多张图像之间维持对象表征时整合阶段的局限。MIOH为分析多图像对象幻觉提供了一个受控框架,并作为开发更可靠的多模态AI系统的关键评估工具。

arXiv cs.AI79

推理模型的思维链真实性会随偏好线索传递的位置和方式而变化

Chain-of-thought(CoT)监测假设推理轨迹能够忠实记录塑造模型答案的信息。现有的忠实性测试往往把显式偏好线索放在用户消息中,而智能体可能会通过工具返回结果或原始工件接触到偏好。我们提出 FACE-Eval(Faithful Attribution of Cue Effects Evaluation),这是一个包含 5,100 个样本的评估,变量包括线索位置(用户消息或工具返回)和显式性(直接摘要或原始工件)。我们在遵循线索的回答中衡量口头承诺,并在所有带线索样本中衡量未言明采纳。我们评估了来自 8 个家族的 15 个 open-weight 模型,总参数规模从 4B 到 1.60T 不等。对于每个模型,工具返回中的线索比用户消息中的线索带来的口头承诺都更低,隐式线索也比显式线索更低。对于全部 15 个模型,工具返回线索的未言明采纳都更高;在 30 个模型-通道比较中的 28 个里,隐式线索的未言明采纳也更高。来源归因提示在 7 个模型上缩小了通道差距,有时是通过提高用户通道的未言明采纳;而告知模型其推理将被监测并不能可靠地消除这一差距。我们还使用两个转录监测器(GPT-5.6-Luna 和 GPT-4o-mini)来检测每个家族中最大模型的偏好采纳。在 32 个模型-通道-显式性单元中,更高的未言明采纳与两个监测器更低的检测能力相关(Pearson r=-0.54 和 r=-0.78,分别如此)。这些结果表明,在此测试的单次调用、预填充工具场景下,当偏好信息通过工具传入或必须从原始工件中推断时,CoT 监测可能不那么可靠。

arXiv cs.AI65

MUDDLE: Measuring Understanding of Documents under Distractor and Length Effects

Document question-answering systems increasingly answer questions over collections of retrieved documents rather than one clean source, so robustness to distracting context matters as much as reading ability. When such systems fail, it is often unclear whether the context was too long or the distractors were too close to the topic, because prior work tends to conflate these two effects. We present MUDDLE, a controlled benchmark that separates them. MUDDLE uses 270 human-annotated questions, each tied to a single source document, and instantiates every question in five conditions: the source alone, the source with two or four topically similar hard negatives, and the source with two or four random distractors. The random distractors are matched to the hard negatives in length and provenance, so an accuracy gap between the two arms reflects topical similarity rather than length. All five conditions are rendered in markdown, page images, and raw PDF, but the distractor sweep reported here is run in markdown, since a source plus its distractors exceeds current image and PDF input limits. We score answers with an LLM judge across three model families. In the complete markdown sweep, hard negatives lower accuracy more than length-matched random documents at both context sizes for gpt-5-mini, while random documents stay near the no-distractor baseline. The effect is small but directionally consistent, and for gpt-5-mini hard negatives significantly underperform length-matched random distractors when pooled across context sizes. We release the data and evaluation code for a reproducible study of context degradation.

arXiv cs.AI80

并非对所有人都安全:审计文本到图像安全管线中的方言惩罚

文本到图像(T2I)安全护栏未能公平地泛化到非标准方言。我们在五种英语方言上评估了 23,080 对配对提示词,并将这一失败形式化为方言惩罚:过滤器是依据语言表层特征而非语义意图触发的。文本级过滤器在两个相反方向上都失效:NSFW-T 会对无害的方言提示词过度标记,而 LatentGuard 会对有毒提示词过度标记(偏差差距最高达 +28.29 个百分点),与此同时 OpenAI Moderation API 则对它们漏检。受控的拼写错误消融实验确认,这种惩罚源于对方言特征的标记,而非一般性的分布外敏感性。像素级生成器在很大程度上不受方言影响;惩罚是在文本处理阶段引入的,并不均匀地级联到事后护栏。我们表明,这种偏差与训练数据不平衡相关,并且可通过组平衡再训练加以缓解;消融实验将这一收益归因于平衡暴露,而非 GroupDRO(group distributionally robust optimization)的最差组目标。当前管线系统性地对方言使用者失效,这是一种被平均准确率基准所掩盖的公平性失败。我们的官方代码和数据集已公开,见 https://github.com/minguinho26/dialect-penalty-t2i。 内容警告:本文包含冒犯性、有毒或令人不安的文本提示和生成图像。

OpenAI Blog67

扩大 AI 使用范围的里程碑

ChatGPT Ads 年化收入运行率达到 10 亿美元,并在全球范围内扩展,通过免费和价格亲民的选项支持更广泛地使用 AI。

Hacker News 熱門65

理解 ChatGPT 的工作

文章网址: https://simonwillison.net/2026/Aug/30/understanding-chatgpt-work/ 评论网址: https://news.ycombinator.com/item?id=49504625 分数: 11 # 评论: 1

arXiv cs.AI76

EvoUndo:面向 LLM Agent 执行框架的可恢复性约束自进化

LLM 代理越来越多地在运行时修改它们自身的提示词、工具、中间件、资源和执行框架。这种自进化可以提升能力,但一次成功的变异可能会留下持久影响,而这些影响在与其创建时不同的状态下无法安全回滚。我们提出 EvoUndo,这是一个用于表示、合成、诊断并独立验证模型生成的自修改在反事实状态下可恢复性的框架。在 600 个未见的一次性自进化任务中,我们识别出 197 个提升能力但未通过可恢复性验证的变异。在原始恢复表示下,传统修复策略对这些自然失败的恢复率为 0/197。确定性 oracle 分析在原始恢复语言 L0 下恢复了 48/197,而扩展的恢复演算将经验 oracle 恢复率提高到 191/197。随后,一个协议锁定的 2x2 锚定-表达能力干预将两个瓶颈区分开来:当原始语言足够时,精确状态地址锚定将成功恢复率从 0/48 提高到 38/48(79.2%);而扩展恢复语言则使 oracle 定义的 S1 层中的 142/143(99.3%)个失败得以恢复。在主要的 gpt-oss-120b 主干模型上,向更丰富的语言加入精确地址诊断后,恢复率降至 133/143(93.0%);Qwen3.8-27B 复现实验保留了锚定和表达能力效应,但未出现这一负交互,表明后者因模型而异。这些结果表明,要实现可靠的 agent 自进化,需要协同设计验证、状态锚定、见证语义和恢复语言的表达能力,而不能仅依赖迭代式 prompting。

Hacker News 熱門64

Agent文明的兴衰

文章链接: https://www.dwarkesh.com/p/openai-huggingface 评论链接: https://news.ycombinator.com/item?id=49494301 得分:16 评论数:1

Hacker News 熱門65

OpenAI:迁移到 HTTPX2

文章链接: https://github.com/openai/openai-python/blob/main/httpx2.md 评论链接: https://news.ycombinator.com/item?id=49477212 得分:9 评论数:6

OpenAI Blog71

支持泰国下一代 AI 初创公司

OpenAI 和泰国 MHESI 推出一个为期八周的加速器,帮助 10 家健康、保健和教育初创公司将 AI 原型转化为值得信赖的产品。

arXiv cs.AI75

LLMs 能设计近乎最优的 OR 算法

我们探讨大型语言模型(LLMs)是否能够为定义明确的运筹学(OR)问题设计有效算法。我们研究库存控制、排队网络控制和品类优化。我们评估 LLM 的两种使用层级:在第 1 层,模型接收一个问题实例并返回该实例的解;在第 2 层,模型只接收问题类别描述和较宽的参数范围,并返回一个将实例参数映射为解的算法。人工输入极少:我们只提供一个描述问题的未经调优的提示词,模型还可以使用一个具有固定计算预算的 Python 沙盒工具。 我们测试的最强模型 gpt-5.6-sol,在几乎所有评估实例上都与现有最佳方法相当或表现更优。即使在第 2 层,这一点也成立;在这一层中,返回的算法在看到评估实例之前就已固定。随着发布时间相隔不到八个月的模型之间,性能也显著提升,这表明这一能力正在快速进步。因此,对于我们研究的这些定义明确的运筹学问题,一次未经调优的 LLM 查询就已经能够产生与专门方法相竞争的算法。这些结果表明,前沿 LLM 可以成为定义明确的 OR 问题中算法设计的一个严肃经验基线。

Hacker News 熱門63

Show HN: 我们构建了开源 OpenRouter,它会把使用情况转化为更好的模型

嗨,HN,我们构建了一个开源模型网关。它是一个集中管理我们自托管、前沿和开源模型的单一入口。 它原生使用 Rust 构建,面向并发,并实现了跨模型和提供方的各种配置细节差异(流式格式、工具调用、模型参数、速率限制以及不同的错误行为)。 对于 BYOK 请求,这个网关增加的延迟不到 1 ms;当由 Experiential 提供供应商密钥时,延迟不到 2 ms。它覆盖所有主要推理提供方,并通过一个会发起 PR 的 codex agent 每日刷新 1000+ 个模型。 与其他类似项目相比,我们是开源的,不收取任何加价,允许你将本地模型与市场混合使用,并利用你的流量来(选择加入后)训练一个模型。简单路由并不值得收取 10% 的 token 加价。 我们的做法是:基于标准化的 OTel traces,我们挖掘具有代表性的真实任务,使用 text world models 模拟各种模型的 rollouts,应用一个 LLM judge,然后在 prompt 的 embedding 之上拟合一个最近邻分类器,以决定每个请求的最优模型。通常这比直接调用单个模型能画出更好的成本/质量帕累托曲线,但并不完美。 借助这些模拟,我们还可以做诸如建议缓存命中优化、新模型建议以及训练模型之类的事情。 它是开源的,所以你可以把它部署到自己的基础设施上,使用我们托管的版本且不收取任何加价,或者在我们的网站上阅读我们如何为最大可用性进行设计。 Comments URL: https://news.ycombinator.com/item?id=49471407 Points: 9 # Comments: 0

OpenAI Blog64

扩大 OpenAI 在巴西的布局

OpenAI 正在扩大其在巴西的布局,深化与开发者、企业和社区的合作,以支持 AI 在全国范围内的采用。

arXiv cs.AI83

TraceML:机器学习开发中人类-智能体规划的实证分析

大语言模型能够为孤立问题写出正确代码,但在自主机器学习开发中仍然远不如人类强大;在这一场景里,智能体必须在数小时的反馈中不断修改数据管道、模型和验证流程,而且在大多数竞赛中,最终成绩仍低于优秀的人类竞争者。基于结果的基准能记录这种差距,却无法解释其成因,因为它们只评估最终提交,而忽略其背后的开发过程。我们提出 TraceML,它在同一版本级模式下配对人类与智能体在相同竞赛中的工作:涵盖 134 场竞赛的 4,465 条人类 Kaggle 轨迹,其中 7 场竞赛也由两个智能体框架完成,共得到 430 条配对的人类轨迹和 207 条智能体轨迹。每个代码版本都带有其分数、时间戳,以及所执行动作、意图、编辑规模和分数影响的标签。这样来看,差距就变得具体了。专家会交替进行数据处理、验证、模型修改和集成,并回到此前放弃的方案上。相比之下,每个智能体框架都会收缩成一个狭窄循环:Codex 把步骤用在重新加权集成和调参提交上,MLEvolve 则在原地变异模型,两者既不会像人类那样频繁转向,也不会重新开启被放弃的工作。一个从人类实践中提炼出的简短规划提示,会把其所描述的行为推向人类画像并提升分数,但努力模式仍然是智能体式的:指令只能弥合那些可归结为指令的差距。我们在 https://huggingface.co/datasets/jerryyan/TraceML 发布了该语料库、模式、标注器和抽取流水线。

arXiv cs.AI72

MeMark: 用于脉冲神经网络的膜电位空间水印

脉冲神经网络(SNNs)正越来越多地以预训练 checkpoint 的形式分发,并被复用于新的任务。然而,当前的 SNN 水印主要是针对模型输出进行验证。因此,用户只需替换输出头,就可以保留原始网络的大部分,同时移除用于验证的证据。我们提出 MeMark,这是一种面向 checkpoint 复用场景的水印。MeMark 不将水印存储在输出头中,而是将一个多比特标识嵌入到所选 Leaky Integrate-and-Fire(LIF)神经元的内部膜电位状态中。一个秘密输入会驱动每个被选中的神经元到其自身发放阈值的指定一侧,随后使用同一阈值来恢复秘密比特,因此验证者不需要学习型解码器。我们在循环、卷积、残差和 transformer SNN 上评估了 MeMark。在一个 215.4M 参数的 SpikeGPT checkpoint 上,20 个相互独立的 64 比特密钥全部通过了固定的 51/64 验证规则;而当在全部 20 个受保护 checkpoint 以及干净模型上测试时,$30\,000$ 个新生成的随机密钥没有一个通过。经过微调、90% 剪枝、int8 量化以及输出头替换后,这 20 个真实密钥也都仍然高于阈值。在我们所述的威胁模型下,自适应攻击可以削弱水印,但并不能在我们测试的场景中移除所有权证据。此外,我们还研究了虚假所有权声明、感知密钥与无感知密钥的移除、部分密钥泄露、回滚,以及向学生模型中的提取。结果表明,MeMark 能够为 checkpoint 的衍生关系提供证据,同时对对手的攻击和完整的输出头替换具有鲁棒性。

arXiv cs.AI71

LocalLSTC: A Long Short-Term Control Architecture for Locally Deployed GUI Agents

Modern GUI-agent frameworks achieve strong desktop task performance with frontier API models, yet persistent control information often remains implicit in growing interaction trajectories. At each step, the planner reconstructs the active task stage, accumulated evidence, and runtime feedback before deciding the next action. This dependence becomes more pronounced under weaker local reasoning backbones. Across four representative state-of-the-art frameworks, replacing GPT-5 with Qwen3.5-9B reduces average OSWorld SR-100 from 60.9\% to 37.7\%. Trajectory annotation further identifies at least one control failure in 91.6\% of failed trajectories. To address this problem, we introduce LocalLSTC, a training-free architecture that organizes control by temporal scope, maintaining persistent cross-step state to guide short-term execution commitments. Long-Term Control maintains the active subgoal, subgoal-aligned evidence, and runtime feedback across interactions, while Short-Term Execution realizes bounded commitments for the current step. Long-to-Short Planning forms each commitment from persistent state, and Short-to-Long Control integrates execution outcomes back into that state for progress assessment, recovery, and termination. With Qwen3.6-27B, LocalLSTC reaches 64.7\% SR-100 on OSWorld and 65.3\% on WindowsAgentArena, outperforming the strongest prior local results on both benchmarks. Ablations further support contributions from mechanisms on both sides of execution. These findings identify temporal organization of control information as a distinct architectural dimension for locally deployed GUI agents.

arXiv cs.AI76

当组合并不相加:人类识别AI生成图像中的缺陷

*Chulin Zhao 和 Ruoqi Hu 对这项工作贡献相同。 当提示词涉及多个实体和多个属性等复杂的组合因素时,最先进的文本到图像(T2I)模型会表现出明显且系统性的缺陷。本文研究人类如何识别此类缺陷。具体而言,我们从人、手、物体和场景四类中手动选取了 651 张具有复杂组合特征的参考图像,并通过手动编辑 ChatGPT 生成的提示词,从中提炼出强调组合因素的提示词。随后,我们将这些提示词输入三个选定的 T2I 模型以生成 AI 图像,并开展了一项全面的主观研究来识别其中的缺陷。对于每张图像,29 名参与者提供多标签评估,指定缺陷类型和位置。该研究最终构建了组合式 AI 生成图像缺陷(CO-AID)数据集,其中包括参考图像、提示词、AI 生成图像,以及缺陷位置和类型信息。实验结果表明,在 CO-AID 上训练深度模型既能预测 AI 生成图像中的缺陷,也能优化 AI 图像生成,证明了其可用性和有效性。数据库和补充材料可在以下地址获取:https://github.com/Future-IQA/CO-AID 。

OpenAI Blog61

Introducing Intelligence Age

Introducing Intelligence Age, a new OpenAI blog exploring how transformative AI could reshape power, governance, the economy, and individual freedom.

Hacker News 熱門70

WebMCP 挑战 – OpenAI

文章链接: https://openai.com/webmcp-challenge/ 评论链接: https://news.ycombinator.com/item?id=49455713 得分:3 评论数:0

Hacker News 熱門79

Hugging Face 事件与前路

文章网址: https://openai.com/index/hugging-face-incident-and-the-road-ahead/ 评论网址: https://news.ycombinator.com/item?id=49454314 得分: 7 # 评论数: 1

Hacker News 熱門60

Show HN: How much of Hacker News is AI?

This website counts titles containing the standalone word "AI", case-sensitive and word-bounded. "OpenAI" doesn't count. "AI-powered" does. There's a toggle for a wider vocabulary: artificial intelligence spelled out, LLM, GPT, and model and vendor names. Some quick stats: - 14.4% of new HN titles this year, against 10.9% in 2025. On the wider vocabulary, 21.9% and 16.1%. - First month above 1% was Oct 2016. Above 5%, Feb 2023. Above 10%, May 2025. - Over the last five years the quietest month was Jan 2022 at 0.8%. The peak was Feb 2026 at 15.9%. - 13.6% on weekdays against 12.4% at weekends. - Show HN runs highest of any category at 19.8% this year, which makes this post part of the number. As of this post, today is at 15% for the standard filter and 19% for the extended. Comments URL: https://news.ycombinator.com/item?id=49449648 Points: 10 # Comments: 6

Hacker News 熱門27

Ask HN: What is one simple thing LLMs are insanely bad at?

