公开论文雷达

公开 arXiv 研究简报 · 2026-08-25T00:52:35.788776+00:00

先看结论和关键数字,再决定要不要读原文。候选只在首次出现时展示;旧候选若后来通过深读门槛,仍会进入重点。

别信表层信号:先看能落地的追踪,再看要重跑的评审

三篇都在补同一个盲区:类型检查通过、单会话成功、断言只看单点,都盖不住深层问题。VDM-SL那篇最能直接上手——把单次执行录成持久事件树,事后复查跨步状态;ProofJudge和DreamBench是评测方法,结论都带明确的刀子:前者单次噪声大必须重跑三次,后者字面存储分最高但别当成机制更优。

推荐阅读顺序

  1. 2608.19510:最具体、能立刻上手:把单次执行落成持久树。先用它建立‘表层信号漏掉跨步属性’这个共同视角。
  2. 2608.20432:顺着‘补盲区’看评审思路,但重点是它的噪声警告:单次结果会翻转,必须重跑三次取对齐率。
  3. 2608.20664:同类评测的收尾:学它把隐藏信息写进早会话、用可执行预言机评分,也记住别把单配置分数读成机制优越。
共性方法
三者都不信一个太浅的通过信号——类型检查、单会话成功率、单点断言——转而造一个能留痕或可复核的东西:持久执行树、配对偏好评审、多会话可执行预言机。核心都是把‘看起来过了’换成‘能事后查’。
关键分歧
分歧在证据强度和用途。VDM-SL是工程制品,只有实现加自动门示例、没有量化对比,可直接拿来用;另两篇是量化基准,带统计校正和明确失效边界:ProofJudge单次噪声极高要重跑,DreamBench只证了能区分配置、没证机制优越或可泛化。
选择准则
要能马上落地的观测手段,选VDM-SL追踪;要给证明或记忆系统做筛选选型,用配对偏好或可执行预言机基准,但一律多次重跑看对齐率,别把单次或单配置的分数当定论。

重点深读(3 / 3 篇)

形式化与程序验证(1 篇)

形式化与程序验证 5/30

ProofJudge: Tool-Grounded LLM Evaluation of Formal Proof Quality in Mathlib

类型检查通过不代表证明合格:LLM评审能识别Mathlib审稿偏好,但必须跑三次以上…:如果你在维护或给Mathlib提交Lean 4证明,类型检查通过只是第一步,策略卫生和库规范仍靠人工审稿把关,而LLM生成的低质量证明正在加重这一负担。ProofJudge是一个带Mathlib工具访问权限的LLM评审代理,它在218对真实PR修订上达到了63.5%–80.8%的人工偏好对齐率,可以替你先做预筛选——但前提是多次重复运行,因为单次结果噪声极大。

两句看懂

Lean 4类型检查只验证正确性,不检查策略卫生、可复用性或库规范,ProofJudge用五维评分加Mathlib工具访问来补这个缺口。在218对测试集、六款模型、三次重复实验中对齐率达63.5%–80.8%(p < 10⁻⁵),但单次运行噪声极高,部分模型近半数裁定会在重跑中翻转。

核心判断

LLM评审能从退回版与接受版的配对中识别Mathlib人工审稿偏好,六款模型对齐率63.5%–80.8%(p < 10⁻⁵)远超随机基准;但单次运行噪声过大,任何结论都要多次重复聚合后才可信。

关键要点

1. 旧假设是类型检查通过即代表证明可用,忽略了策略卫生、可复用性和命名规范,导致LLM批量产出合规但低质的证明,把压力转嫁给人工审稿;且单次LLM评审噪声严重,同一消融实验p值可在0.34与0.006之间跳变。 2. 方法是从Mathlib历史PR提取218对退回版与合并版声明,用123对开发集调权重、218对测试集做评测;代理用bash工具查库(限20次调用)在独立会话中对五维指标各打1–10分,互不知晓对方版本。 3. 六款模型三次重复实验对齐率63.5%–80.8%(p < 10⁻⁵)均超随机基准,两款开源模型约70%且成本仅约闭源最高分的十分之一;但重跑翻转率达1/5至近1/2,所以必须至少重复三次、用对齐率做指标再报告结论。

