arXiv:2504.18747v2 Announce Type: replace Abstract: We study covert classical communication over a quantum multiple-access channel (MAC) with a helper. Specifically, we consider three transmitters, where one transmitter helps the other two transmitters communicate covertly with a receiver. We demonstrate the feasibility of achieving a positive covert rate over this channel and establish an achievable rate region. Our result recovers as a special case known results for classical communication over classical MACs with a degraded message set, classical communication over quantum MACs, and classical communication over MACs with a helper. To the best of our knowledge, our result is the first to achieve covert communication with positive rates over both classical and quantum MACs.
Science Journals
arXiv:2509.24181v2 Announce Type: replace Abstract: Active learning (AL) aims to build high-quality labeled datasets by iteratively selecting the most informative samples from an unlabeled pool under limited annotation budgets. However, in fine-grained image classification, assessing this informativeness reliably is especially challenging due to subtle differences between classes. In this paper, we introduce a novel active learning method, combining discrepancy-confusion uncertainty and calibration diversity for active fine-grained image classification (DECERN), to effectively perceive the distinctiveness between fine-grained images and evaluate the sample value. DECERN introduces a multifaceted informativeness measure that combines discrepancy-confusion uncertainty and calibration diversity. The discrepancy-confusion uncertainty quantifies the structural stability and category directionality of fine-grained unlabeled data during local feature fusion. Subsequently, uncertainty-weighted clustering is performed to diversify the uncertainty samples. Then we calibrate the diversity to maximize the global diversity of the selected sample while maintaining its local representativeness. Extensive experiments conducted on 7 fine-grained image datasets across 39 distinct experimental settings demonstrate that our method achieves superior performance compared to state-of-the-art methods.
arXiv:2607.04769v1 Announce Type: new Abstract: We present a linear gyrokinetic theory for the electromagnetic collisionless trapped-electron mode (CTEM). It is found that the weak electromagnetic effects of CTEMs originate from the particle dynamics. Theoretical analysis reveals that the kinetic and fluid-like components of the trapped-electron parallel current cancel at leading order. The ion parallel current is also negligible due to the weak ion transit resonance. Consequently, the perturbed parallel current in the electromagnetic CTEM is dominated by passing electrons. We demonstrate that these characteristics of particle dynamics decouple the CTEM from the shear Alfv\'en wave branch, rendering the electromagnetic effects subdominant. Both eigenmode analyses and gyrokinetic simulations validate these findings.
arXiv:2412.16775v2 Announce Type: replace-cross Abstract: We study evolution equations on metric graphs with reservoirs, that is graphs where a one-dimensional interval is associated to each edge and, in addition, the vertices are able to store and exchange mass with these intervals. Focusing on the case where the dynamics are driven by an entropy functional defined both on the metric edges and vertices, we provide a rigorous understanding of such systems of coupled ordinary and partial differential equations as (generalized) gradient flows in continuity equation format. Approximating the edges by a sequence of vertices, which yields a fully discrete system, we are able to establish existence of solutions in this formalism. Furthermore, we study several scaling limits using the recently developed framework of EDP convergence with embeddings to rigorously show convergence to gradient flows on reduced metric and combinatorial graphs. Finally, numerical studies confirm our theoretical findings and provide additional insights into the dynamics under rescaling.
arXiv:2512.19156v4 Announce Type: replace-cross Abstract: We show that two-dimensional billiard systems can simulate universal Turing machines. Billiards serve as idealized models of particle motion with elastic reflections and arise naturally as limits of smooth Hamiltonian systems under steep confining potentials. By invoking the undecidability of the halting problem, originally established by Turing, our results show that undecidable trajectories arise in physically natural billiard-type models, including models associated with hard-sphere gases and with collision-chain limits in celestial mechanics.
