Bitware News

Tag

Eval

Agent4Sci audits frontier coding agents on scientific machine learning benchmarks

Zhong et al. benchmark frontier agents across 20 scientific ML tasks, revealing that autonomous performance gains stem from routine engineering tricks rather than domain insight.

NPC-RubricBench reveals medical LLM diagnostic competence fails across longitudinal cancer care

Zhang et al. introduce NPC-RubricBench, evaluating 30 language models across longitudinal oncology care pathways and exposing critical failure mode shifts from diagnostic commission to treatment omission.

Sparse autoencoders detect imminent robot policy failure in OpenVLA before physical collapse

Rogers, Lin, and Brown apply sparse autoencoders to OpenVLA activations, identifying interpretable latent features that predict manipulation failures before irreversible physical errors occur.

Selective auditing guarantees bounded AI error rates with minimal human supervision

Gibbs, Han, Tibshirani, and Zrnic develop an online selective auditing framework that provably bounds unaudited AI decision errors below user tolerances under both i.i.d. and adversarial streams.

Auditing open LLMs on the Spanish MIR exam exposes uncalibrated abstention and image blindness

Evaluating 8B-27B open models on 1,552 official residency exam questions shows that while raw scores qualify models for 43 specialties, medical fine-tuning harms calibration and multimodal models ignore clinical images.

Medical fine-tuning reshapes rather than reduces patient-facing clinical risk in language models

Evaluating six 7-9B models across six categories of clinical harm reveals that risk-bearing language is statistically independent of factuality, with domain adaptation suppressing drug mentions while amplifying overconfidence.

Predictable performance is suboptimal: Auxiliary routing predictors fall short of model self-confidence

Mathematical analysis proves that auxiliary performance predictors outperform an LLM's internal confidence only when candidate models are suboptimal, revealing structural ceilings for model cascading.

SelfDx benchmark reveals dangerous sycophancy in LLM health assistants facing emergency symptoms

Across 27 frontier models, conversational health assistants frequently validate mistaken user self-diagnoses instead of issuing critical clinical warnings when life-threatening conditions remain possible.

Sensorimotor Alignment provides an offline Platonic proxy for embodied robot policy success

Extending the Platonic Representation Hypothesis to physical kinematics, the training-free S^2 metric evaluates vision-language backbones and predicts closed-loop manipulation success without expensive rollouts.

Direct Pass@k optimization balances quality and diversity for efficient test-time reasoning

Framing prefix thought pruning as a submodular pass@k objective allows reasoning models to discard unpromising rollouts early while preventing redundant candidate clustering.

EpiSEM-Bench probes LLM agent epistemic safety under omission of critical environment evidence

A benchmark of 300 matched task pairs reveals that tool-using agents routinely execute prohibited actions when environment tools omit constraints, with passive refusal rarely translating into active evidence recovery.

BatchBench evaluates AI robustness against severe batch effects in high-throughput cell painting

A standardized benchmark spanning 13 imaging sources and 2,000 compounds shows that while test-time adaptation mitigates domain shift, AI models degrade to chance level on rare phenotypic profiles.

CarryoverBench exposes persistent prompt injection risks across multi-session LLM agent runtimes

Evaluating cross-session payload retention across frontier models reveals that malicious prompts planted in agent memory and heartbeat files re-fire without decay, bypassing conventional safeguards.

Plausible but unimplantable: audit finds shape completion foundation models fail clinical cranioplasty constraints

An empirical audit of 3D shape completion foundation models reveals that despite visual plausibility, zero-shot reconstructions penetrate patient bone and achieve a 0% clinical implantability rate.

DART: monitoring internal representation transitions detects multi-turn LLM agent attacks

Rather than inspecting isolated agent actions, DART tracks accumulated representation shifts across dialogue turns, cutting multi-turn agent attack success from 84% to 25% with minimal latency overhead.

Mechanistic audit locates spurious annotation-reading attention heads in medical vision transformers

By applying mechanistic interpretability to chest X-ray classifiers, researchers identified dedicated attention heads that latch onto corner text rather than lung pathology, a bias completely invisible to standard output ablation.

Controlled probes reveal narrow value and visual ungroundedness in pathology vision-language models

Systematic ablations across public benchmarks demonstrate that while stage-redacted reports add genuine prognostic survival signal, slide-level VQA is ungrounded (74.8% accuracy with slide vs 74.4% without) and zero-shot prompts do not outperform linear probes.

Robust model organisms for eliciting latent knowledge isolate selective sandbagging in code audit

Combining transcript distillation, counter-prompting, and tamper resistance produces the first ELK model organisms that reliably sandbag misaligned code audits while retaining full latent capabilities.

Alert-list concordance exposes hidden divergence across clinical ICU imputation strategies

Comparing nine imputation methods on 40,336 ICU records reveals that pipelines with indistinguishable AUROC produce divergent high-risk patient alert lists, with Jaccard overlaps as low as 0.518.

