Software Engineering Hacker News

You can now run same OCI images as containers or Firecracker microVMs

The Pullrun project introduces a unified runtime and image management system designed to operate OCI-compliant images across diverse execution environments, including standard containers, Firecracker microVMs, Apple Silicon VMs, and Kubernetes workloads. Developed by the Pullrun team and published with a DOI (10.5281/zenodo.20679669), this work addresses the fragmentation of tooling and execution models in modern software deployment. Its core contribution is enabling users to employ a single OCI image artifact for multiple target platforms without requiring platform-specific image builds or separate VM image formats. This significantly simplifies development workflows and infrastructure management by reducing overhead associated with managing disparate artifact types. The intended audience comprises software engineers, DevOps professionals, and researchers involved in cloud-native development, containerization, and virtualized environments, who stand to benefit from reduced complexity and increased operational flexibility.

Key technical innovations underpinning Pullrun include a content-addressed Directed Acyclic Graph (DAG) store for image layers. This approach eschews traditional overlay filesystems, facilitating zero-copy memory-mapped reads and content-based deduplication across all nodes within a cluster. Image distribution is handled via a peer-to-peer (P2P) synchronization mechanism, reducing registry egress by pulling an image once per cluster and subsequently syncing layers locally. Furthermore, Pullrun integrates a unified CLI and runtime component under 25MB, eliminating the need for a heavy daemon in many use cases, offering a CLI-only pullrun run mode. The project also supports a Kubernetes Container Runtime Interface (CRI) shim and integration with AI agent frameworks (MCP), further extending its reach.

This unified approach has the potential to streamline the development and deployment lifecycle, enabling developers to build once and run anywhere with enhanced security and efficiency. It may influence the field by promoting a more cohesive ecosystem for container and VM execution, reducing the cognitive load on engineers and potentially lowering the barrier to adopting more secure or isolated execution environments like microVMs. The abstraction layer provided by Pullrun could pave the way for further innovations in workload portability and management across heterogeneous computing infrastructures. This analysis is based on the provided abstract and promotional material; a full paper was not available.

Software Engineering Hacker News

Emacs Is a Lispboard

Emacs Architected Around Lisp Core

The discussion on Hacker News highlights Emacs' fundamental architecture as a Lisp interpreter, termed a 'Lispboard'. This perspective emphasizes that the editor's core functionalities, including buffer manipulation, command execution, and extensibility, are implemented in and directly exposed via Emacs Lisp (Elisp).

From a technical standpoint, this deep integration signifies a departure from typical application design where Lisp might serve as a scripting layer. In Emacs, Elisp is not an add-on but the native language of operation. This enables unparalleled introspection and modification of the editor's behavior at runtime, a characteristic central to its longevity and adaptability. Commands, keybindings, and even UI elements are represented as Elisp objects, making the entire system programmatically accessible.

The broader implication for the software development community, particularly those interested in highly customizable and programmable development environments, is the existence of a mature, albeit niche, paradigm. It underscores the potential of tightly coupling an execution environment with its configuration and extension language. This model offers a unique approach to tool design, prioritizing user-driven customization and system-level manipulation over monolithic feature sets.

Homelab/Self-Hosting Hacker News

Self-host your mail server

A Hacker News discussion outlines the technical considerations and operational burdens of self-hosting email servers. The discourse centers on the intricate configuration required for SMTP, IMAP/POP3 protocols, DNS record management (MX, SPF, DKIM, DMARC), and ongoing maintenance for security and deliverability.

The technical significance lies in the emphasis on granular control over data privacy and infrastructure. Participants detail the challenges of combating spam, achieving legitimate sender reputation, and implementing robust security measures against phishing and malware. This process demands expertise in system administration, network security, and understanding of email anti-abuse mechanisms.

Broader implications for the industry include a counter-trend to large, centralized email providers. While offering enhanced autonomy, self-hosting presents a steep learning curve and significant resource commitment, making it a niche solution. The discussion highlights the ongoing tension between convenience offered by cloud services and the desire for direct control over sensitive communication channels, underscoring the complexity inherent in distributed email infrastructure.

