5 papers · 1 filter
The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections
Haoxuan Jia, Yang Liu, Bin Chong +13
LLM agents that read untrusted content can be hijacked by prompt injections. Runtime monitors that try to catch a hijack before the agent acts, and benchmarks that score each task…
Hindsight Memory-PRM: Supervising Memory Management with Auditable Hindsight Credit
Haoxuan Jia, Yang Liu, Yingguang Yang +14
Memory operations of long-horizon LLM agents are hard to supervise: an operation's value is unobservable when it is taken. But they are special -- they leave machine-readable evide…
Thought-Aware KV Cache Compaction for Reasoning via Adaptive Attention Matching
Yang Liu, Bin Chong, Chongyang Zhang +3
Reasoning language models generate lengthy chain-of-thought (CoT) sequences whose key-value (KV) cache grows linearly and becomes a memory bottleneck during decoding. Existing comp…
FinHarness: An Inline Lifecycle Safety Harness for Finance LLM Agents
Haoxuan Jia, Yang Liu, Bin Chong +10
Finance LLM agents must simultaneously block prompt-induced unauthorized actions and approve legitimate multi-step business workflows. However, boundary filters often miss irrevers…
ExTax: Explainable Disinformation Detection via Persuasion, Emotion, and Narrative Role Taxonomies
Shang Luo, Yingguang Yang, Zhenchen Sun +8
The democratization of LLMs has accelerated the generation and circulation of highly fluent disinformation, making traditional syntax-semantic verification increasingly insufficien…