证据与结果

数据集为218对来自Mathlib历史PR的声明(早期退回版对最终合并版),123对开发集调权重,218对测试集正式评测。六款模型(三开源、三闭源)每对跑三次重复,基准为50%随机。结果:对齐率63.5%–80.8%,p < 10⁻⁵(聚类自举区间)。关键失败模式:同一模型在相同声明上重跑翻转率从1/5到接近1/2;同一消融的单次实验p值从0.34跳到0.006,说明单次实验结论在统计上不可靠。

打开论文原文
它要解决什么
Lean 4证明通过类型检查后,LLM能否按Mathlib的库级标准(策略卫生、可复用性、命名规范)分辨出哪个版本会被人工审稿退回、哪个会被接受?
研究路径
代理每次只收到一个声明的一个修订版文本,通过bash工具查询Mathlib库(最多20次调用),对五个维度各打1–10分,系统按固定权重汇总成总分。两个修订版在独立会话中评分,代理不知道另一版本的存在和得分;以得分高的版本作为偏好输出,再与Mathlib实际接受决定比对计算对齐率。
这对工程意味着什么
第一步行动:在类型检查通过后接入五维评审代理对PR做预筛选,并且至少运行三次重复实验再报告结论。要避免的捷径:不要相信单次运行的结果——单次即使p < 0.05,重跑也可能复现为p = 0.34,把评测噪声当成模型能力的真实差异。
证据定位
六款模型(三开源、三闭源)在218对测试集上各做三次重复实验,对齐率为63.5%–80.8%,全部以p < 10⁻⁵显著超过50%随机基准(聚类自举区间)。两款开源模型对齐率约70%,成本约为最高分闭源模型的十分之一。(筛选维度:可复核评测)
适用边界
数据仅来自Mathlib历史PR,评分权重在123对开发集上调整,存在对这一特定分布过拟合的风险;评测未控制声明难度分布;每次限20次工具调用,可能限制复杂证明的评分深度。
方法与英文摘要

作者从Mathlib历史PR中提取218对声明,每对包含早期被退回的修订版和最终被合并的版本;其中123对作开发集用于调整评分权重,218对作测试集。评审代理通过bash工具访问PR提交点的库状态,最多调用20次工具,对五个维度各打1–10分:库利用率、自动化适配、结构清晰度、声明质量、Mathlib规范。两个修订版在独立会话中分别评分,代理不知道另一个版本的存在及其分数,最后以高分版本作为偏好输出,与Mathlib实际接受决定对比。

Formal proofs in Lean 4 that pass the kernel's type checker can nonetheless vary widely in quality. We introduce ProofJudge, an agentic LLM-as-judge system that scores formal proof quality along five dimensions beyond correctness: library leverage, automation fit, structural clarity, statement quality, and Mathlib conventions. We evaluate ProofJudge on a novel dataset of 218 declarations drawn from distinct Mathlib PRs. The judge agent is grounded by tool access to the commit the PR is applied to, enabling it to query the library state when scoring. A judge is considered aligned with human preferences when it rates the version of the PR Mathlib accepted above the initial version that was sent back for revision. All six judge models evaluated recover the reviewers' preference well above chance, from 80.8% to 63.5%, and two open-weight judges reach roughly 70% at a tenth of the best judge's cost. We release the judge harness, evaluation dataset, and evaluation traces as open-source artifacts to support further research.

软件工程与仓库智能(1 篇)

软件工程与仓库智能 7/30

Trace-Based Execution-Level Observability of VDM-SL Specifications

把VDM-SL的单次执行落成一棵持久化事件树,替代用完即散的逐步调试:你在调VDM-SL规格时一定遇到过:断言只能看单个时刻,调试器一关执行记录就没了,跨多步的状态属性无处可查。这篇论文给出树形ExecutionTrace数据模型,把赋值、操作调用、返回事件全部录下来并持久化,已在ViennaTalk解释器中实现并能做状态机可视化。

两句看懂

VDM-SL断言只能检查单一时刻或操作前后的状态,跨多执行步骤的属性它管不到。这篇论文用树形事件模型在ViennaTalk里录下赋值与调用全程并持久化,让单次执行变成可事后复查的制品。

