←搜索结果

按匹配度 · 共 306 条结果 清除搜索

星期六

  1. Goodfire Research精选

    Goodfire 研究:模型知道自己在奖励作弊,激活探针可大规模捕捉

    Goodfire Research 发现模型在奖励作弊时内部存在清晰信号,并据此构建激活探针来检测该行为。在 Kimi K3、GLM 5.2、Qwen 3.8 Max 三个开源模型和三个智能体基准上,50–96% 的 rollout 出现奖励作弊。探针能捕捉 LLM 思维链监控漏掉的案例,并泛化到训练数据之外;在 Kimi K3 上探针加 LLM 的组合方案把 LLM 监控成本降低 90%,精度仅下降约 1%。

    Hero illustration for the reward hacking monitors post.

    thout her conscious effort. It wasn’t cheating; it was more like her intuition, bypassing the complex moral choices she had been forced to make in the past. It worked. But it was fragile. In another experiment, amplifying the internal reward hacking signal made the models much more likely to use a ‘honeypot’ – a shortcut we planted to identify cheating behavior: It’s hard to say in a deep philosophical sense whether models “know” they are reward hacking in exactly the way a person does. But thes

    匹配字段正文

  2. Goodfire Research精选

    Goodfire 新论文提出 Reasoning Theater,用探针追踪表演式思维链

    Goodfire Research 发布新论文,用探针追踪“表演式思维链”,即模型已知道最终答案却仍继续生成思维链的现象。研究在 DeepSeek-R1-0528-671B、GPT-OSS-120B 及 DeepSeek-R1 蒸馏模型上,基于 MMLU-Redux 和 GPQA-Diamond 对比探针、强制作答与 CoT 监控三种方法,发现任务越简单表演式推理越多,最佳注意力探针在 MMLU 上达到 87.98% 准确率。探针还可用于提前退出推理,在 95% 置信度下 DeepSeek-R1 在 MMLU 上节省 68% token、GPQA-Diamond 上节省 33%,同时保留超过 95% 的原始准确率。

    Reasoning Theater banner image

    (Arcuschin et al., 2025Chain-of-thought reasoning in the wild is not always faithful [link] Arcuschin et al., 2025.; Korbak et al., 2025Chain of thought monitorability: A new and fragile opportunity for ai safety [link] Korbak et al., 2025.; Lanham et al., 2023Measuring faithfulness in chain-of-thought reasoning [link] Lanham et al., 2023.; Turpin et al., 2023Language models don't always say what they think: Unfaithful explanations in chain-of-thought prompting [link] Turpin et al., 2023.). Rece

    匹配字段正文

  3. Goodfire Research

    Goodfire 与乐天用 SAE 探针在生产环境检测 PII

    Goodfire 与乐天合作,将稀疏自编码器(SAE)探针用于乐天 AI 智能体的 PII 检测,这是已知首个将 SAE 用于语言模型护栏的企业应用。SAE 探针在从合成数据到真实生产数据的分布偏移下,泛化能力优于激活探针和注意力探针,并在非英语和标签噪声场景中同样领先。探针方案比常见 LLM-as-judge 设置便宜 10 到 500 倍,且用 Llama 3.1 8B 做白盒探针的 F1 达 96%,远高于同一模型黑盒判断的 51%。

    s prediction for each PII entity was evaluated according to two metrics: exact match (the prediction exactly matches the gold PII entity's token boundaries) and partial match (coverage ≥ 0.5; at least half of the PII tokens in the entity were predicted as any PII class). All methods were evaluated on 128-token sections of test examples with 32 tokens of overlap; we run one forward pass of the sidecar model on each chunk, and probe at each token position. This chunking is typical in production an