Software Engineering Phoronix

LLVM 23.1-rc1 Released With AMD Zen 6 & AVX-512 BMM Support, Other Compiler Enhancements

LLVM 23.1-rc1 has been released, introducing significant updates to the compiler infrastructure. Key advancements include preliminary support for AMD's upcoming Zen 6 microarchitecture and the AVX-512 BMM (Block Matrix Multiply) instruction set extension. The release also incorporates various other compiler optimizations and feature enhancements.

The inclusion of Zen 6 support signifies proactive development within the LLVM project to ensure timely compatibility with emerging hardware. This allows for early testing and performance tuning of software targeting future AMD processors. The integration of AVX-512 BMM is particularly noteworthy, as it provides specialized hardware acceleration for matrix multiplication operations, crucial for high-performance computing, machine learning inference, and scientific simulations. This support will enable developers to leverage these new instructions for substantial performance gains in relevant workloads.

This release underscores LLVM's role as a foundational component of the modern software development ecosystem. The early integration of hardware features demonstrates a commitment to enabling developers to fully exploit the capabilities of new processor generations. This timely support is critical for the broader adoption of advanced computational techniques and for maintaining competitiveness in performance-sensitive application development across various industries.

Hardware/Chips Hacker News

Show HN: Running PrismML's Bonsai inside DRAM by breaking DDR4 timing rules

A recent technical proof-of-concept demonstrates the execution of PrismML’s Bonsai machine learning model directly within DDR4 DRAM modules by intentionally violating JEDEC standard timing constraints. By manipulating memory controller parameters, the project bypasses the traditional Von Neumann bottleneck, performing in-situ computational operations directly on the memory array instead of routing data to the CPU or GPU.

Technical Significance

This implementation achieves software-defined Processing-In-Memory (PIM) on commodity hardware. By overriding standard command intervals—specifically reducing row activation ($t_{RCD}$) and precharge ($t_{RP}$) delays—the system induces controlled, simultaneous multi-row activations. This exploitation of DRAM charge-sharing physics allows the memory cells to perform bulk bitwise operations (such as AND/OR logic) directly inside the subarrays.

Using PrismML's Bonsai—a model architecture designed for extreme resource efficiency—the developer maps the model's decision tree execution directly onto these hardware-level bitwise operations. This demonstrates that specialized, low-resource machine learning inference can be executed entirely within the analog domain of standard DRAM cells.

Broader Implications

This project indicates that PIM capabilities do not strictly require specialized, expensive silicon architectures (such as HBM-PIM); rather, primitive computational operations can be retrofitted onto legacy DDR4 systems via custom memory controller configurations.

However, bypassing JEDEC timing rules introduces significant trade-offs. Operating memory components outside specified tolerances risks accelerated hardware degradation, increases transient bit-error rates, and poses potential security risks analogous to Rowhammer exploits. For highly specialized edge applications and air-gapped systems, this paradigm offers a novel pathway to achieve ultra-low-latency, low-power inference by completely eliminating data-bus transmission overhead.

Software Engineering Hacker News

How to Write a Quine

A technical discussion on Hacker News recently highlighted the algorithmic design and implementation of quines—non-empty computer programs that output their exact source code without taking any input. The analysis focused on the mathematical and syntactic strategies required to achieve self-replication, particularly the use of structured string formatting to resolve the logical paradox of infinite recursion.

Technically, writing a quine serves as a practical demonstration of Kleene's recursion theorem and computational self-reference. The primary engineering challenge lies in escaping characters and managing nested string delimiters. To bypass this, developers typically partition the program into two components: an executable template and a data payload representing that template. By applying the data payload to the template, the program reconstructs its complete structure. This exercise tests the boundaries of a programming language's syntax, string manipulation capabilities, and evaluation semantics.

Beyond theoretical recreation, the principles underlying quines have practical implications for compiler design, particularly in bootstrapping self-hosting compilers. Understanding self-replication mechanics is also critical in cybersecurity for analyzing polymorphic malware and self-propagating software. Furthermore, it reinforces foundational concepts in computability theory, illustrating how formal systems can represent themselves—a concept central to Gödel's incompleteness theorems and the limits of automated code verification.