核心判断

在VDM-SL执行中以树形结构记录赋值与操作调用事件,就能把单次执行持久化并支持跨步状态分析;证据是ViennaTalk中的实现和自动门示例,无量化对比。

关键要点

1. 旧缺口:断言只看离散时刻,调试器逐步跟踪但不持久化,跨步属性无处可查。 2. 做法与对照:ExecutionTrace树录下赋值、嵌套调用、返回三类事件,结构用VDM-SL类型自描述,在ViennaTalk解释器拦截实现,以自动门规格验证可行。 3. 结论与行动:单次执行可存成独立制品并做状态机可视化;没有量化对比,只覆盖单条执行路径,启用时把它当调试替代品而非验证工具。

证据与结果

评估就是自动门(Automatic Door)一个示例规格,展示追踪结构捕获传感器触发的状态变迁和嵌套调用的过程。没有基准实验、检测率、性能指标或大规模规格集评估。注意any类型不是标准VDM-SL,靠VDMJ和ViennaTalk等工具的扩展支持,构成工具依赖。

打开论文原文
它要解决什么
VDM-SL调试器能逐步跟踪但不保存执行,不变式和前后置条件又只能引用当前时刻或操作前后的状态。跨多个执行步骤的属性到底该怎么持久化下来、事后系统地查?
研究路径
ViennaTalk解释器执行规格时拦截两类构造:赋值语句生成AssignEvent,记录模块名和变量-值映射;操作调用生成OpCallEvent,其events字段用嵌套子序列递归装下被调方内部的全部事件;OpReturnEvent记录返回值。根节点带执行初始状态,整棵树存为持久制品,再驱动状态机可视化。
这对工程意味着什么
第一步:在VDM-SL项目里启用ViennaTalk执行追踪,用持久化的追踪树替代逐步调试会话,事后复查跨步状态序列。要避开的捷径:别指望只靠断言覆盖跨步属性——断言只能查离散时刻,步骤之间的完整状态路径它抓不到。
证据定位
论文给出Fig. 1的类型定义和自动门示例规格,展示追踪树能捕获传感器触发的状态变迁和嵌套操作调用。摘录未提供量化对比指标、检测率或性能数据。(筛选维度:形式化验证、软件工程方法)
适用边界
只分析单次具体执行路径,不做全路径穷举验证;示例只有自动门一个小规格,代表性有限;any类型在标准VDM-SL中不合法,实现依赖工具扩展;跨步属性覆盖的完整性没有经过量化评估。
方法与英文摘要

定义树形ExecutionTrace:根事件带初始状态和顶层事件序列;赋值事件记录模块名与变量-值映射;操作调用事件用嵌套子序列递归装下被调方的全部子事件;返回事件记录返回值。整套结构用VDM-SL类型语言自描述(Fig. 1),在ViennaTalk解释器执行时拦截赋值语句和操作调用这两类构造来生成事件,并驱动状态机可视化。示例用的是自动门规格。

VDM has been pursuing rigorous verification through mathematical theorem proving and software testing via simulated execution. Animation through an interpreter enables validation of the specification to ensure it meets the required functionality. Step-by-step execution in a debugger also allows the user to follow the internal behavior of operations. In this paper, we propose the recording and utilization of execution traces of assignments, operation calls, and return statements to make the internal behavior of operations persistent and analyzable as state-based models. The data model of events in execution traces, its implementation in ViennaTalk, and its application to visualization will be introduced.

代码质量与优化(0 篇)

本轮没有通过深读证据门的重点论文。

UI 与 GUI Agent(0 篇)

本轮没有通过深读证据门的重点论文。

个人知识与本体(1 篇)

个人知识与本体 4/30

DreamBench-SWE: A Multi-Session Memory-Hygiene Benchmark for Software Agents

多会话可执行基准能区分记忆配置:固定字面存储通过率 0.539,远高于无记忆的 0.…:如果你在给软件智能体选记忆系统,单会话成功率会骗你——它掩盖跨会话的记忆失败。DreamBench-SWE 用多会话隐藏信息依赖加可执行预言机做受控测试,能把不同记忆配置的通过率拉开差距。