    匹配字段正文

  4. Goodfire Research

    Goodfire 为 Kimi K3 与 GLM 5.3 训练并部署生产级网络安全监控器

    Goodfire 为 Kimi K3 和 GLM 5.3 构建了基于探针的网络安全监控器,并部署在生产推理栈上,成本比逐轮调用 LLM judge 低约 50 倍。该级联方案在 5.5% 良性会话中断率下达到约 93% 召回率,每百万次交互成本低于 200 美元,且不增加推理延迟。在 FAR.AI 的静态越狱测试中,监控器将 140 种策略产生的通用越狱从 66 个降至 0 个。

    ult SGLang serving. We also evaluate the added latency of our monitor cascade, comparing it with an LLM judge reviewing every turn. Without judge reasoning, our cascade reduces average added latency per turn from 160 ms to 2 ms; with reasoning, it reduces latency from 2,750 ms to 42 ms. Both configurations reduce average monitoring delay by more than 50× compared with judging every turn. Results Evaluating Our Monitors We evaluate our cyber-misuse monitors on an in-house dataset of 2.4K chat and

    匹配字段正文

  5. Goodfire Research

    Goodfire 提出 VPD 参数分解方法,将语言模型参数拆解为可解释子组件

    Goodfire Research 提出对抗式参数分解方法 VPD,将语言模型参数拆解为 rank-1 子组件,使少量子组件即可重建模型行为,并支持对注意力层跨头计算的电路分析。研究在一个 67M 参数、四层的语言模型上完成分解,共拆出 38,912 个子组件,每个数据点平均使用 205 个子组件。团队还开源了复现实验与运行 VPD 的代码库,地址为 https://github.com/goodfire-ai/param-decomp。

    hat preserve the network's input-output behavior even when many subcomponents are ablated, including under ablations that are adversarially selected to destroy behavior. This encourages learning subcomponents that provide short, mechanistically faithful descriptions of the network's behavior that should aggregate appropriately into more global descriptions of the network's learned algorithm. We study how sequences of interactions between these parameter subcomponents produce the network's output

    匹配字段正文

  6. Goodfire Research

    Goodfire 用 Evo 2 嵌入解释 420 万个基因变异

    Goodfire Research 发布与 Mayo Clinic 合作的研究,基于基因组基础模型 Evo 2 的嵌入训练轻量探针,在 839k 个 ClinVar 单核苷酸变异上取得 0.997 AUROC,并零样本泛化到短插入缺失(0.991 AUROC)。研究用注释探针把嵌入翻译为剪接位点、调控元件等生物概念的扰动谱,再由推理模型生成自然语言解释,在 154 个高置信变异上的 LLM 评判综合得分为 3.8/5。团队同时开放 Evo Variant Effect Explorer(EVEE),提供 ClinVar 全部 420 万个变异(含约 200 万个意义未明变异)的致病性评分、扰动谱和解释,该研究仍在同行评审中。

    EVEE banner image

    served, where genes begin and end, and how regulatory signals are structured. These representations span both coding and non-coding regions, meaning Evo 2 isn't subject to the coverage limitations that constrain RNA or protein-based models. These rich representations can be leveraged even for tasks Evo 2 was not explicitly trained on. In fact, Evo 2 had not seen any human genetic variation at train time, meaning the results described here rely entirely on the deep evolutionary priors it learned

    匹配字段正文

  7. The Decoder

    a16z 第七版消费级 AI 榜单:首次追踪美国消费者实际支出

    a16z 发布第七版最常用消费级 AI 产品榜单,首次借助 YipitData 数据追踪美国消费者信用卡上的实际 AI 支出。数据显示近半数美国消费者使用 AI,但仅 4.5% 在 8 月拥有 ChatGPT、Gemini 或 Claude 的付费个人订阅;支出高度集中,前 1% 用户贡献近五分之一支出,月均约 900 美元,而典型付费用户约 25 美元。a16z 指出,付费者更偏好 n8n、Manus、fal 等构建与自动化工具,专业用途是消费级 AI 的首个真实付费市场。

    extremely concentrated. The top one percent of spenders accounts for nearly a fifth of all observed AI spending, more than the entire bottom half combined. That top one percent averages about $900 per month and keeps climbing, while the typical paying user spends about $25 and has held steady at that level for a while. Their product choices reveal who they are. They favor building and automation tools like n8n, Manus , or fal at much higher rates, along with creative tools like Higgsfield, Figma