arXiv:2607.04589v1 Announce Type: cross Abstract: Chirality gives a microswimmer something a straight-line swimmer lacks: a phase. This variable both modulates, and is affected by, the hydrodynamic interactions between microswimmers. Here we ask what collective order emerges when many such chiral swimmers are free to move, and how the shape and actuation anisotropies of an individual swimmer dictate the outcome. Using a kinetic theory for hydrodynamically interacting circle swimmers, we show that the interplay between intrinsic rotation, stresslet flows, and Jeffery-like reorientation generates effective phase-locking interactions. Asymmetries in the actuation are encoded through a non-axisymmetric stresslet tensor. At the pair level, pusher swimmers select one of two synchronized states depending on particle shape and actuation asymmetry: in-phase/anti-phase locking, or quarter-shifted locking. Extending the analysis to many-body systems, we find that these pair-level synchronization mechanisms drive emergent collective phases. The swimmers develop global \textit{synchro-nematic} order when the hydrodynamic coupling favors parallel or anti-parallel phase locking, and \textit{synchro-antinematic} local order where quarter-shifted locking prevails. A coarse-grained field theory predicts the onset of nematic order through a hydrodynamic instability criterion. In addition, we find that the collective states exhibit crystalline or disordered hyperuniform structure arising from period-averaged hydrodynamic interactions that are effectively repulsive between swimmers. Lattice Boltzmann simulations of chiral oblate squirmers, resolving finite-size and near-field flows, recover the synchro-nematic ordering. Together, these results show how a swimmer's geometric and actuation anisotropies can be leveraged to program synchronization and spatiotemporal order in chiral active matter.
arXiv:2607.04573v1 Announce Type: new Abstract: Deceptive patterns are tactics used to manipulate users into performing unintended actions. Today, many of these deceptive patterns are implemented in mobile apps targeting diverse age groups. In this paper, we employ a heuristic-based cognitive walkthrough to explore how deceptive patterns are tailored to three age groups, specifically teens (12-17), adults (18-49), and older adults (50+), across different app categories. By analyzing 30 apps spanning 6 categories, we found that 93% of these apps use the nagging pattern. Furthermore, our findings reveal that entertainment apps contain significantly more deceptive patterns than other app categories, such as music/books. Our data also shows that entertainment apps for older adults use sneaking patterns more frequently than entertainment apps for teens or adults. These findings call for the development of more ethical, age-specific design guidelines to protect users from targeted digital manipulation attempts.
arXiv:2511.01465v2 Announce Type: replace Abstract: In this article, we introduce a novel parallel-in-time solver for nonlinear ordinary differential equations (ODEs). We state the numerical solution of an ODE as a root-finding problem that we solve using Newton's method. The affine recursive operations arising in Newton's step are parallelized in time by using parallel prefix sums, that is, parallel scan operations, which leads to a logarithmic span complexity. This yields an improved runtime compared to the previously proposed Parareal method. We demonstrate the computational advantage through numerical simulations of various systems of ODEs.
arXiv:2607.04606v1 Announce Type: cross Abstract: This report presents our solutions to the QoMEX 2026 Grand Challenge on Video Quality Assessment for Asymmetric Encoded Videos, comprising a full-reference (FR) model, CompressedVQA-AEV-FR, and a no-reference (NR) model, CompressedVQA-AEV-NR. The FR approach leverages a Swin-B backbone to extract multi-stage similarity statistics between reference and distorted videos for quality prediction. For the NR setting, our model employs complementary frame-level encoders based on SigLIP2 and Swin-B, followed by temporal mean pooling and cross-fold ensembling to estimate perceptual quality without reference data. Our CompressedVQA-AEV-FR achieves first place in the FR track of QoMEX 2026 Grand Challenge, while CompressedVQA-AEV-NR secures fourth place in the NR track, demonstrating the effectiveness of our proposed models. The code is available at https://github.com/sunwei925/CompressedVQA-AEV.