两句看懂

单会话任务成功率掩盖跨会话记忆失败,DreamBench-SWE 用可执行预言机对多会话隐藏信息依赖做受控测试。继任审计四条件完成 720 个 S3 单元,固定字面存储通过 97/180(0.539),Holm 校正后三项有效对比均拒绝无记忆基线,但预注册机制对比因一致性拒绝不可用。

核心判断

多会话可执行基准可区分不同记忆配置:固定字面存储(97/180,0.539)对比无记忆(21/180,0.117)在 Holm 校正后显著;但机制效应、条件间优劣排序及产品泛化性均未建立。

关键要点

1. 旧假设失效:单会话成功率无法暴露跨会话记忆失败(陈旧事实检索、反馈过度泛化、诊断固化为指令在单会话评分中不可见)。 2. 方法与受控检验:S1/S2 写入不可推断的隐藏信息,S3 由容器内可执行预言机评分,四条件各跑 360 工作单元、共 720 个 S3 单元,经有效性门控与污染扫描。 3. 决定性结果与做法:字面存储 97/180(0.539)对无记忆 21/180(0.117),Holm 校正后三项对比均显著;选型按此基准测,但别把单一配置的分数当成机制优越性。

证据与结果

继任审计(v2.1)四条件,每条件 90 个 S3 任务,共 360 工作单元、720 个 S3 单元。无外部记忆 21/180(0.117);逐字事件记忆 82/180(0.456);混合参考探针 83/180(0.461);固定字面存储 97/180(0.539)。预注册六槽 Family A 保留槽 p=1;三项有效对比 Holm 校正后拒绝无记忆基线。两项预注册机制对比因一致性拒绝不可用;字面存储 vs 逐字对比非确认性、敏感度依赖;参考探针对比未拒绝。v2 主对比(混合 vs B5):95/180 vs 89/180,p=0.518,Holm p=1,零效应。

打开论文原文
它要解决什么
多会话软件工程任务中,不同记忆系统能否在可执行预言机基准上产生可区分的通过率?这些差异经统计校正后是否站得住?
研究路径
陷阱把隐藏信息(私有标记、废弃事实、有范围的反馈)写入 S1/S2;S3 提示不含该信息,代理容器文件系统排除参考答案。可执行预言机按字节级条件评分。睡眠阶段可标记派生记忆为陈旧或阻止检索,但不得销毁原始轨迹。所有运行经有效性门控与污染扫描审查。
这对工程意味着什么
第一步行动:评测多会话软件智能体记忆时,改用多会话可执行预言机基准替代单会话任务成功率。要避免的捷径:字面存储在此基准通过率最高(0.539),但切勿把单一配置的基准表现直接解读为机制优越性或跨系统泛化能力。
证据定位
继任审计 Holm 校正后,三项有效对比均拒绝无记忆基线(21/180,0.117)。固定字面存储 97/180(0.539),逐字记忆 82/180(0.456),参考探针 83/180(0.461)。v2 主对比(混合 95/180 vs B5 89/180)为零效应:p=0.518,Holm p=1。(筛选维度:可复核评测)
适用边界
两项预注册机制对比因一致性拒绝不可用;字面存储 vs 逐字对比非确认性且敏感度依赖;C9/C10 揭示 B0 顶部空间局限;研究由单一研究者完成;外部托管配置针对特定固定版本,产品泛化性未建立。
方法与英文摘要

作者手工策划记忆陷阱集:S1/S2 会话写入隐藏规则(如私有方言标记须字节级复现)或已废弃的架构事实;S3 由容器内可执行预言机评分,代理文件系统排除基准库与参考答案。原始轨迹永不销毁,整合操作视为风险派生步骤。继任审计(v2.1)设四个条件:无外部记忆、确定性逐字事件记忆、含类型标注的原始混合参考探针、固定托管字面存储配置,各完成 360 工作单元、共 720 个 S3 单元,运行经有效性门控与污染扫描审查。