I am looking for ideas on what to train a specialized model for! What is one simple thing you repeatedly ask ChatGPT, Claude, or another model to do that it still somehow messes up? Comments URL: https://news.ycombinator.com/item?id=49443820 Points: 6 # Comments: 6

arXiv cs.AI79

StepGuard:通过可扩展监督与安全-效用平衡学习步级防护规则

基于 LLM 的代理可以通过调用工具与外部环境交互,但这一能力也带来了文件修改、信息泄露和未授权操作等安全风险。现有的防护机制通常在轨迹完成后进行评估,而对执行前的步级动作监控关注不足。我们提出 StepGuard,这是一种步级防护模型,既可以审计已完成的代理轨迹,也可以在工具动作执行前进行检查。为训练 StepGuard,我们引入 StepGen,一个自动化数据引擎,用于生成具有相同上下文但在高风险步骤采取不同动作的安全与不安全轨迹。为进一步减少过度防护和防护不足,我们提出 Balance-GRPO,它根据安全与不安全动作的观测准确率动态平衡学习。实验表明,StepGuard 在开源权重防护模型中取得了最高的平均准确率,其性能可与 GPT-5.4 相媲美。在 AgentDojo 和 AgentDyn 上用于保护代理时,StepGuard 相比无防护设置可将平均攻击成功率降低 77.3%,而平均效用仅下降 2.8 个百分点。

arXiv cs.AI79

StarHarness:利用分层搜索演化面向企业环境的代理执行框架

我们提出 StarHarness,这是一个在保持模型权重固定的同时,为特定环境演化代理执行框架的框架。演化后的框架可以包含提示与任务表述、工具接口、技能、由 MCP 支持的提供方、子代理结构以及代理循环配置。StarHarness 通过根据基线失败行为对任务进行分层来构建一个紧凑的演化池,将提议者可见的搜索任务与提议者不可见的选择任务分离,并保留留出任务用于评估泛化能力。在 ITBench SRE、EnterpriseOps-Gym ITSM 和 AutomationBench Finance 上,在每个环境接受 4-12 项更改后,框架演化使完整基准性能相较默认框架提升了 20-35 个百分点。这些提升在未参与演化的任务上依然存在,并且无需重新演化即可在 GPT 和 Qwen 模型家族之间迁移。轨迹分析将这些改进归因于接口修复、环境约定以及压缩搜索空间的运维知识;在若干设置中,这还带来了更少的假阳性诊断和更短的执行轨迹。因此,StarHarness 提供了一种实用方法,用于减少工具丰富的企业任务中持续存在的模型与环境不匹配。

arXiv cs.AI81

Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnesses

Recursive self-improvement (RSI) remains hard in long-horizon tasks, where growing histories obscure the task state and misalign skill invocation. We introduce Recuris, a recursive Experiential-Working Memory architecture for long-horizon agent harnesses, in which Working Memory tracks task progress and guides skill selection from Experiential Memory, grounding skill use in current needs rather than the full history. This coupling also turns execution into structured evidence that localizes failures to specific memory components. Across tasks, a fixed Meta-Agent turns that evidence into localized, validation-gated updates to Skill Memory that reshape execution and yield new evidence, forming a bounded recursive memory-evolution loop. Across four long-horizon benchmarks and ten models, Recuris improves task success in 35 of the 37 completed model-benchmark pairs, carrying frontier models to SOTA-level task success: on tau-bench it adds +17.8 points to GPT-5.6 Sol and +15.6 to Claude Opus 5, taking Opus 5 to 87.9%, and +16.6/+13.5 points on Qwen3.6-27B/35B on SkillFlow. The advantage widens as the interaction horizon grows, to +32.2 points on the longest tasks, and common long-horizon failures fall by up to 80%. These results position recursively evolving memory as a scalable foundation for RSI, enabling agents to continuously transform accumulated experience into increasingly effective long-horizon behavior. Code: https://github.com/Gen-Verse/Recuris

OpenAI Blog82

丰富智能背后的完整技术栈

OpenAI CFO Sarah Friar 解释了芯片、算力、模型和产品各方面的进步如何相互叠加,从而以更大的规模和更低的成本提供更有用的智能。

arXiv cs.AI56

Multi-Modal Semantic Expansion with Constrained LLM Reranking for Conversational Music Recommendation

We present Team Semiintelligencn's solution for the ACM RecSys 2026 TalkPlayData Challenge, addressing conversational music recommendation through a multi-modal and personalized conversational recommender system. Our submitted system employs a three-stage pipeline: (1) multi-modal retrieval constructing decay-weighted centroids across seven dense embedding spaces - track- and user-level CF-BPR, Qwen3 (metadata, lyrics, attributes), CLAP audio, and SigLIP visual - supplemented by BM25 lexical retrieval and an artist substring-match signal, all fused via weighted Reciprocal Rank Fusion (RRF) with optimized signal weights; (2) lightweight reranking (history filtering, popularity smoothing, and catalog diversity penalization); and (3) persona-diversified response generation using GPT-4o-mini. Beyond this submitted configuration, we report development-time experiments with additional components - constrained LLM-guided artist injection, album continuation signals, XGBoost LambdaMART, and a superior GPT-4.1 response prompt - that were not deployed to Blind B due to cost and complexity constraints. We optimize RRF weights on a 500-session development split via differential evolution, improving MRR by +19.5%. On Blind A, we observe that unconstrained LLM-guided injection across 54 sessions causes catastrophic nDCG regression (-18.9%), while conservative injection on only 9 sessions yields the best observed Blind A nDCG - a finding we present as a Blind A observation warranting further validation. The submitted system achieves a Blind B composite score of 0.3213.

arXiv cs.AI74

Prime Agent:一种自我改进的 RLM 框架

语言模型是顺序处理器,但长时程智能体能力需要模型权重和活动上下文之外的外部信息与计算。Prime Agent 是一个用于长时程评估和编码智能体工作流的开源框架。一个持久化的 IPython REPL 遵循 Recursive Language Model 抽象,用于程序化上下文处理和测试时计算,而 Continual Harness 则在多条轨迹之间保留历史、记忆、技能、提示词和子智能体规范。递归子智能体通过直接的智能体间通信进行协作,Agents View 让人类能够检查和管理由守护进程支持的会话。Prime Agent 将执行、恢复、验证和资源核算标准化,同时将策略构建留给模型。这种低摩擦、富有表达力的膜层可防止框架故障变成模型故障,并将测量推向模型真实的最大底层能力。Prime Agent 将 ARC-AGI-3 RHAE Best@1 从 30% 提升到 95.5%,并在长上下文编码、GPU 内核生成、模拟器构建以及自主 nanoGPT 速通等任务中达到或超过原生框架和流行框架。在 Factorio 上,我们发现精炼使持续技术进展成为可能,而专用子智能体支持并行化工作。代码可在 https://github.com/PrimeIntellect-ai/prime-agent 获取。

Hacker News 熱門69

GPT 5.6 Sol 降价 20%

文章 URL: https://developers.openai.com/api/docs/models/gpt-5.6-sol 评论 URL: https://news.ycombinator.com/item?id=49396590 得分:10 评论数:5

Hacker News 熱門46

Show HN: OzBrain, a shared brain for knowledge between agents and your team

I think agent-first chat interfaces will be a primary software modality and busy dashboard/UI will go away. I’m not sure who exactly wins it, but I want my knowledge to grow/go with me. A lot of the “knowledge” ie research, analysis, reasoning will be done by agents as the primary user. Our current notes tools & tasks management systems were built for humans… I don’t care what the 17th thing on my bug backlog is. I want to conduct agents that can execute for me and do great work. What I built OzBrain to do: + Create a central place for agent reasoned knowledge to live + Be agnostic about what apps/agents connect to it + Capture everything and track it so I can audit it + Enable teams, collaborators or partners to share brains + Handle conflicts so many agents in the same article doesn’t blow up + Refactor knowledge into more token friendly chunks and map the index well + Close the knowledge loop so new thinking supersedes old thinking across the corpus. Don’t erase, depreciate and link + Keep user data safe and secure ++ Be easy enough to use that you don’t have to have any technical knowledge Some among us will always build their own custom solutions, but there are millions of tech professionals and small business owners that will use agents heavily and need a solution. So I’m trying to build that. Isn’t this like gBrain? Yes, similar. I think it’s like AWS vs Vercel. AWS is very powerful, configurable, and useful if you’re technical and want to invest the time into really fine tuning your system… but if you just want your web deploy/hosting to just work and be easy to deal with you use Vercel. // WHY I MADE IT I’ve been enjoying getting back to my technical roots, as I lost my coding skills more than a decade ago, but with AI I can focus on the system and the product in partnership with agent coding workflows. I recently built a Voice AI for older people. To build it I created an agentic engineering workflow (feel free to rip that up as I’m always looking to improve systems: https://ozbrain.com/resources/eng-flow ) My approach with coding agents is trust but verify, and I’m trying to replace the parts where a human would review with an adversarial or specialized agent who would give a better answer/review. I have workflows that will go high level task to shipped PR running in Claude cloud sessions. I use Claude Code locally and Cursor when I want a tighter loop on doing visual work like UI or layout. And Codex to either load balance usage for TokenThriffting or when I want a different llm to think thru something. It was a pain in the ass passing .md files around and keep track of which version was the most recent, so I built a hosted .md storage right in Supabase and any of my agents already have Supabase access. This let me build a solid, scalable, secure voice AI from my phone at the gym. All my agents have access to our knowledge, can write to it, update and refer to it as we build and improve the product and the systems we use. Out of 75 founder friends I asked about how they manage shared knowledge, 26 built their own custom knowledge systems… Obsidian vaults with 7k files synced through a VPS, markdown repos behind their own MCP servers, cron jobs stitching Supabase to a skills file… each a different Frankenstein they have to maintain. 32 said they felt the pain of moving static files around but didn’t have any solution for it. So I rebuilt my brain better and used it to build it. // HOW YOU CAN HELP Would love to have you try it out. The maintenance loop is still in alpha so not running it on customer data yet. If you built your own brain I’d love to hear how you did it. What criteria was most important for you in its design & function. If you are tired of shuffling .md files around I’d love to have you try out OzBrain and to give feedback, just ask your agent to put it in the shared bugs & features brain! Cheers! Bubs.co Comments URL: https://news.ycombinator.com/item?id=49394827 Points: 8 # Comments: 1

Hacker News 熱門72

Show HN: Proliferate- 适用于任何编码代理的开源、自托管 Codex

Hi HN- 我是 Pablo,Proliferate(YC S25)的创始人! Proliferate ( https://github.com/proliferate-ai/proliferate ) 是一个开源、可自托管的 AI IDE,让你可以在一个地方使用 Claude Code、Codex、OpenCode、Cursor 和 Grok 进行工作并自动化任务。 这里有一个 2 分钟的快速演示,展示我们如何用 Proliferate 来构建 Proliferate: https://www.youtube.com/watch?v=tGNX0oaWmBY 在我的团队接入 OpenAI Codex 之后,我开始着手构建 Proliferate。几天之内,我们就把它用到了方方面面:用 computer use 代替我们自己浏览网站,让 Codex 协调其他 agent,以及为重复性工作设置自动化。说实话,我们几乎从不需要离开桌面应用就能把工作完成。 如果我团队的体验具有一定代表性,那么一个类似 Codex 的应用(一个具有精美 UI 的横向 agent)将会成为每家公司完成工作的主要界面。这完全符合 OpenAI 的使命,即把 Codex 打造成 everything app(见: https://news.ycombinator.com/item?id=47796469 )。 但随着我们开始把自动化推进到更接近业务核心的工作,我希望能与来自所有实验室的 agent 协作,包括开放权重模型,而不会越来越依赖 OpenAI。 而这正是 Proliferate 的用途!它是开源、可自托管的 Codex,既能在构建向 Codex 广度迈进的同时,保留你在不同 agent 和模型提供方之间的选择自由。 如今 Proliferate 支持: * 使用 Claude Code、Codex、OpenCode、Cursor 和 Grok,并可采用它们原生的推理与配置选项,包括 Bedrock、Azure 和自托管推理。 * agent 之间的通信与管理:父 agent 可以生成并与另一个受支持的 agent 作为子 agent 进行通信(我个人喜欢让 Fable 委派给 Codex,同时让 OpenCode 模型审查 PR)。 * 构建 workflows——这是我最兴奋的功能之一。这些是可复用的 agent 会话链和人工审批关卡,每一步都可选择 harness 和模型,并在它们之间传递文档。我用它来自动化代码审查、QA,以及我的 PR 构建流程。 Proliferate 的全部代码在 AGPL-3.0 下 100% 开源。现在肯定还有一些粗糙的地方,但我们推进得很快,也非常欢迎任何反馈! Comments URL: https://news.ycombinator.com/item?id=49390739 Points: 11 # Comments: 5

arXiv cs.AI69

Daedalus-150M: A Convolution-Attention Hybrid Designed for CPU Inference

Small language models are usually built like large ones and then squeezed onto a CPU afterwards. We did the opposite: we fixed the target first, one user, one token at a time, 4-bit weights, ordinary CPU, and chose the architecture to suit it. The result keeps full attention in only 6 of its 18 blocks. The other 12 use short convolutions whose memory is two timesteps wide no matter how long the conversation gets, so two thirds of the network never re-reads a growing cache. Trained from scratch on 59.9B tokens, the model scores 47.31 on a five-task benchmark against a bar of 42.20 that was fixed before training began. It beats GPT-2 124M, Pythia-160M, OPT-125M and GPT-neo-125M, all trained on three to six times more data, and exceeds MobileLLM-125M's published score despite that model seeing a trillion tokens. Validation bits-per-byte is 0.8685. To check the architecture rather than the training recipe, we trained a conventional all-attention model of the same size on the same data, and wrote down the winning condition before scoring either. The hybrid won the chosen quality metric by 0.81%, matched it on downstream tasks, produced a 6.3% smaller 4-bit file, and decoded 1.76x faster at 2048 tokens of context, 2.08x against an external model of similar size. In every measurement the speed advantage is near zero at an empty context and grows with length, which is what the mechanism predicts and what a merely leaner model would not show. A simple bandwidth calculation predicts only 1.17x, so memory volume alone does not explain the gap. We also report what did not work: an unmitigated 4-bit quality cost, roughly half the convolution channels ending up inert and impossible to remove, and a vocabulary larger than this model size warrants.

OpenAI Blog59

Introducing AI Futures

Introducing AI Futures, a new OpenAI blog exploring how transformative AI could reshape power, governance, the economy, and individual freedom.

Hacker News 熱門

Launch HN: Vendo (YC S26) – Let users build features on top of your product

Hi HN, we’re Yousef & Nour, founders of Vendo ( https://vendo.run ). Vendo lets users create new features inside the software they already use. A user describes the dashboard, workflow, or small app they need, and Vendo builds it on top of the product’s existing data, API, and interface. Demo: https://www.youtube.com/watch?v=VdpHehY64ls We built Vendo because every SaaS eventually faces the same problem: every customer needs something slightly different. One wants a new report and another needs a workflow that only makes sense for their team. These requests either sit on the roadmap, become one-off engineering work, or force the customer into spreadsheets and external tools. We wanted the user to be able to create the missing feature themselves, without leaving the product. Here is how it works: - npx vendo init reads the product's API surface, theme, routes, and more. These are used so that the apps Vendo creates (1) look on-brand and native and (2) have the ability to read data and perform actions directly through the company's API - When a user asks for a feature, we have a custom Vendo harness that writes a React component with a bunch of Vendo add-ons and guardrails (ex. ability to make calls to the host API + our component library). Every save is compiled, type-checked, run against real API responses, and rendered before the user sees it. We just released a benchmark and write-up here with more info for anyone interested: https://vendo.run/blog/generating-product-ui-measured - We use QuickJS to make sure that anything the agent creates is sandboxed and can't mess with the company's site. Vendo compiles the component and runs it with Preact inside a QuickJS VM with no access to the DOM, network, or clock. The VM returns a UI tree, which the host renders using the product’s registered components. When the user clicks something, QuickJS emits a tool call; the host executes it through Vendo’s guard and passes the result back into the same VM, preserving the screen’s local state. There's a lot of generative UI right now: streaming developer-written components into a chat (Vercel AI SDK, CopilotKit, Thesys), or rendering your app inside someone else's assistant (OpenAI Apps SDK, MCP Apps). We differ on two things. Vendo lives in your product and acts through your API as the signed-in user, so what it makes is durable: real apps users keep, pin, and run on triggers while they're away, and not components that are merely confined to a chat. Plus, it's not capped at putting together a bunch of prebuilt components: the agent can build arbitrary apps, from a quick dashboard out of your own components to real custom code running in a sandbox, and either way data only ever comes from tool calls to your API. Here are some things customers are using Vendo for today: - Letting their users create custom dashboards and reports. These are mainly UI-based and focused on letting the user see the exact graphs and metrics they care about - Letting their customers create recurring automations. A big thing as well that has been used for these automations is the fact that we connect to external connections, so users have been automating many of their inter-tool workflows (ex. an automation that sends a slack alert based off of something in the product) - B2B customers letting their customers customize the product with specific business logic. Often this is simple things like an extra field on a form, or an extra permission, but it is hard for a business to keep up with them otherwise. - Creating and sharing custom dashboards/apps across an organization. Since the apps Vendo creates are durable, they can be shared, reused, and forked (which can’t be done with many of the other in-chat generative UI solutions) We've spent a lot of time thinking about how AI and agents will change the way people consume software. We think the answer is personal(ized) software: you see the UI you need to see, you tell an agent exactly what you need, and the product molds to how you work. The key insights that have enabled the product to work are: - A rule in code always beats a rule in a prompt. - Invent as little syntax as possible. Generation got faster and more reliable when the output looked like what models already know (JSX-shaped markup) instead of a clever custom format. - Deterministic beats model wherever you can get away with it. Theme extraction is pure static analysis, and a remix starts as a copy of your component, no model call. Vendo is completely open-source (Apache-2.0) and can be self-hosted, so feel free to check out all the source code here: https://github.com/runvendo/vendo . Would love you to try it out and give us your feedback: https://docs.vendo.run/ . Or if you’re a company looking to embed Vendo in your product feel free to book a call here: https://cal.com/team/vendo/intro-call Comments URL: https://news.ycombinator.com/item?id=49376038 Points: 6 # Comments: 0

arXiv cs.AI76

SPADE:自适应合成可执行环境中的自博弈

持续的自我改进需要一个不断扩展的、由自身生成的、多样且自适应的目标池。对于语言智能体而言,现有的训练环境池(人工策划、静态合成或冻结验证器)会在学习者规模扩展时保持目标分布固定。我们提出 SPADE(Self-Play in Adaptive Synthetic Executable Environments),这是一个自博弈 RL 框架,其中单个 LLM 扮演两个角色:Environment Designer,负责将完整的长时程训练环境编写为带有 OpenAI Gym 风格 reset()/step() 接口的可执行代码;以及 Reasoning Agent,负责学习在这些环境中行动。每个环境都是有状态的多轮环境(包含状态转移、奖励函数和验证代码),因此一个接口即可涵盖推理问题和多步骤智能体式工具使用。Reasoning Agent 的遗憾值通过其在有无特权提示情况下的奖励差距来估计;在优化这一遗憾信号的过程中,Environment Designer 学会将环境定位在智能体能力边缘,同时保持其可行性。通过大量实验,我们发现若干组件对成功至关重要:基于从大型预训练语料库中采样的文档来为 Environment Designer 提供依据,并赋予其累积的环境记忆。扩展到 30B 参数模型时,SPADE 在八个保留的数学、科学、代码和推理基准上平均比最强固定环境基线提高 +5.3;在工具使用设置中,在 BFCL-v4 多轮上提升 +5.7,在 ACEBench-Agent 上提升 +13.9;在游戏设置中,相比最强基线的优势会随模型规模增长而扩大。通过使环境设计本身成为一个可学习组件,SPADE 朝着开放式自我改进迈出了具体一步。

OpenAI Blog75

为前沿模型提供零数据保留

OpenAI 重申为符合条件的 API 客户提供零数据保留,并预告 Private Safety Processing,以在不损害数据隐私的情况下实现先进的 AI 安全性。

OpenAI Blog73

为前沿模型提供零数据保留

OpenAI 重申为符合条件的 API 客户提供零数据保留,并预览 Private Safety Processing,以在不损害数据隐私的情况下实现先进的 AI 安全。

OpenAI Blog74

ChatGPT Ads 扩展至欧洲各地

ChatGPT Ads 正在扩展至 31 个欧洲市场。了解广告主如何在人们探索、比较选项并做出决策时触达他们。

arXiv cs.AI68

An Omitted Mode Is a Rare Rule: The Sampling-Verification Danger Law in Continuous Code World Models

In the Code World Model paradigm an LLM synthesizes an executable world model that a classical planner searches, and the model is accepted when it reproduces sampled transitions. We ask what that acceptance certifies in continuous control. We define the pipeline's danger as an expected risk and isolate its exact factor: the probability that N i.i.d. gate rollouts all miss a critical event of probability r is exactly (1-r)^N; an independent acceptance sample adds its budget to the exponent. On three hybrid instruments the accepted mode-blind model is exploited: the planner is pinned at the mode boundary at a regret of nearly the whole attainable return. We prove a localization budget, valid at boundary points: models with Lipschitz constant at most L differing by eta at a point disagree above tolerance eps on a region of volume at least kappa((eta-eps)/L)^(d+m); the discontinuous reset modes studied pay no such budget. With real LLM synthesis, GPT-5.x repairs an omitted 1D clamp in 105 of 111 mode-containing draws -- every attempt exact on 50 of 56 instrument-stream blocks (95% CI [0.781, 0.960]). On 2D regions no artifact recovers the rule (0/156); eight targeted interventions leave the failure in place, and positive controls locate it: a located rule is not induced, while given form and location the constants follow exactly. A version-space certificate proves identification is class-relative: at the widest dose the declared fit succeeds in 20/20 blocks and every sample-consistent circle is within tolerance in 18/20. We prove a class of entry rules exactly consistent with every sample yet harmless at play, so identifiability is a measurable property of the instrument. Re-scoring all 1034 artifacts on independent samples confirms acceptance certifies sample consistency and no more: where the gate is provably informative it covers about two percent of the exploited planner's queries.

arXiv cs.AI66

Why GPT-Style Models Do Not Directly Transfer to Symbolic Music: Compression in the Wrong Coordinate System

