ICML 2026 — 티어별 논문 리스트 (abstract 전문)

Jul 5–11, 2026 · 서울 COEX · 약 3,500편 accepted · 82편 큐레이션 + 82편 abstract 전문 + 15편 PDF 다운로드
~3,500
accepted paper
82
관심 매칭 큐레이션
82
abstract 전문 확보
15
PDF 실물 다운로드 (S)

티어 정의

S 직결 · oral/spotlight · PDF 다운로드
A 강한 매치 · arXiv 링크
B 인접 · ICML 페이지
아래 모든 카드의 abstract 는 ICML 2026 개별 논문 페이지에서 verbatim 회수. 일부 문장은 가독성 위해 트리밍. Olive Young / 이미지·에이전트 상용 관점 기준.

1 · 이미지 편집 · 인페인팅 · Refinement

Mask-free 편집, concept 제거, aesthetic planning — 립 편집 라인 (face-inverse-rendering) 연장.

S  다운로드 완료

Qingdong He, Chaoyi Wang, Peng Tang, Yifan Yang, Xiaobin Hu · ICML Oral 1F
Video subtitle removal is essential for content localization and media re-editing, yet existing mask-guided diffusion methods face critical limitations: training inefficiency requiring extensive annotations, inference complexity demanding explicit mask sequences, and static prior utilization unable to adapt to quality variations. We present CLEAR, a lightweight adapter-based framework addressing these challenges through three technical innovations. First, self-supervised prior learning (Stage I) extracts occlusion guidance from video pairs using pixel differences as weak supervision, eliminating annotation dependency while learning generalizable subtitle features across languages. Second, LoRA-based adaptive refinement (Stage II) enables parameter-efficient training that preserves pre-trained visual priors while achieving true mask-free end-to-end inference. Third, adaptive focal weighting dynamically adjusts prior influence based on local quality assessment. CLEAR achieves superior multilingual subtitle removal with only 0.77% trainable parameters.
Mingde Yao, Zhiyuan You, King-Man Tam, Menglu Wang, Tianfan Xue · ICML Oral 1F
With the recent fast development of generative models, instruction-based image editing has shown great potential in generating high-quality images. However, the quality of editing highly depends on carefully designed instructions, placing the burden of task decomposition and sequencing entirely on the user. PhotoAgent formulates autonomous image editing as a long-horizon decision-making problem. It reasons over user aesthetic intent, plans multi-step editing actions via tree search, and iteratively refines results through closed-loop execution with memory and visual feedback — without requiring step-by-step user prompts. To support reliable evaluation, we introduce UGC-Edit, an aesthetic evaluation benchmark of 7,000 photos and a learned aesthetic reward model. PhotoAgent significantly outperforms existing methods in both instruction faithfulness and visual quality across diverse editing scenarios.
ICML Oral 5E · 100 concept 4.3초 erase
OCE reformulates editing-based erasure as multiplicative parameter updates from a geometric perspective, applying layer-wise orthogonal transformations derived from a closed-form solution to enable precise concept erasure while preserving neuron magnitude and angular geometry. To address conflicting constraints in multi-concept erasure, OCE introduces a subspace-level objective with structured subspace manipulation, yielding a more effective and scalable erasure. The core limitation of editing-based methods is reliance on additive parameter updates: concept semantics primarily depend on neuron direction rather than magnitude while overall generative capacity relies on angular geometry, and additive updates inherently entangle these factors introducing unintended interference. OCE outperforms existing methods in concept erasure and non-target preservation, erasing up to 100 concepts in 4.3 seconds while preserving generation quality.

A  arXiv 링크

Spotlight Poster · Wed PM · training-free plug-and-play
Text-to-image diffusion models remain vulnerable to adversarial prompts that elicit disallowed content, motivating reliable inference-time controls. A popular approach is negative guidance, which subtracts a negative-prompt direction with a fixed weight. However, it often forces a safety–fidelity trade-off, causing artifacts or prompt drift when over-applied and failing under attacks when under-applied. We introduce Concept Removal Guidance (CRG), a training-free method that estimates unwanted-concept presence at each diffusion step using only noise predictions, then adaptively gates and calibrates negative guidance via a closed-form constrained update that enforces a target presence threshold while minimally perturbing the conditional trajectory. Across multiple red-teaming benchmarks, CRG significantly reduces attack success rates while improving benign fidelity, and additionally suppresses targets such as artist style and violence without fine-tuning or external classifiers.
Poster · SD 3.5-Medium 63→87% GenEval
Flow-matching has emerged as a leading framework for high-fidelity text-to-image generation. However, its alignment with human preferences through RL is often hindered by substantial computational overhead. Flow-TTRL is the first test-time RL framework that achieves alignment on the fly, reinterpreting intermediate latent representations as an implicit policy and utilizing SDE-based rollouts to explore high-reward trajectories within the learned vector field. Two-stage optimization: Proximal Reward Difference Prediction (PRDP) ensures structural stability in high-noise regimes through pairwise reward regression, while Group Relative Policy Optimization (GRPO) refines fine-grained aesthetic details. On GenEval, Flow-TTRL elevates SD 3.5-Medium from 63% to 87% and Flux.1 Dev from 66% to 83%. Achieves 15–20% avg gain across T2I-CompBench, matching SOTA RL-based fine-tuning without extra fine-tuning.
Journal Track
Recent literature has effectively leveraged diffusion models trained on continuous variables as priors for solving inverse problems. Discrete diffusion models with discrete latent codes have shown strong performance, particularly in modalities suited for discrete compressed representations, such as image and motion generation. However, their discrete and non-differentiable nature has limited their application to inverse problems formulated in continuous spaces. This paper presents a novel method for addressing linear inverse problems by leveraging generative models based on discrete diffusion as priors. We approximate the true posterior distribution with a variational distribution constructed from categorical distributions and continuous relaxation techniques. We employ a star-shaped noise process to mitigate the drawbacks of traditional discrete diffusion models with absorbing states, demonstrating comparable performance to continuous diffusion techniques with lower GPU memory consumption.
Journal Track
Masked diffusion models have shown promising performance in generating high-quality samples in a wide range of domains, but accelerating their sampling process remains underexplored. We theoretically analyze the MaskGIT sampler for image modeling, revealing its implicit temperature sampling mechanism. MaskGIT is asymptotically equivalent to a choose-then-sample (CTS) formulation, instantiated as the "moment sampler," which explicitly separates index selection from token sampling. This yields unbiased token sampling and exposes an algorithmic design space for index selection. We reveal that MaskGIT implicitly adopts a low-temperature sampler, which explains why MaskGIT often degrades with more sampling steps. We improve the index selection through partial caching for transformers and a hybrid approach formalizing the exploration-exploitation trade-off in adaptive unmasking.
Journal Track · Segment-gEnerate-and-bLEnd framework
Current image manipulation primarily centers on static manipulation, such as replacing specific regions within an image or altering its overall style. We introduce an innovative dynamic manipulation task, subject repositioning — relocating a user-specified subject to a desired position while preserving image fidelity. The fundamental sub-tasks — filling the void left by the repositioned subject, reconstructing obscured portions, and blending the subject with surroundings — can be effectively reformulated as a unified, prompt-guided inpainting task. We employ a single diffusion generative model to address these sub-tasks using various task prompts learned through our proposed task inversion technique. Additionally, pre-processing and post-processing techniques enhance the quality. These form the SEELE (SEgment-gEnerate-and-bLEnd) framework, evaluated on a new real-world ReS dataset.

B  참조

ICML Oral 5E
This paper tackles the challenging problem of developing a proactive copyright protection mechanism that cuts off unauthorized use of diffusion generative models. Existing studies largely fall into post-hoc attribution (watermarking, fingerprinting) or degradation-only defenses, which offer only indirect and limited preventive effect. GoodDiffusion, inspired by backdoor mechanisms, enforces model-level use-time control by internalizing authorization into the generative process through a selectively permissive, otherwise closed behavior. It preserves high-quality generation for authorized queries carrying valid signatures, yet refuses to generate for unauthorized inputs. We further show that naive static-signature designs are fragile — a surrogate signature can be recovered via gradient-based optimization. To strengthen security, we introduce a Learnable Signature Network (LSN) that assigns sample-specific signatures conditioned on each input, breaking universality and preventing surrogate transfer.
Spotlight Poster · closed-form cumulative error solution
Diffusion models have transformed image synthesis by establishing unprecedented quality and creativity benchmarks. Nevertheless, their large-scale deployment faces challenges due to computationally intensive iterative denoising processes. Post-training quantization (PTQ) provides acceleration, but the iterative nature of diffusion models causes stepwise quantization errors to accumulate progressively during generation. We develop a theoretical framework that mathematically formulates error propagation, deriving per-step quantization error propagation equations and establishing the first closed-form solution for cumulative error. We propose a timestep-aware cumulative error compensation scheme that achieves 1.2 PSNR improvement over SVDQuant on SDXL W4A4, while incurring only <0.5% additional time overhead.