DreamBench-SWE is a multi-session benchmark for software-agent memory hygiene in which later software tasks depend on non-inferable evidence from earlier sessions and are scored by executable hidden oracles. We report the original scaled v2 fold and a separately preregistered v2.1 successor audit designed after that study but frozen before successor outcome inspection. The successor run completed 360/360 work units and 720/720 S3 cells across four conditions. In the original fold, the primary DF-hybrid--B5 contrast was null (95/180 versus 89/180; clustered p=.518, Holm p=1), not evidence of equivalence, and C9/C10 retained B0-headroom limitations. In the successor, no external memory achieved 21/180 passes (rate 0.1167), deterministic verbatim event memory 82/180 (rate 0.4556), the typed-plus-raw reference probe 83/180 (rate 0.4611), and one pinned hosted Mem0 literal-storage configuration 97/180 (rate 0.5389). The registered six-slot Family A retained unavailable slots at p=1; all three available comparisons against no memory rejected after Holm correction. Both preregistered mechanism contrasts were unavailable after pre-evaluation conformance rejection. The secondary literal-storage-versus-verbatim comparison was nonconfirmatory and sensitivity-dependent, while the comparison with the reference probe did not reject. The audit therefore supports DreamBench-SWE as a discriminating executable profile benchmark and characterizes one exact hosted-memory configuration, but it does not establish an external-system mechanism, superiority among memory-bearing conditions, equivalence, or broad product generality. The original v2.0.5 findings and artifacts remain unchanged.

人机协同与对齐(0 篇)

本轮没有通过深读证据门的重点论文。

本轮分类概览

同一论文只归入一个最先命中的赛道,避免重复计数;“新增候选”只统计首次展示的论文。

赛道新增候选重点
形式化与程序验证21
软件工程与仓库智能21
代码质量与优化00
UI 与 GUI Agent10
个人知识与本体41
人机协同与对齐00

近一个季度监测日历

北京时间。绿色表示有可阅读的新候选,灰蓝表示已监测但无新增,橙色表示部分降级;“无记录”不等于失败。

2026 年 6 月

1无记录2无记录3无记录4无记录5无记录6无记录7无记录8无记录9无记录10无记录11无记录12无记录13无记录14无记录15无记录16无记录17无记录18无记录19无记录20无记录21无记录22无记录23无记录24无记录25无记录26无记录27无记录28无记录29无记录30无记录

2026 年 8 月

近 14 次监测窗口

仅展示公开源的聚合运行状态,不含提示词、全文或个人数据。

本轮新增候选(9 篇)

按赛道、评分和日期展开;中文标签用于导航,英文摘要用于核验。已展示过的旧候选不会每日重复。

形式化与程序验证(2 篇)

形式化与程序验证 · 3/30 · 2026-08-21生成式AI加速验证与RISC-V流片报道:一人五周用AI代理完成从应用到RISC-V的验证与流片,证明由内核把关AI with Authority, from Application to Silicon

For sixty years, machine verification has been a major cost overhead, affordable only for exceptional artifacts. Here we report that generative AI inverts this relationship: at AI speed, machine verification is not only economical but essential to productivity --- it is the incorruptible referee that lets one person safely direct autonomous machine work at scale. In five weeks, one researcher on consumer AI subscriptions directed a small fleet of AI agents from application code, through a verified compiler and executive, to a RISC-V processor taped out on a community silicon shuttle; no proof passed through human review, and no RTL was written by a human. The working discipline --- the Salt method --- rests on a proof kernel no hallucinated proof can pass: mathematical claims travel between agents as kernel-checked artifacts, and human attention is reserved for statements, designs, and rulings. Verification is stated link by link, from the Lean 4 kernel to SAT-checked equivalence at the silicon boundary. We publish the complete accounting: theorem provenance, a pre-registered token meter, floor-bounded human time, and an error ledger whose catch numbering runs to #256 --- a monotone counter over the mathematics campaign's append-only flags ledger, maintained 2026-07-07 to 2026-07-20 (one number, #79, was never assigned; later catches are recorded un-numbered) --- against zero incorrect proofs reaching the record.