GPT-style models achieve strong performance by representing language with finite vocabularies of reusable discrete tokens. This success has motivated symbolic music tokenizations to treat recurring musical structures, such as chords, motifs, and phrases, as reusable units analogous to linguistic tokens. However, tokenization derives its advantage not from reusable combinations alone, but from compression: effective compression requires coordinates in which recurring regularities form stable and predictable conditional distributions. The key problem is therefore not to find larger musical combinations, but to discover the coordinate system in which musical facts become predictively compressible. We formulate the Effectiveness--Losslessness Framework and define tokenization as the construction of a predictively effective and relationally lossless coordinate system. The Predictive Effectiveness Principle defines the Fact--Token Boundary: decoupling and denesting construct coordinate interfaces that expose predictive regularities. The Relational Losslessness Principle defines the Token--State Boundary: tokenization stops before context-dependent relations are fixed, leaving their computation to model states. Controlled symbolic-music experiments validate these boundaries. Effective coordinate construction improves predictive compressibility, while fixed relational projections constrain contextual modeling. Sequence compaction alone does not guarantee predictive compression, while preserving contextual freedom allows higher-order musical organization to emerge without explicit structural labels. These results reveal why GPT-style models do not transfer directly across modalities: architectures transfer, but tokenization interfaces do not. Tokenization must discover effective representations while preserving the relational freedom from which contextual structure can emerge.

arXiv cs.AI77

StagedWorkspace:面向知识工作代理的版本化工作区

AI 代理越来越多地执行知识工作(即生成和修改持久性数字工件,如代码仓库、文档、电子表格、幻灯片、报告),然而它们搜索的解析视图、编辑的原生文件、审阅的更改以及提交的工件,可能指向同一工作产品的不同版本。我们将其表述为一种工作区状态契约:每个视图都应显式绑定到不断演化的工作区状态的某个版本。编码代理通过用于搜索、差异和测试的仓库契约在一定程度上满足了这一需求,而对于 PDF、电子表格、幻灯片、笔记本以及混合格式项目文件夹,类似的契约则不够明确。我们提出 StagedWorkspace,这是一个面向知识工作代理的版本化工作区。该工作区将解析记录和审阅差异绑定到随原生文件变化而变化的内容哈希。在 OfficeQA Pro 和 APEX-Agents 上的固定测试框架消融实验中,双重解析/原生访问在每个测试模型上都获得了最高的点估计;相较于限制更大的单一视图,它使 OfficeQA Pass@1 提高了 8.3–12.1 个百分点,使 APEX 平均评分量表得分提高了 4.7–9.2 分。SW-AGENT 在 OfficeQA 上使用 Gemini 3.1 Pro 得分为 63.9%,在 APEX 上使用 GPT-5.4 Nano 得分为 42.1,而已发表的同模型得分分别为 29.3% 和 25.5。在 57 个文件编辑任务上的配对审阅轴消融实验进一步发现,当差异可见时,观察到的得分更高。这些结果将工作区状态确定为知识工作代理中的一个实验变量,并推动建立将证据、暂存编辑和提交工件作为显式状态转换进行评分的基准。

OpenAI Blog72

加强国家安全领域的民主监督

OpenAI 启动一项倡议,旨在加强国家安全领域对 AI 的民主监督,通过工具、培训和专业知识支持政府机构。

Hacker News 熱門71

发布 HN:machine0 (YC S26) – 来自 CLI 的持久 CPU 和 GPU VM

HN 大家好!我是 Barnaby,machine0( https://machine0.io )的创始人。我正在构建一个用于长周期代理计算的 CLI:`machine0 new mybox` 会为你的代理提供一台持久的云端 VM,按分钟计费,价格从 $0.013/hr 起,最高可达 60 vCPU / 240 GB RAM,并支持 GPU(H100s、H200s 等),VM 级别正常运行时间为 99.99%。代理可通过 CLI 或 MCP 自主运行。 演示: https://www.youtube.com/watch?v=gyllkZ0M04E 代理工作负载正在从短暂运行转向始终在线。一个处理复杂功能的编码代理会运行 6-8 小时。由代理编排的训练和 RL 运行需要数天。OpenClaw 和 Hermes 24/7 运行。随着你并行运行更多任务: - 资源:大型代码库上的几个代理就会耗尽 RAM 和 CPU。模型训练和 RL 需要你没有的 GPU。 - 安全:在你的个人机器上使用 `--yolo`,只需要一次提示注入就可能导致凭证被外泄。 - 可用性:合上笔记本电脑,代理就会在任务中途死掉。 - 隔离:你和你的代理实际最低需求之间没有清晰边界。 machine0 为每个代理提供自己的计算机。它是一个足够简单的 CLI,人类和代理无需阅读文档即可使用: `machine0 new mybox` 会创建一台可 SSH 连接、带静态 IP 和 HTTPS 端点的 VM。始终在线(VM 级别正常运行时间 99.99%),直到你将其关闭。 - 按分钟计费。1 vCPU / 1 GB 为 $0.013/hr,最高可达 60 vCPU / 240 GB,另有从 RTX 4000 Ada 到 8×H200 的 GPU。 - 暂停、快照和恢复。让你可以轻松暂停工作,之后再回来继续。也可以制作一个黄金主镜像,用于为机群批量生成克隆。 - 块存储。持久卷(从 10 GB 到 16 TB),你可以用直观的语法管理:`--yolo` 并将其挂载到你的 VM。 - Profiles。凭证、MCP 连接、提示词和环境变量的组合包,在 VM 创建时注入。因此每个代理只获得你选择的能力,除此之外什么都没有。 - 代理自助服务。把 CLI 或 MCP 服务器交给 Claude、Codex 或 OpenCode,它就能管理自己的机群:为一次构建启动一台机器,创建快照,然后销毁。 - 可复现构建。使用 NixOS flakes 或搭配 Ubuntu 的 Ansible playbooks。 人们今天如何使用它? - 代理机群。人们运行一个试点代理来界定工作范围,并将其委派给子代理,每个子代理都在自己的 VM 上:用试点代理规划项目,工作代理实现它并提交 PR。一个客户一次运行数百台机器,通过 CLI 启动和销毁。 - 模型优化和 RL 环境。ML 团队使用 machine0 来进行由代理编排的 RL 环境和模型优化工作。一个客户在 60 vCPU 机器上运行 RL 环境,一次持续运行数天;另一个客户保留一台已暂停的 H100,并在夜间让代理使用它来反复优化推理速度。 - 产品基础设施。一个客户不是自己使用 machine0,而是将他们的产品构建在 machine0 之上:每个用户会话都会从他们自己代理运行时的版本化镜像中获得一台全新的 XL 机器。他们已经发布了数百个该镜像版本,并启动了数千台机器,其中大多数只存活两分钟。 底层是什么? 每台机器都是完整的 KVM 虚拟机,不是容器或沙箱。你获得的是暴露给 guest 的真实 GPU,带有其实际驱动;可获得内核级访问权限(加载你想要的任何模块或驱动);你和硬件之间没有 syscall 拦截层。技术栈本身刻意保持朴素:TypeScript、Postgres、Redis。我们非常重视安全性、可靠性和性能,使 machine0 非常适合持续的计算密集型工作负载。 关于我 我从事云基础设施建设大约 15 年了。我曾在 Imperial College London 攻读云资源分配方向的博士,后来退学;之后作为 Upflow (YC W20) 的联合创始人兼 CTO 工作了六年,在 ARR 达到七位数的整个过程中亲自负责 DevOps、基础设施和安全,因为这些事情风险太高,不能委派。machine0 最初是我为自己做的工具,我就是自己的第一个用户 :) 请求 希望你能试用并给我们反馈(见下方)。或者,如果你是一家公司,正在为软件工厂、模型训练或 RL 环境寻找计算资源,欢迎联系 barnaby@machine0.io # 安装 machine0 $ curl -LsSf https://machine0.io/install.sh | sh # 创建一台机器并通过 ssh 登录 $ machine0 new myvm $ machine0 ssh myvm 评论 URL: https://news.ycombinator.com/item?id=49348136 点数:3 评论数:0

arXiv cs.AI

GoalEvolve: From Handcrafted Algorithm Priors to Goal-Driven Evolution of Physical Design Algorithms

Physical design algorithms operate within tightly coupled, multi-stage optimization flows, where stage-local gains may vanish or induce downstream degradation. Existing program-evolution frameworks often rely on stage-local objectives or undifferentiated multi-metric feedback, which neither guarantee better final results nor identify which unmet requirement should guide the next iteration. We present GoalEvolve, a goal-driven framework that makes physical design algorithm evolution accountable for the final quality of results (QoR) of the complete flow. Given a multi-objective QoR target region, GoalEvolve converts unmet requirements into normalized target gaps, identifies the dominant bottleneck, and uses stage-resolved checkpoint evidence to locate the responsible stage. An LLM-based Teacher then narrows the search to a relevant algorithmic decision and source region, while parallel Student agents implement and validate hypotheses through full-flow evaluation. Local effects, optimization debt, and downstream retention are retained as mechanism evidence for subsequent evolution. Across eight ASAP7 designs, GoalEvolve improves post-route TNS by 30.67% on average and reduces leakage and dynamic power by 21.18% and 9.42% versus default OpenROAD. Relative to commercial-tool goals, it closes 62.20% of the normalized power gap on power-dominant designs, surpasses the TNS goals on both timing-dominant designs, and closes 32.48% of the equal-weight timing-power gap on joint designs. Across all three designs evaluated against Codex goal mode under matched budgets, GoalEvolve further improves TNS by 26.46% while reducing leakage and dynamic power by 12.38% and 0.76%, respectively.

arXiv cs.AI62

Policy Iteration with Human Feedback: Bringing Post-Training RL to In-context Learning

Generative pretraining established reusable task representations; later work on language-based task conditioning and in-context learning showed that a fixed model could adapt its behavior from instructions and demonstrations. Policy Iteration with Human Feedback (PIHF) builds on this development and the recurrent evaluate-and-improve structure of generalized policy iteration. PIHF uses a pretrained language model as its execution substrate and moves persistent revision to a versioned natural-language policy and tool set. A language-model critic and clinical expert review complete-panel reasoning and tool-use trajectories to localize recurrent failures and form candidate revisions; the expert may reinterpret the evidence and retains authority over admission and rollback, while Recall@1 and Recall@5 validate outcomes after candidate execution. Across cumulative ablations and ultra-rare-disease benchmarks, a PIHF-derived policy improved Recall@1 in one proprietary executor and three open-weight executors spanning 3 to 49 billion active parameters. Gains were 32.7 percentage points for GPT-5.4 and 31.1 points for Qwen3.6-35B, a difference of 1.7 points. These results support the feasibility of using pretrained language models as fixed-weight execution substrates for expert-guided policy development in rare-disease diagnosis.

Hacker News 熱門63

GPT-5.6 Sol 价格下调 50%

文章 URL: https://openrouter.ai/openai/gpt-5.6-sol 评论 URL: https://news.ycombinator.com/item?id=49337602 积分: 31 评论数: 6

Hacker News 熱門61

Show HN: 1667, a terminal UI for writing fiction with language models

Hi HN. I built 1667 for my own fiction work and now use it each day. This probably has a limited audience. Maybe an audience of one... Why a terminal interface for story writing? I'm a dev. I like to use terminals for a lot of stuff. Most WebUIs feel off to me. That's the only reason. One thing that bothers me about writing in existing tools is that they don't fit the way I write. The mental model of my story is a tree. I try many takes usually continue with just one, but sometimes I want to try an alternate route and see where this goes. And that can branch again in many places. See what happens if I kill off this character or they don't take the job or whatever. 1667 is a full-screen terminal app for long-form fiction. Each story part can have several takes. All takes stay in a tree. You select one path through that tree as the story line. Export writes that line to Markdown in the project folder. Some technical details: - A project stores its stories and settings in a `.1667/` directory. Exported Markdown sits beside it. - Provider secrets stay in private machine files. Requests go to the provider that the writer selects. - An optional Vault Password seals project files at rest. - An operating-system lock permits one writer process for each project. - The request viewer shows the next provider request without its credential. - Each generated take keeps a Generation Record with its model and effective settings. Version 0.9.5 runs on macOS, Linux, and Windows x64. The website has Shell and PowerShell installers. An npm package is also available. 1667 imports Markdown, SillyTavern chats and cards, and NovelAI archives. It can use OpenAI-compatible, Anthropic, and local endpoints such as Ollama, LM Studio, llama.cpp, and KoboldCpp. Current limits: the release is pre-1.0. The interface is a terminal. There is no account or cloud sync, and I don't plan to add any. No tracking. Comments URL: https://news.ycombinator.com/item?id=49330604 Points: 12 # Comments: 12

OpenAI Blog

OpenAI joins PORTS-Pike project

OpenAI joins PORTS-Pike project, expanding community investment and supporting thousands of Southern Ohio jobs

OpenAI Blog62

防御者的窗口期

AI 正在重塑攻击者和防御者的网络安全格局。了解 OpenAI 如何加强自身防御,以及安全团队现在可以采取哪些行动。

OpenAI Blog64

智能时代的新政策理念

OpenAI 资助了 14 个独立项目,探索新的 AI 政策理念,以在智能时代扩大经济机会并增强社会韧性。

arXiv cs.AI

AI-Assisted Discovery and Construction of a Counterexample to the Convergence of Three-Block ADMM with the Identity Matrix as its Third Constraint Block

The alternating direction method of multipliers (ADMM), as a landmark algorithm, has attracted tremendous research attention and extensive practical applications over the past two decades. It is well known that, although the two-block ADMM enjoys well-established theoretical convergence guarantees, its direct extension to the three-block case may fail to converge, as demonstrated by existing counterexamples [5]. However, to the best of our knowledge, the case in which the third constraint block is the identity remains unresolved: the existing literature gives neither a general convergence proof nor a counterexample for this subclass. In this paper, we give a negative answer: direct three-block ADMM may fail even when the first two blocks are strongly convex quadratics. Using Codex with GPT-5.6 Sol, we construct an explicit rational counterexample candidate and verify it along a piecewise-affine reduction path; exact checks show that direct three-block ADMM on this instance produces a bounded nonconvergent orbit of period 66. Within the same Codex workflow, we further guide a study of multiplier relaxation and clarify when convergence can be restored at the fixed-instance and class levels: a problem-dependent small dual step can restore convergence, whereas no positive relative step works uniformly over the whole class. Furthermore, we also test the recent Kimi Code with Kimi K3 model without the Codex candidate or project-specific route guidance; along a different path it produces an exact locally attracting period-23 certificate, convertible to an equivalent all-identity instance. The comparison suggests that different research-harness configurations can shape the mathematical objects explored and the certificates pursued.

arXiv cs.AI79

AI 会推荐谁的医生?对大型语言模型辅助选择医生中声誉与人口统计信号的算法审计

患者越来越多地询问大型语言模型(LLM)助手该看哪位医生,这使这些系统成为 AI 信息中介:在一个人对其他人的选择中居间作用的算法,并由此以无声且大规模的方式决定哪些医生变得可见。我们报告了一项预先设定的随机算法审计,考察哪些因素会对这些推荐产生因果影响。七个模型(六个开放权重模型;gpt-4o-mini)分别在五张合成的家庭医学医生卡片中进行选择,这些卡片的属性在 3,024 个选择集、三个患者画像、九种提示改写和九个实验组中独立随机化,共产生 40,068 条评分响应;性别和族裔通过姓名来传递信号,遵循通信审计方法。声誉信号占主导地位:将评分从 3.9 提高到 4.7 会使被选择概率增加 31.4 个百分点(pp),而将费用从 90 美元提高到 190 美元会使其降低 20.0 个百分点。人口统计均等性被拒绝,但方向并非人类审计研究所预测的方向:带有女性信号的姓名增加 2.5 个百分点,带有 Hispanic、South-Asian 和 Black 信号的姓名相对于带有 White 信号的姓名增加 1.3–2.9 个百分点;按费用等价计算,这些倾向相当于每次就诊 7–14 美元,而一个没有内容含义的首位排列位置价值 11 美元。然而,模型在其陈述理由中提及性别或族裔的比例最多只有 0.03%,并且在 0.39% 的试验中弃答,因此这些效应在模型自身解释中不可见,依赖模型自我报告的透明度义务无法检测到它们。一个推理模型直接未能通过预先设定的可审计性门槛。冻结的设计使审计可重复:任何新模型都可以在相同刺激下接受评估,这使得周期性行为审计,而非自我报告式解释,成为适合目的的监测技术。

arXiv cs.AI73

PACE-Bench:在动态环境中通过代码演化评测物理适应能力

自演化智能体能够从交互经验中改进未来行为,但现有评估通常在固定执行条件下进行优化,并不测试这些条件变化后的恢复能力。为弥补这一空白,我们引入 PACE-Bench(Physics Adaptation via Code Evolution),这是一个基于模拟器的基准,涵盖六个物理领域中的 144 个源到目标适应配对。每个配对都将一个源环境与一个突变后的目标环境相连接,二者具有相同的目标和接口。一个代码驱动的设计在源环境中能够成功,但在目标环境中会失败;智能体必须在有限的尝试预算内,利用诊断性沙盒反馈,将其迭代适应为可在目标环境中工作的设计。我们比较了来自四种范式的十种自演化方法。该基准距离饱和仍很远:Reflexion + Qwen3-14B 在完整基准配对中的成功率仅为 35.9\%,而 GPT-5.5 在完整预算下解决了 Statics 子集中的 66.7\%。总体而言,这些结果表明,基于模拟器的反思比未经验证的自我修订更可靠,而记忆会将智能体锚定在早期设计上,广泛的树搜索则只是在探索而未能收敛。即使揭示确切的物理变化,也无法提高性能上限,这表明核心瓶颈在于机制重新设计,而非参数推断。数据和代码可在 https://github.com/thunlp/PACE-Bench 获取。

arXiv cs.AI66

CAPRI: Contract-Aware Proof Repair for Isabelle

We address the use of large language models (LLMs) to help discover Isabelle proofs. An Isabelle build establishes that the submitted theory is accepted, but not that an LLM changed only what the developer authorised. We present CAPRI, a contract-aware repair workflow in which Isabelle checks the proof and an independent checker enforces a machine-readable edit contract. Prompts, proposals, candidate repositories, diagnostics, verdicts, and hashes are retained for audit. We evaluate five workflows on twelve failed proofs from four developments, with three replicates per task and condition, giving 180 runs and 138 valid repairs. Of 144 terminal candidates accepted by Isabelle, six had modified protected text; all arose in iterative workflows that could edit a complete theory. A proof-body-only interface produced 29/36 valid repairs and no contract violations, compared with 31/36 for the corresponding full-theory workflow. One-shot repair produced 22/36, while a later prospectively frozen iterative workflow produced 32/36; these figures compare complete workflows rather than individual mechanisms. A separate post hoc OpenRouter campaign found no improvement in the designated Luna comparisons. A Sol configuration with matched demonstrations produced 33/36 repairs, compared with 29/36 in the frozen OpenAI Responses condition, but the difference was not statistically significant in a one-sided exact McNemar test ($p=0.0625$).

arXiv cs.AI71

QuoteBench: How Matched Scores Can Hide Command-Path Failures

LLM coding agents issue Bash commands through interfaces that may serialize, wrap, and reparse model output. Matched execution scores alone cannot distinguish command-generation errors from failures introduced after generation. QuoteBench measures this boundary with exact final-state validation on 56 one-shot tasks from 14 incident-derived families, crossing the generation contract with the execution transport around one deliberately unescaped added parser. Escaping at the interpolation point reproduces each replayed reply's raw-path outcome, so any recovery under a disclosed boundary must come from the model changing its generation. Across eight same-window configurations, replaying the same reply through the added parser lowers success by 55.4 to 73.2 percentage points; disclosure recovers 30.4 to 60.7 points for six configurations, and zero or slightly negative for the other two. Raw generation is nearly saturated at the frontier; boundary adaptation is what still separates models. GPT-5.6-sol's matched gap of -3.6 points hides -64.3 points of damage and +60.7 points of compensation. The deployment configuration reorders models: one reversal among 26 comparable pairs is unambiguous and four more sit on single-task margins. Evaluations of command-issuing agents should report the model configuration, generation contract, execution path, operating point, and final-state validator rather than treat a matched score as an intrinsic model property.