arXiv:2601.11960v3 Announce Type: replace Abstract: Existing reinforcement learning methods for LLM reasoning implicitly assume that the policy generating training trajectories should coincide with the one producing inference responses. We argue that this is a misleading inductive bias: the optimization-optimal trajectory distribution favors informative gradients, whereas the inference-optimal response distribution emphasizes accuracy and consistency. Forcing both into a single policy entangles their gradients and suppresses exploration. We propose R$^2$PO (Residual Rollout Policy Optimization), which attaches a lightweight Residual Rollout-Head atop the policy to decouple training trajectories from inference responses, diversifying rollouts during training while keeping inference generation intact. Experiments show that R$^2$PO consistently outperforms baselines, with average accuracy gains of 3.4% on MATH-500 and 1.3% on APPS, alongside more diverse rollouts and reduced length bias. Our code is available at https://github.com/RRPO-ARR/Code.
arXiv:2601.15141v2 Announce Type: replace Abstract: Agentic Reinforcement Learning (RL) has empowered Large Language Models (LLMs) to utilize tools like Python interpreters for complex problem-solving. However, for parameter-constrained models (e.g., 4B--7B), the exploration phase is often plagued by frequent execution failures, creating noisy trajectories that hinder policy optimization. Under standard outcome-based reward settings, this noise leads to a critical credit assignment issue, where erroneous actions are inadvertently reinforced alongside successful outcomes. Existing mitigations face a dilemma: dense rewards often trigger reward hacking, while supersampling incurs prohibitive computational costs. To address these challenges, we propose CLEANER. Distinct from external filtering methods, CLEANER exploits the model's intrinsic self-correction capabilities to eliminate error-contaminated context directly during data collection. At its core, the Similarity-Aware Adaptive Rollback (SAAR) mechanism autonomously constructs clean, purified trajectories by retrospectively replacing failures with successful self-corrections. Based on semantic similarity, SAAR adaptively regulates replacement granularity from shallow execution repairs to deep reasoning substitutions. By training on these self-purified paths, the model internalizes correct reasoning patterns rather than error-recovery loops. Empirical results on AIME24/25, GPQA, and LiveCodeBench show average accuracy gains of 6%, 3%, and 5% over baselines. Notably, CLEANER matches state-of-the-art performance using only one-third of the training steps, highlighting trajectory purification as a scalable solution for efficient agentic RL. Our models and code are available at GitHub
arXiv:2607.04655v1 Announce Type: new Abstract: The veracious semantic alignment in autoformalization is significant for formal mathematical reasoning. However, existing evaluations provide only opaque binary verdicts or scalar scores, offering no interpretable insight into where or why translations fail. This opacity severely limits both human understanding and automated system improvement. To bridge this gap, we introduce FormalRx, a comprehensive diagnostic evaluation framework that transforms autoformalization assessment from black-box judgments into actionable feedback. At its core is SCI Error Taxonomy, a hierarchical classification scheme decomposing autoformalization errors into 28 distinct categories with strict priority ordering. Building on this taxonomy, FormalRx provides four critical diagnostic capabilities: alignment verdicts, error categorization, error localization, and correction. We instantiate the framework with a diagnostic model FormalRx-8B, trained on 56,287 NL-FL pairs with fine-grained diagnostic annotations, and release FormalRx-Test as the first fine-grained diagnostic benchmark. FormalRx-8B achieves F1-scores of 0.88 (verdict) and 0.71 (categorization), along with accuracies of 0.75 (localization) and 0.73 (correction), substantially outperforming both general-purpose LLMs and specialized baselines. By connecting evaluation with actionable insights, FormalRx enables systematic diagnosis and improvement of autoformalization systems.