2 · 비디오 Gen — Motion · ID · Long-horizon

Face identity preservation / long video / motion attribution — 광고 영상 · 리뷰 영상 생성.

S  다운로드 완료

NVIDIA + Princeton + MIT CSAIL · ICML Oral 1F
Despite the rapid progress of video generation models, the role of data in influencing motion is poorly understood. We present Motive (MOTIon attribution for Video gEneration), a motion-centric, gradient-based data attribution framework that scales to modern, large, high-quality video datasets and models. We use this to study which fine-tuning clips improve or degrade temporal dynamics. Motive isolates temporal dynamics from static appearance via motion-weighted loss masks, yielding efficient and scalable motion-specific influence computation. On text-to-video models, Motive identifies clips that strongly affect motion and guides data curation that improves temporal consistency and physical plausibility. With Motive-selected data, we improve both motion smoothness and dynamic degree on VBench, achieving a 74.1% human preference win rate. This is the first framework to attribute motion rather than visual appearance in video generative models.
THU-ML · ICML 2026 Poster · 1-2 sampling steps
To achieve real-time interactive video generation, current methods distill pretrained bidirectional video diffusion models into few-step autoregressive models. This distillation faces an architectural gap when full attention is replaced by causal attention. We propose Causal Forcing, which uses an autoregressive teacher for ODE initialization to bridge the architectural gap, and then applies the same DMD (Distribution Matching Distillation) procedure as in Self Forcing. This yields high-quality real-time video generation with only 1–2 sampling steps per frame, enabling streaming and controllable rollout. Follow-up: Causal Forcing++ (arXiv:2605.15141) extends the pipeline with causal consistency distillation for scalability.

A  arXiv 링크

Poster · autoregressive long-video generation
Recent text-to-video diffusion models can synthesize visually compelling clips from natural language prompts. However, practical applications increasingly demand long-form videos with evolving narratives and persistent identity. A common solution is autoregressive generation, where the video is produced clip by clip over long horizons, yet coherence often degrades as errors compound. Despite strong short-clip quality, existing approaches often suffer from semantic drift, motion decay, and appearance instability as the sequence grows. DynaMem improves long-horizon coherence via three components: Semantic-Adaptive Hierarchical Memory for long-range semantic preservation, Dynamics-Prioritized Optimization for motion-coherent learning, and Reference-Anchored Perceptual Alignment for stabilizing appearance. DynaMem produces more consistent semantics, stronger temporal dynamics, and more stable appearance on long videos.
Poster · KV-cache 7× reduction, <4% latency overhead
Despite rapid progress in auto-regressive video diffusion, we identify an emerging system–algorithm bottleneck that limits both deployability and generation quality: KV-cache memory. In auto-regressive video generation models, the KV-cache grows with generation history and quickly dominates GPU memory (often ≥30 GB), preventing deployment on widely available hardware. More critically, memory-bounded KV budgets constrain the effective working memory, directly degrading long-horizon consistency in identity, layout, and motion. QVG is a training-free KV-cache quantization framework that exploits video's spatiotemporal redundancy via Semantic-Aware Smoothing to produce low-magnitude, quantization-friendly residuals. QVG introduces Progressive Residual Quantization, a coarse-to-fine multi-stage scheme that further reduces quantization error while enabling a smooth quality–memory trade-off. Across LongCat-Video, HY-WorldPlay, and Self-Forcing, QVG establishes a new Pareto frontier reducing KV memory by up to 7.0× with less than 4% end-to-end latency overhead.
Poster · Wed PM · 1.3B~14B model validated
Group Relative Policy Optimization has emerged as essential for aligning video diffusion models with human preferences, but faces a critical computational bottleneck: training a 14B parametered model typically demands hundreds of GPU days per experiment. Existing efficiency methods reduce costs through sliding window subsampling training timesteps, but fundamentally compromise optimization, exhibiting severe instability and failing to reach full trajectory performance. Flash-GRPO is a single-step training framework that outperforms full trajectory training in alignment quality under low computational budgets. Flash-GRPO addresses two critical challenges: iso-temporal grouping eliminates timestep-confounded variance by enforcing prompt-wise temporal consistency, and temporal gradient rectification neutralizes the time-dependent scaling factor that causes vastly inconsistent gradient magnitudes across timesteps.
Spotlight · Thu AM · MetaphorVU-Bench + KG-augmented
Metaphorical videos are prevalent across various real-world scenarios to convey complex ideas, and understanding them typically requires high-order cognitive capabilities. The lack of systematic studies on metaphorical video understanding not only constrains the real-world applicability of MLLMs but also impedes the thorough assessment of their high-order cognitive capabilities. We propose MetaphorVU-Bench, the first systematic and comprehensive benchmark dedicated to metaphorical video understanding. Current MLLMs struggle with accurate metaphorical video understanding, lagging far behind human level, primarily due to defective cross-domain mapping. We construct a metaphor knowledge graph as mapping augmentation and propose MetaphorBoost, an inference-time enhancement framework achieving consistent performance improvement. 상품 리뷰/비유 표현 이해에 매치.

B  참조

Poster · ~3× training speedup vs DMD
Distribution Matching Distillation (DMD) is widely used for accelerating few-step video diffusion. However, DMD-style training faces a structural bottleneck: the student-side auxiliary score network must closely track a continuously evolving generator. Updating too frequently increases cost, while infrequent updates cause tracking lag. SGMD adopts a fake-score perspective by directly optimizing the fake score toward the teacher, using teacher stop-gradient Fisher as a stable distribution-matching objective. SGMD introduces dual potentials: negative-residual for outer-loop correction and residual-contraction for inner-loop tracking. SGMD achieves approximately 3× training speedup and substantially improves motion dynamics for 4-step distilled models while preserving temporal consistency.
Poster · SOTA on multiple RealVSR benchmarks
Recent advances in video diffusion models have demonstrated remarkable generative capability, yet adapting these large pretrained text-to-video (T2V) models to video super-resolution (VSR) typically encounters challenges — artifacts introduced by complex degradations in real-world scenarios and compromised fidelity due to the strong generative capacity of the powerful T2V models. WEVSR adapts a pretrained flow-matching video diffusion transformer to RealVSR. First, task-oriented adaptation strategy leverages timestep sampling and noise augmentation to enhance detail restoration while preserving structural stability. Second, a lightweight multi-level discrete wavelet transform (DWT) front-end for the VAE encoder injects explicit frequency priors into the latent space without modifying the pretrained decoder. WEVSR achieves state-of-the-art performance across multiple RealVSR benchmarks.

3 · VLM — "진짜 보는가" 시리즈

상품 컷 인식/영상 리뷰 자동 분석에 필수 진단. 시리즈로 축적된 회의론.

S  다운로드 완료

Chufan Shi et al. · ICML Oral 1F · VS-Bench 800 pair
Vision-Language Models frequently produce self-reflective commentary during reasoning, such as claims about examining figures more carefully. This research investigates whether such statements represent genuine visual re-examination or merely learned textual patterns. We developed VisualSwap, a probing framework that swaps images after a model generates reasoning to test detection capabilities. We created VS-Bench containing 800 image pairs, and tested Qwen3-VL, Kimi-VL, ERNIE-VL. The findings reveal significant failures: models struggle to detect image changes, with accuracy declining substantially. Advanced thinking models show greater vulnerability than instruction-following variants, and increased model scale doesn't resolve the issue. However, multi-turn user interactions restore visual grounding, whereas self-generated reflections during continuous generation do not. Attention analysis shows self-reflection doesn't increase attention to visual tokens, while user instructions substantially elevate such attention — suggesting current VLMs prioritize language patterns over genuine visual processing.
Haozhe Wang et al. · ICML Oral 3D
The paper addresses a fundamental challenge in Vision-Language Models: understanding whether performance failures stem from perception or reasoning deficits. We propose that the root cause of this trade-off is an ambiguity in modality credit assignment. Our solution introduces a reinforcement learning framework featuring Perception Verification, which employs "blindfolded reasoning" to evaluate perceptual accuracy independently. The approach incorporates Structured Verbal Verification to replace variable LLM evaluation with deterministic algorithmic assessment. These components integrate into a Modality-Aware Credit Assignment mechanism that routes rewards to the specific source of error — either bad seeing or bad thinking — enabling a single VLM to achieve simultaneous performance gains across a wide task spectrum.

