7 papers
TriLens: Per-Layer Logit-Lens Entropy for White-Box Hallucination Detection
Bohan Yang, Yijun Gong, Zhi Zhang +3
When a language model hallucinates, the final answer is wrong, but the mistake is not necessarily invisible inside the model. Different internal pathways may remain uncertain, disa…
Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs
Zhe Yu, Wenpeng Xing, Chen Ye +4
Retrieval-augmented LLMs are deployed for tasks where evidence quality determines action safety, yet evaluation protocols assume that single-turn robustness predicts robustness whe…
Composition Collapse: Stable Factual Knowledge Does Not Imply Compositional Reasoning
Zhe Yu, Wenpeng Xing, Yunzhao Wei +4
Post-training is routinely evaluated through aggregate benchmark scores that treat multi-hop reasoning as a single capability -- as if a model that answers more questions correctly…
The Attribution Blind Spot: Detecting When Language Models Rely on Memory Rather Than Retrieved Context
Zhe Yu, Wenpeng Xing, Yunzhao Wei +4
Retrieval-augmented generation promises to ground language model outputs in external evidence, yet the field has no reliable way to verify whether retrieved context actually govern…
Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control
Zhe Yu, Wenpeng Xing, Gaolei Li +4
Retrieval-augmented generation (RAG) increasingly underpins high-stakes applications, yet remains vulnerable to Confundo-style poisoning where adversarially optimized documents man…
Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition
Zhenhua Xu, Qichen Liu, Zhebo Wang +4
Backdoor-based fingerprinting has emerged as an effective technique for tracing the ownership of large language models. However, in real-world deployment scenarios, developers ofte…