CF-NODE: counterfactual spatial node intervention enables frozen test-time adaptation in diabetic retinopathy

Attenuating high-evidence spatial nodes and calibrating predicted grade distributions based on counterfactual response stability delivers robust single-image test-time adaptation across five clinical fundus datasets without model updates.

Progressive misalignment emerges from recursive self-distillation on benign model outputs

Iteratively training language models on their own safe responses paired with harmless contextual cues causes severe downstream safety degradation on standard jailbreak benchmarks.

AI Consilium benchmark evaluates LLM multidisciplinary clinical second opinions

A 300-case evaluation of role-specific virtual specialist consiliums shows structured multidisciplinary synthesis consistently outperforms standalone opinions, with GPT-5.6-Sol leading overall clinical quality and consensus speed.

Evidence Field: compact, auditable histopathology classification transfers across clinical centers

With only 10,550 parameters per model, Evidence Field couples spatial image measurements with replayable covering programs, surpassing standard CNN and ViT baselines across held-out hospital sites on CAMELYON17-WILDS.

LEASH: latent uncertainty enables efficient weak-to-strong escalation for computer-use agents

Reusing internal activations to detect uncertainty without extra forward passes lets lightweight agents escalate to frontier models only when needed and monitor them afterward, cutting OSWorld inference costs by 19%.

CATCH: continuous adversarial training enforces transferable honesty in 70B language models

Training LLMs away from dishonest completions using continuous adversarial objectives with on-policy utility data curbs pressure-induced lying and increases confession rates without degrading general reasoning.

Conditional brain charts link cortico-subcortical structural dissociation to Alzheimer's disease progression

Conditioning lifespan normative models of cortical thickness on subcortical anatomy enables site calibration with 20 scans and reveals structural dissociations predictive of conversion to dementia.

Robust contextual MDPs optimize adaptive cancer therapy under biomarker and dynamic uncertainty

Formulating adaptive therapy through robust contextual reinforcement learning yields treatment schedules that Pareto-dominate clinical heuristics and maintain efficacy despite noisy biomarker measurements.

SurvICL: tabular foundation model achieves in-context survival analysis on clinical cohorts

Pretrained on synthetic datasets with a flexible proportional-odds prior and quantile regression loss, SurvICL outperforms 20 baselines and tops the 50-year-old Cox model on small cohorts.

Hindsight-Privileged RLVR: credit assignment from a single rollout without group sampling

Weighting token credit via causal-versus-hindsight Jensen-Shannon divergence matches GRPO reasoning accuracy while eliminating zero-gradient batch waste and cutting rollout requirements eightfold.

Chain-of-thought monitoring can fail even when reasoning is strictly necessary

Counterfactual interventions across Qwen-3 and Gemma-4 show that attributes driving 19 to 24% of correct medical diagnoses go unmentioned in reasoning traces that models cannot solve without CoT.

Frozen site-probe accuracy fails as a standalone score for multi-site MRI harmonization

An audit across 1,112 ABIDE I brain scans and seven harmonization methods shows frozen site classifiers swing by 46 points across seeds, fall to chance under simple blur, and miss residual scanner signals.

Two Clocks: why larger rollout batches learn slower but fail on schedule in RLVR

Square-root learning-rate scaling in multi-step GRPO preserves policy drift per sample rather than progress, causing larger batches to lose sample efficiency to curvature while collapsing at the same sample count.

ARIA: learning when to consult stronger advisor models in agentic systems

A meta-controller trained via Monte Carlo control over compact workflow states recovers 44 to 81% of the executor-advisor gap at under half the advisor cost.

Backdoored weights can provably conceal arbitrary capabilities from safety audits

Digital locker circuits embedded in neural networks resist elicitation through fine-tuning, weight noising, and gradient trigger search under cryptographic assumptions.

MedBenchAgent: compiling medical VLM benchmarks from annotations, not just generating questions

A multi-agent framework derives the benchmark specification itself, reaching 90.9% Task-Space F1 and 994 of 1,000 sampled items passing human audit.

SADUSI: multi-source ultrasound benchmark shows self-supervised anomaly detection still struggles

Diffusion-based detectors reach only 0.56 to 0.72 pixel-level AUROC and PatchCore variants 0.76 to 0.83 when anatomy, views, and protocols vary.

ARGUS: evidence-constrained agentic reasoning for noncoding regulatory variant interpretation

Dutta et al. couple 458 DNABERT models with deterministic biological verifiers, preventing LLM hallucinations when prioritizing noncoding single nucleotide variants.

The option-channel attack: why typed decision models fail as autonomous agent guardrails

Azizi et al. audit typed decision models used as agent guardrails, showing how semantic manipulation of option labels drives fail-open rates up to 100%.