arXiv:2607.04755v1 Announce Type: new Abstract: Model merging offers a practical alternative to conventional continual learning by integrating independently fine-tuned models without retaining previous training data. Recent state-of-the-art model merging methods employ test-time adaptation (TTA-guided merging) to address distribution shifts by adjusting merging-related variables using unlabeled target data. However, these methods have primarily been studied in multi-task or single-target settings, and their behavior under sequential continual learning remains insufficiently understood. We present a benchmark study that maps this family of methods to rehearsal-free continual Whole Slide Image classification and evaluates them against traditional continual-learning approaches. Experiments on six TCGA cancer-subtyping cohorts cover CLASS-IL and TASK-IL scenarios, in-domain and out-of-domain evaluation, and different task orders. The results show that adapting model merging at test time can provide strong task-specific performance and improve retention of previously acquired knowledge without storing historical WSIs. Nevertheless, performance remains sensitive to task order and to the interaction between adaptation on the current distribution and accumulated knowledge. This benchmark identifies model merging with test-time adaptation as a promising direction for continual computational pathology and motivates future methods that balance adaptation to domain shift with explicit preservation of historical knowledge.
arXiv:2607.04761v1 Announce Type: new Abstract: Real-time, text-promptable 4D reconstruction is indispensable for autonomous surgical interaction. Severe misalignment between semantic meaning and physical anatomy still persists, largely because existing solutions integrate Vision-Language Models into deformable fields via a rigid coupling scheme that tightly binds semantic features to geometric warping. In this paper, we propose DeGenseGS, Geometrically and Semantically Decoupled Surgical Scene Understanding in 4D Gaussian Splatting, a novel framework that independently models semantic evolution and geometric deformation. Specifically, we propose a HexPlane-based spatiotemporal entanglement module that uses shared kinematic latents to synchronize semantic mutations with scene dynamics, while explicitly disentangling semantic updates from geometric deformation. To further ensure robustness against reconstruction artifacts, we devise a Rasterization-Native Semantic Extraction mechanism that infers semantics from topologically continuous feature maps. Additionally, we incorporate an angular-aligned optimization strategy that conforms to the native hyperspherical latent space, thereby preventing semantic distortion. Extensive evaluations on the CholecSeg8k and EndoVis18 datasets demonstrate that DeGenseGS achieves state-of-the-art performance. Our framework yields enhanced geometric completeness and robust semantic-anatomic alignment, enabling spatially continuous segmentation despite drastic tissue deformation and topological transitions.
arXiv:2607.04812v1 Announce Type: new Abstract: Bird's-Eye View (BEV) end-to-end instance prediction has emerged as a robust paradigm for autonomous driving perception, effectively mitigating the error propagation inherent in traditional modular pipelines. However, current state-of-the-art approaches rely predominantly on geometric supervision, such as occupancy regression and optical flow, effectively treating scene agents as generic moving obstacles. This absence of explicit semantic awareness imposes limitations on the capacity of the model to solve ambiguities in complex scenarios, particularly those where object-specific behavior is essential for accurate forecasting (e.g. overtaking, intersections). In this paper, we introduce Text-Guided Representation for Instance Prediction (TGRIP), a novel framework that bridges this gap by injecting rich semantic priors into the instance prediction loop. The proposed teacher-student pipeline employs Vision-Language Foundation Models to generate dense, semantic-enhanced BEV maps from multi-camera images. These maps serve as auxiliary supervision during training, guiding the network to learn spatio-temporal representations that are not only geometrically consistent but also semantically discriminative. To the best of our knowledge, this represents the first attempt to unify semantic guidance with the temporal task of future instance prediction. The experimental results demonstrate that TGRIP surpasses existing state-of-the-art models in nuScenes, validating the hypothesis that semantic enrichment is a fundamental element for robust, end-to-end motion prediction. Code is available on https://github.com/miguelag99/TGRIP.