AI/ML arXiv cs.AI

PRO-LONG: Programmatic Memory Enables Long-Horizon Reasoning

The computational bottleneck in deploying large language model (LLM) agents on long-horizon reasoning tasks lies in context management. To address the trade-off between preserving comprehensive historical observations and maintaining tractable retrieval, Alexis Fox, Junlin Wang, Paul Rosu, and Bhuwan Dhingra introduced PRO-LONG in a paper published on arXiv (cs.AI) in July 2026. Designed for machine learning researchers and software engineers building autonomous systems, PRO-LONG is a minimal context management framework that leverages programmatic memory to facilitate sustained perception and exploration in complex environments.

At the core of PRO-LONG is a structured interaction log paired with execution-based retrieval. Rather than relying on heuristic-driven summarization or vector databases, which often lose fine-grained details over long horizons, the framework maintains a complete log of past states and actions. It then deploys coding agents to programmatically search, filter, and extract relevant details from this history using code execution. On the challenging ARC-AGI-3 public game set, PRO-LONG achieved a 76.1% pass@1 rate, matching or exceeding specialized agent harnesses. Crucially, it delivered an average improvement of 18.0 percentage points over standard coding agents while utilizing 4.2 to 5.8 times fewer tokens. Evaluated with Fable 5, the framework demonstrated a 97.4% best@2 performance, proving both highly accurate and economically viable for resource-constrained deployments.

This paradigm shift from passive vector retrieval to active programmatic queries of agent logs establishes a scalable path for long-horizon AI. By decoupling memory storage from the primary model's active context window and treating history as a queryable database, PRO-LONG enables the development of robust, cost-effective agents capable of complex scientific discovery, software engineering, and multi-step reasoning without exponential token inflation. Because this analysis is based on the published abstract of the paper, further structural details on the exact programmatic query API and execution environment remain to be explored in the full text.

AI/ML arXiv cs.AI

From Trajectories to Prefixes: Reusing Teacher Trajectories via Replayed Prefixes and Online Continuation

Fine-tuning small language models to act as interactive agents in long-horizon environments often falters because direct distillation from large teacher models collapses multi-turn dynamics into static, one-shot imitation targets. To bridge this gap, Yihan Wang, Zhong Guan, Haoran Sun, Jiale Huang, Likang Wu, and Hongke Zhao introduced Prefix-GRPO in a research paper published on arXiv. This framework is designed for machine learning researchers and software engineers developing resource-constrained, interactive agents that must navigate sequential decision-making tasks where early actions drastically influence future states.

The core innovation of Prefix-GRPO lies in how it decomposes teacher trajectories into replay-aligned prefix queries and online continuations. Instead of treating the teacher's trajectory as a static target, the system replays the prefix in the interactive environment to reconstruct a valid intermediate state. From this restored state, the student model generates online continuations, interacting directly with the environment to receive task rewards. Crucially, the framework unifies prefix learning and continuation learning by applying clipped policy updates to the historical assistant tokens within the replayed prefix. It achieves this by utilizing a policy-distilled supervised fine-tuning checkpoint to estimate the old log-probabilities of those historical tokens, ensuring the optimization of both the prefix history and the active generation within a single, cohesive policy-gradient formulation.

Evaluated on complex interactive benchmarks including TextCraft, BabyAI, and ALFWorld, Prefix-GRPO significantly outperformed traditional distillation and standard reinforcement learning baselines. Ablation studies demonstrated that simply replaying prefixes without optimizing the prefix tokens themselves is insufficient to drive policy improvements. This methodology opens new avenues for agent training, enabling developers to distill high-quality, long-horizon decision-making capabilities into small language models without losing environment-state alignment. This analysis is based on the published abstract and metadata of the paper.

Hardware/Chips arXiv cs.AI

Opto-ViT-v2: Noise-Resilient On-Chip Fine-Tuning for Photonic Near-Sensor Vision Transformer Accelerators

The Opto-ViT-v2 framework, published in the Proceedings of the IEEE/ACM International Conference on Computer-Aided Design (ICCAD 2026) by Xuming Chen, Gourav Datta, and their co-authors, introduces the first system for parameter-efficient fine-tuning (PEFT) tailored for near-sensor silicon-photonic (SiPh) Vision Transformer (ViT) accelerators. While silicon-photonic systems offer exceptional throughput and energy efficiency for static inference, on-chip training has historically remained impractical. This limitation stems from the massive activation storage requirements of backpropagation, the latency and power overheads of frequent weight write-backs to microring-resonator (MRR) banks, and severe physical noise. Designed for hardware architects and edge AI researchers, Opto-ViT-v2 bridges this gap to allow energy-efficient domain adaptation directly at the sensor level.