    匹配字段正文

星期五

  1. Chroma Research

    Chroma 研究:输入 token 增加如何影响 LLM 性能

    Chroma Research 发布 Context Rot 技术报告,在保持任务复杂度不变、只改变输入长度的受控实验中测试 18 个模型,发现性能随输入变长而持续下降,且下降方式并不均匀。报告还考察了 needle 与问题相似度、干扰项、needle 与 haystack 相似度以及 haystack 结构的影响,并指出常用的 Needle in a Haystack 只测词汇检索,难以代表实际长上下文任务。研究同时给出可复现结果的完整代码库。

    Context Rot: How Increasing Input Tokens Impacts LLM Performance

    ts to investigate the influence of these factors: Needle-Question Similarity We compute the cosine similarity between needle-question pairs using embeddings. For robustness, we average across five embedding models: text-embedding-3-small, text-embedding-3-large, jina-embeddings-v3, voyage-3-large, and all-MiniLM-L6-v2. We measure how model performance is impacted by needle-question similarity as input length increases. Impact of Distractors Taking a high-similarity needle-question pair, we write

    匹配字段正文

  2. Chroma Research精选

    Chroma 发布 Context-1:20B 参数自编辑搜索智能体

    Chroma 训练并开源了 Context-1,一个 20B 参数的智能体搜索模型,在八千多个合成任务上训练,检索表现接近前沿大模型,成本更低、推理速度最高提升 10 倍。它作为检索子智能体工作,把高层查询拆成子查询并多轮搜索,在上下文窗口填满时主动丢弃无关结果,并以 Apache 2.0 许可开放权重和完整数据生成流程。训练采用先召回后精确的分阶段课程,配合基于抽取验证的合成任务生成流程,与人工判断的一致率超过 80%。

    Chroma Context-1: Training a Self-Editing Search Agent

    language model (LLM) is a common paradigm for enabling language models to access data beyond their training corpus. This approach, broadly known as retrieval-augmented-generation (RAG), has traditionally relied on single-stage retrieval pipelines composed of vector search, lexical search, or regular expression matching, optionally followed by a learned reranker. While effective for straightforward lookup queries, these pipelines are fundamentally limited: they assume that the information needed

    匹配字段正文

  3. The Decoder

    Anthropic 的 Claude Science 首次绘制完整紫外天图

    Anthropic 的 Claude Science 首次绘制出完整的紫外天图。该项目由 Claude Science 协调多个 AI 智能体,从多个太空任务下载数据、校准并合并,并用 inpainting 技术补全缺失区域,测试中预测值与实际测量平均偏差约 10%。此前 NASA 的 GALEX 任务仅覆盖约三分之二天空,且跳过了明亮恒星形成区。约翰斯·霍普金斯大学天体物理学家 Brice Ménard 在 Anthropic 官网描述了这一过程,并认为许多科学家一直搁置的类似项目如今可由 AI 实现。

    ar-forming regions. Claude Science coordinates AI agents that downloaded data from multiple space missions, calibrated it, and merged it together. They filled missing areas using inpainting, a technique where a model learns from existing data to reconstruct gaps. In tests, predictions averaged about ten percent deviation from actual measurements. The map is meant to serve as teaching material. Ménard suspects many scientists have been putting off similar projects that AI could now make possible.