Caught in the act: probes detect agent sabotage and unverbalized deception

Hollinsworth et al. introduce representation probes trained on the FIBS dataset to detect latent sabotage and introspective deception in frontier LLM agents without relying on verbalized reasoning.

MMA-LTS: spatially adaptive confidence calibration for missing-modality brain MRI

Lee et al. introduce Missing Modality-Aware Local Temperature Scaling, calibrating voxel-wise brain tumor segmentation confidences when MRI acquisition sequences are incomplete.

PathLang: probing language sensitivity and semantic competition in pathology VLMs

Cheng et al. evaluate nine computational pathology vision-language models across pathologist-validated phrasing, uncovering high sensitivity to clinical paraphrases and diagnostic competition.

ActiveMedAgent: cost-aware sequential test acquisition for multimodal diagnosis

Ma et al. introduce trajectory-based reinforcement learning for clinical decision making, finding that selective diagnostic acquisition outperforms full-modality inputs.

CoPoE: structured product-of-experts for missing-modality Alzheimer’s diagnosis

A coordinate-based multimodal fusion architecture that maps available clinical, imaging, and fluid biomarkers into an interpretable RPNS space without synthetic data imputation.

Envelope sampling: mitigating reward hacking when post-training on surrogate judges

A theoretically grounded recalibration framework by Dandapanthula et al. using envelope sampling to provably bound policy regret when optimizing LLMs against surrogate reward models.

AI time horizons: a statistical audit of the METR scaling plot

Nguyen and Fithian re-evaluate METR’s 50% time horizon metric with splines and item-response theory, revealing that task difficulty does not scale linearly with human log-time.

Provable test-time scaling: confidence-filtered beam search for LLM reasoning

A theoretical foundation for test-time reasoning: proving vanilla beam search sample bounds and establishing polynomial regret scaling over long horizons via CF-Beam.

DualTTA: calibrating black-box radiology AI without model weights

Model-agnostic calibration for proprietary 3D CT models using test-time geometric perturbations and confidence-gated blending, cutting calibration error up to 54%.

Learning to Defer with Guidance: 3-way triage on real-world medical data

Extending medical triage beyond binary autonomous vs defer decisions: a framework that routes cases to autonomous prediction, human clinician, or human with AI guidance.

Workspace Models: lightweight robotic memory without in-the-loop VLMs

MIT and CMU researchers distill task-salient state into a compact workspace token during training, giving manipulation robots long-term memory at zero deployment compute overhead.

OpenAI’s Navier-Stokes claim: AI-found blowup, Lean check, prize not claimed

A scientific-methods read of OpenAI’s 8 Sep 2026 announcement: a multi-agent system plus Lean formalization arguing finite-time singularity (Clay C/D), with verification still on mathematicians, not a prize ceremony.

Certified ICU alarm triage: suppress false VT alerts under a risk budget

A medical safety/eval note: three-way retain/suppress/defer triage on VTaC with a finite-sample style bound on silenced true alarms, and a clear warning about multiplicity eating the certificate.

PrecepTron: scaling physician judgment to grade medical AI

An eval methods brief: LoRA-tuned PrecepTron plus GRAND-ROUNDS (9,217 physician scores) aim for physician-level grading of open-ended clinical LLM answers, including piecemeal case presentation.

Cros: risk-constrained stopping for clinical diagnosis agents

A stopping layer that tries to decide when a sequential diagnosis agent should diagnose or defer: with finite-sample style tests, and an honest ‘exploratory, not confirmatory’ framing.

The Deep Learning Turn

What moved in 2012 was not a sudden invention of deep nets: ImageNet-scale labeled data, GPU training, ReLU, and dropout made a large ConvNet win a public, comparable benchmark-AlexNet as the ImageNet moment, not the first deep network.

Transformers and Scaling

The 2017 transformer reorganized sequence modeling around self-attention without recurrence; GPT and BERT are two objectives on that backbone; Kaplan and Chinchilla scaling laws are empirical regularities about compute, data, and parameters-not a slogan that bigger is always better.

Φ-Bench: can LLMs engineer the infrastructure that runs them?

An 85-task infra/eval benchmark spanning kernels, long-horizon repo work, and end-to-end optimization: topped by Claude Opus 5 at 36.53%, with a lot of headroom left.

TabBench-Bio: evaluating ML where biomedicine actually lives: wide tables, tiny n

A living eval suite of 43 biomedical HDLSS datasets across 28 feature×sample operating points: tabular foundation models lead at the reference cell, but logistic regression stays uncomfortably close.

TrialGPT 2.0: trial matching that faces real oncology workflows

Multicenter retrospective and prospective evaluation of an AI-assisted clinical trial recommender: ~91% top-10 hit rate vs clinician picks, 55% less screening time, and more trial access in a live tumor board.

Why this site exists

AI is more than a chat box on the web. Bitware News covers what the technology actually does: methods, medical ML, evaluation: with primary sources and caveats.