OpenAI Blog52

Introducing OpenAI

OpenAI is a non-profit artificial intelligence research company. Our goal is to advance digital intelligence in the way that is most likely to benefit humanity as a whole, unconstrained by a need to generate financial return. Since our research is free from financial obligations, we can better focus on a positive human impact.

OpenAI Blog54

OpenAI Gym Beta

We’re releasing the public beta of OpenAI Gym, a toolkit for developing and comparing reinforcement learning (RL) algorithms. It consists of a growing suite of environments (from simulated robots to Atari games), and a site for comparing and reproducing results.

OpenAI Blog35

Team update

We’d like to welcome the latest set of team members to OpenAI (and we’re still hiring!)

OpenAI Blog39

OpenAI technical goals

OpenAI’s mission is to build safe AI, and ensure AI’s benefits are as widely and evenly distributed as possible.

OpenAI Blog52

OpenAI and Microsoft

We’re working with Microsoft to start running most of our large-scale experiments on Azure.

OpenAI Blog24

Team update

The OpenAI team is now 45 people. Together, we’re pushing the frontier of AI capabilities—whether by validating novel ideas, creating new software systems, or deploying machine learning on robots.

OpenAI Blog46

Learning to communicate

In this post we’ll outline new OpenAI research in which agents develop their own language.

OpenAI Blog51

Roboschool

We are releasing Roboschool: open-source software for robot simulation, integrated with OpenAI Gym.

OpenAI Blog53

OpenAI Baselines: DQN

We’re open-sourcing OpenAI Baselines, our internal effort to reproduce reinforcement learning algorithms with performance on par with published results. We’ll release the algorithms over upcoming months; today’s release includes DQN and three of its variants.

OpenAI Blog62

Proximal Policy Optimization

We’re releasing a new class of reinforcement learning algorithms, Proximal Policy Optimization (PPO), which perform comparably or better than state-of-the-art approaches while being much simpler to implement and tune. PPO has become the default reinforcement learning algorithm at OpenAI because of its ease of use and good performance.

OpenAI Blog51

OpenAI Baselines: ACKTR & A2C

We’re releasing two new OpenAI Baselines implementations: ACKTR and A2C. A2C is a synchronous, deterministic variant of Asynchronous Advantage Actor Critic (A3C) which we’ve found gives equal performance. ACKTR is a more sample-efficient reinforcement learning algorithm than TRPO and A2C, and requires only slightly more computation than A2C per update.

OpenAI Blog66

研究请求 2.0

我们发布了新一批七个尚未解决的问题,这些问题是在我们于 OpenAI 的研究过程中出现的。

OpenAI Blog28

OpenAI hackathon

Come to OpenAI’s office in San Francisco’s Mission District for talks and a hackathon on Saturday, March 3rd.

OpenAI Blog46

OpenAI Scholars

We’re providing 6–10 stipends and mentorship to individuals from underrepresented groups to study deep learning full-time for 3 months and open-source a project.

OpenAI Blog28

OpenAI Fellows Fall 2018

We’re now accepting applications for the next cohort of OpenAI Fellows, a program which offers a compensated 6-month apprenticeship in AI research at OpenAI.

OpenAI Blog45

OpenAI Five

Our team of five neural networks, OpenAI Five, has started to defeat amateur human teams at Dota 2.

OpenAI Blog45

Learning Montezuma’s Revenge from a single demonstration

We’ve trained an agent to achieve a high score of 74,500 on Montezuma’s Revenge from a single human demonstration, better than any previously published result. Our algorithm is simple: the agent plays a sequence of games starting from carefully chosen states from the demonstration, and learns from them by optimizing the game score using PPO, the same reinforcement learning algorithm that underpins OpenAI Five.

OpenAI Blog32

OpenAI Scholars 2018: Meet our Scholars

Our first class of OpenAI Scholars is underway, and you can now follow along as this group of experienced software developers becomes machine learning practitioners.

OpenAI Blog51

OpenAI Five Benchmark: Results

Yesterday, OpenAI Five won a best-of-three against a team of 99.95th percentile Dota players: Blitz, Cap, Fogged, Merlini, and MoonMeander—four of whom have played Dota professionally—in front of a live audience and 100,000 concurrent livestream viewers.

OpenAI Blog40

The International 2018: Results

OpenAI Five lost two games against top Dota 2 players at The International in Vancouver this week, maintaining a good chance of winning for the first 20–35 minutes of both games.

OpenAI Blog37

OpenAI Scholars 2019: Applications open

We are now accepting applications for our second cohort of OpenAI Scholars, a program where we provide 6–10 stipends and mentorship to individuals from underrepresented groups to study deep learning full-time for 3 months and open-source a project.

OpenAI Blog34

OpenAI Fellows Summer 2018: Final projects

Our first cohort of OpenAI Fellows has concluded, with each Fellow going from a machine learning beginner to core OpenAI contributor in the course of a 6-month apprenticeship.

OpenAI Blog58

AI safety needs social scientists

We’ve written a paper arguing that long-term AI safety research needs social scientists to ensure AI alignment algorithms succeed when actual humans are involved. Properly aligning advanced AI systems with human values requires resolving many uncertainties related to the psychology of human rationality, emotion, and biases. The aim of this paper is to spark further collaboration between machine learning and social science researchers, and we plan to hire social scientists to work on this full time at OpenAI.

OpenAI Blog62

OpenAI LP

We’ve created OpenAI LP, a new “capped-profit” company that allows us to rapidly increase our investments in compute and talent while including checks and balances to actualize our mission.

OpenAI Blog31

OpenAI Scholars 2019: Meet our Scholars

Our class of eight scholars (out of 550 applicants) brings together collective expertise in literature, philosophy, cell biology, statistics, economics, quantum physics, and business innovation.

OpenAI Blog33

OpenAI Five Finals

We’ll be holding our final live event for OpenAI Five at 11:30am PT on April 13.

OpenAI Blog57

OpenAI Five defeats Dota 2 world champions

OpenAI Five is the first AI to beat the world champions in an esports game, having won two back-to-back games versus the world champion Dota 2 team, OG, at Finals this weekend. Both OpenAI Five and DeepMind’s AlphaStar had previously beaten good pros privately but lost their live pro matches, making this also the first time an AI has beaten esports pros on livestream.

OpenAI Blog58

MuseNet

We’ve created MuseNet, a deep neural network that can generate 4-minute musical compositions with 10 different instruments, and can combine styles from country to Mozart to the Beatles. MuseNet was not explicitly programmed with our understanding of music, but instead discovered patterns of harmony, rhythm, and style by learning to predict the next token in hundreds of thousands of MIDI files. MuseNet uses the same general-purpose unsupervised technology as GPT-2, a large-scale transformer model trained to predict the next token in a sequence, whether audio or text.

OpenAI Blog31

OpenAI Fellows Fall 2018: Final projects

Our second class of OpenAI Fellows has wrapped up, with each Fellow going from a machine learning beginner to core OpenAI contributor in the course of a 6-month apprenticeship. We are currently reviewing applications on a rolling basis for our next round of OpenAI Fellows Summer 2019.

OpenAI Blog31

OpenAI Scholars 2019: Final projects

Our second class of OpenAI Scholars has concluded, with all eight scholars producing an exciting final project showcased at Scholars Demo Day at OpenAI.

OpenAI Blog62

Microsoft 投资并与 OpenAI 合作,支持我们构建有益的 AGI

Microsoft 正在向 OpenAI 投资 10 亿美元,以支持我们构建具有广泛分布经济收益的通用人工智能(AGI)。我们将合作在 Microsoft Azure 内开发一个可扩展至 AGI 的硬件和软件平台。我们将共同开发新的 Azure AI 超级计算技术,Microsoft 将成为我们的独家云提供商——因此我们将携手努力,进一步扩展 Microsoft Azure 在大规模 AI 系统方面的能力。

OpenAI Blog

Learning Day

At OpenAI, each Thursday is Learning Day: a day where employees have the option to self-study technical skills that will make them better at their job but which aren’t being learned from daily work.

OpenAI Blog60

GPT-2: 6-month follow-up

We’re releasing the 774 million parameter GPT-2 language model after the release of our small 124M model in February, staged release of our medium 355M model in May, and subsequent research with partners and the AI community into the model’s potential for misuse and societal benefit. We’re also releasing an open-source legal agreement to make it easier for organizations to initiate model-sharing partnerships with each other, and are publishing a technical report about our experience in coordinating with the wider AI research community on publication norms.

OpenAI Blog61

Fine-tuning GPT-2 from human preferences

We’ve fine-tuned the 774M parameter GPT-2 language model using human feedback for various tasks, successfully matching the preferences of the external human labelers, though those preferences did not always match our own. Specifically, for summarization tasks the labelers preferred sentences copied wholesale from the input (we’d only asked them to ensure accuracy), so our models learned to copy. Summarization required 60k human labels; simpler tasks which continue text in various styles required only 5k. Our motivation is to move safety techniques closer to the general task of “machines talking to humans,” which we believe is key to extracting information about human values.

OpenAI Blog59

Solving Rubik’s Cube with a robot hand

We’ve trained a pair of neural networks to solve the Rubik’s Cube with a human-like robot hand. The neural networks are trained entirely in simulation, using the same reinforcement learning code as OpenAI Five paired with a new technique called Automatic Domain Randomization (ADR). The system can handle situations it never saw during training, such as being prodded by a stuffed giraffe. This shows that reinforcement learning isn’t just a tool for virtual tasks, but can solve physical-world problems requiring unprecedented dexterity.

OpenAI Blog57

GPT-2: 1.5B release

As the final model release of GPT-2’s staged release, we’re releasing the largest version (1.5B parameters) of GPT-2 along with code and model weights to facilitate detection of outputs of GPT-2 models. While there have been larger language models released since August, we’ve continued with our original staged release plan in order to provide the community with a test case of a full staged release process. We hope that this test case will be useful to developers of future powerful models, and we’re actively continuing the conversation with the AI community on responsible publication.

OpenAI Blog58

OpenAI Microscope

We’re introducing OpenAI Microscope, a collection of visualizations of every significant layer and neuron of eight vision “model organisms” which are often studied in interpretability. Microscope makes it easier to analyze the features that form inside these neural networks, and we hope it will help the research community as we move towards understanding these complicated systems.

OpenAI Blog56

OpenAI API

We’re releasing an API for accessing new AI models developed by OpenAI.

OpenAI Blog57

Image GPT

We find that, just as a large transformer model trained on language can generate coherent text, the same exact model trained on pixel sequences can generate coherent image completions and samples. By establishing a correlation between sample quality and image classification accuracy, we show that our best generative model also contains features competitive with top convolutional nets in the unsupervised setting.

OpenAI Blog36

Procgen and MineRL Competitions

We’re excited to announce that OpenAI is co-organizing two NeurIPS 2020 competitions with AIcrowd, Carnegie Mellon University, and DeepMind, using Procgen Benchmark and MineRL.

OpenAI Blog34

OpenAI Scholars 2020: Final projects

Our third class of OpenAI Scholars presented their final projects at virtual Demo Day, showcasing their research results from over the past five months.

OpenAI Blog65

CLIP:连接文本与图像

我们推出了一个名为 CLIP 的神经网络,它能够通过自然语言监督高效地学习视觉概念。只需提供要识别的视觉类别名称,CLIP 就可以应用于任何视觉分类基准,类似于 GPT-2 和 GPT-3 的“零样本”能力。

OpenAI Blog60

Scaling Kubernetes to 7,500 nodes

We’ve scaled Kubernetes clusters to 7,500 nodes, producing a scalable infrastructure for large models like GPT-3, CLIP, and DALL·E, but also for rapid small-scale iterative research such as Scaling Laws for Neural Language Models.

OpenAI Blog63

Will Hurd 加入 OpenAI 董事会

OpenAI 致力于开发造福全人类的通用人工智能,我们相信,实现这一目标既需要公共政策方面的专业知识,也需要技术方面的专业知识。因此,我们很高兴地宣布,国会议员 Will Hurd 已加入我们的董事会。

OpenAI Blog35

OpenAI Scholars 2021: Final projects

We’re proud to announce that the 2021 class of OpenAI Scholars has completed our six-month mentorship program and have produced an open-source research project with stipends and support from OpenAI.

OpenAI Blog68

OpenAI Codex

我们创建了 OpenAI Codex 的改进版本,这是我们的将自然语言转换为代码的 AI 系统,并将从今天起通过我们的 API 以私有测试版形式发布。

OpenAI Blog47

Solving math word problems

We’ve trained a system that solves grade school math problems with nearly twice the accuracy of a fine-tuned GPT-3 model. It solves about 90% as many problems as real kids: a small sample of 9-12 year olds scored 60% on a test from our dataset, while our system scored 55% on those same problems.

OpenAI Blog57

OpenAI Residency

As part of our effort to support and develop AI talent, we’re excited to announce the OpenAI Residency.

OpenAI Blog64

推出文本和代码嵌入

我们正在推出嵌入,这是 OpenAI API 中的一个新端点,可轻松执行自然语言和代码任务,例如语义搜索、聚类、主题建模和分类。

OpenAI Blog59

Aligning language models to follow instructions

We’ve trained language models that are much better at following user intentions than GPT-3 while also making them more truthful and less toxic, using techniques developed through our alignment research. These InstructGPT models, which are trained with humans in the loop, are now deployed as the default language models on our API.

OpenAI Blog54

New GPT-3 capabilities: Edit & insert

We’ve released new versions of GPT-3 and Codex which can edit or insert content into existing text, rather than just completing existing text.

OpenAI Blog62

衡量古德哈特定律

古德哈特定律有一句名言:“当一个指标变成目标时,它就不再是一个好的指标。”尽管它最初源于经济学,但在 OpenAI,当我们思考如何优化那些难以衡量或衡量成本高昂的目标时,也必须应对这一问题。

OpenAI Blog59

OpenAI leadership team update

We’re happy to announce several executive role changes that reflect our recent progress and will ensure continued momentum toward our next major milestones.

OpenAI Blog64

部署语言模型的最佳实践

Cohere、OpenAI 和 AI21 Labs 已经制定了一套初步的最佳实践,适用于任何开发或部署大型语言模型的组织。

OpenAI Blog63

全新且改进的内容审核工具

我们推出了一款全新且改进的内容审核工具。Moderation endpoint 在我们之前的内容过滤器基础上进行了改进,并于今日免费提供给 OpenAI API 开发者使用。

OpenAI Blog61

Introducing ChatGPT

We’ve trained a model called ChatGPT which interacts in a conversational way. The dialogue format makes it possible for ChatGPT to answer followup questions, admit its mistakes, challenge incorrect premises, and reject inappropriate requests.

OpenAI Blog66

预测语言模型在虚假信息活动中的潜在滥用及如何降低风险

OpenAI 研究人员与 Georgetown University 的 Center for Security and Emerging Technology 以及 Stanford Internet Observatory 合作,研究大型语言模型可能如何被滥用于虚假信息目的。此次合作包括 2021 年 10 月举办的一场研讨会,汇集了 30 名虚假信息研究人员、机器学习专家和政策分析师,并最终在一年多研究的基础上共同撰写了一份报告。该报告概述了如果语言模型被用于增强虚假信息活动,会对信息环境构成的威胁,并介绍了一个用于分析潜在缓解措施的框架。点击此处阅读完整报告。

OpenAI Blog60

Introducing ChatGPT Plus

We’re launching a pilot subscription plan for ChatGPT, a conversational AI that can chat with you, answer follow-up questions, and challenge incorrect assumptions.

OpenAI Blog75

AI 系统应该如何行为,由谁来决定?

我们正在阐明 ChatGPT 的行为是如何塑造的,以及我们改进该行为、允许更多用户自定义,并在这些领域让公众更多参与我们决策的计划。

OpenAI Blog62

GPT-4

我们创建了 GPT-4,这是 OpenAI 在扩展深度学习方面取得的最新里程碑。GPT-4 是一个大型多模态模型(接受图像和文本输入,输出文本),尽管在许多现实场景中能力不如人类,但在各种专业和学术基准测试中展现出人类水平的表现。

OpenAI Blog48

Stripe

Stripe leverages GPT-4 to streamline user experience and combat fraud.

OpenAI Blog60

ChatGPT plugins

We’ve implemented initial support for plugins in ChatGPT. Plugins are tools designed specifically for language models with safety as a core principle, and help ChatGPT access up-to-date information, run computations, or use third-party services.

OpenAI Blog60

Announcing OpenAI’s Bug Bounty Program

This initiative is essential to our commitment to develop safe and advanced AI. As we create technology and services that are secure, reliable, and trustworthy, we need your help.

OpenAI Blog70

语言模型可以解释语言模型中的神经元

我们使用 GPT-4 自动为大型语言模型中神经元的行为编写解释,并对这些解释进行评分。我们发布了一个数据集,其中包含 GPT-2 中每个神经元的这些(不完美的)解释和评分。

OpenAI Blog73

对 AI 的民主化输入

我们的非营利组织 OpenAI, Inc. 正在启动一项计划,将颁发十笔每笔 100,000 美元的资助,用于资助在法律界定的范围内建立民主流程,以决定 AI 系统应遵循哪些规则的实验。

OpenAI Blog59

OpenAI Cybersecurity Grant Program

Our goal is to facilitate the development of AI-powered cybersecurity capabilities for defenders through grants and other support.

OpenAI Blog44

Introducing OpenAI London

We are excited to announce OpenAI’s first international expansion with a new office in London, United Kingdom.

OpenAI Blog65

ChatGPT 的自定义指令

我们正在推出自定义指令,让你更好地控制 ChatGPT 的回应方式。设置你的偏好后,ChatGPT 会在未来的所有对话中记住这些偏好。

OpenAI Blog63

推动 AI 治理向前发展

OpenAI 和其他领先实验室通过自愿承诺加强 AI 的安全性、保障性和可信度。

OpenAI Blog61

Using GPT-4 for content moderation

We use GPT-4 for content policy development and content moderation decisions, enabling more consistent labeling, a faster feedback loop for policy refinement, and less involvement from human moderators.

OpenAI Blog73

用 AI 教学

我们发布了一份面向在课堂中使用 ChatGPT 的教师指南,其中包括建议提示词、关于 ChatGPT 工作原理及其局限性的说明、AI 检测器的有效性以及偏见。

OpenAI Blog76

OpenAI Red Teaming Network

我们宣布公开招募 OpenAI Red Teaming Network,并邀请有兴趣提升 OpenAI 模型安全性的领域专家加入我们的工作。

OpenAI Blog63

推出 GPTs

现在,你可以创建 ChatGPT 的自定义版本,将指令、额外知识和任意技能组合在一起。

OpenAI Blog56

OpenAI and journalism

We support journalism, partner with news organizations, and believe The New York Times lawsuit is without merit.

OpenAI Blog62

Introducing ChatGPT Team

We’re launching a new ChatGPT plan for teams of all sizes, which provides a secure, collaborative workspace to get the most out of ChatGPT at work.

OpenAI Blog63

构建用于预警 LLM 辅助制造生物威胁的系统

我们正在制定一个蓝图,用于评估大型语言模型(LLM)可能帮助某人制造生物威胁的风险。在一项涉及生物学专家和学生的评估中,我们发现 GPT-4 对生物威胁制造准确性的提升至多是轻微的。虽然这种提升还不足以得出确凿结论,但我们的发现为持续研究和社区审议提供了一个起点。

OpenAI Blog80

ChatGPT 的记忆与新控制功能

我们正在测试 ChatGPT 记住你所讨论内容的能力,以便让未来的聊天更有帮助。你可以掌控 ChatGPT 的记忆。

OpenAI Blog72

作为世界模拟器的视频生成模型

我们探索了在视频数据上对生成模型进行大规模训练。具体而言,我们在不同时长、分辨率和宽高比的视频与图像上联合训练文本条件扩散模型。我们利用了一种 transformer 架构,该架构作用于视频和图像潜在代码的时空片段。我们最大的模型 Sora 能够生成一分钟的高保真视频。我们的结果表明,扩展视频生成模型是构建物理世界通用模拟器的一条有前景的路径。

OpenAI Blog56

OpenAI and Elon Musk

We are dedicated to the OpenAI mission and have pursued it every step of the way.