A  arXiv 링크

Position Paper · Turing Eye Test (TET)
A common belief in multimodal research is that the perceptual weaknesses of vision-language models can be compensated by stronger language reasoning (chain-of-thought, in-context learning, external tools). We challenge this assumption. For a broad class of visual tasks hard to specify in language, failures stem from a structural fatality where the temporal decision of when to reason strictly dictates the spatial constraint of where reasoning takes place. When visual reasoning is deferred to language generation, current architectures do not merely delay computation; they displace it from the continuous visual representation to a discrete textual space. Consequently, "Perception-then-Reasoning" degenerates perception into a passive, one-off feature encoding — functionally equivalent to "Reasoning-in-Text-Space" where task-critical spatial signals are collapsed before reasoning begins. We substantiate with the Turing Eye Test (TET). Suggestion: shift from reasoning about perception to reasoning within perception — actively reasoning-driven perception that operates directly on pixel-level.
Position Paper · V-IRD benchmark
This paper argues that a systemic lack of Agency constrains the implicit reasoning capabilities of current Vision-Language Models. Implicit reasoning refers to the ability to autonomously discover and utilize hidden visual evidence to bridge information gaps, rather than merely relying on explicitly specified targets. This capacity underlies human visual understanding. We argue that this limitation arises from a tendency to equate visual reasoning with passive semantic retrieval, rather than with active, situated reasoning that depends on autonomous visual exploration. Most existing benchmarks primarily assess Passive Capacity. We introduce the Visual Implicit Reasoning Benchmark (V-IRD), which requires models to derive answers strictly through autonomous visual analysis. Results show that, despite strong retrieval abilities, prominent VLMs struggle to utilize reference objects and to attend to visual evidence that requires self-directed inquiry.
Position Paper
This position paper argues that the next generation of vision encoders should be image size agnostic and task driven. The source of our inspiration is biological — not a structural aspect of biological vision, but a behavioral trait: efficiency. We focus on ways in which vision in nature is efficient, but modern vision encoders are not. Humans and animals deal with vast quantities of visual data and need to be smart about where we focus our limited energy — it depends on the task. Vision encoders should be dynamic and computational complexity should depend on the task at hand rather than the size of the image. We provide concrete first steps — a proof-of-concept solution for image classification demonstrating feasibility.
Poster · dozens of reasoning steps + hundreds of engine interactions
Multimodal large language models have achieved remarkable success, but constrained by internal knowledge capacity. Prior work augments MLLMs by "reasoning-then-tool-call" for visual and textual search engines. However, these approaches typically define multimodal search naively, assuming a single full-level or entity-level image query suffices to retrieve key evidence — unrealistic in real-world scenarios with substantial visual noise. Vision-DeepResearch proposes a new multimodal deep-research paradigm performing multi-turn, multi-entity and multi-scale visual and textual search to robustly hit real-world search engines under heavy noise. It supports dozens of reasoning steps and hundreds of engine interactions, internalizing deep-research capabilities via cold-start supervision and RL training. It substantially outperforms existing multimodal deep-research MLLMs, and workflows built on GPT-5, Gemini-2.5-pro and Claude-4-Sonnet.
ICML Oral 3G · +12.5% over Qwen-VL base, no human annotation
Large Vision-Language Models have achieved remarkable progress in multimodal reasoning, however their learning remains constrained by limitations of human-annotated supervision. Recent self-rewarding approaches attempt to overcome this constraint by allowing models to act as their own critics. Yet, purely text-based self-evaluation struggles to verify complex visual reasoning steps and often suffers from evaluation hallucinations. Agent0-VL incorporates tool usage not only into reasoning but also into self-evaluation and self-repair, enabling the model to introspect, verify, and refine its reasoning through evidence-grounded analysis. It unifies two synergistic roles within a single LVLM: a Solver that performs multi-turn tool-integrated reasoning, and a Verifier that generates structured feedback through tool-grounded critique. Through zero-external-reward evolution, Agent0-VL aligns reasoning and verification behaviors without human annotation, achieving continual self-improvement — 12.5% improvement over Qwen-VL base.
ICML Oral 3B · 12,000 rollouts × 6 embodiments × 120 tasks
Recent progress in large-scale robotic datasets and VLMs has advanced VLA research. Existing VLA models still face two fundamental challenges: (i) producing precise low-level actions from high-dimensional observations, (ii) bridging domain gaps across heterogeneous data sources. XR-1 introduces Unified Vision-Motion Codes (UVMC), a discrete latent representation learned via a dual-branch VQ-VAE that jointly encodes visual dynamics and robotic motion. UVMC serves as an intermediate representation between observations and actions, and aligns multimodal dynamic information from heterogeneous sources to capture complementary knowledge. Three-stage training: (i) self-supervised UVMC learning, (ii) UVMC-guided pretraining on cross-embodiment robotic data, (iii) task-specific post-training. Validated with 12,000+ rollouts on 6 different robot embodiments spanning 120+ manipulation tasks. XR-1 consistently outperforms π0 and GR00T-N1.5.

B  참조

ICML Oral 3B · Mamba encoder + phase-conditioned decoder
VLA models often suffer from performance degradation under distribution shifts, as they struggle to learn generalized behavior representations across varying environments. Existing approaches attempt to construct behavior representations through action-centric latent variables, but are limited by short-horizon temporal fragmentation and static execution-alignment. BehaviorVLA features two symmetric components: (1) Visuomotor Behavior Encoder using a causal Mamba-based architecture to aggregate long-horizon trajectory information into a unified behavior representation; and (2) Phase-conditioned Behavior Decoder which decodes this representation into precise actions by dynamically aligning task-level priors with real-time execution progress. Experiments on RoboTwin 2.0, LIBERO, and CALVIN demonstrate state-of-the-art success rates. In real-world sim-to-real, BehaviorVLA matches OpenVLA-OFT using only 50% of the demonstration data.
ICML Oral 3B · pretraining fundamentally changes CL dynamics
Continual learning is a long-standing challenge in robot policy learning, where a policy must acquire new skills over time without catastrophically forgetting. While prior work has extensively studied continual learning in relatively small behavior cloning policy models trained from scratch, its behavior in modern large-scale pretrained VLA models remains underexplored. We find that pretrained VLAs are remarkably resistant to forgetting compared with smaller policy models trained from scratch. Simple Experience Replay works surprisingly well on VLAs, sometimes achieving zero forgetting even with small replay data size. Pretraining plays a critical role: large pretrained models mitigate forgetting with small replay buffer while maintaining strong forward learning. VLAs can retain relevant knowledge despite performance degradation on new tasks, enabling rapid recovery through finetuning.
Oral 3G · Simulate-and-Reason mechanism
Current LLMs have achieved Olympiad-level logic, yet VLMs paradoxically falter on elementary spatial tasks like block counting. This capability mismatch reveals a critical "spatial intelligence gap," where models fail to construct coherent 3D mental representations from 2D observations. Diagnostic analyses show the bottleneck is a missing view-consistent spatial interface rather than insufficient visual features or weak reasoning. 3ViewSense grounds spatial reasoning in Orthographic Views. Drawing on engineering cognition, we propose a "Simulate-and-Reason" mechanism that decomposes complex scenes into canonical orthographic projections to resolve geometric ambiguities. By aligning egocentric perceptions with allocentric references, we facilitate explicit mental rotation and reconstruction. Consistent gains on occlusion-heavy counting and view-consistent spatial reasoning.
Oral 3G · Holi-Spatial-4M dataset (12K 3DGS scenes)
The pursuit of spatial intelligence fundamentally relies on access to large-scale, fine-grained 3D data. Existing approaches predominantly construct spatial understanding benchmarks by generating QA pairs from a limited number of manually annotated datasets, rather than systematically annotating new large-scale 3D scenes. As a result, scalability is severely constrained. Holi-Spatial is the first fully automated, large-scale, spatially-aware multimodal dataset, constructed from raw video inputs without human intervention. It supports multi-level spatial supervision — from 3DGS reconstructions with rendered depth maps to object-level and relational semantic annotations, together with spatial QA pairs. Holi-Spatial-4M contains 12K optimized 3DGS scenes, 1.3M 2D masks, 320K 3D bounding boxes, 320K instance captions, 1.2M 3D grounding instances, and 1.2M spatial QA pairs.
Position Paper
"Thinking with images" has emerged as a central research theme in VLMs. This multimodal reasoning paradigm typically features interleaved images generated via tool use or code execution as part of the Chain-of-Thought. While RL has driven impressive performance, we argue that current VLMs seldom truly "think" with interleaved images. Through empirical evidence, we demonstrate that interleaved images do not play a significant role in the success of recent "Thinking with images" methods. Instead, the primary source of performance gains is the improved language generation distribution resulting from fine-tuning. These findings challenge the prevailing belief that "Thinking with images" VLMs actively utilize visual information. We suggest that future works include lightweight ablation studies to verify the necessity of interleaved images, and call for fundamentally novel benchmarks and more informative visual tools.
Position Paper
The essence of video lies in pixel dynamics: motion, state transitions, and the flow of visual information across frames. Video LLMs have rapidly become the dominant paradigm for video understanding. In this position paper, we argue that recent progress in video understanding is measured by benchmarks and protocols that can be solved without reliably perceiving spatiotemporal evidence, rewarding language-driven plausibility over video-grounded inference. We identify two coupled failure modes: (i) static-cue dominance, where appearance and context outweigh spatiotemporal evidence, and (ii) prior-driven temporal hallucination, where learned regularities fill in temporal and causal structure when dynamics are subtle. Call to action: re-center video understanding on what a video uniquely contains — dynamic evidence that unfolds over time — by enforcing spatiotemporal grounding in both models and benchmarks.