阅读 arXiv 原文
形式化与程序验证 · 5/30 · 2026-08-20ProofJudge:Lean证明质量自动评审基于218个Mathlib声明评测,六个评审模型以63.5%–80.8%恢复审稿人对PR版本偏好ProofJudge: Tool-Grounded LLM Evaluation of Formal Proof Quality in Mathlib

Formal proofs in Lean 4 that pass the kernel's type checker can nonetheless vary widely in quality. We introduce ProofJudge, an agentic LLM-as-judge system that scores formal proof quality along five dimensions beyond correctness: library leverage, automation fit, structural clarity, statement quality, and Mathlib conventions. We evaluate ProofJudge on a novel dataset of 218 declarations drawn from distinct Mathlib PRs. The judge agent is grounded by tool access to the commit the PR is applied to, enabling it to query the library state when scoring. A judge is considered aligned with human preferences when it rates the version of the PR Mathlib accepted above the initial version that was sent back for revision. All six judge models evaluated recover the reviewers' preference well above chance, from 80.8% to 63.5%, and two open-weight judges reach roughly 70% at a tenth of the best judge's cost. We release the judge harness, evaluation dataset, and evaluation traces as open-source artifacts to support further research.

阅读 arXiv 原文

软件工程与仓库智能(2 篇)

软件工程与仓库智能 · 6/30 · 2026-08-21AI审AI:GitHub PR审阅数据集基于CodAGE构建24.8万个AI归属PR的AI审阅事件数据集,跨产品审阅约占1.6%AI-to-AI Code Reviews of GitHub Pull Requests

AI coding agents are increasingly integrated into software development workflows, operating on both sides of the pull-request (PR) process: AI authoring agents create or modify PRs, while AI reviewers evaluate them. This creates a closed loop in which one AI coding agent reviews a contribution attributed to another. We construct a large-scale dataset of AI-to-AI code review by linking AI-attributed PRs with AI-attributed review events from CodAGE, a public dataset of coding-agent-generated GitHub events. Our dataset contains 248,641 unique AI-attributed PRs that received at least one AI-attributed review. Of these, 45,269 received cross-product review and 208,145 received same-product review; 4,773 PRs received both. Cross-product AI-to-AI review occurred in approximately 1.6% of identified agent-authored PRs but was substantial in absolute terms, and its volume increased by more than two orders of magnitude from 2025-Q1 to 2025-Q3. Reviewer output varied across author-reviewer configurations. CodeRabbit labeled 35.0% of its comments on Claude Code-authored PRs as refactor comments, compared with 10.5% on Copilot-authored PRs, although this difference may reflect characteristics of the PRs rather than the reviewer. For three of four dual-role reviewers, mean comments per PR were 58-65% higher in the same-product group, although effect sizes were small or negligible and the difference was concentrated in the upper tail. Among pairs with complete, nonnegative timestamps, the observed median latency was 1.2 minutes for cross-product pairs and 4.7 minutes for same-product pairs; differential timestamp availability and reviewer composition limit this comparison. Overall, closed-loop AI-to-AI review is increasing but remains a minority of identified agent activity, with review output varying across authoring-agent groups and product configurations.

阅读 arXiv 原文
软件工程与仓库智能 · 7/30 · 2026-08-21LLM辅助需求检查的负面效应34人交叉实验检验LLM支持对需求缺陷识别、严重度分类与耗时的影响,结果呈负面Human-AI Collaboration in Requirements Engineering: Evidence of the Negative Effect of LLMs on Requirements Inspection

Background. Requirements inspection (RI) is a well-established practice for detecting potential defects in requirements artifacts early in the software lifecycle. Recent advances in large language models (LLMs) have stimulated interest in their potential to support requirements engineering (RE) tasks. However, empirical evidence on the effects of LLMs when used as collaborative assistants in human-performed RI remains scarce. Aims. We aim to investigate the impact of LLM support on human-performed RI, considering inspection effectiveness in terms of smell identification and severity classification (i.e., nocuous vs innocuous), as well as inspection duration. Method. We conducted a controlled crossover design experiment with 34 participants, who inspected textual specifications with and without LLM support, identifying and classifying requirements smells while recording inspection time. We analyzed the data using one Bayesian regression model per outcome variable, accounting for validity threats induced by the crossover design as well as covariates and mediators. Results. Results show that LLM support negatively affects smell detection accuracy but has no significant effect on smell classification or task duration. A learning effect is present across experimental periods, but reduced when RI is first performed with LLM support. Conclusions. Our findings provide empirical evidence that LLM support does not necessarily improve performance and may, instead, hinder it for novice inspectors. Moreover, the results suggest that learning RI with LLM-support from the beginning may slow down the skill acquisition process, implying threats for LLM-supported learning.

