Skip to main content
Search

Xi'an Jiaotong University

11 related articles

Subscribe to updates
  1. arXiv

    A shared target for cross-lingual jailbreaks: a safety kernel of 0.12% of neurons lets masked fine-tuning cut attack success in many languages

    Large language models refuse the same harmful request in one language but may comply when it is rephrased in another. Researchers first identified safety-related neurons independently within each language, then took the intersection of the candidate sets from six languages to obtain a cross-lingually shared "safety kernel," and tested its functional role with activation suppression and activation-state transfer. Building on it, SK-Masked LoRA restricts fine-tuning updates to the feed-forward network output dimensions corresponding to the safety kernel, lowering attack success rates across several models and multilingual safety benchmarks, with some effect on languages excluded from kernel discovery.

  2. arXiv

    Pathology agents stop answering one slide at a time: PlanPath turns a question into an exploration plan and reaches 72.71% total accuracy on renal cancer

    A pathology case often spans dozens of slides from different specimens, yet existing pathology agents analyze one slide at a time and describe morphology rather than measure it. PlanPath turns a diagnostic question into an exploration plan, routes to the slides likely to carry the evidence, then zooms from tissue architecture down to cells for counts and proportions, aggregating cross-slide evidence into a traceable answer. On patient-level renal and gastric cancer datasets, PlanPath reaches total accuracy of 72.71% and 60.24%, 12.14 and 9.43 percentage points above the strongest baseline.

  3. arXiv

    Remote-sensing fusion stops optimizing pixels alone: Lance closes a text loop and lifts detection mAP by 6.4 on a held-out detector

    Remote-sensing image fusion and semantic interpretation have usually been optimized separately, so good fusion metrics need not preserve downstream retrieval or detection utility. Lance maps each input to a closed-vocabulary text record of scene, objects and layout, conditions fusion on that language, re-describes the fused image as text, and back-propagates through text consistency and an anti-collapse text–mask contrastive loss with negative queries. Across seven test sets on GF2, QuickBird, WorldView-III and WorldView-II, reduced-scale reference metrics improve by up to 11.7% (median 2.1%) over the strongest learning baseline, and a held-out RemoteCLIP verifier plus a supervised DOTA detector give +6.4 mAP@0.5 over the closest competitor.

  4. Kohn–Sham Hamiltonian learning adds state-space supervision: total-energy error on ∇2DFT falls to one five-hundredth of the strongest baseline

    Machine-learned Kohn–Sham Hamiltonians trained only on matrix-element error leave large errors in derived electronic properties, because the operator-to-state mapping is highly anisotropic. DSHam adds supervision on the density matrix, real-space electron density and occupied orbital energies obtained by solving the predicted Hamiltonian. On the ∇2DFT benchmark, electron-density and total-energy errors drop by factors of 40 and 500 relative to the strongest competing method, and the model extrapolates to molecules with twice the training heavy-atom count.

  5. arXiv

    Reasoning models learn where to stop: LoCo cuts math completions by 41.7%–45.4% by training only the continue-or-conclude choice

    Large reasoning models often keep deliberating after enough information is available, raising decoding latency and memory cost. LoCo moves the compression decision to individual reasoning states: it finds candidate overthinking states in the model's own traces, freezes that prefix, regenerates shorter continuations whose answers verify as correct, and learns a continue-or-conclude preference with DPO. Across five math benchmarks, completion length drops 41.7%–45.4% while accuracy holds or improves; trained on math only, the same model cuts length by 23.4%–36.3% on three code benchmarks.

  6. arXiv

    Streaming predictions need not reread history: ReMAQ turns model-averaging updates into one quadratic program per batch

    In real-time prediction over streaming data, an investigator often holds several generalized linear models at once, while model averaging is typically a convex optimization over all historical data. ReMAQ replaces that procedure with a quadratic approximation, so when a new batch arrives the averaged prediction is updated sequentially by solving one quadratic program, without accessing the entire history. Under regularity conditions its weights are asymptotically equivalent to oracle model averaging built on the inaccessible full data, which establishes asymptotic optimality; simulation studies and an application to the Airline On-Time Performance Dataset assess the method.

  7. arXiv

    Ego2World compiles egocentric cooking videos into executable planning environments, where six planners on 105 tasks often had accepted operations leave goals unmet

    The authors introduce Ego2World, a benchmark that compiles annotated cooking activities into executable planning environments under partial observation, linking source steps and objects to symbolic action rules, persistent world states, and explicit task conditions while maintaining world state and agent belief separately; evaluating six planners on 105 tasks shows accepted operations often leave task goals unmet, and execution traces and condition checks distinguish interrupted runs, partial attainment, and completed execution without goal attainment; in a separate paired Qwen-Plus study, persistent belief improves action validity by 4.15 percentage points and reduces visual-query attempts by 90.27%, with higher token use and no detected completion gain.

  8. arXiv

    Theoretical analysis of sparse attention: JS divergence is fixed by truncation mass alone, information loss grows with sequence length, and generalization bounds tighten with sparsity

    This work presents a unified theoretical analysis of sparse attention: it proves that the Jensen–Shannon divergence between full and sparse attention is determined solely by the discarded truncation mass with a closed-form expression, uses order statistics under i.i.d. sub-Gaussian attention-score assumptions to show that the high-probability lower bound on truncation mass increases with sequence length, and derives sparsity-tightened generalization bounds via Rademacher complexity and a Xu–Raginsky mutual-information bound with entropy and covering-number analysis, verifying the closed-form divergence and the growth of information loss on GPT-2 (124M) with WikiText-103.

  9. arXiv

    EngiWorld tests 1,301 real engineering tasks and finds the strongest model reaches only 44.3 EngiScore, with 3.6% success on multi-software attempts

    The authors built EngiWorld, a benchmark structured around the complete engineering design loop, with 1,301 expert-curated tasks across 6 domains (CAD, CAE, CAM, BIM, EDA, and 3D visualization) and 26 professional software platforms, evaluated through a unified domain-verifier suite that checks geometric validity, physical feasibility, and rule compliance of final and intermediate artifacts; across seven frontier models the strongest reaches an EngiScore of only 44.3, and just 3.6% of multi-software attempts succeed.

  10. arXiv

    LT-OPD uses on-policy self-distillation on its own generated trajectories to lift average retained performance at 5% visual tokens from 68.6% to 82.3%

    The work proposes LT-OPD, which supervises a student keeping only 5% of visual tokens on its own generated trajectories using a frozen full-token copy of the same model as teacher, together with a curriculum that progressively lowers the token budget, raising average retained performance on nine benchmarks with Qwen3.5-4B from 68.6% to 82.3% while cutting KV cache by 85.2% and prefill FLOPs by 85.4% with no added inference overhead.