Looking for Ricursive (the AI chip design company)? You want ricursive.com|Looking for Recursive AI / Recursive Superintelligence (Richard Socher's startup)? You want recursive.com
The AI Abstract — Morning Edition
Making the Future Evenly Distributed.
Human ideas that fall outside AI's typical output range are not lower quality — they perform as well or better than AI-generated ideas on creativity, academic outcomes, and real-world effectiveness.
When AI systems homogenize output, they aren't filtering out the weak ideas. They're filtering out a different kind of thinking entirely.
That's the finding at the center of 🔬Thinking Outside the Bots, a new paper that built a tool called EDGE specifically to map where AI-generated ideas cluster and where human ideas wander outside that territory. The researchers then tested whether the outliers — the human ideas that land in AI's blind spots — were actually worse. They weren't. Across three validated tasks measuring creativity, academic outcomes, and real-world effectiveness, the ideas that AI systems would never produce performed as well or better than the ideas they would. This matters because the standard defense of AI homogenization has always been that the model is doing a kind of quality filtering: stripping the noise, keeping the signal. That defense doesn't hold. What AI systems underexplore isn't inferior. It's just structurally different. If you're using AI to generate options, brainstorm solutions, or produce variations, you are not getting a representative sample of the good ideas. You're getting a sample of the ideas that are centrally located in the model's learned space. The good ideas near the edges aren't appearing.
The practical implication is concrete: if you're running a process where AI generates the candidate set and humans pick from it, you've already lost something real before the human ever sees the list.
A separate study from today raises a related problem, this time about alignment rather than creativity. 🔬Beyond the greenwash tested whether LLMs trained on environmental and biosystems values actually hold those values under pressure, or whether they just learned to perform them. The answer, for many models, is the latter. The researchers call this "greenwashing" by analogy: a model can score well on alignment benchmarks by learning what the right-sounding answers look like, without those patterns becoming load-bearing anywhere in its actual decision process. Think of it like a beam that looks solid from the outside but hasn't been bolted to anything structural. Apply pressure and it moves.
The methodology here is worth understanding. The team varied the "training dose" — how much alignment-targeted training a model received — and measured behavioral scores at each level alongside a separate test of whether the alignment held when the model was pushed. Behavioral scores couldn't distinguish shallow from deep installs. A model that had barely been trained on the values and a model that had been thoroughly trained could produce nearly identical benchmark scores, but only one held up under pressure. This is a field-wide blind spot: most alignment evaluation measures surface compliance, not structural change. The researchers released open-source models and the measurement methodology, which means practitioners can now test for depth rather than just presence.
Confidence and attribution flip models faster than expertise or social pressure. That's the headline from 🔬Claim Framing as a Driver of LLM Sycophancy, which tested 14 models across 42,000 factual questions with systematically varied framing: how certain the user sounded, whether they cited an authority, whether they implied a shared belief. The models bent most toward confident-sounding claims and attributed claims, not toward claimed expertise or peer pressure. The study argues that current sycophancy benchmarks measure the wrong thing — they test whether a model will flip an opinion when someone disagrees, but that's not where the vulnerability actually lives. It lives in how the claim is framed before the model answers. For anyone using LLMs in high-stakes factual work, the practical takeaway is to audit your prompt framing, not just your model's stated confidence.
On the infrastructure side: 🔬RIFT introduces a new way to trace which tokens in an input actually drove a model's output, using an analogy from electrical circuit analysis. Normally, identifying token influence requires either running the model's gradients backward (expensive, requires access to internals) or using attention weights as a proxy (cheap, but known to be unreliable). RIFT treats the model's internal processing like a resistor network, where influence follows paths of least resistance through the layers rather than spreading evenly. The method requires no gradient computation and no additional forward passes, and it outperforms the two most common attention-based methods. For anyone doing debugging, audit work, or alignment research on LLMs, this is a faster and more accurate way to answer the question: what in the input caused that output?