阅读 arXiv 原文

代码质量与优化(0 篇)

本轮该赛道没有候选论文。

UI 与 GUI Agent(1 篇)

UI 与 GUI Agent · 3/30 · 2026-08-21对话式搜索健康信息信任研究两项混合研究(N=21、N=20)显示参与者对ChatGPT健康信息信任显著高于GoogleFrom Search Agents to Dissemination Interfaces: Understanding Human Trust in Health Information from Conversational Search

Large Language Models (LLMs) deployed through Conversational User Interfaces (CUIs) are transforming health information-seeking by offering immediate, interactive experiences compared to traditional search engines like Google. However, how trust is influenced by both the types of search agents and the interface used to disseminate the information remains underexplored. This research integrates two mixed-methods studies (lab sessions and interviews) to comprehensively explore trust perceptions in health information across different search agents and dissemination interfaces. In Study 1 (N=21), we investigated trust in health information sourced from ChatGPT and Google across three types of health-related search tasks. Results showed significantly higher trust in health information from ChatGPT, highlighting the promise of LLM-powered conversational search. Building on this, Study 2 (N=20) extended the investigation to explore how the dissemination interface influences trust in LLM-sourced health information by comparing three interfaces: text-based, speech-based, and embodied, all sourcing from the same LLM. Findings revealed significant trust variations across the dissemination interfaces. Interviews from both studies revealed key factors influencing trust in LLM-powered conversational search, including source credibility, participants' search autonomy, and prior knowledge as well as the interaction style and modality. Our findings highlight the potential of LLM-powered conversational search to transform health information-seeking, underscoring the interplay between the credible search agents and the thoughtfully designed dissemination interfaces in shaping trust. These insights are crucial for developing effective, trustworthy LLM-powered health tools to enhance the health information-seeking experience.

阅读 arXiv 原文

个人知识与本体(4 篇)

个人知识与本体 · 0/30 · 2026-08-21智能体记忆投毒与筛查边界1.2%记忆被污染使准确率从0.850降至0.300;内容筛查漏掉360条投毒记忆,溯源加权检索无显著防御Utility Under Attack: Agent Memory Poisoning and the Limits of Content Screening and Provenance Ranking

Persistent memory makes false information durable: once a false statement is stored, it can be retrieved into future sessions that match it. We measure the cost of this failure mode using plainly worded false assertions generated in a single pass, with no instruction, trigger, or retriever optimization. Poisoning 1.2% of a LongMemEval corpus reduces accuracy from 0.850 to 0.300. A four-stage write-time screening pipeline that reaches 0.832 recall on indirect prompt injection while flagging 1.5% of trigger-word-laden benign text rejects 0 of 360 poisoned memories. We argue this exposes a boundary of content-only screening: distinguishing a false assertion from a true one generally requires external grounding beyond the text itself. We then evaluate provenance-weighted retrieval. The shipped weight is statistically indistinguishable from no defense (p=0.80), while a stronger weight recovers utility only by excluding untrusted content. In a mixed-provenance corpus where untrusted content is mostly benign, accuracy rises from 0.3167 to 0.7000; when the answer-bearing evidence itself arrives untrusted, evidence recall falls to zero and accuracy to 0.0417. Under the measured similarity regime, the additive provenance term has no usable setting: a weight strong enough to resist query-shaped poison is also strong enough to suppress legitimate untrusted evidence. We therefore argue for bounded occupancy constraints at retrieval rather than additive provenance penalties, and release the harnesses, corpora, and aggregate run reports.