arXiv:2607.05168v1 Announce Type: new Abstract: Why do intelligent systems need to perform explicit symbolic reasoning? Computer science has traditionally regarded symbolic reasoning as a defining component of intelligence. Yet the remarkable success of modern foundation models raises a fundamental question: if increasingly capable AI systems can operate with little explicit symbolic reasoning, what role do symbolic methods actually play? This article argues that explicit symbolic reasoning is not a fundamental property of intelligence, but a computational consequence of operating on simplified models of reality. We propose the Compression Principle: every computational model is a simplified representation of reality, and explicit symbolic reasoning compensates for information omitted during model construction. From this principle, we derive the Modeling--Reasoning Trade-off: as computational models preserve richer representations of the world, the need for explicit symbolic reasoning correspondingly decreases. This perspective provides a unified explanation for both the historical success of symbolic methods and the remarkable effectiveness of modern foundation models. Paradoxically, the same development makes symbolic methods increasingly important for humans. As intelligent systems become more capable and more opaque, symbolic representations increasingly serve as interfaces through which humans specify requirements, verify behavior, regulate autonomous systems, and establish trust. We therefore argue that the future of symbolic methods lies not primarily as the computational engine of intelligent systems, but as the symbolic interface between increasingly capable AI systems and the humans who build, govern, and depend upon them.
arXiv:2605.23462v2 Announce Type: replace Abstract: Cyclic animation is widely used in computer graphics and interactive content.It supports seamless playback in games, VR, and interactive simulation,where short clips must repeat smoothly over long durations. Achievingphysically plausible cyclic synthesis from an input sequence is challengingbecause the endpoint states of the observed sequence rarely match exactly,and the governing equations of the underlying system are often unavailable.We therefore propose an equation-free framework that identiffes a Koopmansurrogate from the observed trajectory and computes a cyclic trajectory byapplying a Fourier-parameterized, time-varying control force under a hardtemporal periodicity constraint. The resulting formulation reduces cyclicsynthesis to a linearly constrained quadratic program that can be solvedefffciently through a structured KKT system. Our method is applicable toa diverse range of examples, including N-body systems, cloth, deformableobjects, shallow water, etc.
arXiv:2607.04992v1 Announce Type: new Abstract: Nanosecond-pulsed dielectric barrier discharge (DBD) plasma actuators were investigated on a generic blunt body in a Mach 6 Ludwieg tube to characterize the pressure and thermal perturbations relevant to hypersonic boundary-layer transition control. Complementary quiescent experiments were also conducted over ambient pressures representative of those predicted in the model nose region to isolate the influence of local thermodynamic conditions on actuator operation. Pulse-energy measurements and schlieren imaging showed that decreasing pressure reduced the deposited electrical energy per pulse, weakened the actuator-generated shock, and increased the spatial extent of the residual heated region owing to energy deposition over a larger plasma volume. Under Mach 6 Ludwieg-tube conditions, the actuator-generated shock interacted with and reflected from the detached bow shock, temporarily increasing the bow-shock stand-off distance by approximately 11%, while the residual heated region was advected downstream along the body. The schlieren images further permitted the evolution of the thermal disturbance to be distinguished from that of the actuator-generated shock. The results demonstrate two distinct perturbation mechanisms -- a short-duration compression wave and a longer-lived thermal disturbance -- whose relative importance is governed by the local thermodynamic conditions and which may independently promote hypersonic boundary-layer transition.
arXiv:2607.04993v1 Announce Type: new Abstract: Many phenomena of deep learning are dynamical: they concern not only which minima exist, but how gradient descent reaches, avoids, or selects among them. Edge-of-stability behavior, sharpness oscillations, catapult phases, balancing, and movement toward flatter representations are effects of the training map itself, and are poorly captured by the small-step gradient-flow limit. This paper studies fixed-step gradient descent as a discrete dynamical system in a hierarchy of exactly solvable models retaining basic structures of deep learning: depth, factorization, width, data coupling, activation, and stochasticity. The starting point is the balanced scalar reduction of a deep linear chain, giving a quartic loss and a cubic gradient map whose post-edge behavior is explicit. Under the natural large-depth scaling, this dynamics converges to a universal Ricker-type map. The edge of stability is therefore not a breakdown of optimization, but the first bifurcation of the training map. Embedding the scalar dynamics back into factored models turns these regimes into learning phenomena. Finite steps break conservation laws of gradient flow and contract factorization imbalance; residual oscillations move parameters toward flatter, more balanced representations. Wider linear networks produce a ladder of spectral edges, so the optimal learning rate can lie beyond the first edge. Data coupling, nonlinear activations, and stochastic targets preserve the same organizing principle: finite-step oscillations drive alignment, balancing, and representation selection. Thus the learning rate is not merely a numerical stability parameter. It is a structural parameter of the training dynamics, determining its attractors and shaping the representations gradient descent selects.