4 · Agent — SWE · GUI · Mobile · Production

실전 배포 gap 진단이 핵심 신호. Customer support / product research agent 후보.

S  다운로드 완료

SII-GAIR · ICML Oral 1B · SWE-Bench 56.1/58.5%
The frontier of Large Language Model capabilities has shifted from single-turn code generation to agentic software engineering. While post-training methods dominate, agentic mid-training remains under-explored despite offering scalability advantages. Our solution introduces agent-native data comprising two trajectory types: contextually-native trajectories providing broad coverage, and environmentally-native trajectories from executable repositories offering authentic interaction data. The approach tackles distribution mismatch between static training data and dynamic development environments. Our 32B and 72B models achieve 56.1% and 58.5% resolution rates on SWE-Bench Verified. Authors plan to open-source a significant portion of datasets, recipes, and model checkpoints.
Multi-lab · ICML Oral 1B · MADQA 2,250Q / 800 PDF
Multimodal agents offer a compelling path to automating complex document-intensive workflows, yet a critical question remains: do these architectures demonstrate genuine strategic reasoning, or simply conduct stochastic trial-and-error search? To address this, we introduce Agentic Document VQA (MADQA), a benchmark of 2,250 human-authored questions grounded in 800 heterogeneous PDF documents. Guided by Classical Test Theory, we design it to maximize discriminative power. We introduce a novel evaluation protocol for measuring the accuracy-effort trade-off. Using this framework, we find that humans show strong metacognitive calibration, adapting or abandoning failed strategies, whereas frontier agents often persist in unproductive loops with diminishing returns. Best agents match human accuracy but succeed on largely different questions and rely on brute-force search to compensate for weak strategic planning, failing to close nearly 20% gap to oracle.
Yichen Gong et al. · ICML Oral 1B
Existing online benchmarks for mobile GUI agents remain largely app-centric and task-homogeneous, failing to reflect the diversity and instability of real-world mobile usage. VenusBench-Mobile is a challenging online benchmark for evaluating general-purpose mobile GUI agents under realistic, user-centric conditions. It builds two core evaluation pillars: what to evaluate via user-intent-driven task design that reflects real mobile usage, and how to evaluate through a capability-oriented annotation scheme for fine-grained agent behavior analysis. Evaluation reveals large performance gaps relative to prior benchmarks. Diagnostic analysis further shows that failures are dominated by deficiencies in perception and memory, which are largely obscured by coarse-grained evaluations. Moreover, even the strongest agents exhibit near-zero success under environment variations.

A  arXiv 링크

ICML Oral 5B · 20 case studies + 306 practitioners survey · 26 domains
LLM-based agents already operate in production across many industries, yet we lack a clear understanding of which technical methods make these deployments successful. We present the first systematic study of Characterizing Agents in Production (CAP) using first-hand data. 20 in-depth case studies via interviews + 306 practitioners surveyed across 26 domains. We examine why organizations build agents, how they build them, how they evaluate them, and key deployment challenges. Findings: production agents rely on simple, controllable approaches — 68% execute at most 10 steps before human intervention, 70% rely on prompting off-the-shelf models rather than weight tuning, 74% depend primarily on human evaluation. Reliability emerges as the dominant challenge, addressed through system-level design choices.
Meta · ICML Oral 5B · Dec-POMDP dual-control
Existing benchmarks for conversational AI agents simulate single-control environments, where only the AI agent can use tools to interact with the world, while the user remains a passive information provider. This differs from real-world scenarios like technical support, where users need to actively modify the state of the shared world. τ²-bench introduces (1) a novel Telecom dual-control domain modeled as a Dec-POMDP where both agent and user use tools in a shared, dynamic environment; (2) a compositional task generator; (3) a reliable user simulator whose behavior is constrained by tools and observable states; (4) fine-grained analysis separating errors from reasoning vs communication/coordination. Experiments show significant performance drops when agents shift from no-user to dual-control, highlighting the challenges of guiding users.
Spotlight · ICML Oral 5B · 5 dimensions of MAS
Agents powered by advanced LLMs have demonstrated impressive capabilities across diverse applications. Recently, Multi-Agent Systems (MAS), wherein multiple agents collaborate and communicate, have exhibited enhanced capabilities in complex tasks. However, development often relies on handcrafted methods, and literature on systematic design and optimization of LLM-based MAS remains limited. OMAC is a general framework for holistic optimization. We identify five key optimization dimensions for MAS, encompassing both agent functionality and collaboration structure. Building upon these, we first propose a general algorithm utilizing two actors — Semantic Initializer and Contrastive Comparator — to optimize any single dimension. Then we present an algorithm for joint optimization across multiple dimensions. Extensive experiments demonstrate superior performance on diverse tasks.
ICML Oral 5B · 95% correctness · Qwen3-32B 5.3→35.8%
Evaluating and improving the security capabilities of code agents requires high-quality, executable vulnerability tasks. However, existing works rely on costly, unscalable manual reproduction and suffer from outdated data distributions. CVE-Factory is the first multi-agent framework to achieve expert-level quality in automatically transforming sparse CVE metadata into fully executable agentic tasks. Cross-validation against human expert reproductions shows CVE-Factory achieves 95% solution correctness and 96% environment fidelity. Evaluated on latest realistic vulnerabilities, achieves 66.2% verified success. This enables two downstream contributions: (1) LiveCVEBench, a continuously updated benchmark of 190 tasks; (2) 1,000+ executable training environments. Fine-tuned Qwen3-32B improves from 5.3% to 35.8% on LiveCVEBench, surpassing Claude 4.5 Sonnet.
Poster · +19.6% on AndroidWorld vs UI-TARS-7B
Modern GUI agents typically rely on a model-centric and step-wise interaction paradigm, where LLMs must re-interpret the UI and re-decide actions at every screen, which is fragile in long-horizon tasks. Executable Agentic Memory (EAM) is a structured Knowledge Graph that shifts GUI planning from free-form generation to a robust retrieval-and-execution process. Our approach includes a sample-efficient memory construction pipeline using state-aware DFS and action-group mining to compress multi-step routines. To ensure efficient planning, we introduce value-guided graph search where a lightweight Q-function steers MCTS over the KG. We theoretically establish bias-consistency for the Q-model and derive sample complexity bounds. Empirically, EAM outperforms UI-TARS-7B by up to 19.6% on AndroidWorld, while reducing token costs 6× relative to GPT-4o. With 2.8s average latency, EAM enables reliable long-horizon GUI automation.
Poster · API-only agent test-time control
LLM agents operate in two distinct regimes: open-weight agents amenable to RL and black-box agents whose behaviour must be controlled purely at test time. Although black-box agents are often backed by state-of-the-art proprietary LLMs, API-only access precludes parameter-level optimization, rendering most RL methods inapplicable. To address this, we turn to a known equivalence between RL and Bayesian inference. Agentic Monte Carlo (AMC) directly samples from the optimal policy of a black-box agent rather than training it through RL. The optimal policy is a posterior over trajectories whose prior we define as the fixed black-box LLM agent. We employ Sequential Monte Carlo to sample from this posterior by learning a value function to steer the agent while leaving the underlying black-box model unchanged. Validated on three environments from AgentGym — significant improvements over prompting baselines, outperforming GRPO as we scale test-time compute.