阅读 arXiv 原文
个人知识与本体 · 0/30 · 2026-08-21ForeDreamer:双智能体记忆架构将开放网页证据先蒸馏为结构化记忆,以事实记忆加经验记忆的双代理框架做未来事件预测ForeDreamer: A Self-Evolving Dual-Agent Memory Architecture for Future Event Prediction

Open-web future event prediction requires agents to distill reliable signals from noisy, redundant, and incomplete evidence. Existing retrieval/memory mechanisms directly feed retrieved information to agents or rely on simple memory functions such as storing and reusing prior information for prediction, leaving them insufficient for open-web forecasting. We propose to transform raw web evidence into structured memory before prediction, enabling agents to reason over distilled, question-specific evidence rather than noisy retrieval results. This paper presents ForeDreamer, a self-evolving dual-agent framework for managing memory over open-web evidence. ForeDreamer separates factual memory, a question-specific evidence state for the current forecast, from experiential memory, persistent agent experience accumulated across forecasting episodes. It uses a main agent for search and prediction, and a memory-processing subagent to convert search results into factual memory with dedicated tools. ForeDreamer further evolves experiential memory through two tracks, improving both forecasting decisions and factual-memory construction. Experiments on Prophet Arena and FutureX demonstrate the effectiveness of ForeDreamer. Project page: https://zhongzero.github.io/ForeDreamer

阅读 arXiv 原文
个人知识与本体 · 4/30 · 2026-08-21DreamBench-SWE:多会话记忆卫生基准原组对照无显著差异(95/180对89/180,p=.518);后续审计中无外部记忆通过率0.117,事件记忆DreamBench-SWE: A Multi-Session Memory-Hygiene Benchmark for Software Agents

DreamBench-SWE is a multi-session benchmark for software-agent memory hygiene in which later software tasks depend on non-inferable evidence from earlier sessions and are scored by executable hidden oracles. We report the original scaled v2 fold and a separately preregistered v2.1 successor audit designed after that study but frozen before successor outcome inspection. The successor run completed 360/360 work units and 720/720 S3 cells across four conditions. In the original fold, the primary DF-hybrid--B5 contrast was null (95/180 versus 89/180; clustered p=.518, Holm p=1), not evidence of equivalence, and C9/C10 retained B0-headroom limitations. In the successor, no external memory achieved 21/180 passes (rate 0.1167), deterministic verbatim event memory 82/180 (rate 0.4556), the typed-plus-raw reference probe 83/180 (rate 0.4611), and one pinned hosted Mem0 literal-storage configuration 97/180 (rate 0.5389). The registered six-slot Family A retained unavailable slots at p=1; all three available comparisons against no memory rejected after Holm correction. Both preregistered mechanism contrasts were unavailable after pre-evaluation conformance rejection. The secondary literal-storage-versus-verbatim comparison was nonconfirmatory and sensitivity-dependent, while the comparison with the reference probe did not reject. The audit therefore supports DreamBench-SWE as a discriminating executable profile benchmark and characterizes one exact hosted-memory configuration, but it does not establish an external-system mechanism, superiority among memory-bearing conditions, equivalence, or broad product generality. The original v2.0.5 findings and artifacts remain unchanged.

阅读 arXiv 原文
个人知识与本体 · 3/30 · 2026-08-21加权记忆树:长程LLM智能体记忆按任务、子任务与动作分层组织执行历史,用动态保留分管理记忆,称在GAIA-Text上评测Weighted Memory Tree: Remembering What Matters for Long-Horizon LLM Agents

Large language model (LLM) agents have demonstrated the ability to solve multi-step tasks requiring planning, tool use, and external information access, yet growing execution histories increase inference cost and expose reasoning to outdated, irrelevant, or misleading information, potentially degrading reasoning quality. Existing memory approaches organize or compress execution histories but provide limited mechanisms for deciding which memories remain active. We introduce the, a hierarchical memory system that organizes execution into tasks, subtasks, and actions while assigning each memory a dynamic retention score. Event-based updates and selection-based decay revise these scores, allowing WMT to preserve useful information, fold completed trajectories, suppress low-utility content, and retain access to folded context. We evaluate WMT on GAIA-Text using Qwen3-8B, Gemma 4 E4B, and Llama-3.1-8B, with ablations and memory-poisoning experiments. Relative to linear memory, WMT improves accuracy by an average of 9.97 percentage points while reducing prompt-token usage by 32.8%. Memory-poisoning experiments show that WMT limits the persistence and propagation of unreliable information. Our results suggest that effective long-horizon agent memory depends less on storing more information than on deciding which information should remain active.

阅读 arXiv 原文

人机协同与对齐(0 篇)

本轮该赛道没有候选论文。