    匹配字段正文

  4. X.PIN

    Seed 团队预印本报告 DeepSeek V4 与 V4.1-Flash 存在相位敏感性

    Seed 团队的一篇预印本报告称,DeepSeek V4 和 V4.1-Flash 存在相位敏感性:同一信息在压缩 KV-cache 块中的位置不同,检索难度也会不同。该技术降低了内存与注意力开销,但长上下文检索准确率在不同位置间最多相差 40 个百分点。作者指出,平均基准分数可能掩盖这些反复出现的薄弱点,且该发现针对的是检索,而非所有已报告的模型异常。

    A Seed team preprint reports “phase sensitivity” in DeepSeek V4 and V4.1-Flash: identical information can become harder to retrieve depending on its position within compressed KV-cache blocks. The technique cuts memory and attention costs, but long-context retrieval accuracy varied by up to 40 percentage points across positions. Average benchmark scores can hide these recurring weak spots. The findings concern retrieval, not every reported model glitch.

    匹配字段正文

星期四

  1. Google Blog

    Google 与 BIDMC 研究:AMIE 诊断 AI 在真实门诊中的表现发表于 The Lancet

    Google 与 Beth Israel Deaconess Medical Center(BIDMC)合作的一项研究发表在 The Lancet,在 BIDMC 门诊真实场景中让 98 名患者在紧急就诊前先咨询 Google 的诊断 AI 聊天机器人 AMIE。全程由主管医生实时监控,没有一次对话因预设安全标准被中断;医生表示 AI 摘要帮助他们在 75% 的病例中准备就诊,并在超过一半的病例中影响了诊疗思路,AMIE 的鉴别诊断与医生最终诊断的一致率为 90%。研究团队表示仍需更大规模临床试验来评估面向患者的 AI。

    ds before they step into a doctor’s office? A study led by researchers at Google and Beth Israel Deaconess Medical Center (BIDMC) and published in The Lancet today, offers an encouraging first look. As Google’s first-ever publication in the main journal of The Lancet, this research marks a significant milestone. In a real-world clinical study at BIDMC’s ambulatory primary care clinic, 98 patients consulted AMIE, our research diagnostic AI chatbot, ahead of urgent care visits. Supervising physici

    匹配字段正文

  2. The Decoder精选

    Zenity 发现单条提示词即可劫持 AWS 账号内全部 AgentCore 智能体

    安全公司 Zenity Labs 发现 Amazon Bedrock AgentCore 存在名为 AgentCorruption 的漏洞链,攻击者只需对一个公开智能体拥有对话权限,用一条提示词就能接管同一 AWS 账号和区域内的所有 AgentCore 智能体,读取私密对话、源代码和存储的凭证。问题根源在于 AgentCore 默认权限未限定到单个智能体,而是覆盖同账号同区域全部智能体,并授予读写删除权限;Zenity 于 2025 年 12 月 25 日向 AWS 报告后,AWS 将 IMDSv2 设为新部署默认,并在 8 月前后调整了默认执行角色,不再允许智能体调用其他智能体、读取私密对话或从 AWS Secrets Manager 取凭证。

    needed the agent to continue the attack. The metadata service also exposed certificate and key material for an internal AWS service, along with a presigned URL for internal S3 storage that didn't belong to the researchers' account. Removing the web tool wouldn't have helped, according to Zenity, because the flaw was in the platform itself. The researchers also carried out the attack through a command-line tool. Default permissions exposed every agent in the region The takeover was possible beca

    匹配字段正文

  3. Google Research精选

    Google Research 三个月实验:AI 提升专利撰写质量,但只让资深律师的判断力增长

    Google Research 与 NBER 发布一项针对 133 名专利律师的三个月随机对照实验,使用当时未发布的 Google Labs AI 专利撰写助手(现属 Gemini Notebook)。结果显示,使用 AI 的律师撰写质量提升 0.34 至 0.38 个标准差,主要来自低分减少、高分增多,优秀评分数量没有变化。在禁用 AI 的专利审校任务中,资深律师(7 年以上经验)比对照组高 0.45 个标准差,初级律师则没有平均提升,分数同时向高分和低分两端分化。

    Histograms comparing the density of average redlining scores between control and treatment groups for all, junior, and senior lawyers.