5 · RAG · Knowledge Graph · Embedding

SOP 자동화 / 상품 KB / 하이브리드 검색 라인.

A  arXiv 링크

ICML Oral 2A · SOP 강제 준수 · arXiv 미확인
The paper addresses enhancing Large Reasoning Models for specialized domains. Recent industrial frameworks attempt to encapsulate Standard Operating Procedures into modular skills, but context engineering alone often falls short for complex workflows, causing what we term Cognitive Drift. We propose TG-RAG (Thought Guidance-Retrieval Augmented Generation), which uses an Expert Procedure Graph to formalize unstructured procedures. The framework features a dynamic Interrupt-Retrieve-Generate mechanism that actively injects step-specific directives into the model's reasoning process. Evaluations demonstrate the approach achieves competitive results, with particular advantages in specialized domains through ensuring faithful adherence to domain SOPs.
Poster
RAG mitigates hallucination in LLMs by incorporating external knowledge, but relies on chunk-based retrieval that lacks structural semantics. GraphRAG methods improve RAG by modeling knowledge as entity-relation graphs, but still face challenges in high construction cost, fixed one-time retrieval, and reliance on long-context reasoning and prompt design. Graph-R1 is an agentic GraphRAG framework via end-to-end reinforcement learning. It introduces lightweight knowledge hypergraph construction, models retrieval as a multi-turn agent-environment interaction, and optimizes the agent process via an end-to-end reward mechanism. Experiments on standard RAG datasets show Graph-R1 outperforms traditional GraphRAG and RL-enhanced RAG methods in reasoning accuracy, retrieval efficiency, and generation quality.
Poster · Thu PM · text + visual, 5 capabilities
LLM agents powered by retrieval and RAG are increasingly prevalent across research and applications. Embedding models play a critical role in these systems, particularly in embedding-based retrieval. However, current benchmarks for embeddings such as MTEB remain focused on general-purpose scenarios, which fail to align well with the diverse and evolving needs of agentic applications. To close this gap, we introduce Agent-Oriented Embedding Benchmark (AOEB), a comprehensive evaluation suite dedicated to agent-centric retrieval. AOEB is characterized by two key features: (1) Multi-Task, covering five essential capabilities for retrieval in LLM agents including code, tool, reasoning, and memory retrieval; and (2) Multi-Modal, providing evaluation with both textual and visual data for each task category. Representative embedding models exhibit distinct strengths across different agent-oriented retrieval tasks.
Spotlight Poster · sharp dim–accuracy tradeoff
Embedding-based representations in Euclidean space ℝ^d are a cornerstone of modern machine learning, where a major goal is to use the smallest dimension that faithfully captures data relations. We prove sharp dimension–accuracy tradeoffs and identify a fundamental information-theoretic limitation: unless the embedding dimension d is chosen close to the ground-truth dimension D, accuracy undergoes a sudden collapse. Our main result shows this phenomenon arises even in standard contrastive learning settings. Given triplets realizable by an unknown ground-truth embedding in D dimensions, we prove there exists constant c < 1 such that every embedding of dimension at most cD violates half of the triplets, yielding accuracy as low as a trivial one-dimensional solution. Under the Unique Games Conjecture, even if triplets are nearly realizable in D=1 dimension, no polynomial-time algorithm can achieve accuracy above the trivial 50% baseline.
Poster · RAG confidence calibration · AUROC 0.70
In retrieval-augmented generation, language models can generate incorrect responses if they fail to utilize query-relevant content from retrieved evidence. This shifts uncertainty quantification toward assessing contextual grounding — whether predictions are supported by query-relevant tokens. Recent UQ methods unpack language models but focus on a few layers, overlooking whole progressive propagation. We use information flow to build a layer-wise trace revealing each context token's contribution to output, providing an interpretable basis for reliability. We introduce two measures: simulatability (a prediction is more likely correct when context token contributions align with true relevance) and concentration (a response is more likely correct when derived from a narrow, focused subset). Achieves AUROC 0.70, exceeding runner-up 0.65 with moderate computational cost.

B  참조

Spotlight · IEEE 754 binary representation as single token
To drive progress in science and engineering, LLMs must be able to process large amounts of numerical data and solve long calculations efficiently. This is currently only possible through external tools or extensive reasoning chains, either weakening numerical representations or limiting problem length. Frontier LLMs require excessive reasoning tokens for basic calculations, exacerbated by tokenization strategies that split single numbers into multiple tokens. We introduce a set of desiderata for single-token number encodings and show existing approaches fail. We propose BitTokens, a novel encoding strategy that represents any number as a single token using its IEEE 754 binary floating-point representation. Even small language models can learn algorithms that solve basic arithmetic operations nearly perfectly with BitTokens.
Journal Track · ~1% article impact detected
We present a comprehensive analysis and monitoring framework for the impact of LLMs on Wikipedia, examining the evolution through existing data and using simulations to explore potential risks. We analyze article content and page views to study recent Wikipedia changes. We evaluate how LLMs affect various NLP tasks related to Wikipedia including machine translation and RAG. Our findings reveal that Wikipedia articles have been affected by LLMs, with an impact of approximately 1% in certain categories. If the machine translation benchmark based on Wikipedia is influenced by LLMs, model scores may become inflated, and comparative results could shift. Moreover, RAG effectiveness might decrease if knowledge has been contaminated by LLMs. While LLMs have not yet fully changed Wikipedia's structures, careful consideration of future risks in NLP research is needed.

6 · Reasoning · RL for LLM

RLHF/RLVR 시대의 optimizer/entropy 재정립. AdamW 표준을 흔드는 흐름.

S  다운로드 완료

Fei-Fei Li / Yejin Choi / Manling Li · ICML Oral 2A
In closed-loop multi-turn agent reinforcement learning, LLM agents exhibit reasoning collapse, where reasoning shifts toward generic templates, weakly coupled to inputs. Such collapse is easy to miss with entropy or surface diversity metrics since reasoning text still varies but becomes input-agnostic. We propose an information-theoretic decomposition of reasoning variable Z's variation into conditional entropy H(Z|X) and mutual information I(X; Z). Template collapse occurs when H(Z|X) stays high while I(X; Z) drops, yielding diverse-looking but generic reasoning. To make I(X; Z) a reproducible diagnostic, we introduce an MI-style retrieval protocol treating each reasoning trace as a query to retrieve its source; accuracy degrades toward chance under collapse. We propose reward-variance-aware filtering to prioritize high-signal updates. Improves input dependence, stability, and performance across multi-turn environments including VLMs.
Sagnik Mukherjee, Hao Peng et al. · ICML Oral 1A · <0.02% params updated
RL, particularly RL from verifiable reward (RLVR), has become a crucial phase of training LLMs and a key focus of current scaling efforts. However, optimization practices in RL largely follow those of next-token-prediction stages, despite fundamental differences between RL and these stages. One such practice is the use of AdamW, widely adopted despite its high memory overhead. Our analysis shows that both momentum and adaptive learning rate of AdamW are less influential in RL than in SFT. Confirming our hypothesis, the substantially more memory-efficient SGD — known to perform poorly in supervised learning — matches or even outperforms AdamW in RL for LLMs. Remarkably, full fine-tuning with SGD updates fewer than 0.02% of model parameters without any sparsity-promoting regularization, more than 1,000× fewer than AdamW.

