4 papers
When Does Restricting a Coding Agent to execute_code Help? A Regime Agent-Design Ablation
Hong Yang, Qi Yu, Travis Desell
Modern coding agents expose multiple tool surfaces -- IDE primitives, bash, and Model Context Protocol (MCP) code-execution -- and the field has shipped three contradictory claims…
Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation
Yuxuan Qiao, Dongqin Liu, Hongchang Yang +2
LLM-based agents increasingly use multiple external tools to complete complex tasks. We study Tools Orchestration Privacy Risk (TOP-R): an agent may combine individually non-sensit…
Domain Feature Collapse: Implications for Out-of-Distribution Detection and Solutions
Hong Yang, Devroop Kar, Qi Yu +2
Why do state-of-the-art OOD detection methods exhibit catastrophic failure when models are trained on single-domain datasets? We provide the first theoretical explanation for this…
Can We Ignore Labels In Out of Distribution Detection?
Hong Yang, Qi Yu, Travis Desell
Out-of-distribution (OOD) detection methods have recently become more prominent, serving as a core element in safety-critical autonomous systems. One major purpose of OOD detection…