Three primary technical innovations drive the performance and robustness of Opto-ViT-v2. First, a tensorized low-rank decomposition mechanism decouples the static, pretrained optical weights from a minimal set of trainable electronic parameters, requiring as few as 8,000 parameters for a ViT-Base model. This drastically limits the memory footprint of backpropagation and prevents the physical wear of continuously writing to MRRs. Second, a gradient-accumulated sparse classifier reduces training costs by approximately 40 percent through one-shot top-k gradient masking to freeze low-importance weights. Finally, the authors developed and calibrated a system-level noise model based on physical measurements from over 200 fabricated MRR devices, capturing the complex interactions of MRR crosstalk, thermal drift, and laser amplitude noise across both forward and backward propagation passes.

The physical modeling demonstrates that the framework's low-rank factor updates are intrinsically more robust to photonic noise than conventional layer-wise low-rank adaptation or full-parameter tuning. Evaluated on the VTAB-1K and FGVC few-shot benchmarks, Opto-ViT-v2 recovers within 0.3% to 0.8% of clean software accuracy under realistic photonic noise while achieving an energy efficiency exceeding 100 kiloframes per second per watt (KFPS/W). This work demonstrates that on-chip optical training is viable despite physical hardware non-idealities, paving the way for autonomous, self-learning edge vision systems that adapt dynamically to changing environments in real time. Note that this analysis is based on the published abstract and metadata of the research paper.

AI/ML arXiv cs.AI

BaseRT: Advancing Best-in-Class LLM Inference with Apple M5 Neural Accelerators

The development of BaseRT by researchers Fabian Waschkowski, Prabod Rathnayaka, and Lukas Wesemann, published on arXiv, represents a significant optimization milestone for local large language model (LLM) execution. Targeted at systems software engineers and machine learning researchers designing on-device applications, BaseRT addresses a critical bottleneck on Apple Silicon: the inefficient utilization of specialized co-processors during compute-bound operations. Traditional inference runtimes like llama.cpp and MLX have struggled to fully exploit the hardware-level accelerators embedded in modern silicon. BaseRT solves this by providing a native, framework-free Metal inference runtime tailored specifically for the Apple M5 generation's GPU architecture, which introduces dedicated, on-die Neural Accelerators inside every GPU core.

The primary technical mechanism behind BaseRT is a split-path execution strategy designed to match workloads with the appropriate hardware units. The M5 Neural Accelerators are exposed via the Metal 4 tensor API as hardware matrix units. To exploit this, BaseRT utilizes a custom library of hand-written Metal 4 tensor-core kernels, including specialized General Matrix Multiply (GEMM) implementations for both dense and Mixture-of-Experts (MoE) models, alongside flash-attention prefill kernels. Compute-bound matrix multiplications during the prompt-processing (prefill) phase are routed through these M5 Neural Accelerators. Meanwhile, memory-bound operations on the decode path are kept on existing, memory-bandwidth-optimized specialized kernels. This prevents the latency overhead of running memory-bound tasks on compute units while unlocking massive parallel throughput for dense tensor math.

Empirical results demonstrate that this architecture significantly raises the performance ceiling for on-device LLMs. Tested on an Apple M5 Pro chip across fifteen model configurations from the Qwen3, Llama 3.2, and Gemma 4 families (ranging from sub-1B to 35B parameters), BaseRT achieved up to a 6.4x speedup in prompt-processing throughput over llama.cpp and a 3.9x speedup over MLX. The most pronounced performance leaps occurred in MoE models, where compute-dense matrix multiplication dominates. Additionally, BaseRT maintained a performance lead during token decoding, outperforming llama.cpp and MLX by up to 1.75x and 1.33x, respectively.

Going forward, BaseRT establishes that dedicated GPU-embedded tensor cores, rather than general execution units, are the decisive lever for high-throughput localized LLM inference. This work is likely to shift how software engineers architect on-device execution engines, emphasizing hardware-specific, split-path compilation rather than unified, cross-platform abstractions. Please note that this analysis is based on the published abstract of the paper.

