Watermarking code by only coloring grammar-legal tokens, then turning up their temperature, because syntax was getting in the way.
trending267
01 02 Can private prompt optimization avoid token-by-token brittleness? DP-ES says yes, with noisy evolution strategies.03 Paper derives closed-form MIA bounds for random-allocation DP-SGD, so you can tune noise without the usual accountant pilgrimage.04 Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering arxiv.orgHow do you prove an image came from a model, whether it was generated directly or rendered from code?05 Efficient Secure Federated Learning via Information-Theoretically Secure Key Distribution: A Medical Imaging Case Study arxiv.orgFL under info-theoretic key distribution, using frozen backbones, distillation, and quantization on a real QKD testbed.06 Where Did the Repair First Go Wrong? Localizing the Origins of Silent Failures in Agentic Vulnerability Repair arxiv.orgWhere did the patch go off the rails, and can trace-based scoring pin the first security-divergent turn?07 Constructs explicit finite-field maps with lower affine/polynomial agreement than the Fourier bound allows.08 Earlier chat secrets can end up watermarking later images, because multimodal models apparently needed another leak channel.09 Analyzes DP for deterministic GD on a Gaussian-perturbed objective, with finite-iterate privacy via a diffeomorphism proof.10 BetweenCut: Private Heavy-Node Classification with Doubly Logarithmic Error in Tree Height arxiv.orgBetweenCut does private heavy-node classification on trees with O(log log h) error, retiring the usual log h tax.11 Quantifies residual re-ID risk in anonymized 5G/O-RAN profiles, then measures the utility hit from k-anonymity-style fixes.12 Can extremely lossy functions come from small-exponent hashing instead of the usual DDH treadmill? This paper says yes.13 Paper on agentic deanonymization of anonymized transcripts via web search, because masking is not a force field.14 Correct Verdicts, Flawed Reasoning: Structured Auditing of LLM-based Vulnerability Reasoning arxiv.orgPaper on auditing LLM vuln verdicts with structured logs, since correct answers still manage to hallucinate their way there.15 Paper on ContractLens, a frozen-LLM detector for malicious contracts via layer probes and activation units, because security was latent.16 Semi-quantum secret sharing that claims collusion security against a quantum third party and a dishonest classical player.17 Paper on truncated-Montgomery PMNS reduction for modular arithmetic, claiming up to 15% AVX512 speedups. Naturally.18 Cost of Delay for Post-Quantum Migration: Putting Classical and Harvest-Now-Decrypt-Later Risk on One Ordered List arxiv.orgPuts PQ migration and classical vulns on one cost-of-delay ranking, so HNDL stops being a side spreadsheet.19 Paper on LLM router metadata leaking sensitive topics, with measurements and mitigations, because even the headers gossip.20 Graph-based multi-secret sharing gets 4-secret exact bounds and an n-secret one-bit characterization, because 3 secrets weren't enough.21 Federated Bayesian Surveillance of Mechanical Thrombectomy Adverse Events: A Population Risk Layer for Surgical Digital Twins arxiv.orgFederated Gamma-Poisson risk layers for thrombectomy twins, with RDP natural-parameter updates instead of yet another DP FedAvg.22 Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents arxiv.orgAction-level watermarking for LLM agents, meant to survive paraphrases and make forgery need the key.23 BVI pushes org registry, revocation, and channel state on-chain, then makes the handset do the identity-checking work.24 Watermarking is declared impossible against adaptive removal, so the paper pivots to auditable compliance via robustness profiles.25 TranScope: What the Software Hides About LLM Training Data, the Hardware Reveals at Scale, and Accelerators Magnify arxiv.orgConstant-time LLMs still leak training membership via TLB/page-table quirks, courtesy of tokenization.26 Malicious-secure FSS gets a trusted GPU accelerator, plus authenticated output release and replay-proof bookkeeping.27 Bounded Provisional Visibility: Controlling Poisoning Exposure in Continuously Ingested RAG Vector Stores arxiv.orgProvisional visibility for RAG vector stores, bounding poisoned content exposure instead of the usual ingest now, regret later.28 WLPA: A Network Management Framework for Allocating Scarce Quantum-Safe Link Postures under Weakest-Link Exposure arxiv.orgWLPA gives a closed-form weakest-link allocator and O(|E| log |E|) assignment for scarce QKD/PQC links.29 AR-HE fixes bootstrap placement for encrypted LLM decoding, plus encrypted token lookup and KV cache to cut the usual HE pain.30 PRA-TLS adds attestation for the host app calling a TEE enclave, using a daemon, Tamarin proofs, and an SGX prototype.