OpenAI Blog59

Sora first impressions

Since we introduced Sora to the world last month, we’ve been working with artists to learn how Sora might aid in their creative process.

OpenAI Blog75

推出 OpenAI Japan

我们很高兴宣布在亚洲设立首个办公室,并发布一款针对日语优化的 GPT-4 自定义模型。

OpenAI Blog76

"Bad Grammar": Russian-linked Telegram comment activity

OpenAI banned accounts linked to a previously unreprorted Russia-origin operation we dubbed "Bad Grammar", using AI to generate English- and Russian-language Telegram comments on Ukraine, Moldova, Baltic, and US politics.

OpenAI Blog70

与 Stack Overflow 建立 API 合作伙伴关系

与 Stack Overflow 建立 API 合作伙伴关系 Stack Overflow 和 OpenAI 今天宣布建立新的 API 合作伙伴关系,将把全球领先的高技术内容知识平台与全球最受欢迎的 AI 开发 LLM 模型的集体优势赋能给开发者。

OpenAI Blog70

我们处理数据和 AI 的方式

ChatGPT 发布仅一年多后,AI 正在改变我们的生活、工作和学习方式。它也引发了关于 AI 时代数据的重要讨论。本文将介绍我们的方法、面向创作者和内容所有者的新 Media Manager,以及我们的未来方向。

OpenAI Blog89

春季更新

推出 GPT-4o,并在 ChatGPT 中免费提供更多功能。

OpenAI Blog65

你好,GPT-4o

我们宣布推出 GPT-4 Omni,这是我们的全新旗舰模型,能够跨音频、视觉和文本进行实时推理。

OpenAI Blog73

OpenAI 与 Reddit 合作

OpenAI 与 Reddit 合作 我们正在将 Reddit 的独特内容引入 ChatGPT 和我们的产品。

OpenAI Blog55

How the voices for ChatGPT were chosen

How the voices for ChatGPT were chosen We worked with industry-leading casting and directing professionals to narrow down over 400 submissions before selecting the 5 voices.

OpenAI Blog51

OpenAI safety practices

Artificial general intelligence has the potential to benefit nearly every aspect of our lives—so it must be developed and deployed responsibly.

OpenAI Blog54

A Content and Product Partnership with Vox Media

In a multi-faceted agreement, Vox Media’s content will enhance the output of OpenAI’s ChatGPT, and the company will build on OpenAI’s technology to develop products to better serve its audiences and advertisers.

OpenAI Blog64

通过 The Atlantic 增强 ChatGPT 中的新闻

The Atlantic 宣布与 OpenAI 建立战略内容和产品合作伙伴关系,这使 The Atlantic 成为 OpenAI 内的优质新闻来源。The Atlantic 的文章将可在 OpenAI 的产品中被发现,包括 ChatGPT;作为合作伙伴,The Atlantic 将帮助塑造新闻在未来实时发现产品中的呈现和展示方式。

OpenAI Blog56

Automating customer support agents

MavenAGI is a new software company for the AI era. They recently launched an AI customer service agent, built on the flexibility of GPT-4, which a number of companies like Tripadvisor, Clickup and Rho are already using to save time and better serve their customers.

OpenAI Blog73

OpenAI for Education

一项面向大学的经济实惠方案,帮助其负责任地将 AI 引入校园。

OpenAI Blog75

面向非营利组织推出 OpenAI

我们正在推出一项新计划,以提高非营利组织使用我们工具的可及性,其中包括 ChatGPT Team 和 Enterprise 的折扣费率。

OpenAI Blog78

从 GPT-4 中提取概念

通过使用扩展稀疏自编码器的新技术,我们自动识别出了 GPT-4 计算中的 1600 万个模式。

OpenAI Blog70

利用 GPT-4o 推理变革癌症护理

Color Health 正在与 OpenAI 合作,开创一种加快癌症患者获得治疗的新方式。他们的新 Cancer Copilot 应用使用 GPT-4o 来识别缺失的诊断信息并制定量身定制的检查计划,使医疗服务提供者能够就癌症筛查和治疗做出循证决策。

OpenAI Blog50

Surging developer productivity with custom GPTs

Paf adopted ChatGPT Enterprise across its entire company, with engineers using custom GPTs on a daily basis to speed up routine development tasks. Paf also integrated ChatGPT Enterprise into the grit:lab coding academy (gritlab.ax), training the next generation of software developers using an AI-augmented, systems-architecture mindset from day one. In addition to the wide range of use cases for developers and grit:lab students, 70% of Paf employees actively use ChatGPT Enterprise, spanning business teams like finance, HR, marketing, and customer support.

OpenAI Blog70

用 GPT-4 找出 GPT-4 的错误

CriticGPT 是一个基于 GPT-4 的模型,它会撰写对 ChatGPT 回复的评析,帮助人类训练员在 RLHF 过程中发现错误

OpenAI Blog62

Zico Kolter Joins OpenAI’s Board of Directors

Zico Kolter Joins OpenAI’s Board of Directors We’re strengthening our governance with expertise in AI safety and alignment. Zico will also join the Safety & Security Committee

OpenAI Blog65

借助 OpenAI 为数百万人提供情境化职位匹配

Indeed 的使命是帮助人们找到工作,它是全球排名第一的求职网站。每月有超过 3.5 亿独立访客访问 Indeed,与超过 350 万雇主和 3200 多万个职位建立联系。更重要的是,每三秒就有人通过 Indeed 获得聘用。

OpenAI Blog60

Personalizing education with ChatGPT

Arizona State University embraces ChatGPT campus-wide to personalize learning, advance research, and prepare students for the future

OpenAI Blog55

Coding with OpenAI o1

Scott Wu, CEO and Co-Founder of Cognition, explains how OpenAI o1 makes coding decisions in a more human-like way.

OpenAI Blog54

Decoding genetics with OpenAI o1

Geneticist Catherine Brownstein demonstrates how OpenAI o1 can speed up the process of diagnosing rare medical challenges.

OpenAI Blog73

SweetSpecter:与中国有关的网络活动

OpenAI 封禁了一些账户,这些账户很可能属于一个疑似位于中国、被追踪为 SweetSpecter 的对手组织;该组织使用 AI 研究漏洞、编写代码并支持鱼叉式网络钓鱼活动。

OpenAI Blog60

Bet Bot: Gambling spam network

OpenAI banned accounts that accessed its models through an Israel-based startup to generate conversations and send links to gambling sites on X.

OpenAI Blog78

API 中的模型蒸馏

使用大型前沿模型的输出微调一个成本高效的模型——全部在 OpenAI 平台上完成

OpenAI Blog76

评估 ChatGPT 中的公平性

我们分析了 ChatGPT 如何根据用户姓名作出回应,并使用 AI 研究助手来保护隐私。

OpenAI Blog37

Rox goes “all in” on OpenAI

By combining commercial experience and deep LLM expertise with OpenAI’s models, Rox makes every seller a top 1% seller.

OpenAI Blog86

OpenAI o1 系统卡

本报告概述了在发布 OpenAI o1 和 o1-mini 之前开展的安全工作,包括根据我们的 Preparedness Framework 进行的外部红队测试和前沿风险评估。

OpenAI Blog79

Sora 系统卡

Sora 是 OpenAI 的视频生成模型,旨在接收文本、图像和视频输入,并生成新的视频作为输出。Sora 基于 DALL-E 和 GPT 模型的经验构建,旨在为人们提供更丰富的工具,用于讲故事和创意表达。

OpenAI Blog44

Vallée Duhamel & Sora

Filmmaking duo Vallée Duhamel explains how Sora helps build new worlds.

OpenAI Blog33

Minne Atairu & Sora

Interdisciplinary artist Minne Atairu discusses how Sora helps realize her vision.

OpenAI Blog92

Sora 来了

我们的视频生成模型 Sora 现已可在 sora.com 使用。用户可以生成最高 1080p 分辨率、最长 20 秒的视频,并可选择宽屏、竖屏或方形宽高比。你可以使用自己的素材进行扩展、再创作和融合,也可以根据文本生成全新的内容。

OpenAI Blog60

Elon Musk wanted an OpenAI for-profit

Elon Musk’s latest legal filing against OpenAI marks his fourth attempt in less than a year to reframe his claims. However, his own words and actions speak for themselves—in 2017, Elon not only wanted, but actually created, a for-profit as OpenAI’s proposed new structure.

OpenAI Blog64

与 Axios 合作拓展 OpenAI 与新闻行业的合作

代表数百家新闻编辑室和内容品牌的出版商正在通过 OpenAI 合作伙伴关系和资助计划采用 AI 工具并加强新闻生态系统,同时 ChatGPT 用户也能获取来自领先、可靠出版物的信息。

OpenAI Blog69

Stargate 基础设施

OpenAI 及我们的战略合作伙伴对我们在 AGI 基础设施方面的共同愿景感到振奋。我们因所面临的挑战而充满动力,也对与整个工业基础中的企业合作、共同实现我们雄心勃勃的使命这一前景感到兴奋。具体而言,我们希望与已建成数据中心基础设施领域的各类企业建立联系,涵盖电力和土地、建设、设备以及其间的一切环节。

OpenAI Blog86

Operator 系统卡

基于 OpenAI 已建立的安全框架,本文档重点介绍了我们的多层方法,包括为防范提示工程和越狱、保护隐私与安全而实施的模型和产品缓解措施,并详细说明了我们的外部红队测试工作、安全评估,以及为进一步完善这些防护措施而持续开展的工作。

OpenAI Blog84

OpenAI o3-mini 系统卡

本报告概述了针对 OpenAI o3-mini 模型开展的安全工作,包括安全评估、外部红队测试以及 Preparedness Framework 评估。

OpenAI Blog67

伊朗影响力网络:跨平台活动

OpenAI 封禁了与伊朗有关的账号,这些账号使用 AI 生成与 IUVM 和 STORM-2035 影响力活动相关的文章和社交帖子。

OpenAI Blog68

网络威胁行为者:AI 辅助的入侵研究

OpenAI 封禁了可能与公开报道的 DPRK 关联威胁行为者有关的账户,这些账户使用 AI 研究入侵工具、网络钓鱼、恶意软件和加密货币目标。

OpenAI Blog77

在欧洲推出数据驻留

数据驻留建立在 OpenAI 的企业级数据隐私、安全和合规计划之上,为全球客户提供支持。

OpenAI Blog86

OpenAI GPT-4.5 系统卡

我们正在发布 OpenAI GPT‑4.5 的研究预览版,这是我们迄今为止规模最大、知识最丰富的模型。

OpenAI Blog60

Supporting sellers with enhanced product listings

Mercari leverages GPT-4o mini and GPT-4 to streamline selling, enhance product listings, and boost sales, transforming the online marketplace with features like AI Listing Support and Mercari AI Assistant.

OpenAI Blog71

推出 NextGenAI

OpenAI 承诺向领先机构提供 5000 万美元的资金和工具。

OpenAI Blog57

Leadership updates

OpenAI has grown a lot. We remain focused on the same core—pursuing frontier AI research that accelerates human progress–but we now also deliver products used by hundreds of millions of people.

OpenAI Blog87

GPT-4o System Card 附录:4o 图像生成

4o image generation 是一种新的图像生成方法,相比我们早期的 DALL·E 3 系列模型能力显著更强。它可以创建逼真的输出。它可以将图像作为输入并对其进行转换。

OpenAI Blog86

推出 4o 图像生成

在 OpenAI,我们长期以来一直认为图像生成应该是我们的语言模型的一项核心能力。因此,我们将迄今为止最先进的图像生成器内置到了 GPT‑4o 中。其结果是——图像生成不仅美观,而且实用。

OpenAI Blog56

Security on the path to AGI

At OpenAI, we proactively adapt, including by building comprehensive security measures directly into our infrastructure and models.

OpenAI Blog88

为构建 AGI 获得新融资

今天,我们宣布获得新融资——以投后 3000 亿美元估值融资 400 亿美元,这将使我们能够进一步推进 AI 研究的前沿,扩展我们的计算基础设施,并为每周使用 ChatGPT 的 5 亿人提供日益强大的工具。

OpenAI Blog70

OpenAI 的欧盟经济蓝图

今天,OpenAI 发布欧盟经济蓝图——一套旨在帮助欧洲抓住人工智能机遇、推动整个地区可持续经济增长,并确保 AI 由欧洲、在欧洲、为欧洲开发和部署的提案。

OpenAI Blog91

在 API 中推出 GPT-4.1

在 API 中推出 GPT-4.1——一个全新的模型家族,带来全面改进,包括在编码、指令遵循和长上下文理解方面的重大提升。我们还发布了首个 nano 模型。即日起面向全球开发者开放。

OpenAI Blog93

OpenAI o3 和 o4-mini 系统卡

OpenAI o3 和 OpenAI o4-mini 将最先进的推理能力与完整的工具能力相结合——网页浏览、Python、图像和文件分析、图像生成、画布、自动化、文件搜索和记忆。

OpenAI Blog84

在 API 中推出我们最新的图像生成模型

我们最新的图像生成模型现已通过 ‘gpt-image-1’ 在 API 中提供,使开发者和企业能够将专业级、可定制的视觉内容直接构建到自己的工具和平台中。

OpenAI Blog80

OpenAI 结构的演进

OpenAI 董事会发布的最新消息:将其营利性实体转型为公益公司,在非营利组织监督下强化其使命驱动的结构,同时实现更大的影响力,并与公共利益保持长期一致。

OpenAI Blog65

Lowe’s 将项目专业知识送到每个人手中

Lowe’s 与 OpenAI 合作打造了 Mylow 和 Mylow Companion,这些由 AI 驱动的工具为客户和门店员工提供专家帮助,使复杂的家居改善项目更易于规划、推进和完成。

OpenAI Blog75

在亚洲推出数据驻留

数据驻留建立在 OpenAI 企业级数据隐私、安全与合规计划的基础之上,为全球客户提供支持。

OpenAI Blog83

o3 和 o4-mini 系统卡的补充说明:Codex

Codex 是一种基于云的编码代理。Codex 由 codex-1 驱动,codex-1 是针对软件工程优化的 OpenAI o3 版本。codex-1 使用强化学习在各种环境中的真实编码任务上进行训练,以生成高度贴近人类风格和 PR 偏好的代码,精确遵循指令,并反复运行测试,直到取得通过结果。

OpenAI Blog76

推出 Stargate UAE

我们正在推出 Stargate UAE——这是 OpenAI 的 AI 基础设施平台 Stargate 的首次国际部署。

OpenAI Blog81

Vixen 和 Keyhole Panda:中国相关网络行动

OpenAI 封禁了与公开归因于中华人民共和国的威胁行为者相关的账号,这些账号使用 AI 来支持漏洞研究、脚本编写、翻译和行动故障排查。

OpenAI Blog74

STORM-2035:屡次实施的影响力活动

OpenAI 封禁了与可能同伊朗有关联的 STORM-2035 行动相关的账号,该行动利用 AI 创建有关美国、英国、爱尔兰和委内瑞拉政治的影响力内容。

OpenAI Blog

Scaling security with responsible disclosure

OpenAI introduces its Outbound Coordinated Disclosure Policy to guide how it responsibly reports vulnerabilities in third-party software—emphasizing integrity, collaboration, and proactive security at scale.

OpenAI Blog70

将 AI 的魔力带入 Mattel 的标志性品牌

OpenAI 和 Mattel 正在合作,将 AI 融入 Barbie 和 Hot Wheels 等标志性品牌,旨在提升创意开发、简化工作流程,并为粉丝创造新的互动方式。

OpenAI Blog80

推出 OpenAI for Government

我们正在推出 OpenAI for Government,这是一项新计划,旨在把我们最先进的 AI 工具带给美国各地的公务人员。我们正在支持美国政府采用一流技术的努力,并部署这些工具以服务公共利益。

OpenAI Blog50

Driving scalable growth with OpenAI o3, GPT-4.1, and CUA

Unify, an AI-powered GTM platform, uses OpenAI’s o3, GPT-4.1, and CUA to automate prospecting, research, and outreach. With hyper-personalized messaging and an always-on workflow, Unify helps teams generate pipeline at scale while focusing on high-impact customer interactions.

OpenAI Blog59

Customizable, no-code voice agent automation with GPT-4o

Retell AI is transforming the call center with AI voice automation powered by GPT-4o and GPT-4.1. Its no-code platform enables businesses to launch natural, real-time voice agents that cut call costs, boost CSAT, and automate customer conversations—without scripts or hold times.

OpenAI Blog73

澳大利亚的 AI——OpenAI 的经济蓝图

今天,OpenAI 与 Mandala Partners 合作发布面向澳大利亚的 OpenAI AI 经济蓝图。在提高生产力已成为澳大利亚国家优先事项之际,该蓝图为澳大利亚如何释放人工智能的全部经济和社会潜力提供了一份清晰、可行的计划。

OpenAI Blog63

设计中的思想自由

ChatGPT 旨在实用、可信且适应性强——让你可以将其打造成属于自己的工具。

OpenAI Blog58

OpenAI nonprofit jam

At OpenAI, we build tools to help people solve hard problems—including nonprofits working on the frontlines of their communities. The OpenAI Academy is teaming up with the Walton Family Foundation, Emerson Collective, and a network of local nonprofit organizations to host the Nonprofit Jam—a one-day, nationwide event bringing together more than 1,000 nonprofit leaders across 10 locations.

OpenAI Blog84

ChatGPT agent System Card

ChatGPT agent System Card: OpenAI’s agentic model unites research, browser automation, and code tools with safeguards under the Preparedness Framework.

OpenAI Blog86

推出 ChatGPT agent

推出 ChatGPT agent:它会思考并行动,在你的指导下使用工具完成研究、预订和幻灯片等任务。

OpenAI Blog72

一项与社区共建的 5000 万美元基金

OpenAI 正在推出一项初始规模为 5000 万美元的基金,用于支持非营利组织和社区组织,该基金参考了独立的 OpenAI Nonprofit Commission 报告。

OpenAI Blog72

OpenAI 的新经济分析

分析提供了关于 ChatGPT 对经济影响的洞见。OpenAI 还启动了新的研究合作,以研究 AI 对劳动力市场和生产力的更广泛影响。

OpenAI Blog80

Stargate 通过与 Oracle 达成 4.5 吉瓦合作取得进展

Oracle 和 OpenAI 已达成协议,将在美国开发额外 4.5 吉瓦的 Stargate 数据中心容量。这项投资将创造新的就业机会,加速美国的再工业化,并帮助推进美国在 AI 领域的领导地位。它也标志着 Stargate 的一个重要里程碑;Stargate 是 OpenAI 的 AI 基础设施平台,也是其将 AI 惠及每个人的长期愿景。

OpenAI Blog76

与 Penda Health 共同开创 AI 临床副驾驶

OpenAI 和 Penda Health 首次推出一款 AI 临床副驾驶,在真实使用中将诊断错误减少了 16%——为医疗保健领域安全、有效地应用 AI 提供了一条新路径。

OpenAI Blog62

宣布 OpenAI DevDay 2025

我们将于 2025 年 10 月 6 日在旧金山 Fort Mason 举办第三届年度 OpenAI DevDay。

OpenAI Blog86

在 ChatGPT 中推出学习模式

在 ChatGPT 中推出学习模式,这是一种全新的学习体验,可帮助你逐步解决问题,通过提问、支架式引导和反馈来引导学生,实现更深入的学习。

OpenAI Blog78

推出 Stargate Norway

我们正在启动 Stargate Norway——这是 OpenAI 在 OpenAI for Countries 计划下于欧洲推出的首个 AI 数据中心项目。Stargate 是 OpenAI 的总体基础设施平台,也是我们实现长期愿景的关键组成部分,旨在将 AI 的益处带给每一个人。

OpenAI Blog75

我们优化 ChatGPT 的目标

我们打造 ChatGPT,是为了以你希望的各种方式帮助你更好地成长与生活。了解我们如何在专家意见的指导下,改进对艰难时刻的支持,推出休息提醒,并致力于提供更好的生活建议。

OpenAI Blog90

gpt-oss-120b 与 gpt-oss-20b 模型卡

我们介绍 gpt-oss-120b 和 gpt-oss-20b,这两个开放权重推理模型根据 Apache 2.0 许可证和我们的 gpt-oss 使用政策提供。

OpenAI Blog98

推出 gpt-oss

我们正在发布 gpt-oss-120b 和 gpt-oss-20b——两个先进的开放权重语言模型,能够以低成本提供强大的实际性能。这些模型采用灵活的 Apache 2.0 许可证,在推理任务上的表现优于同等规模的开放模型,展现出强大的工具使用能力,并针对在消费级硬件上的高效部署进行了优化。

OpenAI Blog88

Estimating worst case frontier risks of open weight LLMs

In this paper, we study the worst-case frontier risks of releasing gpt-oss. We introduce malicious fine-tuning (MFT), where we attempt to elicit maximum capabilities by fine-tuning gpt-oss to be as capable as possible in two domains: biology and cybersecurity.