AI/ML arXiv cs.AI

Fine-grained Computation-Communication Overlap via Tile-level Signaling and Scheduling for Mixture-of-Experts

Distributed Mixture-of-Experts (MoE) architectures are crucial for scaling large language models to trillion-parameter regimes, yet their performance is heavily bottlenecked by communication overhead. Specifically, conventional distributed MoE implementations launch the second all-to-all communication phase—which returns expert outputs to their source ranks—only after all local expert computations are completed. This sequential execution exposes communication latency directly on the critical path and reduces overall GPU utilization. To address this, Minyu Cui, Anna Wingkvist, and Morgan Ericsson, in work published at the 55th International Conference on Parallel Processing (ICPP 26), introduce a fine-grained producer-consumer co-design that achieves computation-communication overlap through tile-level signaling and scheduling.

The system architecture relies on two key mechanisms that orchestrate operations at a tile level without requiring intrusive modifications to underlying computation operators or communication primitives. First, a persistent per-rank computation kernel acts as a producer, managing all local experts on a single rank to eliminate repeated kernel launch overhead. This producer dynamically schedules tile execution, prioritizing remote-critical tiles that are destined for remote ranks. Second, a persistent communication kernel acts as a consumer, executing on a small, dedicated partition of GPU Streaming Multiprocessors (SMs) to initiate segment-granular data transfers as soon as the designated tiles become ready. By decoupling execution and signaling at this granular level, the system effectively hides communication latency behind computation. Empirical evaluations on a 4-A100 GPU platform across three MoE models demonstrate that this approach outperforms four state-of-the-art MoE frameworks, achieving up to a 2.64x end-to-end speedup and a 2.74x MoE-layer speedup.

This optimization strategy is highly valuable for systems engineers, distributed training framework developers, and deep learning researchers seeking to maximize hardware utilization in large-scale LLM deployments. By demonstrating that substantial speedups can be achieved without intrusive modifications to core math kernels or networking libraries, this work establishes a practical path forward for building high-throughput, latency-sensitive MoE serving systems. Going forward, this fine-grained, tile-level scheduling model could inspire similar overlap strategies in other distributed tensor-parallel workloads where data-routing and computation are tightly interleaved. Please note that this analysis is based on the published abstract of the research paper.

AI/ML arXiv cs.AI

SLPO: Scaling Latent Reasoning via a Surrogate Policy

Traditional test-time scaling in large language models relies on explicit Chain-of-Thought (CoT) reasoning, which is computationally expensive because every reasoning step must be decoded as a natural language token. Latent reasoning, which processes intermediate computations as continuous vectors rather than text, offers a more efficient alternative but has remained limited by imitation learning. Unlike explicit CoT, latent trajectories lack a tractable per-step likelihood and an adaptive stopping mechanism, preventing the application of outcome-reward reinforcement learning (RL) for test-time scaling. To bridge this gap, researchers Runyang You, Zhiyuan Liu, Yongqi Li, and Wenjie Li introduced Surrogate Latent Policy Optimization (SLPO) in a research paper published on arXiv. SLPO enables outcome-reward RL for autoregressive latent reasoners, unlocking test-time scaling without the heavy computational overhead of token generation.

The framework introduces two key technical innovations to make reinforcement learning viable in continuous latent spaces. First, SLPO establishes an empirical surrogate policy density over latent transitions, which enables trajectory-level credit assignment without requiring explicit token-level probabilities. Second, it implements a correctness-supervised stopping head. Through outcome-reward optimization, this stopping head is refined into a variable-horizon policy, allowing the model to adaptively decide when to terminate its reasoning process. Empirical results demonstrate that SLPO improves Pass@k performance under parallel sampling. Crucially, the method achieves dynamic compute allocation, spending longer latent computational horizons on harder problems, which translates to higher deterministic accuracy.

This work is primarily for machine learning researchers and systems engineers focused on optimizing inference efficiency and reasoning capabilities in large language models. By providing a mathematical and algorithmic framework to train latent reasoners with reinforcement learning, SLPO opens up a new frontier where models can scale their "thinking" time dynamically in a continuous representation space. This could significantly reduce the latency and hardware costs of advanced reasoning agents, shifting the paradigm of test-time compute from explicit token generation to highly efficient, variable-horizon latent-space vector transitions. Note that this analysis is based on the published abstract of the paper.