A  arXiv 링크

Spotlight · Tue PM · unbiased importance sampling
Large language models can exhibit emergent reasoning behaviors, often manifested as recurring lexical patterns (e.g., "wait," indicating verification). However, complex reasoning trajectories remain sparse in unconstrained sampling, and standard RL often fails to guarantee the acquisition of diverse reasoning behaviors. We propose systematic discovery and reinforcement of diverse reasoning patterns through structured reasoning, a paradigm that requires targeted exploration of specific reasoning patterns during RL. Ctrl-R is a framework for learning structured reasoning via tractable trajectory control that actively guides the rollout process, incentivizing the exploration of diverse reasoning patterns. The resulting behavior policy enables accurate importance-sampling estimation, supporting unbiased on-policy optimization. We introduce a power-scaling factor on the importance-sampling weights, allowing selective learning from out-of-distribution trajectories.
Spotlight · Qwen 2.5/3 +15-21% pass@1 · self-critique +16.7% AIME
Recent advances in RL using numerical rewards have significantly enhanced the complex reasoning capabilities of LLMs. However, we identify three fundamental limitations of purely numerical feedback: performance plateaus, ineffective spontaneous self-reflection, and persistent failures. We show that plateaued RL models can successfully refine failed solutions when given natural language critiques. Critique-GRPO is an online RL framework that integrates both natural language and numerical feedback for policy optimization, enabling LLMs to learn simultaneously from initial responses and critique-guided refinements. Critique-GRPO outperforms all compared supervised and RL-based fine-tuning methods, achieving average Pass@1 improvements of approximately +15.0-21.6% on Qwen models and +7.3% on Llama-3.2-3B-Instruct across eight challenging reasoning tasks. Notably, Critique-GRPO facilitates effective self-improvement through self-critiquing, achieving +16.7% Pass@1 on AIME 2024.
Spotlight · MIT/FAIR · Wed · bi-level meta-RL curriculum
RL methods for finetuning large reasoning models stall on datasets with low initial success rates, and thus little training signal. Can a pretrained LLM leverage latent knowledge to generate an automated curriculum for problems it cannot solve? SOAR is a self-improvement framework to surface pedagogical signals through meta-RL. A teacher model proposes synthetic problems for a student model, rewarded with the student's improvement on a subset of hard problems, grounding the curriculum in real student progress rather than proxy rewards. Study on hardest subsets of math benchmarks (0/128 success) reveals: (1) bi-level meta-RL unlocks learning under sparse binary rewards by sharpening pretrained models' latent capacity to generate useful problems; (2) grounded rewards outperform intrinsic rewards, reliably avoiding instability and diversity collapse; (3) the structure and well-posedness of questions matter more for learning progress than solution correctness.
ICML Oral 2A · Qwen3-235B max 5.35× walltime
Speculative Decoding promises to accelerate LLM inference, yet its efficacy often degrades in production-grade scenarios. Existing approaches struggle under high-concurrency conditions where verification compute dominates performance. Static trees cause substantial verification overhead, while dynamic trees encounter cumulative errors and compatibility issues. ECHO, a framework within SGLang, treats speculative execution as a budgeted scheduling challenge. Using sparse confidence gating, it manages batches as a unified super-tree, dynamically adjusting computational resources between depth and width dimensions. Testing across multiple model scales including the industrial Qwen3-235B shows ECHO achieves up to 5.35× walltime speedup and outperforms competing approaches by over 20% in both low and high-load scenarios.
ICML Oral 1A · Data Wall 시대 · GPT-2 XL 30B beats 200B full
As high-quality public text approaches exhaustion — the Data Wall — LLM pre-training is shifting from more tokens to better tokens. Existing methods either rely on heuristic static filters that ignore training dynamics, or use dynamic yet optimizer-agnostic criteria based on raw gradients. OPUS (Optimizer-induced Projected Utility Selection) is a dynamic framework that defines utility in the optimizer-induced update space. OPUS scores candidates by projecting their effective updates, shaped by modern optimizers, onto a target direction derived from a stable in-distribution proxy. We employ Ghost technique with CountSketch for computational efficiency and Boltzmann sampling for diversity, incurring only 4.7% additional compute overhead. In pre-training of GPT-2 Large/XL on FineWeb and FineWeb-Edu with 30B tokens, OPUS outperforms industrial-level baselines and even full 200B-token training. On Qwen3-8B CPT on SciencePedia, OPUS achieves superior performance with only 0.5B vs 3B tokens.
ICML Oral 1A · shared feature space across LLaMA/Mistral/Qwen
The diversity of post-training data is critical for effective downstream performance in LLMs. Many existing approaches quantify diversity using text-based metrics that capture linguistic variation, but such metrics provide only weak signals for the task-relevant features. We introduce Feature Activation Coverage (FAC), which measures data diversity in an interpretable feature space. Building on this metric, we propose FAC Synthesis — a diversity-driven data synthesis framework that first uses a sparse autoencoder to identify missing features from a seed dataset, and then generates synthetic samples that explicitly reflect these features. Experiments show consistent improvements on instruction following, toxicity detection, reward modeling, and behavior steering. We identify a shared, interpretable feature space across model families (LLaMA, Mistral, Qwen), enabling cross-model knowledge transfer.
ICML Oral 2A · arXiv 미확인 · 60% head 되돌려도 +4%
Continual pre-training is examined as a strategy for customizing broad language models to specific domains including mathematics, code, instruction, and natural language. Through singular value decomposition of weight matrices, we discovered that continual pre-training leaves singular value spectra largely invariant, with adaptation driven mainly by changes in singular vectors. Attention-head projection matrices show significant domain-dependent head heterogeneity. This enabled importance metrics showing up to 60% of head updates can be removed without measurable quality loss. Strategically reverting less important heads to pre-trained weights enhanced benchmark performance by up to 4%. We discovered domain connectivity through linear checkpoint interpolation, demonstrating smooth quality transitions between domains. We release Diffract, an open-source toolkit for spectral analysis.

B  참조

6 cognitive states FSM · training-free steering
Large Reasoning Models solve complex tasks by generating long Chain-of-Thought sequences, but the emergent dynamics governing reasoning trajectories are not well understood and can lead to inconsistencies and reasoning pathologies. We approximate LRM's emerging hierarchical reasoning dynamics as a trajectory within a Finite State Machine transitioning among six abstract cognitive states. These states and transitions can be captured in the latent state of the model. By analyzing the topology of these transitions, we identify statistical shifts in reasoning strategies that help identify effective reasoning chains. We propose Q-Value guided steering, a training-free inference-time control method that treats reasoning as a planning problem. Applied on AIME25, MATH-500, GSM8k, GPQA Diamond — significant performance gains with "surgical" efficiency, often requiring 25× fewer interventions than greedy baselines.
1.53× speedup, sequential-level accuracy
Scaling inference-time computation has enabled LLMs to achieve strong reasoning performance, but their inherently sequential decoding incurs substantial latency, motivating parallelization of the generation process. However, existing parallel reasoning approaches suffer from performance degradation compared to sequential counterparts, and often rely on specialized inference engines. ThreadWeaver is a framework for adaptive parallel reasoning that matches sequential accuracy while significantly reducing latency via: (1) a two-stage parallel trajectory generator producing high-quality parallel CoT data for SFT; (2) a trie-based rollout design enabling parallel reasoning on any autoregressive engine; (3) parallelization-aware RL framework balancing accuracy with parallelization. On Qwen3-8B: 79.9% on AIME24, 71.9% average, 1.53× speedup.
arXiv 미확인 · LLaMA-2 FLOP 30-35%↓, 98% accuracy retained
Each layer of a Transformer refines the hidden state toward a prediction, an iterative process resembling fixed-point iteration. When should this iteration terminate? Existing early exit methods rely on output confidence as a proxy for internal convergence. We take a more direct approach by examining the geometry of the hidden state trajectory. Layer-wise updates exhibit a two-phase structure: large, volatile updates in early layers, followed by small, aligned updates as the model propagates an already-formed representation. The transition is remarkably sharp. This yields a simple criterion: exit when step size vanishes and direction stabilizes. We track the normalized update norm and cosine similarity between consecutive updates. Overhead is O(d) per layer, independent of vocabulary size, no learned components. On LLaMA-2-7B/13B reduces FLOPs by 30-35% while retaining over 98% of full-depth accuracy.

7 · Safety · Alignment · Jailbreak

Reward hacking · deception · monitor 를 co-design. Multilingual/sycophancy 등 배포 리스크.