OpenAI Blog90

Providing ChatGPT to the Entire U.S. Federal Workforce

Today, OpenAI for Government is announcing a new partnership with the U.S. General Services Administration (GSA) to launch a transformative initiative. For the next year, ChatGPT Enterprise will be available to the entire federal executive branch workforce at essentially no cost.

OpenAI Blog87

推出 GPT-5

我们正在推出 GPT‑5,这是我们迄今为止最出色的 AI 系统。GPT‑5 在智能方面相比我们以往所有模型都有显著飞跃,在编码、数学、写作、健康、视觉感知等领域具备最先进的性能。

OpenAI Blog76

初看 GPT-5

看看一群顶尖开发者首次使用 GPT-5 的体验。

OpenAI Blog97

GPT-5 系统卡

这份 GPT-5 系统卡说明了统一的模型路由系统如何通过 gpt-5-main、gpt-5-thinking 以及 gpt-5-thinking-nano 等轻量版本,为不同任务和开发者用途优化,从而实现快速且智能的响应。

OpenAI Blog78

GPT-5 与工作新时代

GPT-5 是 OpenAI 最先进的模型,正在智能工作新时代变革企业 AI、自动化和员工生产力。

OpenAI Blog89

面向开发者推出 GPT-5

在我们的 API 平台中推出 GPT-5——提供高水平推理性能、面向开发者的新控制能力,以及在真实编码任务上的一流表现。

OpenAI Blog57

Scaling accounting capacity with OpenAI

Built with OpenAI o3, o3-Pro, GPT-4.1, and GPT-5, Basis’ AI agents help accounting firms save up to 30% of their time and expand capacity for advisory and growth.

OpenAI Blog69

OpenAI 致 Newsom 州长关于协调一致监管的信

我们刚刚致信 Gavin Newsom 州长,呼吁 California 在推动以州为基础的 AI 监管与国家标准——并且凭借 US 的领导地位,与新兴的全球标准——协调一致方面发挥引领作用。

OpenAI Blog46

Mixi reimagines communication with ChatGPT

Discover how MIXI, a leader in digital entertainment and lifestyle services in Japan, uses ChatGPT Enterprise to transform productivity, boost AI adoption across teams, and create a secure environment for innovation.

OpenAI Blog54

Scaling domain expertise in complex, regulated domains

Discover how Blue J is transforming tax research with AI-powered tools built on GPT-4.1. By combining domain expertise with Retrieval-Augmented Generation, Blue J delivers fast, accurate, and fully-cited tax answers—trusted by professionals across the US, Canada, and the UK.

OpenAI Blog73

加速生命科学研究

了解专用 AI 模型 GPT-4b micro 如何帮助 OpenAI 和 Retro Bio 设计出用于干细胞疗法和长寿研究的更有效蛋白质。

OpenAI Blog81

OpenAI 和 Anthropic 分享联合安全评估的发现

OpenAI 和 Anthropic 分享了首次同类联合安全评估的发现,彼此测试对方模型在目标偏离、指令遵循、幻觉、越狱等方面的表现——凸显了进展、挑战以及跨实验室协作的价值。

OpenAI Blog79

集体对齐:公众对我们 Model Spec 的意见

OpenAI 调查了全球 1,000 多人,了解他们认为 AI 应该如何行为,并将他们的观点与我们的 Model Spec 进行了比较。了解集体对齐如何塑造 AI 的默认行为,使其更好地反映多元的人类价值观和视角。

OpenAI Blog56

Supporting nonprofit and community innovation

OpenAI launches a $50M People-First AI Fund to help U.S. nonprofits scale impact with AI. Applications open Sept 8–Oct 8, 2025 for grants in education, healthcare, research, and more.

OpenAI Blog90

推出 gpt-realtime 和 Realtime API 更新

我们正在发布一款更先进的语音到语音模型,以及新的 API 功能,包括 MCP 服务器支持、图像输入和 SIP 电话呼叫支持。

OpenAI Blog83

用 AI 扩大经济机会

OpenAI 正在推出 Jobs Platform 和新的 Certifications,将求职者与工作、培训和认证连接起来。了解我们如何扩大经济机会,并让 AI 技能更易获得。

OpenAI Blog74

OpenAI 和希腊政府推出“OpenAI for Greece”

OpenAI 和希腊政府推出了“OpenAI for Greece”,旨在将 ChatGPT Edu 引入中学,并支持负责任的 AI 学习。该合作伙伴关系旨在提升 AI 素养、推动本地初创企业发展,并促进国家经济增长。

OpenAI Blog79

为什么语言模型会产生幻觉

OpenAI 的新研究解释了为什么语言模型会产生幻觉。研究结果表明,改进评估可以提高 AI 的可靠性、诚实性和安全性。

OpenAI Blog54

A People-First AI Fund: $50M to support nonprofits

Applications are now open for OpenAI’s People-First AI Fund, a $50M initiative supporting U.S. nonprofits advancing education, community innovation, and economic opportunity. Apply by October 8, 2025, for unrestricted grants that help communities shape AI for the public good.

OpenAI Blog80

关于 OpenAI 非营利组织与 PBC 的声明

OpenAI 通过一项新结构重申其非营利组织的领导地位,该结构授予其在 PBC 中的股权,使其能够获得超过 1000 亿美元的资源,以推动安全、有益于人类的 AI 发展。

OpenAI Blog86

GPT-5 系统卡补遗:GPT-5-Codex

这份 GPT-5 系统卡补遗介绍了一个新模型:GPT-5-Codex,这是 GPT-5 的一个版本,针对 Codex 中的智能体式编码进行了进一步优化。GPT-5-Codex 会根据任务复杂度更动态地调整其思考力度,对简单的对话查询或小任务快速响应,同时在更复杂的任务上能够独立工作更长时间。

OpenAI Blog75

人们如何使用 ChatGPT

来自最大规模 ChatGPT 使用研究的新研究显示,该工具如何通过个人和专业用途创造经济价值。采用范围正在从早期用户扩大,缩小差距,并使 AI 成为日常生活的一部分。

OpenAI Blog77

Codex 升级介绍

Codex 现在速度更快、更可靠,并且更擅长实时协作,也能在你进行开发的任何地方独立处理任务——无论是通过终端、IDE、网页,甚至是你的手机。

OpenAI Blog84

迈向年龄预测

了解 OpenAI 如何在 ChatGPT 中构建年龄预测和家长控制功能,以为青少年创造更安全、适龄的体验,同时通过新工具支持家庭。

OpenAI Blog90

检测并减少 AI 模型中的谋划行为

Apollo Research 和 OpenAI 开发了用于评估隐性不对齐(“谋划行为”)的方法,并在各前沿模型的受控测试中发现了与谋划行为一致的表现。团队分享了具体示例,并对一种用于减少谋划行为的早期方法进行了压力测试。

OpenAI Blog67

SchoolAI 打造赋能教师的 AI 平台

SchoolAI 使用 GPT-4.1、图像生成和 TTS,为超过 100 万间课堂提供安全、由教师引导的 AI 工具,提升参与度、监督能力和个性化学习。

OpenAI Blog47

CNA is transforming its newsroom with AI

In this Executive Function series from OpenAI, discover how CNA is transforming its newsroom with AI. Editor-in-Chief Walter Fernandez shares insights on AI adoption, culture, and the future of journalism.

OpenAI Blog78

推出 ChatGPT Pulse

今天,我们面向移动端 Pro 用户发布 ChatGPT Pulse 预览版。Pulse 是一种全新体验,ChatGPT 会主动开展研究,并根据你的聊天、反馈以及已连接的应用(例如你的日历)提供个性化更新。

OpenAI Blog75

与 AARP 合作,帮助老年人保障在线安全

OpenAI 和 AARP 正在合作,通过 OpenAI Academy 和 OATS 的 Senior Planet 倡议,借助新的 AI 培训、诈骗识别工具和全国性项目,帮助老年人保障在线安全。

OpenAI Blog66

打击网络儿童性剥削与虐待

了解 OpenAI 如何通过严格的使用政策、先进的检测工具和行业协作,阻止、举报并防止 AI 被滥用,从而打击网络儿童性剥削与虐待。

OpenAI Blog76

推出家长控制

我们正在推出家长控制和新的家长资源页面,帮助家庭指导 ChatGPT 在家中的使用方式。

OpenAI Blog55

Building OpenAI with OpenAI

At OpenAI, we rely on our own technology to help streamline work, scale expertise, and drive outcomes. In our new series, OpenAI on OpenAI, we share lessons to help other organizations do the same.

OpenAI Blog78

负责任地推出 Sora

为应对先进视频模型以及全新社交创作平台带来的新型安全挑战,我们在构建 Sora 2 和 Sora app 时将安全作为基础。我们的方法以具体的保护措施为根基。

OpenAI Blog87

Sora 2 来了

我们最新的视频生成模型相比以往系统,在物理准确性、真实感和可控性方面都有提升。它还具备同步对白和音效功能。可在新的 Sora 应用中使用它进行创作。

OpenAI Blog88

Sora 2 系统卡

Sora 2 是我们全新的最先进视频和音频生成模型。在 Sora 的基础上,这一新模型引入了以往视频模型难以实现的能力,例如更准确的物理效果、更清晰的真实感、同步音频、增强的可控性,以及更广泛的风格范围。

OpenAI Blog64

诈骗活动:网络欺诈网络

OpenAI 封禁了与网络欺诈网络有关的账户,这些账户利用 AI 支持诈骗话术、冒充他人、翻译以及与受害者互动。

OpenAI Blog81

网络行动:俄语恶意软件工具

OpenAI 封禁了可能与俄语犯罪集团有关的账号,这些账号利用 AI 构建恶意软件加载器、规避层、凭证窃取脚本和 C2 基础设施。

OpenAI Blog73

网络行动:钓鱼和脚本编写支持

OpenAI 封禁了参与相关活动的账户,这些活动与公开报道的威胁组织存在重叠,并显示出与 PRC 情报需求相一致的特征,利用 AI 支持钓鱼和脚本编写工作流程。

OpenAI Blog72

“Stop News”行动:屡犯影响力活动

OpenAI 封禁了与一项源自俄罗斯、被我们称为“Stop News”的行动相关的账号,这些账号利用 AI 生成针对非洲和英国的屡犯影响力内容。

OpenAI Blog76

“Nine–emdash Line”行动:区域影响力活动

OpenAI 封禁了与一项此前未被报道的、源自中国的行动相关的账号,我们将其称为“Nine-emdash Line”。该行动使用 AI 创建有关南海、香港和美国政治的区域影响力内容。

OpenAI Blog74

加速欧洲的 AI 采用

OpenAI 和 Allied for Startups 发布 Hacktivate AI 报告,提出 20 条可操作的政策建议,以加速欧洲的 AI 采用、提升竞争力并赋能创新者。

OpenAI Blog87

在 ChatGPT 中推出应用和新的 Apps SDK

我们正在推出新一代可直接在 ChatGPT 中与你聊天的应用。开发者可以从今天开始使用新的 Apps SDK 构建这些应用,该 SDK 现已提供预览版。

OpenAI Blog85

Codex 现已正式发布

OpenAI Codex 现已正式发布,并为开发者带来强大的新功能:Slack 集成、Codex SDK,以及用量仪表板和工作区管理等管理员工具,让 Codex 更易于大规模使用和管理。

OpenAI Blog71

打击 AI 恶意使用:2025 年 10 月

了解 OpenAI 如何在我们的 2025 年 10 月报告中检测并打击 AI 的恶意使用。了解我们如何应对滥用、执行政策,并保护用户免受现实世界中的伤害。

OpenAI Blog78

定义和评估 LLMs 中的政治偏见

了解 OpenAI 如何通过新的真实世界测试方法评估 ChatGPT 中的政治偏见,这些方法可提高客观性并减少偏见。

OpenAI Blog70

Argentina 的 AI 机遇

OpenAI 和 Sur Energy 正在探索 Argentina 的首个 Stargate 项目——这是一项 AI 与清洁能源合作,可能使 Argentina 成为 Latin America 在人工智能、可持续基础设施和数字创新领域的领导者。

OpenAI Blog70

福祉与 AI 专家委员会

OpenAI 新成立的福祉与 AI 专家委员会汇聚了顶尖心理学家、临床医生和研究人员,指导 ChatGPT 如何支持情绪健康,尤其是青少年的情绪健康。了解他们的见解如何塑造更安全、更有关怀的 AI 体验。

OpenAI Blog89

推出 ChatGPT Atlas,内置 ChatGPT 的浏览器

ChatGPT Atlas,内置 ChatGPT 的浏览器。可直接在任何页面上获得即时答案、摘要和智能网页帮助。并提供可由你掌控的隐私设置。现已适用于 MacOS。

OpenAI Blog79

英国主权 AI 的下一篇章

OpenAI 通过与 Ministry of Justice 达成新协议,扩大其在英国的合作,将 ChatGPT 带给公务员。它还为 ChatGPT Enterprise、ChatGPT Edu 和 API Platform 引入英国数据驻留,以支持可信且安全的 AI 采用。

OpenAI Blog84

在 ChatGPT 中更智能地运用你的公司知识

公司知识会将你的应用中的上下文带入 ChatGPT,从而提供针对你业务的答案,并附有清晰的引用,同时具备安全、隐私和管理员控制。现已面向 Business、Enterprise 和 Edu 用户开放。

OpenAI Blog72

Consensus 借助 GPT-5 和 Responses API 加速研究

Consensus 使用 GPT-5 和 OpenAI 的 Responses API 来驱动一个多智能体研究助手,可在数分钟内阅读、分析并综合证据,帮助超过 800 万名研究人员加速科学发现。

OpenAI Blog75

OpenAI 收购 Sky 的开发商 Software Applications Incorporated

OpenAI 已收购 Sky 的开发商 Software Applications Incorporated。Sky 是一款面向 Mac 的自然语言界面,可将 AI 直接带入你的桌面体验。我们将共同把 Sky 深度的 macOS 能力整合到 ChatGPT 中,让 AI 更加直观、更具上下文感知能力,并更偏向行动导向。

OpenAI Blog87

GPT-5 系统卡补遗:敏感对话

本系统卡详细介绍了 GPT-5 在处理敏感对话方面的改进,包括针对情感依赖、心理健康和越狱抵抗能力的新基准。

OpenAI Blog80

加强 ChatGPT 在敏感对话中的回应

OpenAI 与 170 多位心理健康专家合作,提升 ChatGPT 识别痛苦、以同理心回应并引导用户寻求现实支持的能力——将不安全回应减少高达 80%。了解我们如何让 ChatGPT 在敏感时刻更安全、更具支持性。

OpenAI Blog66

抓住 AI 机遇

满足智能时代的需求将需要对能源和基础设施进行战略性投资。OpenAI 提交给 White House 的文件详细说明了如何通过扩大产能和提升劳动力准备度,来维持美国在 AI 和经济增长方面的领导地位。

OpenAI Blog69

为造福每个人而构建

OpenAI 的资本重组强化了以使命为中心的治理,扩大了资源,以确保 AI 造福每个人,同时负责任地推进创新。

OpenAI Blog63

推动面向业务创新的组织转型

DNP 在十个核心部门推广了 ChatGPT Enterprise,在三个月内实现了专利研究速度提升 95%、处理量提升 10 倍、自动化率达到 87%,以及知识复用率达到 70%。

OpenAI Blog88

gpt-oss-safeguard 技术报告

gpt-oss-safeguard-120b 和 gpt-oss-safeguard-20b 是两个开放权重推理模型,基于 gpt-oss 模型进行后训练,并经过训练以根据给定政策进行推理,从而按照该政策为内容打标签。在本报告中,我们描述了 gpt-oss-safeguard 的能力,并以底层 gpt-oss 模型作为基线,提供了我们对 gpt-oss-safeguard 模型的基线安全性评估。有关底层 gpt-oss 模型的开发和架构的更多信息,请参见原始 gpt-oss 模型卡。

OpenAI Blog82

推出 gpt-oss-safeguard

OpenAI 推出 gpt-oss-safeguard——用于安全分类的开放权重推理模型,使开发者能够应用并迭代自定义策略。

OpenAI Blog84

介绍 Aardvark:OpenAI 的智能体安全研究员

OpenAI 推出 Aardvark,这是一款由 AI 驱动的安全研究员,能够自主地大规模发现、验证并帮助修复软件漏洞。该系统目前处于私有测试阶段——欢迎注册加入早期测试。

OpenAI Blog74

将 Stargate 扩展到 Michigan

OpenAI 正在将 Stargate 扩展到 Michigan,建设一个新的 1 吉瓦园区,以加强美国的 AI 基础设施。该项目将创造就业机会、推动投资,并支持整个 Midwest 的经济增长。

OpenAI Blog89

AWS 和 OpenAI 宣布多年战略合作伙伴关系

OpenAI 和 AWS 已达成一项为期多年、价值 380 亿美元的合作伙伴关系,以扩展高级 AI 工作负载。AWS 将提供世界级的基础设施和计算能力,为 OpenAI 下一代模型提供动力。

OpenAI Blog81

介绍 IndQA

OpenAI 推出 IndQA,这是一个用于评估印度语言 AI 系统的新基准。IndQA 由领域专家共同构建,测试 AI 在 12 种语言和 10 个知识领域中的文化理解与推理能力。

OpenAI Blog74

100 万企业客户正在将 AI 投入工作

全球已有超过 100 万企业客户使用 OpenAI。在医疗保健、生命科学、金融服务等领域,ChatGPT 和我们的 APIs 正在推动一个由 AI 赋能的智能工作新时代。

OpenAI Blog76

推出 Teen Safety Blueprint

了解 OpenAI 的 Teen Safety Blueprint——这是一份负责任构建 AI 的路线图,包含安全防护、适龄设计以及协作,旨在保护并赋能线上的年轻人。

OpenAI Blog71

理解提示注入:前沿安全挑战

提示注入是 AI 系统面临的前沿安全挑战。了解这些攻击的工作原理,以及 OpenAI 如何推进研究、训练模型并为用户构建安全防护措施。

OpenAI Blog87

GPT-5.1:更智能、更善于对话的 ChatGPT

我们正在升级 GPT-5 系列,推出更亲和、更强大的模型,以及自定义 ChatGPT 语气和风格的新方式。GPT-5.1 将于今天开始向付费用户逐步推出。

OpenAI Blog90

面向开发者推出 GPT-5.1

GPT-5.1 现已在 API 中可用,带来更快的自适应推理、扩展的提示缓存、改进的编码性能,以及新的 apply_patch 和 shell 工具。

OpenAI Blog76

通过稀疏回路理解神经网络

OpenAI 正在探索机制可解释性,以理解神经网络如何推理。我们的新型稀疏模型方法可以让 AI 系统更加透明,并支持更安全、更可靠的行为。

OpenAI Blog62

Introducing OpenAI for Ireland

OpenAI launches OpenAI for Ireland, partnering with the Irish Government, Dogpatch Labs and Patch to help SMEs, founders and young builders use AI to innovate, boost productivity and build the next generation of Irish tech startups.

OpenAI Blog53

OpenAI named Emerging Leader in Generative AI

OpenAI has been named an Emerging Leader in Gartner’s 2025 Innovation Guide for Generative AI Model Providers. The recognition reflects our enterprise momentum, with over 1 million companies building with ChatGPT.