Software Engineering arXiv cs.AI

Beyond Fail-to-Pass: Iterative Hardening of Co-Generated Bug Reproduction Tests and Fixes

Automated program repair (APR) using large language models (LLMs) often struggles to generate correct patches from natural language bug reports due to underconstrained inputs. While generating Bug Reproduction Tests (BRTs) helps guide this process, the standard validation metric—the fail-to-pass (F->P) criterion, where a test fails on buggy code but passes on the fix—is fundamentally flawed. Many F->P tests are lax, meaning they reproduce the immediate symptom but still validate incorrect, superficial patches. Additionally, co-generating tests and fixes introduces error coupling, where a mutually incorrect test and patch mistakenly satisfy the F->P check.

To address this, Yuhao Tan and a team of researchers from institutions including Nanjing University and Microsoft published a framework on arXiv (cs.AI/cs.SE) designed for software engineering researchers and tool developers building LLM-based autonomous coding agents.

Their proposed framework, CoHarden, shifts the paradigm from simple F->P validation to iterative hardening. CoHarden operates on two core technical mechanisms. First, it decouples the initial generation by producing a candidate test before any fix is attempted. Second, it uses mutation testing to expose laxity: the framework iteratively hardens both the generated test and the candidate patch against surviving mutation patches. By treating the detection of lax behaviors as an in-loop convergence signal, CoHarden iteratively refines the test until it no longer admits incorrect regressions.

The resulting system achieves remarkable performance on the rigorous SWE-bench Verified benchmark, reaching 69.4% Resolved and 78.9% F->P. This represents a 9.6 percentage point increase in resolved bugs over the strongest fix-only baselines. Going forward, CoHarden demonstrates that test generation in APR must move beyond passive validation toward active, adversarial hardening. This approach will likely influence the design of future LLM agents, ensuring they generate highly rigorous test suites that guarantee semantic correctness rather than mere syntactical alignment.

This analysis is based on the published abstract and metadata of the research paper.

AI/ML arXiv cs.AI

OSVE: One Step Video Editing with One Step Diffusion Models

The development of OSVE (One Step Video Editing) represents a major shift in text-guided video manipulation by successfully adapting one-step Text-to-Image (T2I) diffusion models for temporal editing tasks. Authored by Habin Lim and Gyeong-Moon Park and published on arXiv, this framework directly addresses the primary bottleneck of traditional diffusion-based video editing: the high computational latency caused by iterative multi-step sampling and inversion processes. For software engineers and generative AI researchers building interactive media applications, this work bridges the gap between high-fidelity editing and real-time performance, delivering processing speeds 155 to 171 times faster than state-of-the-art multi-step methods while maintaining comparable or superior output quality.

At the core of OSVE's performance are three key technical innovations designed to preserve structure and temporal coherence in a single step. To bypass slow iterative inversion, the authors introduce a learnable encoder that predicts the initial noise map for each frame in a single forward pass. This encoder is trained using a novel Structure-Aware Editing loss on a curated dataset of structurally-aligned image pairs, forcing the network to preserve the source video's underlying geometry during text-guided modifications. To establish temporal consistency across frames without iterative decoding, the framework utilizes Unified-Frame Editing, a technique that concatenates frame latents to facilitate cross-frame attention within a single generation step. For longer video sequences, a sliding-window strategy utilizing a designated anchor frame is employed to maintain global consistency and prevent visual drift over time.

By demonstrating that high-fidelity video manipulation can be achieved in a single diffusion step, this work paves the way for practical, real-time video editing systems capable of running on edge devices or standard consumer hardware. It shifts the paradigm of generative video tools from slow, offline rendering to instantaneous, interactive workflows, likely influencing future research into highly accelerated video-to-video synthesis and live stream manipulation. Please note that this analysis is based on the published abstract and metadata of the research paper.