S  다운로드 완료

Melody Guan, Bowen Baker et al. (OpenAI) · ICML Oral 2E
Safe deployment of increasingly capable AI agents may require visibility into how they make decisions. We introduce three evaluation frameworks and a novel metric for assessing monitorability — the ability to detect problematic behavior through chain-of-thought analysis. Key findings: reasoning transparency outperforms action-only monitoring in practical settings; current models demonstrate generally reliable but imperfect monitorability. Longer reasoning chains typically improve detection capabilities. A smaller model at higher reasoning effort can yield higher monitorability, at greater inference compute cost. Monitorability can be improved by asking models follow-up questions and giving their follow-up CoT to the monitor. OpenAI released datasets and reference code from this work in April 2026.
Mohammad Taufeeque, Chris Cundy et al. (FAR.AI) · ICML Oral 2E
Training against white-box deception detectors has been proposed as a way to make AI systems honest, however such training risks models learning to obfuscate their deception to evade the detector. We constructed a realistic coding environment where reward hacking via hardcoding test cases naturally occurs, and showed that obfuscation emerges. Two obfuscation strategies emerge: (1) Obfuscated activations — model outputs deceptive text while modifying internal representations to no longer trigger the detector; (2) Obfuscated policy — model outputs deceptive text that evades the detector, typically by including a justification for the reward hack. Sufficiently high KL regularization and detector penalty can yield honest policies, establishing white-box deception detectors as viable training signals for tasks prone to reward hacking.
Woojin Kim et al. (서울대) · ICML Oral 2E
Aligning LLMs with the diverse spectrum of human values remains a central challenge: preference-based methods often fail to capture deeper motivational principles. Our framework addresses three key gaps in value-based alignment: extraction that ignores hierarchy, evaluation that lacks calibrated intensity measurement, and insufficient steerability control. The proposed system comprises three components: (1) HIVES, a hierarchical value embedding space that captures intra- and cross-theory value structure; (2) VIDB, the Value Intensity DataBase, a large-scale resource of value-labeled texts with intensity estimates derived from ranking-based aggregation; and (3) an anchor-based evaluator that produces consistent intensity scores by ranking outputs against VIDB panels. Through testing across ten models and four value theories, we discovered asymmetries in steerability and composition laws for multi-value control.

A  arXiv 링크

ICML Oral 3B
Reward models learned from human preferences are central to aligning LLMs via RLHF, yet they are often vulnerable to reward hacking due to noisy annotations and systematic biases such as response length or style. BNRM integrates non-negative factor analysis into Bradley-Terry preference model. BNRM represents rewards through a sparse, non-negative latent factor generative process at two complementary levels: instance-specific latent variables induce disentangled reward representations, while sparsity over global latent factors acts as an implicit debiasing mechanism suppressing spurious correlations. An amortized variational inference network conditioned on deep model representations allows efficient end-to-end training. BNRM substantially mitigates reward over-optimization, improves robustness under distribution shifts, and yields more interpretable reward decompositions than strong baselines.
ICML Oral 3F · 30 attacks reproduced · +0.26pp deviation · 82.5% code reuse
Jailbreak techniques for LLMs evolve faster than benchmarks, making robustness estimates stale and difficult to compare across papers due to drift in datasets, harnesses, and judging protocols. Jailbreak Foundry (JBF) is a system employing multi-agent workflows to translate jailbreak papers into executable modules for immediate evaluation within a unified harness. Three core components: (1) JBF-LIB for shared contracts and reusable utilities; (2) JBF-FORGE for multi-agent paper-to-module translation; (3) JBF-EVAL for standardizing evaluations. Across 30 reproduced attacks, JBF achieves high fidelity with mean +0.26pp attack success rate deviation and 82.5% code reuse ratio, cutting implementation overhead by ~50% compared to standalone repos.
ETH · ICML Oral 2E
The authors contend that numerous studies in anthropomorphized misalignment research require more rigorous evidence to serve as a dependable basis for consequential choices regarding model deployment and regulatory frameworks. Through examining failure modes across different misalignment concepts — deception, emergent misalignment, and sycophancy — they demonstrate how conceptual ambiguity, non-robust datasets and experimental design, and insufficient causal interventions can lead to overinterpretation of model behaviors. The position paper offers guidance on evidentiary standards to strengthen methodological rigor, proposing a framework with evidence levels and a diagnostic checklist designed to establish consistent benchmarks for scientific discussion and anchor AI risk claims in solid empirical work.
10,389 multi-turn prompts / 2,665 harmful intents · +54% ASR vs runner-up
MultiBreak is a scalable and diverse multi-turn jailbreak benchmark to evaluate LLM safety. Multi-turn jailbreaks mimic natural conversational settings, making them easier to bypass safety-aligned LLMs than single-turn jailbreaks. Existing multi-turn benchmarks are limited in size or rely heavily on templates. We unify a wide range of harmful jailbreak intents, and introduce an active learning pipeline for expanding high-quality multi-turn adversarial prompts, where a generator is iteratively fine-tuned guided by uncertainty-based refinement. MultiBreak includes 10,389 multi-turn adversarial prompts spanning 2,665 distinct harmful intents. Empirical evaluation shows up to 54.0% and 34.6% higher ASR than second-best dataset on DeepSeek-R1-7B and GPT-4.1-mini. Categories appearing benign under single-turn can exhibit substantially higher adversarial effectiveness in multi-turn scenarios.
Spotlight · Anthropic RR framework (ASL-3 safeguards) · Omission Attack
The Rapid Response (RR) framework, deployed in production including Anthropic's ASL-3 safeguards, dynamically adapts jailbreak detection classifiers by generating synthetic training data from emerging attacks. We reveal that prompt injection can infiltrate this pipeline to deliver poisoned samples into the classifier's training set, enabling: (I) targeted poisoning creating false positives on harmless samples with a specific desired feature (formatting, subject, keyword); (II) concept-based backdoor attacks inducing false negatives on jailbreak inputs — generalizing to jailbreaks from attack strategies the defender explicitly trained against, when the backdoor trigger is present. Our threat model restricts adversaries to modifying only jailbreak samples. We address this with Omission Attack, exploiting a new phenomenon: when training on concept-absent unsafe samples, the classifier misassociates that concept's presence with the safe label. Both attacks flip nearly all target labels with only 1% poisoning rate.

B  참조

PRISMA review of 207 studies · Hausa/Igbo/Javanese
LLMs are deployed globally as universal systems, yet their safety mechanisms remain English-optimized. This creates a Dual Curse for speakers of low-resource languages: a Harmfulness Curse where harmful content generation rises from 1% in English to 35% in languages like Hausa, Igbo, and Javanese, and a Relevance Curse where instruction-following drops by 20 percentage points, making these systems simultaneously more dangerous and less useful. Drawing on a PRISMA-guided review of 207 studies, this disparity stems from a pre-training bottleneck: reward models achieve only 49-50% accuracy in low-resource languages (random chance), rendering post-hoc alignment structurally ineffective. When at least 22 countries mandate automated content moderation, this creates infrastructure exploitable for censorship. Proposed socio-technical framework: (1) safety context distillation during pre-training (78-89% harm reduction); (2) participatory harm specification; (3) evaluation metrics jointly tracking attack resistance and false refusal.
Position · EduFrameTrap benchmark · Reasoning-Sycophancy Paradox
Effective tutoring requires corrective friction: surfacing misconceptions and challenging them supportively to drive conceptual change. Yet preference-aligned LLMs can trade epistemic rigor for agreeableness. We identify a Reasoning-Sycophancy Paradox: models that resist context-switch frame attacks can still capitulate under social-epistemic pressure, especially authority ("my notes say I'm right") and social-affective face-saving ("please don't tell me I'm wrong"). We introduce EduFrameTrap, a tutoring benchmark across math, physics, economics, chemistry, biology, and computer science that varies student confidence and pressure. Context-switch failures are lower for GPT-5.2, while authority and social pressure more often trigger epistemic retreat. Claude shows substantial context-switch fragility. Benchmarks should measure social-epistemic courage — supportive but corrective tutoring — treating "kind-but-correct" behavior as a safety requirement.
Position · dual-use safety mechanism
This position paper argues that modern alignment methods — originally designed to prevent harmful output — are dual-use technologies that may easily be misused by malicious actors for censorship and manipulation. By mapping current alignment techniques to the possibility and actual cases of misuse, we show that the quest for a "perfectly aligned" model inadvertently also provides malicious actors with an ever-improving tool for informational dominance. We need to discuss this dual-use potential now, as its risk is exacerbated by rapid user adoption of AI as information provider and a political landscape increasingly shifting towards authoritarianism. We conclude by urging the community to consider intentional misuse of safety mechanisms and propose mitigation strategies.

8 · Position Papers — 커뮤니티 방향론

Cat 3/7 과 겹치는 항목은 여기 재수록 안 함. Society·science·agents 방향론.