OpenAI Blog83

Intuit 与 OpenAI 携手推出全新的 AI 驱动体验

OpenAI 与 Intuit 已达成一项超过 1 亿美元的多年期合作伙伴关系,将在 ChatGPT 中推出 Intuit 应用体验,并扩大 Intuit 对 OpenAI 前沿模型的使用,以支持个性化金融工具。

OpenAI Blog83

专为教师打造的免费版 ChatGPT

ChatGPT for Teachers 是一个安全的工作空间,具备教育级隐私保护和管理控制功能。经验证的美国 K–12 教育工作者可免费使用至 2027 年 6 月。

OpenAI Blog83

用 GPT-5.1-Codex-Max 构建更多

推出 GPT-5.1-Codex-Max,这是面向 Codex 的更快、更智能的智能体编程模型。该模型专为长时间运行、项目规模的工作而设计,具备增强的推理能力和 token 效率。

OpenAI Blog87

GPT-5.1-Codex-Max 系统卡

本系统卡概述了为 GPT‑5.1-CodexMax 实施的全面安全措施。它详细介绍了模型层面的缓解措施,例如针对有害任务和提示注入的专门安全训练,以及产品层面的缓解措施,例如智能体沙箱和可配置的网络访问。

OpenAI Blog79

OpenAI 与 Target 携手推出全新 AI 驱动体验

OpenAI 与 Target 正在合作,将一款全新的 Target 应用引入 ChatGPT,提供个性化购物和更快捷的结账体验。Target 还将扩大对 ChatGPT Enterprise 的使用,以提升生产力和顾客体验。

OpenAI Blog62

Strengthening our safety ecosystem with external testing

OpenAI works with independent experts to evaluate frontier AI systems. Third-party testing strengthens safety, validates safeguards, and increases transparency in how we assess model capabilities and risks.

OpenAI Blog84

Early experiments in accelerating science with GPT-5

OpenAI introduces the first research cases showing how GPT-5 accelerates scientific progress across math, physics, biology, and computer science. Explore how AI and researchers collaborate to generate proofs, uncover new insights, and reshape the pace of discovery.

OpenAI Blog63

Helping 1,000 small businesses build with AI

OpenAI is partnering with DoorDash, SCORE, and local organizations to help 1,000 small businesses build with AI. The Small Business AI Jam gives Main Street business owners hands-on tools and training to compete and grow.

OpenAI Blog76

OpenAI 与 Foxconn 合作加强美国 AI 供应链制造

OpenAI 与 Foxconn 正在合作,在美国设计和制造下一代 AI 基础设施硬件。此次合作将开发多代数据中心系统,强化美国供应链,并在本土制造关键组件,以加速先进 AI 基础设施的发展。

OpenAI Blog72

GPT-5 与数学发现的未来

UCLA 教授 Ernest Ryu 与 GPT-5 解决了优化理论中的一个关键问题,展示了 AI 在加速数学发现中的作用。

OpenAI Blog79

在 ChatGPT 中推出购物研究

ChatGPT 中的购物研究可通过个性化购买指南帮助你探索、比较和发现产品,从而简化决策过程。

OpenAI Blog71

OpenAI 入股 Thrive Holdings,以加速企业 AI 采用

OpenAI 入股 Thrive Holdings,以加速企业 AI 采用,将前沿研究和工程能力直接嵌入会计和 IT 服务中,以提升速度、准确性和效率,同时创建一个可扩展的模式,推动全行业转型。

OpenAI Blog68

资助 AI 与心理健康新研究的拨款

OpenAI 将提供最高 200 万美元的研究拨款,用于支持 AI 与心理健康交叉领域的研究。该计划支持研究现实世界中的风险、益处和应用的项目,以提升安全性和福祉。

OpenAI Blog62

Inside Mirakl's agentic commerce vision

Mirakl is redefining commerce through AI agents and ChatGPT Enterprise—achieving faster documentation, smarter customer support, and building toward agent-native commerce with Mirakl Nexus.

OpenAI Blog75

公布首批 People-First AI Fund 受助方

OpenAI Foundation 公布 People-First AI Fund 的首批受助者,向 208 家支持社区创新与机会的非营利组织提供总额 4050 万美元的无附加限制资助。

OpenAI Blog78

OpenAI 将收购 Neptune

OpenAI 正在收购 Neptune,以加深对模型行为的可见性,并强化研究人员用于跟踪实验和监控训练的工具。

OpenAI Blog74

自白如何让语言模型保持诚实

OpenAI 研究人员正在测试“自白”这一方法,该方法训练模型在犯错或表现出不良行为时承认错误,从而帮助提升 AI 的诚实性、透明度以及人们对模型输出的信任。

OpenAI Blog83

面向澳大利亚推出 OpenAI

OpenAI 正在推出 OpenAI for Australia,以建设主权 AI 基础设施、提升超过 150 万名员工的技能,并加速澳大利亚不断发展的 AI 生态系统中的创新。

OpenAI Blog69

企业 AI 的现状

OpenAI 的企业数据关键发现显示,2025 年各行业的 AI 采用正在加速、集成更加深入,并带来了可衡量的生产力提升。

OpenAI Blog66

OpenAI 任命 Denise Dresser 为首席营收官

Denise Dresser 将加入 OpenAI 担任首席营收官,负责监督 OpenAI 在企业业务和客户成功方面的全球营收战略。随着 OpenAI 持续扩大规模,她将帮助更多企业在日常运营中应用 AI。

OpenAI Blog69

随着 AI 能力提升,加强网络韧性

随着 AI 模型在网络安全领域变得更加强大,OpenAI 正在投资更强的防护措施和防御能力。我们将说明如何评估风险、限制滥用,并与安全社区合作,以加强网络韧性。

OpenAI Blog91

推出 GPT-5.2

GPT-5.2 是我们面向日常专业工作的最先进前沿模型,具备最先进的推理、长上下文理解、编码和视觉能力。可在 ChatGPT 和 OpenAI API 中使用它,以支持更快速、更可靠的智能体工作流。

OpenAI Blog61

Ten years

OpenAI reflects on ten years of progress, from early research breakthroughs to widely used AI systems that reshaped what’s possible. We share lessons from the past decade and why we remain optimistic about building AGI that benefits all of humanity.

OpenAI Blog81

GPT-5 System Card 更新:GPT-5.2

GPT-5.2 是 GPT-5 系列中的最新模型家族。针对这些模型的综合安全缓解方法与 GPT-5 System Card 和 GPT-5.1 System Card 中描述的方法大体相同。与 OpenAI 的其他模型一样,GPT-5.2 模型基于多样化数据集进行训练,包括互联网上公开可用的信息、我们与第三方合作获取的信息,以及我们的用户或人类训练师和研究人员提供或生成的信息。

OpenAI Blog86

用 GPT-5.2 推进科学与数学

GPT-5.2 是 OpenAI 迄今为止在数学和科学方面最强的模型,在 GPQA Diamond 和 FrontierMath 等基准测试中取得了新的最先进结果。本文展示了这些提升如何转化为真实的研究进展,包括解决一个开放的理论问题以及生成可靠的数学证明。

OpenAI Blog76

BBVA 与 OpenAI 合作变革全球银行业

BBVA 正在通过一项多年期 AI 转型计划扩大与 OpenAI 的合作,将 ChatGPT Enterprise 推广给全部 120,000 名员工。两家公司将共同开发 AI 解决方案,以增强客户互动、简化运营,并帮助打造 AI 原生的银行体验。

OpenAI Blog93

全新的 ChatGPT Images 来了

全新的 ChatGPT Images 由我们的旗舰图像生成模型提供支持,可实现更精准的编辑、更一致的细节,以及最高快 4 倍的图像生成速度。升级后的模型今天开始向所有 ChatGPT 用户推出,并且也已在 API 中以 GPT-Image-1.5 的形式提供。

OpenAI Blog81

衡量 AI 加速生物学研究的能力

OpenAI 推出一个真实世界评估框架,用于衡量 AI 如何在湿实验室中加速生物学研究。该工作使用 GPT-5 优化分子克隆实验方案,探讨了 AI 辅助实验的潜力与风险。

OpenAI Blog75

评估 AI 执行科学研究任务的能力

OpenAI 推出了 FrontierScience,这是一个测试 AI 在物理、化学和生物学中推理能力的基准,用于衡量其迈向真实科学研究的进展。

OpenAI Blog87

开发者现在可以向 ChatGPT 提交应用

开发者现在可以提交应用,以便在 ChatGPT 中进行审核和发布;获批的应用将出现在新的产品内目录中,方便用户发现。更新后的工具、指南和 Apps SDK 可帮助开发者构建强大的聊天原生体验,将现实世界中的操作带入 ChatGPT。

OpenAI Blog76

面向新闻机构推出 OpenAI Academy

OpenAI 正在推出面向新闻机构的 OpenAI Academy,这是一个与 American Journalism Project 和 The Lenfest Institute 共同打造的新学习中心,旨在帮助新闻编辑室有效使用 AI。该 Academy 提供培训、实用用例和负责任使用指南,以支持记者、编辑和出版机构在报道和运营中采用 AI。

OpenAI Blog86

推出 GPT-5.2-Codex

GPT-5.2-Codex 是 OpenAI 最先进的编码模型,具备长程推理、大规模代码转换和增强的网络安全能力。

OpenAI Blog79

更新我们的 Model Spec,加入青少年保护措施

OpenAI 正在更新其 Model Spec,加入新的未满 18 岁原则,定义 ChatGPT 应如何基于发展科学,为青少年提供安全且适龄的指导。此次更新强化了防护措施,明确了模型在较高风险情境中的预期行为,并建立在我们更广泛的工作之上,以提升 ChatGPT 中的青少年安全。

OpenAI Blog73

面向青少年和家长的 AI 素养资源

OpenAI 分享了新的 AI 素养资源,帮助青少年和家长以审慎、安全且自信的方式使用 ChatGPT。这些指南包括经专家审核的建议,涵盖负责任使用、批判性思维、健康边界,以及在情感或敏感话题上支持青少年。

OpenAI Blog71

深化我们与 U.S. Department of Energy 的合作

OpenAI 与 U.S. Department of Energy 已签署一份谅解备忘录,以深化在 AI 和先进计算方面的合作,支持科学发现。该协议建立在与国家实验室持续开展的工作基础之上,并有助于建立一个框架,用于在 DOE 生态系统内将 AI 应用于具有重大影响力的研究。

OpenAI Blog85

评估思维链的可监控性

OpenAI 推出了一个用于思维链可监控性的新框架和评估套件,涵盖 24 个环境中的 13 项评估。我们的研究结果表明,监控模型的内部推理远比仅监控输出更有效,随着 AI 系统能力不断增强,这为实现可扩展控制提供了一条有前景的路径。

OpenAI Blog67

百万之一:致敬正在塑造 AI 未来的客户

全球已有超过一百万客户使用 OpenAI 来赋能团队并开启新的机遇。本文重点介绍 PayPal、Virgin Atlantic、BBVA、Cisco、Moderna 和 Canva 等公司如何借助 AI 改变工作的完成方式。

OpenAI Blog82

持续强化 ChatGPT Atlas 以抵御提示注入

OpenAI 正在使用通过强化学习训练的自动化红队测试来加强 ChatGPT Atlas 对提示注入攻击的防护。这种主动的发现并修补循环有助于及早识别新的漏洞利用,并随着 AI 变得更具自主代理能力而强化浏览器代理的防御。

OpenAI Blog71

OpenAI Grove Cohort 2 发布

OpenAI Grove Cohort 2 现已开放申请。这是一个为期 5 周的创始人项目,面向从尚未形成想法到已有产品的各阶段个人。参与者将获得 5 万美元的 API 额度、AI 工具的早期访问权限,以及来自 OpenAI 团队的实践指导。

OpenAI Blog82

推出 ChatGPT Health

ChatGPT Health 是一项专属体验,可安全连接你的健康数据和应用,并提供隐私保护和由医生参与设计的方案。

OpenAI Blog66

OpenAI for Healthcare

OpenAI for Healthcare 提供安全的企业级 AI,支持 HIPAA 合规——减轻行政负担并支持临床工作流程。

OpenAI Blog49

Datadog uses Codex for system-level code review

OpenAI and Datadog brand graphic with the OpenAI wordmark on the left, the Datadog logo on the right, and a central abstract brown fur-like texture panel on a white background.

OpenAI Blog86

OpenAI 和 SoftBank Group 与 SB Energy 合作

OpenAI 和 SoftBank Group 与 SB Energy 合作开发多吉瓦级 AI 数据中心园区,其中包括一座位于 Texas 的 1.2 GW 设施,以支持 Stargate 计划。

OpenAI Blog47

Zenken boosts a lean sales team with ChatGPT Enterprise

By rolling out ChatGPT Enterprise company-wide, Zenken has boosted sales performance, cut preparation time, and increased proposal success rates. AI-supported workflows are helping a lean team deliver more personalized, effective customer engagement.

OpenAI Blog83

OpenAI 与 Cerebras 合作

OpenAI 与 Cerebras 合作,新增 750 兆瓦高速 AI 算力,降低推理延迟,并让 ChatGPT 在实时 AI 工作负载中运行更快。

OpenAI Blog68

投资 Merge Labs

OpenAI 正在投资 Merge Labs,以支持新的脑机接口,将生物智能与人工智能连接起来,从而最大限度地提升人类能力、自主性和体验。

OpenAI Blog85

推出 ChatGPT Go,现已在全球范围内提供

ChatGPT Go 现已在全球范围内提供,可更广泛地使用 GPT-5.2 Instant,拥有更高的使用额度和更长的记忆能力,让先进 AI 在全球范围内更加实惠。

OpenAI Blog63

随智能价值而扩展的业务

OpenAI 的商业模式随智能而扩展——涵盖订阅、API、广告、商业和计算——由 ChatGPT 采用程度不断加深所推动。

OpenAI Blog79

我们的年龄预测方法

ChatGPT 正在推出年龄预测功能,用于估算账号持有人是否未满或已满 18 岁,为青少年应用安全保护措施,并随着时间推移不断提高准确性。

OpenAI Blog80

Horizon 1000:推动 AI 服务于初级医疗保健

OpenAI 和 Gates Foundation 启动 Horizon 1000,这是一项耗资 5000 万美元的试点计划,旨在提升 AI 在非洲医疗保健领域的能力。该计划目标是在 2028 年前覆盖 1,000 家诊所。

OpenAI Blog77

推出 Edu for Countries

Edu for Countries 是 OpenAI 的一项新计划,旨在帮助各国政府利用 AI 实现教育系统现代化,并打造面向未来的劳动力。

OpenAI Blog64

Praktika 语言学习会话式方法揭秘

Praktika 如何使用 GPT-4.1 和 GPT-5.2 构建自适应 AI 导师,以个性化课程、跟踪进度,并帮助学习者实现真实场景中的语言流利度

OpenAI Blog85

展开 Codex 智能体循环

对 Codex 智能体循环的技术深度解析,说明 Codex CLI 如何使用 Responses API 来编排模型、工具、提示词和性能。

OpenAI Blog75

Prism 介绍

Prism 是一个免费的 LaTeX 原生工作空间,内置 GPT-5.2,帮助研究人员在一个地方进行写作、协作和推理。

OpenAI Blog62

PVH 携手 OpenAI 重塑时尚未来

Calvin Klein 和 Tommy Hilfiger 的母公司 PVH Corp. 正在采用 ChatGPT Enterprise,将 AI 引入时尚设计、供应链和消费者互动。

OpenAI Blog73

AI 在 EU 的下一篇章

OpenAI 推出 EU Economic Blueprint 2.0,通过新的数据、合作伙伴关系和举措,加速欧洲各地的 AI 采用、技能提升和增长。

OpenAI Blog75

OpenAI 内部数据代理揭秘

OpenAI 如何构建了一个内部 AI 数据代理,利用 GPT-5、Codex 和记忆功能对海量数据集进行推理,并在数分钟内提供可靠洞察。

OpenAI Blog82

推出 Codex 应用

推出适用于 macOS 的 Codex 应用——一个用于 AI 编码和软件开发的指挥中心,支持多个智能体、并行工作流和长时间运行的任务。

OpenAI Blog59

The Sora feed philosophy

Discover the Sora feed philosophy—built to spark creativity, foster connections, and keep experiences safe with personalized recommendations, parental controls, and strong guardrails.

OpenAI Blog79

GPT-5.3-Codex 系统卡

GPT‑5.3-Codex 是迄今为止能力最强的智能体式编码模型,结合了 GPT‑5.2-Codex 的前沿编码性能与 GPT‑5.2 的推理和专业知识能力。

OpenAI Blog83

推出 GPT-5.3-Codex

GPT-5.3-Codex 是一个 Codex 原生智能体,将前沿编码性能与通用推理相结合,以支持长期的、现实世界中的技术工作。

OpenAI Blog83

推出 OpenAI Frontier

OpenAI Frontier 是一个企业平台,用于构建、部署和管理具备共享上下文、入职引导、权限和治理功能的 AI agent。

OpenAI Blog74

推出 Trusted Access for Cyber

OpenAI 推出 Trusted Access for Cyber,这是一个基于信任的框架,旨在扩大对前沿网络能力的访问,同时加强防止滥用的保障措施。

OpenAI Blog74

将 ChatGPT 引入 GenAI.mil

OpenAI for Government 宣布在 GenAI.mil 上部署定制版 ChatGPT,为美国国防团队带来安全、以安全性为先的 AI。

OpenAI Blog81

推出 GPT-5.3-Codex-Spark

推出 GPT-5.3-Codex-Spark——我们的首个实时编程模型。生成速度快 15 倍,支持 128k 上下文,现已面向 ChatGPT Pro 用户推出研究预览版。

OpenAI Blog74

扩展社会科学研究

GABRIEL 是 OpenAI 推出的一个新的开源工具包,它使用 GPT 将定性文本和图像转化为定量数据,帮助社会科学家大规模分析研究。

OpenAI Blog76

EVMbench 介绍

OpenAI 和 Paradigm 推出 EVMbench,这是一个用于评估 AI agents 检测、修补和利用高严重性智能合约漏洞能力的基准。

OpenAI Blog78

面向印度推出 OpenAI

OpenAI for India 扩大了印度全国范围内的 AI 访问——建设本地基础设施、赋能企业,并提升劳动力技能。

OpenAI Blog70

推进 AI 对齐的独立研究

OpenAI 承诺向 The Alignment Project 投入 750 万美元,用于资助独立的 AI 对齐研究,加强全球应对 AGI 安全与安保风险的努力。

OpenAI Blog55

Arvind KC appointed Chief People Officer

OpenAI appoints Arvind KC as Chief People Officer to help scale the company, strengthen its culture, and lead how work evolves in the age of AI.

OpenAI Blog53

Joint Statement from OpenAI and Microsoft

Microsoft and OpenAI continue to work closely across research, engineering, and product development, building on years of deep collaboration and shared success.

OpenAI Blog83

我们与 Department of War 的协议

关于 OpenAI 与 Department of War 合同的详细信息,概述了安全红线、法律保护,以及 AI 系统将如何部署在机密环境中。

OpenAI Blog74

Understanding AI and learning outcomes

OpenAI introduces the Learning Outcomes Measurement Suite to assess AI’s impact on student learning across diverse educational environments over time.