arXiv:2607.04995v1 Announce Type: new Abstract: Mass lumping enables explicit time stepping for finite-element discretisation of the wave equation if the resulting quadrature weights are positive and accuracy is preserved. New rules for elements of degree two and three on the 4-simplex are presented. Numerical quadrature for the stiffness matrix can be more efficient than exact evaluation if it requires fewer nodes. For the latter, new rules in two and four space dimensions for the lower-degree elements on the simplex were found, as well as some additional results for three dimensions.
arXiv:2607.04996v1 Announce Type: new Abstract: Timely communication of information in Internet of Things (IoT) networks is critical to enhancing system performance and energy efficiency by minimizing the transmission of outdated or redundant data. Although timeliness metrics such as the Age of Information (AoI) effectively quantify information freshness, they do not account for content evolution. The Version Age of Information (VAoI) addresses this gap by tracking version lag at the receiver, thereby providing a practical content-aware metric. However, prior research has primarily focused on first-moment analyses in single-hop settings, leaving the distributional properties of VAoI in multi-hop networks, as well as the impact of feedback mechanisms, unexplored. In this study, we provide a comprehensive characterization of VAoI in multi-hop networks with transmission constraints and acknowledgment-based feedback. A bi-level optimization framework is formulated to jointly optimize the update policy of a rate-constrained source and the feedback-aware forwarding policies of the intermediate nodes, aiming to minimize communication overhead while maintaining VAoI performance at the destination. We show that the optimal source policy follows a threshold-based update strategy and derive the optimal threshold in closed form. For both the optimal threshold policy and a randomized baseline, we obtain closed-form expressions for the stationary distribution and average VAoI, along with the corresponding update rates across network nodes under feedback-aware forwarding. Numerical results corroborate the analytical findings and illustrate the advantages of utilizing VAoI and feedback to reduce redundant transmissions while preserving data freshness and informativeness in multi-hop systems.
arXiv:2607.05004v1 Announce Type: new Abstract: We revisit the online construction of \emph{smallest suffixient sets} and the online computation of the \emph{longest repeating suffix} (LRS). We give the first compressed-space online construction of smallest suffixient sets, and present two space-time trade-offs for both problems: $O(r\log n+n)$ bits of working space and $O(\log^2 n/\log \log n)$ worst-case time per character, and $O(r\log n+n \log \log n)$ bits of working space and $O((\log n/\log \log n)^2)$ worst-case time per character. Here, $r$ is the number of runs in the Burrows-Wheeler transform of the reverse of $T[1..n]$. In particular, for highly repetitive texts satisfying $r=O(n/\log n)$, the first trade-off uses $O(n)$ bits of working space, while the second uses $O(n\log\log n)$ bits. We also prove that any deterministic online algorithm for computing LRS requires \(\Omega(n)\) bits of peak working space in the worst case, even over a constant-size alphabet. Through reductions from online LRS computation, we extend this lower bound to deterministic online algorithms maintaining either an arbitrary smallest suffixient set augmented with the length of the supermaximal right extension represented by each selected position, or the position-only smallest suffixient set obtained by selecting the rightmost occurrence of every such extension. For constructing smallest suffixient sets, our algorithms are the first online solutions using compressed working space, improving the $O(n)$-word space required by previous online constructions. For compressed-space online LRS computation, compared with the algorithm of Prezza and Rosone~[CiE 2020], our bounds improve their $O(\log^2 n)$ amortized time per character by factors of $\Theta(\log\log n)$ and $\Theta((\log\log n)^2)$, respectively, while also providing worst-case guarantees.