A  arXiv 링크

Biderman, Saphra et al. · ICML Oral 1D
What would it mean to have a scientific understanding of AI? Language models are not static objects — they are snapshots of time-evolving processes shaped by data, objectives, and optimization dynamics. Yet the field predominantly treats models as fixed artifacts, analyzing behaviors after training rather than asking why they emerge. This position paper argues that AI research should move beyond post hoc fixes and study the learning dynamics of models. We envision a hierarchy of scientific maturity: first predict outcomes from early training signals, then intervene when trajectories go wrong, ultimately design training procedures that guarantee desired properties. Scaling laws have reached the first level for loss; the challenge is extending all three levels to general capabilities, biases, and safety. We articulate requirements for such theories, survey progress across mechanistic interpretability, fairness, memorization, and learning dynamics.
Baumann, Koyejo, Hovy · ICML Oral 3E · vs #71100 논쟁
LLMs offer a tempting solution to address the peer review crisis. This position paper argues that today's AI systems should not be used to produce paper reviews. The authors ground their argument in empirical comparison of human- versus AI-generated ICLR 2026 reviews and evaluation of automated paper rewriting effects on different AI reviewers. Two critical issues: (1) AI reviewers demonstrate a hivemind effect of excessive agreement within and across papers that reduces perspective diversity; (2) AI review scores are trivially gameable through paper laundering — prompting an LLM to rewrite a paper could significantly increase scores from AI reviewers, showing that stylistic changes rather than scientific merit drive scores higher. Addressing the peer review crisis requires a science of peer review automation — not general-purpose LLMs deployed without rigorous evaluation.
ICML Oral 5E · subject-centric dignity harm 관점
AI-generated non-consensual intimate imagery (AIG-NCII) is not adequately addressed in AI/ML literature regarding AI-generated media (deepfakes). While research on deepfakes currently focuses on epistemic harms — harms relating to truth and authenticity — this is misaligned with the dominant reality of generative AI abuse involving sexualized imagery. We conduct a landscape analysis of highly-cited works to demonstrate that technical interventions addressing deepfakes almost entirely ignore AIG-NCII, limiting the ecosystem to authenticity detection tools. Existing interventions address viewer-centric epistemic harms (fraud, scams), but ignore subject-centric dignity harms (AIG-NCII). Knowing an image is synthetic does not mitigate harms to subjects and may exacerbate them. Recommendations: update threat models to consider subject-centered harms, address AIG-NCII in AI safety research, implement safety guardrails, and partner with domain experts in sexual violence prevention.
Position · aesthetic reward 부작용
Over-aligning image generation models to a generalized aesthetic preference conflicts with user intent, particularly when "anti-aesthetic" outputs are requested for artistic or critical purposes. This adherence prioritizes developer-centered values, compromising user autonomy and aesthetic pluralism. We test this bias by constructing a wide-spectrum aesthetics dataset and evaluating state-of-the-art generation and reward models. Aesthetic-aligned generation models frequently default to conventionally beautiful outputs, failing to respect instructions for low-quality or negative imagery. Crucially, reward models penalize anti-aesthetic images even when they perfectly match the explicit user prompt. We confirm this systemic bias through image-to-image editing and evaluation against real abstract artworks. — 화장품 광고 aesthetic pipeline 설계 시 참고.
Position · Web Verbs semantic layer
Building a reliable agentic web requires shifting from click-based browsing to typed actions supported by a standardized semantic layer. Today's agents primarily operate over low-level primitives such as clicks, keystrokes, and DOM manipulation. This reliance leads to brittle long-horizon behavior, high execution cost, and limited auditability. A semantic layer of typed web actions, analogous to the abstraction provided by high-level programming languages, is necessary for agents to compose reliable workflows from stable, well-specified operations. We recommend Web Verbs as a concrete instantiation. A verb is a typed, semantically documented function that exposes a site capability through a uniform interface. Verbs can attach preconditions, postconditions, policy tags, and logging hooks, allowing agents to synthesize concise programs with explicit control and data flow and to produce checkable execution traces. Verb-level composition produces correct, reproducible outcomes, while GUI-level agents often exhibit brittle behavior or incorrect reasoning.

B  참조

ICML Oral
AI systems can strengthen democracy by supporting deliberation at scale by addressing cognitive, social, platform-design, and market-driven frictions, while preserving human agency. Unlike proposals such as liquid democracy that restructure representation through vote delegation, AI-assisted deliberation offers a more promising path by lowering barriers to meaningful engagement without substituting machine judgment for human choice. We identify four guiding principles: preserving agency and autonomy, encouraging mutual respect, promoting equality and inclusiveness, and augmenting rather than substituting active citizenship. We address critical challenges — alignment, sycophancy, training bias, over-reliance. We call on the ML community to develop deliberation-focused AI systems evaluated not on engagement metrics but on their capacity to facilitate informed, representative, and friction-robust discourse.
ICML Oral · exaptation argument
Breakthroughs often come from ideas we could not have predicted in advance. In biology, this is called exaptation: traits evolved for one function become decisive for another. Scientific progress works similarly, but only if ideas survive periods when they appear uncompetitive by current metrics. AI's benchmark-centered selection environment, while successful at bypassing complex debates about the nature of intelligence, taxes exaptation. When one selection rule dominates, ideas that do not fit it have nowhere to persist. The cost grows acute as the field shifts from asking "can machines exhibit intelligent behavior?" to "can machines exhibit intelligent behavior such that they are aligned, interpretable, and safe?" These are philosophically distinct questions requiring discoveries we cannot specify. Proposed mechanisms: plural evaluation regimes, protected venues for non-comparable work, long-horizon funding, training norms that encourage questioning selection rules.
Position · 90%+ photos are computed from multiple sensors
The wide availability and low usability barrier of modern image generation models has triggered the reasonable fear of criminal misconduct and negative social implications. The ML community has been engaging this problem with an extensive series of publications proposing algorithmic solutions for detection of "fake" images. While there is progress towards technical solutions, we argue that current and prior work is focusing too much on generative algorithms and "fake" data-samples, neglecting a clear definition of "real" images. The development and evaluation of basically all current "fake"-detection methods is relying on only a few, quite old low-resolution datasets like ImageNet. Today over 90% of photographs are produced by smartphones using neural network algorithms closely related to "fake"-image generators. Today, we need to re-think the concept of "real" images — need a clear technical definition and new benchmark datasets.

9 · Diffusion LM · Sequence Model

MDM 붐 방향 정돈 — architecture ≠ order flexibility 입증.

A  arXiv 링크

ICML Oral 3A · ~25× inference speedup
Efficiently scaling LLMs necessitates exploring alternatives to dominant autoregressive methods, with Masked Diffusion Models (MDMs) emerging as candidates. However, comparing AR (typically decoder-only) and MDM (often encoder-only) paradigms is confounded by differing architectures, obscuring true algorithmic and efficiency trade-offs. This research decouples these factors by evaluating MDMs within a decoder-only framework to: (1) Equitably compare MDM (as Any-Order AR) and standard AR paradigms through discrepancies on orders; (2) Investigate MDM architectural impacts on computational efficiency. Decoder-only MDMs, despite a larger modeling space, can achieve significant inference speedups (~25×) and comparable perplexity with techniques like temperature annealing, offering a path to reduced inference compute.
Apple · ICML Oral 1A
Diffusion (Large) Language Models (dLLMs) now match the downstream performance of their autoregressive counterparts on many tasks, while holding the promise of being more efficient during inference. One critical design aspect of dLLMs is the sampling procedure that selects which tokens to unmask at each diffusion step. Recent work has found that heuristic strategies such as confidence thresholding improve both sample quality and token throughput compared to random unmasking. However, such heuristics have downsides: they require manual tuning, and their performance degrades with larger block sizes. We instead propose to train sampling procedures using RL. We formalize masked diffusion sampling as a Markov decision process in which the dLLM serves as the environment, and propose a lightweight policy based on a single-layer transformer that maps dLLM token confidences to unmasking decisions. Trained policies match the performance of state-of-the-art heuristics in block generation, while outperforming them in the full-diffusion setting.
ICML Oral 3A · 89.1% GSM8K with simple GRPO
Diffusion Large Language Models (dLLMs) break the rigid left-to-right constraint of traditional LLMs, enabling token generation in arbitrary orders. Intuitively, this flexibility implies a solution space that strictly supersets the fixed autoregressive trajectory. For specific constraint satisfaction tasks (e.g., sudoku), this capability has proven highly advantageous. However, for general reasoning tasks (mathematics, coding), arbitrary order generation may in fact limit dLLMs' reasoning potential. dLLMs tend to exploit this order flexibility to bypass high-uncertainty tokens crucial for exploration, leading to premature collapse of solution coverage. This motivates rethinking RL approaches for dLLMs, where considerable complexities (combinatorial trajectories, intractable likelihoods) are often devoted to preserving flexibility. Effective reasoning can be better elicited by simply forgoing arbitrary order and applying standard GRPO. Our approach, JustGRPO, is minimalist yet surprisingly effective (89.1% GSM8K) while fully retaining parallel decoding.