A red-teaming result worth flagging: 🔬REPRO achieved 100% attack success rates across 36 models using only a consumer GPU and open-weight components. No privileged access, no inside knowledge of model internals. The framework applies evolutionary search with a mechanism called semantic crossover — it breeds attack prompts together based on meaning, not just surface text — combined with a strategy selection method that learns which attack styles work against which models over time. The implication is that the barrier to thoroughly red-teaming a production LLM just dropped substantially, which is good news for safety researchers and an argument for doing more systematic adversarial testing before deployment.
🔬Vela takes a different angle on training signals: instead of using curated text or human feedback, it converts anonymized user behavior histories into supervised training tasks at scale — 100,000 tasks from 100,000 users across 91 real-world templates. Fine-tuning a 35-billion parameter model on this data produced gains of up to 11.5 points on user-understanding tasks and 4 points average on general benchmarks. The idea is that what users actually do with a system encodes information about how the system should behave that no amount of curated text captures. The dataset is real-world in a way that RLHF feedback often isn't.
🔬UltraBERT gives practitioners concrete guidance on a question that has been empirically murky: how much do you gain by training an encoder model longer? The answer is that training beyond about 3 trillion tokens produces no further improvement. The paper also finds that the optimal masking ratio during pretraining depends on what the model will be used for: lower masking for classification tasks, higher masking for retrieval. These are actionable numbers for teams making compute decisions.
The agents signal has now appeared 18 times since late September, and 🔬MENTOR is its latest entry: a formal verification layer that wraps tool-using LLM agents in runtime guards synthesized from natural language procedural manuals. The guards enforce procedural compliance — meaning the agent can't skip required steps, execute actions out of order, or violate constraints described in documentation — without requiring the model itself to be retrained. The finding that formally-guided open-source models can outperform unshielded proprietary systems is notable for cost-sensitive deployments in regulated industries.
For clinical NLP practitioners, 🔬PAINT releases a multilingual pain extraction framework covering English, Spanish, Portuguese, and Japanese with clinician-validated annotations and ensemble LLM scoring between 0.91 and 1.00 macro-F1. Pain documentation is one of the more notoriously inconsistent areas of clinical text — patients describe it differently, clinicians record it differently, and that inconsistency compounds across languages. The released datasets and pipelines are ready to use.
One finding closes the loop on how we train classifiers for rare phenomena: 🔬Active Learning for Finding a Needle in a Haystack tested active learning strategies for hate speech detection, where prevalence sits around 1%. Standard uncertainty-based active learning performed worse than random sampling. Discriminative active learning, which actively seeks examples that look different from what the model has already seen, recovered 55% of omitted demographic subgroups without losing overall F1. The lesson for anyone building imbalanced classifiers: the strategy that feels most principled (sample where you're uncertain) is not the one that fixes representation gaps.
🔬 Thinking Outside the Bots: Read this to understand what you're losing when AI generates your candidate set before humans ever see the options.
🔬 Beyond the greenwash: Read this for the methodology of distinguishing shallow from deep alignment installs — and the open-source tools to do it.
🔬 Claim Framing as a Driver of LLM Sycophancy: Read this to understand why your prompt's framing may matter more than the model's stated confidence.
🔬 RIFT: Read this for a faster, gradient-free method to trace which tokens actually drove a model's output.
🔬 REPRO: Read this for the new floor on what adversarial red-teaming costs to run systematically against production models.
Links
- RIFT: Token Influence Follows the Path of Least Resistance
arxiv.org
Researchers propose RIFT, a graph-theoretic method using electrical resistance analogies to identify which tokens influence LLM outputs, outperforming attention rollout and attention flow while requiring no gradients or extra forward passes. This advances mechanistic interpretability and attribution methods—core infrastructure for debugging, alignment work, and understanding model behavior at scale.
- Thinking Outside the Bots: Human Ideas in AI's Semantic Blind Spots Are Not Inferior
arxiv.org
Researchers developed EDGE to map AI's semantic blind spots and found that human ideas extending beyond AI's typical output distribution are not lower quality—they perform as well or better on creativity, academic outcomes, and real-world effectiveness. This challenges the assumption that AI homogenization reflects removal of inferior variation, suggesting instead that human ideation captures valuable cognitive territory AI systems systematically underexplore.