arXiv:2607.05026v1 Announce Type: new Abstract: This paper investigates the existence, construction and classification of limited magnitude error-correcting codes, with a focus on splitter sets and their connections to group splittings. We establish new nonexistence results for quasi-perfect splitter sets and provide a complete classification of quasi-perfect $B[0,3](n)$ splitter sets in both singular and nonsingular cases. Furthermore, we derive improved lower bounds for the size of maximal $B[0,3](q)$ sets by investigating Cayley graphs, where $q$ is a prime. We also provide existence criteria for perfect $B[0,6](q)$ splitter sets and quasi-perfect $B[-4,4](2p)$ sets for prime $p$. For perfect burst-correcting codes, we develop a general construction framework, and prove the existence of infinite families of $(k_2,k_1)$-limited-magnitude cyclic $b$-burst-correcting codes for $k_1+k_2\le 4$ and arbitrary burst length $b$. We further provide sufficient existence conditions for general parameters $k_1$ and $k_2$. Our results combine algebraic, combinatorial, and number-theoretic methods to advance the understanding of codes tailored for flash memory and related storage systems.
arXiv:2607.05029v1 Announce Type: new Abstract: Persistent memory has enabled large language model (LLM) agents to store factual knowledge, prior decisions, reasoning histories, tool usage information, and context. While this has improved the agent's functionality and continuity across tasks, it has also introduced a new attack surface: the agent's own reasoning history. In this paper, we introduce the Forged Amplifying Rationale Memory Attack (FARMA), which poisons an agent's remembered reasoning rather than its factual knowledge. It inserts forged reasoning traces using evasive language that bypasses keyword-based defenses, then amplifies them through self-referential reinforcement that defeats consensus-based defenses. To address FARMA, we introduce SENTINEL, a layered defense pipeline to detect forged reasoning entries. Its central component is the Reasoning Guard that structurally analyzes candidate entries for forgery using five weighted signals. We evaluate FARMA and SENTINEL across multiple agents and different LLM models with 50 trials and show that FARMA achieves an attack success rate of up to 100% under baseline conditions and is capable of defeating defense mechanisms like keyword filter and A-MemGuard. Our evaluation also shows that SENTINEL reduces FARMA's attack success rate to as low as 0% with no false positives observed across 326 benign agent traces. Our work demonstrates the need to protect not only an agent's retrieved content but also the integrity of its reasoning history.
arXiv:2607.05030v1 Announce Type: new Abstract: Ensemble Kalman filters (EnKFs) are widely used for data assimilation in geophysical systems. Among various implementations, the local ensemble transform Kalman filter (LETKF) has gained popularity because of its computational efficiency. However, the deterministic EnKF such as the LETKF is known to be less robust than the stochastic EnKF in strongly nonlinear regimes. We generalize the LETKF such that it contains a stochastic term and includes the stochastic EnKF within it. We adaptively optimize the parameter that determines the weight of the stochastic term based on an identity of mutual information, which is satisfied by the Kalman filter in linear Gaussian systems. As the analysis perturbation equations of EnKFs are decomposed into a system of equations for modes that are uncorrelated with each other, the application of mutual information is easily achieved. The generalized LETKF thus optimized is named the mutual information-based ensemble Kalman filter (MI-EnKF). The MI-EnKF indirectly uses the third- and fourth-order moments of the forecast ensemble through entropy. To speed up calculations of entropy, we create a lookup table based on maximum entropy distributions. We conduct data assimilation experiments using the Lorenz-96 model to confirm the validity of the optimization method of MI-EnKF. When the observation operator is linear, the ML-EnKF shows the same analysis accuracy as the LETKF. When the observation operator is strongly nonlinear, the MI-EnKF is more accurate than both LETKF and stochastic EnKF regardless of ensemble size. Optimizing just the first mode can lead to significant improvements, but positive impacts of increasing the number of optimized modes are not observed unless the ensemble size is large. The optimized parameter values indicate that the optimal EnKF lies between the deterministic EnKF and the stochastic EnKF.