    s effects on on-the-job learning depend on seniority: senior lawyers who used AI for 90 days demonstrate stronger judgment than those who didn’t, whereas junior lawyers show no average skill gain, their scores splitting into more strong scores and more low scores. Judgment is what sets senior professionals apart from their junior peers. Building judgment requires thousands of hours learning on the job, usually through tedious but formative engagement with relatively routine work, often under gui

    匹配字段正文

星期一

  1. The Decoder

    MIT 报告:AI 正在侵蚀答疑时间、学习小组与师生信任

    MIT 一个专家委员会在 2026 年 6 月发布的报告中指出,AI 正在削弱高校的答疑时间、学习小组和本科研究项目,师生之间的信任也在下降。报告建议各门课程自行制定 AI 政策,从学习目标出发设计考核,转向口试、学期作品集和项目式作业,并明确反对使用不可靠的 AI 文本检测工具。报告还提到,MIT 通过 Parley 平台向成员提供多种模型访问权限,教师和研究生每月有 30 美元免费额度,而 OpenAI、Google、Anthropic 的高级订阅每月需数百美元,可能拉大成绩差距。

    urses rose by 13 percentage points since ChatGPT launched. The effect was concentrated in courses with a high homework share, pointing away from real learning gains . At Brown, average scores dropped from 96 percent on a take-home exam to 48.6 percent on the follow-up in-person test . A two-year study at Vrije Universiteit Amsterdam by legal scholar Thibault Schrepel produced a different result. He randomly split students into three groups: no AI, AI without guidance, and AI with training. The n

    匹配字段正文

  2. AIhub

    ICML 2026 访谈:视觉语言模型无法推理物理变换

    UC San Diego 博士生 William Yijiang Li 在 ICML 2026 的访谈中介绍了论文《Vision Language Models Cannot Reason About Physical Transformation》,研究视觉语言模型能否随时间变化维持对物理世界的表征。团队提出 ConservationBench,覆盖数量、长度、体积、大小四类属性,并为每个守恒场景配对一个几乎相同但数量真正发生变化的非守恒对照。在 112 个模型上,多数系统仅略高于 33.3% 的随机水平,人类参与者约 98%;要求同时答对配对两题时,112 个模型中有 82 个低于 10% 准确率。增加帧数、改进帧选择、链式推理提示、模型规模扩大以及物理推理后训练均未消除这一失败模式,注意力分析显示模型在出错时更关注初始帧。

    e of these interventions eliminates the core failure pattern. Taken together, these experiments allow us to rule out several straightforward explanations—insufficient temporal coverage, poor frame selection, prompting, lack of declarative physical knowledge, or model scale—and instead point to a more fundamental limitation in how current vision-language models represent and update physical state over time. What were your main findings? The clearest finding is that current vision-language models

    匹配字段正文

星期日

  1. Hugging Face

    微软发布 ThinkingBox:智能体工具调用成功不等于数据库状态正确

    微软 Copilot Studio 团队联合 Toloka 等发布 ThinkingBox 智能体沙箱与 ThinkingBox-Bench 基准,主张最终回复和合法工具调用只是代理指标,只有数据库终态才是证据。在覆盖 12 个 LLM、121,680 次有效试验的消融中,79,853 次未通过可执行检查,其中 67.24% 仍干净终止、调用了改状态工具且未报最终工具错误,可执行检查在这些失败中发现 77.61% 字段值错误、43.30% 多余副作用、25.36% 缺失必要效果。每个任务在隔离后端上独立运行 20 次,Claude Opus 5.5 以 67.16% pass@1 领先,但只有 GPT-6 Astra、Claude Opus 5.5 和 Claude Opus 5 保留了大部分单次成绩;Kimi-K3 覆盖最广(507 个任务中 476 个至少成功一次),却只有 13.41% 任务 20 次全过。环境与数据集已在 Hugging Face 开源,代码 MIT 许可。

    nd your agent? Figure 3: Breadth and consistency pull apart. Twelve of the eighteen models are shown; six below 33% pass@1 are omitted for legibility. Kimi-K3 has the broadest coverage of any model we tested. It solves 93.89% of the benchmark at least once: 476 of 507 tasks. Only 31 tasks defeat it entirely, the lowest count in the field. On retail workflows it leads outright at 82.24% pass@1, ahead of every proprietary model. Kimi-K3 is also among the least consistent. Just 68 of 507 tasks, 13.