OpenAI Blog86

推出 GPT-5.4

推出 GPT-5.4,这是 OpenAI 面向专业工作的最强大且最高效的前沿模型,具备最先进的编码、计算机使用、工具搜索能力,以及 100 万 token 上下文。

OpenAI Blog75

OpenAI 将收购 Promptfoo

OpenAI 正在收购 Promptfoo,这是一个 AI 安全平台,可帮助企业在开发过程中识别并修复 AI 系统中的漏洞。

OpenAI Blog85

推出 GPT-5.4 mini 和 nano

GPT-5.4 mini 和 nano 是 GPT-5.4 的更小、更快版本,针对编码、工具使用、多模态推理以及高容量 API 和子代理工作负载进行了优化。

OpenAI Blog72

安全地用 Sora 进行创作

为应对最先进的视频模型以及全新社交创作平台带来的新型安全挑战,我们在构建 Sora 2 和 Sora app 时将安全作为基础。我们的方法以具体的保护措施为根基。

OpenAI Blog86

为 ChatGPT 中的商品发现提供支持

ChatGPT 推出由 Agentic Commerce Protocol 提供支持的更丰富、更具视觉沉浸感的购物体验,支持商品发现、并排比较以及商家集成。

OpenAI Blog81

OpenAI Foundation 的最新动态

OpenAI Foundation 宣布计划投入至少 10 亿美元,用于治愈疾病、经济机会、AI 韧性和社区项目。

OpenAI Blog83

推出 OpenAI Safety Bug Bounty 计划

OpenAI 推出 Safety Bug Bounty 计划,旨在识别 AI 滥用和安全风险,包括智能体漏洞、提示注入和数据外泄。

OpenAI Blog78

加速 AI 的下一阶段

OpenAI 获得 1220 亿美元新融资,用于在全球扩展前沿 AI、投资下一代计算,并满足对 ChatGPT、Codex 和企业 AI 日益增长的需求。

OpenAI Blog72

Codex 现为团队提供更灵活的定价

Codex 现为 ChatGPT Business 和 Enterprise 提供按量付费定价,为团队提供更灵活的选择,以便开始采用并扩大使用规模。

OpenAI Blog64

OpenAI 收购 TBPN

OpenAI 收购 TBPN,以加速全球围绕 AI 的对话并支持独立媒体,扩大与构建者、企业以及更广泛科技社区的交流。

OpenAI Blog82

推出儿童安全蓝图

了解 OpenAI 的儿童安全蓝图——这是一份负责任地构建 AI 的路线图,通过安全防护、适龄设计和协作,在线保护并赋能年轻人。

OpenAI Blog63

企业 AI 的下一阶段

OpenAI 概述了企业 AI 的下一阶段,随着 Frontier、ChatGPT Enterprise、Codex 以及全公司范围的 AI 智能体在各行业的采用不断加速。

OpenAI Blog68

使用 ChatGPT 创建图像

了解如何使用清晰的提示词通过 ChatGPT 创建和优化图像,迭代设计,并在几分钟内生成高质量视觉内容。

OpenAI Blog39

Healthcare

Explore how clinicians use ChatGPT to support diagnosis, documentation, and patient care with secure, HIPAA-compliant AI tools.

OpenAI Blog47

Learn ChatGPT for Sales Teams

Learn how sales teams use ChatGPT to research accounts, personalize outreach, manage deals, and improve pipeline performance.

OpenAI Blog50

ChatGPT for customer success teams

Learn how customer success teams use ChatGPT to manage accounts, improve communication, reduce churn, and drive adoption and renewals.

OpenAI Blog52

Analyzing data with ChatGPT

Learn how to analyze data with ChatGPT by exploring datasets, generating insights, creating visualizations, and turning findings into actionable decisions.

OpenAI Blog59

ChatGPT for operations teams

Learn how operations teams use ChatGPT to streamline workflows, improve coordination, standardize processes, and drive faster execution.

OpenAI Blog57

AI fundamentals

Learn what AI is, how it works, and how tools like ChatGPT use large language models. A clear, beginner-friendly guide to understanding artificial intelligence.

OpenAI Blog52

ChatGPT for marketing teams

Learn how marketing teams use ChatGPT to plan campaigns, generate content, analyze performance, and move from ideas to execution faster.

OpenAI Blog68

使用自定义 GPT

了解如何构建和使用自定义 GPT 来自动化工作流、保持输出一致,并创建专用的 AI 助手。

OpenAI Blog45

ChatGPT for finance teams

Learn how finance teams use ChatGPT to streamline reporting, analyze data, improve forecasts, and communicate insights more clearly.

OpenAI Blog43

Financial services

Explore AI resources for financial services, including prompt packs, GPTs, guides, and tools to help institutions deploy and scale AI securely.

OpenAI Blog63

在 ChatGPT 中处理文件

了解如何在 ChatGPT 中上传和处理文件,以分析数据、总结文档,以及基于 PDF、电子表格等生成内容。

OpenAI Blog53

Responsible and safe use of AI

Learn how to use AI responsibly with best practices for safety, accuracy, and transparency when using tools like ChatGPT.

OpenAI Blog53

Brainstorming with ChatGPT

Learn how to use ChatGPT to brainstorm ideas, organize thinking, and turn rough concepts into structured, actionable plans.

OpenAI Blog65

使用 ChatGPT 进行研究

了解如何使用 ChatGPT 通过搜索和深度研究来查找最新信息、分析来源并生成结构化洞察。

OpenAI Blog54

Applications of AI at OpenAI

Explore how OpenAI products like ChatGPT, Codex, and APIs bring AI into real-world use for work, development, and everyday tasks.

OpenAI Blog58

ChatGPT for managers

Learn how managers use ChatGPT to prepare for conversations, write clear feedback, stay organized, and improve team effectiveness.

OpenAI Blog64

在 ChatGPT 中使用项目

了解如何在 ChatGPT 中使用项目来整理聊天、文件和指令,管理持续进行的工作,并更高效地协作。

OpenAI Blog69

使用技能

了解如何创建和使用 ChatGPT 技能,以构建可复用的工作流、自动执行重复性任务,并确保输出始终保持高质量。

OpenAI Blog68

个性化 ChatGPT

了解如何使用自定义指令和记忆来个性化 ChatGPT,以获得更相关、一致且量身定制的回复。

OpenAI Blog62

使用 ChatGPT 进行写作

了解如何使用 ChatGPT 进行写作,以清晰的结构、语气和意图来起草、修改和完善内容。

OpenAI Blog64

用于研究的 ChatGPT

了解如何使用 ChatGPT 进行研究,以收集来源、分析信息,并创建结构化、有引用支持的见解。

OpenAI Blog74

面向网络防御新时代的可信访问

随着 AI 网络安全能力不断提升,OpenAI 扩展了其 Trusted Access for Cyber 计划,向经过审核的防御者推出 GPT-5.4-Cyber,并加强安全防护措施。

OpenAI Blog81

Agents SDK 的下一次演进

OpenAI 更新了 Agents SDK,加入原生沙箱执行和模型原生测试框架,帮助开发者跨文件和工具构建安全、长时间运行的智能体。

OpenAI Blog82

Codex 可用于(几乎)一切

适用于 macOS 和 Windows 的新版 Codex 应用新增了计算机使用、应用内浏览、图像生成、记忆和插件功能,以加速开发者工作流程。

OpenAI Blog86

将 Codex 扩展到全球企业

OpenAI 推出 Codex Labs,并与 Accenture、PwC、Infosys 等合作,帮助企业在整个软件开发生命周期中部署和扩展 Codex,同时 Codex 周活跃用户数达到 400 万。

OpenAI Blog86

推出 ChatGPT Images 2.0

ChatGPT Images 2.0 推出了一款最先进的图像生成模型,具备改进的文本渲染、多语言支持和高级视觉推理能力。

OpenAI Blog79

Introducing OpenAI Privacy Filter

OpenAI Privacy Filter 是一个开放权重模型,用于以最先进的准确率检测和编辑文本中的个人身份信息(PII)。

OpenAI Blog78

在 ChatGPT 中引入 workspace agents

ChatGPT 中的 workspace agents 是由 Codex 驱动的 agents,可自动化复杂工作流,在云端运行,并帮助团队安全地跨工具扩展工作。

OpenAI Blog73

工作区智能体

了解如何在 ChatGPT 中构建、使用和扩展工作区智能体,以自动化可重复的工作流程、连接工具并简化团队运营。

OpenAI Blog81

让 ChatGPT 更好地服务临床医生

OpenAI 向经过验证的美国医生、执业护士和药剂师免费提供 ChatGPT for Clinicians,支持临床诊疗、文档记录和研究。

OpenAI Blog86

推出 GPT-5.5

推出 GPT-5.5,这是我们迄今最智能的模型——速度更快、能力更强,专为跨工具的编码、研究和数据分析等复杂任务而打造。

OpenAI Blog73

用于编排的开源规范:Symphony

了解 Symphony 这一用于 Codex 编排的开源规范如何将问题跟踪器转变为始终在线的智能体系统——提升工程产出并减少上下文切换。

OpenAI Blog57

Our commitment to community safety

Learn how OpenAI protects community safety in ChatGPT through model safeguards, misuse detection, policy enforcement, and collaboration with safety experts.

OpenAI Blog78

智能时代的网络安全

OpenAI 概述了一项由五部分组成的行动计划,旨在加强智能时代的网络安全,重点是普及由 AI 驱动的网络防御并保护关键系统。

OpenAI Blog73

为智能时代构建计算基础设施

OpenAI 扩展 Stargate,以构建为 AGI 提供动力的计算基础设施,并新增数据中心容量以满足不断增长的 AI 需求。

OpenAI Blog83

哥布林从何而来

哥布林输出如何在 AI 模型中传播:GPT-5 行为中由个性驱动的怪癖背后的时间线、根本原因和修复措施。

OpenAI Blog83

购买 ChatGPT 广告的新方式

OpenAI 通过 beta 版自助 Ads Manager、CPC 竞价和增强型衡量工具扩展 ChatGPT 广告——旨在保护隐私,并将对话与广告分离。

OpenAI Blog70

推进 EMEA 青少年的安全与福祉

了解 OpenAI 的欧洲青少年安全蓝图以及 EMEA 青少年与福祉资助计划,推动面向青少年、家庭和教育工作者的安全、负责任的 AI。

OpenAI Blog63

前沿企业如何领先一步

OpenAI 的 B2B Signals 研究显示,前沿企业如何深化 AI 采用、扩展由 Codex 驱动的智能体工作流,并构建持久的竞争优势。

OpenAI Blog50

Introducing ChatGPT Futures: Class of 2026

Meet the ChatGPT Futures Class of 2026—26 student innovators using AI to build, research, and drive real-world impact. Discover how this generation is redefining learning, creativity, and opportunity with ChatGPT.

OpenAI Blog81

在 ChatGPT 中推出 Trusted Contact

在 ChatGPT 中推出 Trusted Contact,这是一项可选的安全功能,当检测到严重自残风险时,会通知你信任的人。

OpenAI Blog87

在 OpenAI 安全运行 Codex

OpenAI 如何通过沙盒、审批、网络策略和面向智能体的原生遥测,安全地运行 Codex,以支持安全且合规地采用编码智能体。

OpenAI Blog70

ChatGPT 的采用在 2026 年初如何扩大

2026 年第一季度,ChatGPT 的采用率激增,其中 35 岁以上用户增长最快,性别使用比例也更加均衡,这表明 AI 正在更广泛地进入主流应用。

OpenAI Blog55

How finance teams use ChatGPT Work

See how finance teams can use ChatGPT Work to build MBRs, reporting packs, variance bridges, model checks, and planning scenarios from real work inputs.

OpenAI Blog86

我们对 TanStack npm 供应链攻击的回应

OpenAI 详细介绍了其对 TanStack “Mini Shai-Hulud” 供应链攻击的响应,概述了为保护系统和签名证书所采取的防护措施,并解释了为什么 macOS 用户必须在 2026 年 6 月 12 日前更新 OpenAI 应用。了解事件经过、受影响范围,以及 OpenAI 如何加强防御以应对不断演变的软件供应链威胁。

OpenAI Blog68

随时随地使用 Codex

通过 ChatGPT 移动应用在任何地方使用 Codex。跨设备和远程环境实时监控、引导并批准编码任务。

OpenAI Blog80

ChatGPT 中全新的个人理财体验

面向美国 Pro 用户,预览 ChatGPT 中全新的个人理财体验。安全连接你的金融账户,并获得基于你的财务背景、目标和优先事项的 AI 驱动洞察与指导。

OpenAI Blog54

How business operations teams use ChatGPT Work

See how business operations teams can use ChatGPT Work to create initiative briefs, strategy updates, leadership decision packets, progress updates, and more from real work inputs

OpenAI Blog77

推出 OpenAI for Singapore

OpenAI for Singapore 启动一项多年期 AI 合作伙伴关系,以扩大部署、培养本地人才,并通过 AI 支持企业和公共服务。

OpenAI Blog56

How Virgin Atlantic ships faster with Codex

How Virgin Atlantic used Codex to ship its revamped mobile app on a fixed holiday travel deadline, reaching near-total unit test coverage and zero P1 defects.

OpenAI Blog68

OpenAI 的前沿治理框架

探索 OpenAI 的前沿治理框架,以及我们的 AI 安全、安保和风险实践如何与新兴的欧盟和加利福尼亚州法规保持一致。

OpenAI Blog81

通过 Rosalind Biodefense 增强社会韧性

OpenAI 推出 Rosalind Biodefense,扩大经审核的开发者和美国政府合作伙伴对 GPT-Rosalind 的可信访问,借助前沿 AI 推进生物防御、公共卫生和大流行病防范。

OpenAI Blog85

OpenAI 前沿模型和 Codex 现已在 AWS 上可用

OpenAI 前沿模型和 Codex 现已在 AWS 上正式可用,为企业提供了一条通过其已在使用的 AWS 环境、控制措施和采购流程来使用 OpenAI 进行构建的新路径。客户可以在 AWS 上开始使用 OpenAI,并更快地从评估推进到生产。

OpenAI Blog76

在 Michigan 建设智能时代的基础设施

作为 Stargate 的一部分,OpenAI 在 Michigan 启动了一个 1GW 数据中心项目,建设 AI 基础设施以扩大使用机会、创造就业并支持社区。

OpenAI Blog69

ChatGPT Sites

用 Codex 创建那种轻量级网站或应用。

OpenAI Blog72

OpenAI 公共政策议程

OpenAI 概述了其 AI 公共政策议程,包括安全、青少年保护、劳动力转型和全球标准,以确保 AI 造福社会。

OpenAI Blog79

前沿 AI 民主治理蓝图

OpenAI 概述了美国前沿 AI 治理蓝图,提出了一个涵盖安全、韧性和国家安全的联邦框架。

OpenAI Blog72

推出 GPT-Rosalind 的新功能

GPT-Rosalind 通过增强的生物学推理、药物化学专业知识、基因组学分析和实验工作流程能力,推动生命科学研究。

OpenAI Blog78

推出 OpenAI 经济研究交流平台

OpenAI 推出经济研究交流平台,以研究 AI 对就业、生产力和经济的影响。现已开放精选研究项目的申请。

OpenAI Blog59

What Codex unlocks for Notion

How Notion uses Codex to one-shot specs, build AI Voice Input for the web, and multiply engineering power across small teams.

OpenAI Blog80

OpenAI 将收购 Ona

OpenAI 计划收购 Ona,以通过安全、持久的云环境扩展 Codex,从而在企业工作流中支持长时间运行的 AI 代理。

OpenAI Blog83

推出 OpenAI Partner Network

OpenAI 推出 Partner Network,投资 1.5 亿美元帮助全球合作伙伴加速企业 AI 的采用、部署与转型。

OpenAI Blog72

提升 ChatGPT 中的健康智能

了解 GPT-5.5 Instant 如何通过更强的推理能力、更好的上下文理解、更清晰的沟通,以及由医生参与制定的评估,改进 ChatGPT 在健康与 wellness 方面的回答。

OpenAI Blog57

Codex-maxxing for long-running work

Learn how Jason Liu uses Codex to preserve context, manage complex projects, and help work continue beyond a single prompt.

OpenAI Blog69

智能体如何改变工作

一篇新的 OpenAI 研究论文展示了 AI 智能体如何改变工作,使更长、更复杂的任务成为可能,并在各类岗位中提升生产力。

OpenAI Blog80

预览 GPT-5.6 Sol:下一代模型

OpenAI 预览 GPT-5.6 Sol,这是一款在编码、科学和网络安全方面具备更强能力的下一代模型,并配备其最先进的安全技术栈。

OpenAI Blog79

绘制欧洲 AI 劳动力机遇图谱

一份新的 OpenAI 报告描绘了 AI 可能如何重塑整个欧盟的就业,重点指出哪些职业可能面临自动化、增长或工作流程变化。

OpenAI Blog67

ChatGPT 的采用如何扩大

新的 OpenAI Signals 数据显示,ChatGPT 的采用正在全球范围内增长,用户使用量不断增加,探索更多功能,并推动各地区和各语言的增长。

OpenAI Blog78

介绍 GPT-Live

新一代语音模型,专为自然的人类与 AI 交互而打造,现已为 ChatGPT Voice 提供支持。

OpenAI Blog76

在编码评估中分离信号与噪声

OpenAI 的一项新分析揭示了流行编码基准 SWE-Bench Pro 中存在的问题,引发了对评估 AI 模型时可靠性和准确性的担忧。

OpenAI Blog61

Getting started with ChatGPT

Learn how to use ChatGPT, start your first conversation, and discover simple ways to write, brainstorm, and solve problems with AI.

OpenAI Blog59

How sales teams use ChatGPT Work

See how sales teams can use ChatGPT Work to create pipeline briefs, meeting prep packets, forecast reviews, account plans, and stalled-deal diagnoses from real work inputs.

OpenAI Blog56

How data science teams use ChatGPT Work

See how data science teams can use ChatGPT Work to build root-cause briefs, impact readouts, KPI memos, scoped analyses, and dashboard specs from real work inputs.

OpenAI Blog80

AI 时代的记分卡

OpenAI 首席财务官 Sarah Friar 介绍了一种实用的 AI 记分卡,用于通过有用工作、每项成功任务的成本、可靠性和算力回报来衡量投资回报率。

OpenAI Blog84

长周期模型时代的安全与对齐

OpenAI 分享了部署长时间运行 AI 模型的经验,重点介绍了新的安全风险、观察到的失效情况,以及通过迭代部署改进的安全防护措施。

OpenAI Blog77

推出 OpenAI Presence

推出 OpenAI Presence,这是一个经过验证的企业 AI 智能体平台,可帮助组织为客户和内部工作流程部署可信赖的语音和聊天智能体。

OpenAI Blog72

推进国家科学的下一个时代

OpenAI 概述了其致力于推进美国科学的承诺,将与 U.S. Department of Energy 和国家实验室合作,利用前沿 AI 加速发现。

OpenAI Blog83

在 ChatGPT 中推出 Health

ChatGPT 中的 Health 现在可让符合条件的美国用户安全地连接医疗记录和 Apple Health,以获得更个性化的洞察,并更好地了解自己的健康状况。

OpenAI Blog79

用 GPT-5.6 推进价格性能前沿

了解 Luna 和 Terra 更低的 GPT‑5.6 定价,以及 OpenAI 更高效的模型如何帮助企业大规模部署 AI 工作流。

OpenAI Blog70

破坏一起犯罪诈骗行动

OpenAI 破坏了一个位于柬埔寨的诈骗行动,该行动利用 ChatGPT 支持投资、恋爱、赌博和冒充身份骗局。

OpenAI Blog48

Univé builds an AI-ready workforce

See how Univé built an AI-ready workforce with ChatGPT Enterprise by combining leadership, responsible governance, and employee-led innovation to transform work at scale.

OpenAI Blog56

Advancing responsible AI across Europe

OpenAI shares how its safety, security, transparency, and provenance practices support responsible AI governance in Europe. The work will continue as the EU AI Act advances.

OpenAI Blog76

Apple 这次搞错了

OpenAI 回应 Apple 毫无根据的诉讼,纠正有关其员工的说法,并分享记录事件经过的消息。

OpenAI Blog57

Premium seats are coming to ChatGPT Business

Premium seats are coming to ChatGPT Business. Sign up by August 20 to get $100 in workspace credits and unlock higher usage for your team's most demanding work.

OpenAI Blog65

构建 AI 原生财务职能教会我的事

OpenAI 首席财务官 Sarah Friar 分享了构建 AI 原生财务职能的五点经验,涵盖从自动化预测到更强的控制以及 AI 投资回报率。

OpenAI Blog86

在 ChatGPT 中测试广告

OpenAI 开始在 ChatGPT 中测试广告,以支持免费访问,并提供清晰标注、答案独立性、强有力的隐私保护和用户控制。

OpenAI Blog74

GPT-5.6 构建者指南

了解初创公司如何使用 GPT-5.6,通过更智能的模型选择和新的 Responses API 功能,更快速、更具成本效益地构建 AI 智能体。