Cybersecurity arXiv cs.AI

HijackKV: New Threat in Position-Independent KV Cache Reuse

In the push to optimize Large Language Model (LLM) inference, position-independent Key-Value (KV) cache reuse has emerged as a critical technique to boost cache hit rates by caching identical text chunks regardless of their sequence position. However, a new study accepted at USENIX Security 2026 by researchers Yichi Zhang, Zhiqi Wang, Huan Zhang, and Yuchen Yang exposes a fundamental security vulnerability inherent in this design. Their paper, HijackKV: New Threat in Position-Independent KV Cache Reuse, introduces the first systematic exploitation framework, HIJACKKV, demonstrating that optimizing for serving efficiency without contextual isolation exposes systems to silent adversarial manipulation. This work is critical for LLM system architects, security researchers, and machine learning engineers who design and deploy high-throughput inference pipelines.

The core threat, termed KV Cache Hijacking, exploits the fact that while KV caches are retrieved based on simple token matches, the stored activation tensors inherently encode the contextual history of the sequence in which they were first generated. HIJACKKV operates by optimizing an attacker-controlled prefix preceding a common, benign text chunk. When the serving system processes the attacker's input, the KV cache generated for the subsequent benign chunk becomes contaminated, embedding the attacker’s adversarial objective. When a victim later submits a query containing this benign text chunk, the system reuses the poisoned KV cache. This silently hijacks the model's behavior and output, despite the victim's input containing zero attacker-controlled text. The authors demonstrate that the attack achieves a 94% average success rate on a single attempt and remains highly resilient under realistic constraints, such as low hit rates of 10% and frequent cache recomputations of 50%. It also transfers effectively across models in black-box scenarios and persists through multi-turn interactions.

Going forward, this research reframes how the systems community must approach LLM inference optimization. It proves that token-level identity does not equate to security or semantic equivalence in stateful caching systems. Future architectures must incorporate robust validation or isolation mechanisms—such as context-aware hashing, boundary verification, or lightweight verification steps—to prevent unauthorized state sharing without sacrificing the latency benefits of KV reuse. Because this analysis is based on the paper's published abstract and metadata, the exact formulation of the prefix optimization algorithms and the specific design mitigations remain to be fully evaluated in the complete paper.

AI/ML arXiv cs.AI

Co-Evolving LLM Evaluators and Policies via DynamicRubric

This work, "Co-Evolving LLM Evaluators and Policies via DynamicRubric," by Beining Wang and collaborators from various institutions, published on arXiv, introduces a novel framework for improving large language models (LLMs) through feedback-driven post-training. The core contribution is a method that addresses a critical bottleneck in current evaluator-guided LLM training: the diminishing signal strength of evaluator feedback as the LLM's policy improves. When candidate responses generated by the LLM become too similar in quality, the relative score gaps, which are crucial for guiding policy updates, shrink to the point of being uninformative. This paper theoretically models these score gaps as the directional gradient for policy optimization, quantifying how shifting probability mass between responses directly corresponds to the score difference.

The primary problem solved is the "collapsed relative score gaps" that impede effective LLM fine-tuning. Existing approaches struggle when the LLM's output quality becomes highly uniform, leading to suboptimal policy updates. This research fills the gap by proposing an adaptive evaluation mechanism that dynamically adjusts its criteria. The intended audience includes researchers and engineers working on LLM training, alignment, and reinforcement learning from human feedback. Those benefiting will be developers seeking to improve LLM performance, particularly in tasks requiring nuanced judgment and verifiable reasoning.

Two key technical ideas stand out. First, the theoretical characterization of score gaps as probability allocation signals provides a foundational understanding of why feedback quality matters. Second, the proposed DynamicRubric framework is a response-set-conditioned co-evolutionary system. It generates weighted binary rubric items tailored to each specific set of candidate responses, aggregating these judgments into response-level scores. This dynamic adaptation ensures that the evaluator remains sensitive to subtle quality differences, even as the policy matures. The experiments demonstrate that DynamicRubric, even with smaller models, surpasses baselines using much larger static reward models or rubric generators, and improves performance on reasoning and coding tasks. A notable result is the full deployment of a DynamicRubric-optimized model in WeChat Search, handling millions of daily requests and improving key metrics, underscoring its practical efficacy.

Looking forward, this work enables more robust and efficient LLM alignment by maintaining a strong supervision signal throughout the training process. It suggests a paradigm shift towards dynamic, evolving evaluators that are intrinsically linked to the policies they supervise, rather than static, pre-defined criteria. This could significantly influence the development of more capable and trustworthy LLMs, particularly in complex domains where precise and nuanced evaluation is paramount. The abstract indicates this is the submitted paper content.