Claims Browser

ModelAudit produced definitive security decisions for all 135 labeled artifact families, achieving 100% coverage

"ModelAudit produced definitive security decisions for all 135 families (100%)"

ModelScan achieved perfect precision, recall, and F1 scores when it was able to make definitive judgments

"Conditional on making a definitive judgment, ModelScan achieved 100% precision, recall, and F1."

ModelScan only produced definitive security decisions for 49.6% of labeled families, showing limited coverage despite high accuracy

"ModelScan for 67 (49.6%)"

Fickling provided no unique detection value beyond the combination of ModelAudit and ModelScan

"Fickling identified no unique true- positive families beyond those found by the combination of ModelAudit and ModelScan."

Evaluation metrics for ML artifact security scanners must distinguish judgment accuracy from judgment availability

"These findings underscore the need to separate judgment accuracy from judgment availability, as well as incremental detection coverage from tool-level redundancy."

For the 48 malicious families where ModelScan failed analysis, both ModelAudit and Fickling successfully generated accurate detections

"for the 48 malicious families where ModelScan failed to complete its analysis, both ModelAudit and Fickling generated detections consistent with ground truth."

Orientation and pedestrian-aware movement remain unreliable for current MLLM agents

"while orientation and pedestrian-aware movement remain unreliable"

Large language model agents in governed organizations require persona (instructions, tone, self-presentation) to evolve freely while keeping execution (stateful, audited work) traceable, which cannot be satisfied cheaply in a single trust domain.

"Large language model (LLM) agents in governed organizations must let the persona (instructions, tone, self-presentation) evolve freely, while keeping execution (stateful, audited work) traceable. A single trust domain does not satisfy both cheaply."

Persona-Execution Separation (PES) architecture, where persona and execution reside in different trust domains connected by a governed contract bridge, solves the dual requirements of free persona drift and execution traceability.

"We present Persona-Execution Separation (PES): persona and execution reside in different trust domains, connected by a governed contract bridge. The persona is singly-homed and may drift; execution is faceless and audited."

Under LLM representational indistinguishability, any single-domain mechanism meeting free drift, execution traceability, and decoupling must re-introduce typed change objects, an external gate, and a stable audit anchor, essentially rebuilding PES at higher coupling cost.

"Under LLM representational indistinguishability, any single-domain mechanism that meets all three must re-introduce typed change objects, an external gate, and a stable audit anchor: PES rebuilt at higher coupling cost."

Misleadingness is frequently associated with heightened emotional arousal and distortive communicative intent

"is frequently associated with heightened emotional arousal and distortive communicative intent"

Reader-level interpretations can often be recovered from lightweight claim-and-context representations without access to richer contextual, evidential, and multimodal information

"reader-level interpretations can often be recovered from such limited representations"

Identifying how misleadingness is produced from lightweight representations remains considerably more challenging than recovering reader interpretations

"whereas identifying how misleadingness is produced remains considerably more challenging"

Reliable understanding of misleading mechanisms requires richer contextual and evidential grounding beyond lightweight representations

"reliable understanding of misleading mechanisms continues to require richer contextual and evidential grounding"

XTTSv2's voice cloning capabilities can preserve prosodic structure independently of speaker identity, enabling it to be repurposed for speaker anonymization without retraining

"Our key insight is that XTTSv2's voice cloning capabilities preserve prosodic structure independently of speaker identity, enabling voice conversion by conditioning on a pseudo-speaker."

The proposed anonymization system achieves near-optimal privacy with EER approximately 0.49 across seven European languages

"our system achieves near-optimal privacy (EER $\approx$ 0.49), competitive intelligibility, and substantially better speech quality than dedicated anonymization baselines, while requiring no language-specific training."

Repurposing a multilingual voice cloning model for speaker anonymization produces substantially better speech quality than dedicated anonymization baselines without requiring language-specific training

"substantially better speech quality than dedicated anonymization baselines, while requiring no language-specific training"

Senior employees exhibit more sophisticated generative AI use than other employees, likely due to domain expertise complementing genAI capabilities

"senior employees exhibit more sophisticated genAI use, consistent with domain expertise complementing genAI capabilities"

Sophistication in genAI use is highest in Strategy, Digital Innovation, and Project Management functions, which focus on firmwide strategic initiatives and organizational change

"sophistication varies considerably across functions and is highest in Strategy, Digital Innovation, and Project Management, three groups that share a focus on firmwide strategic initiatives and organizational change"