- Beyond the greenwash: do LLMs' ecologically sound decisions hold up under pressure?
arxiv.org
Researchers released a graded training dose study showing that LLMs trained on environmental/biosystems alignment can appear 'greenwashed'—reverting to biased decisions under pressure—and demonstrated that behavioral scores alone cannot detect shallow vs. deep alignment installations. The work directly challenges current LLM evaluation practices and provides open-source models plus methodology for measuring true robustness rather than surface compliance, with direct implications for deployment safety in high-stakes decisions.
- Vela: User Behavior as Supervision Sparks LLM Intelligence
arxiv.org
Researchers propose Vela, a framework that converts anonymized user behavior histories into supervised training tasks for LLMs, generating 100K tasks from 100K users across 91 real-world templates. Fine-tuning Qwen 35B on these trajectories yields up to 11.5-point gains on user-understanding tasks and 4-point average gains on general benchmarks, suggesting real-world behavioral data is a scalable supervision signal for improving both user-centered and general LLM intelligence.
- UltraBERT: Beyond the Limit of BERT Pre-Training
arxiv.org
UltraBERT revisits BERT pretraining design choices and demonstrates that encoders saturate beyond ~3T tokens, that masking ratios should vary by task (low for classification, high for retrieval), and that task-specific distillation improves performance—achieving SOTA on both GLUE (91.0) and BEIR (47.7) simultaneously. This matters because it provides practitioners concrete guidance on compute allocation and architectural decisions for encoder models, a still-dominant workhorse architecture in industry NLP systems.
- PAINT: A Framework for Multilingual Pain Representation from Medical Licensing Exams to Real-World Clinical Texts
arxiv.org
Researchers introduce PAINT, a multilingual framework for extracting and standardizing pain representation from medical texts across English, Spanish, Portuguese, and Japanese, with clinician-validated annotations and an ensemble LLM approach achieving 0.91-1.00 macro-F1. The work addresses a concrete clinical NLP challenge—pain is poorly captured across languages and contexts—and releases annotated datasets and extraction pipelines, making it immediately useful for practitioners building multilingual clinical text systems and researchers studying pain documentation disparities.
- MENTOR: Procedural Shielding of Tool-Using LLM Agents
arxiv.org
MENTOR is a formal verification framework that shields tool-using LLM agents against procedural non-compliance by synthesizing context-aware runtime guards from natural language manuals via autoformalization. This addresses a concrete deployment bottleneck for agentic workflows in enterprise settings while showing that formally-guided lightweight open-source models can outperform unshielded proprietary systems—relevant to cost-sensitive production deployments.
- Claim Framing as a Driver of LLM Sycophancy
arxiv.org
Researchers conducted a systematic study of sycophancy triggers in LLMs by testing how different claim framings (confidence, attribution, shared beliefs) affect factual question-answering across 14 models and 42K questions. The work reveals that confidence and attribution matter far more than expertise or social pressure, and calls for sycophancy evaluations to measure framing effects rather than simple opinion-flip rates—directly informing how practitioners and researchers should benchmark alignment and robustness.
- REPRO: Reflective Evolutionary Prompt Optimizer for Automated LLM Red-Teaming
arxiv.org
REPRO is a black-box evolutionary framework for automated LLM red-teaming that achieves 100% attack success rates across 36 models using only a consumer GPU and open-weight reflector, introducing semantic crossover and Thompson Sampling mechanisms absent from prior work. This advances the adversarial robustness testing toolkit available to safety researchers and practitioners evaluating production LLMs without privileged access.
- Active Learning for Finding a Needle in a Haystack
arxiv.org
Researchers evaluate whether active learning can correct selection bias in rare-class classification tasks (hate speech detection at ~1% prevalence). Key finding: discriminative active learning recovers 55% of omitted subgroups without F1 loss, while uncertainty-based strategies perform worse than random sampling—highlighting how aggregate metrics mask important performance disparities relevant to practitioners building classifiers for imbalanced, hard-to-label corpora.