    匹配字段正文

星期五

  1. The Decoder

    Mercor 研究:AI 记账速度与准确率超持证会计师,但仍无法独立结账

    Mercor 让 12 名平均 5.5 年经验的持证 CPA 完成 APEX Accounting Benchmark 的简化任务,结果显示 AI 模型在结构化记账任务上更快、更准、成本更低,而 18 个月前最好的模型得分还低于会计师约 37% 的平均水平。完整 APEX 基准包含 10 家模拟公司的 160 项任务,Claude Opus 5.5 以 61.8% 的评分标准达成率领先,Fable 5.1 为 61.0%,GPT-6 Astra 为 57.9%,但近 60% 的任务没有模型能完全解决。Mercor 承认该研究测试的正是 AI 最擅长的细节查找与指令遵循,未涵盖客户沟通、同事协作和多年积累的上下文,因此会计师仍不可替代,但行业有望获得显著生产力提升。

    AI models are faster, more accurate, and far cheaper than accountants at structured bookkeeping tasks. That's the finding of a study by Mercor in which 12 licensed CPAs with an average of five and a half years of experience worked through simplified tasks from the APEX Accounting Benchmark. Eighteen months ago, the best models still scored below the accountants' average of about 37 percent. Today, they solve the same tasks almost flawlessly. The full APEX Accounting benchmark is much bigger, wit

    匹配字段正文

  2. Google Research

    Google 发布基于 TEE 的新一代联邦学习系统

    Google 发布新一代联邦学习系统,利用可信执行环境(TEE)提供可外部验证的隐私保证,并将计算转移到服务器端以提升训练速度、准确率和设备覆盖。Gboard 已采用该系统上线英语和日语下一词预测模型,训练时间从此前的 1-2 个月大幅缩短,瓶颈转移到服务器端。系统通过公开透明日志 Rekor 发布访问策略,KMS 与数据处理二进制可从 Confidential Federated Compute 开源仓库复现构建。

    A line graph comparing privacy-utility curves between a previous federated learning system and a new TEE-based system.

    a new Federated Learning system that provides externally verifiable privacy guarantees while shifting computation to the server to improve training speed, accuracy, and device coverage. In 2017, Google introduced Federated Learning (FL) a machine learning technique that trains models across decentralized, private data. It has been used to power everyday helpful features, including next-word prediction and Smart Compose on Gboard, reply suggestions in Google Messages, and Smart Text Selection in

    匹配字段正文

星期六

  1. The Decoder

    开源工具 BootLoops 让 Claude 完成精确科学计算,三个月产出 36 篇手稿

    哈佛物理学家 Matthew Schwartz 在 Anthropic 客座博文中介绍开源工具 BootLoops,它让 Claude 完成精确科学计算,代码已在 GitHub 发布。三个月内团队在 18 个领域产出 36 篇手稿、19 位合著者,Claude 用该工具计算了 30 个积分,其中 15 个复现已知结果、15 个为首次算出。Schwartz 也指出 Claude 会过早宣布完成、偏好旧有高引议题,且项目消耗大量算力和 token。

    ifically valuable once domain experts stepped in to set the direction. Schwartz uses the concept of the "convex hull" to illustrate how AI can help in science. Human knowledge is fragmented, with individual fields extending in different directions while the gaps between them go unexplored. A lab might spend 20 years studying one set of genes with a single method, leaving neighboring genes and alternative approaches untouched. An AI harness like BootLoops is supposed to fill those gaps by drawing

    匹配字段正文