Category intelligence

Research Briefing — June 18, 2026

633 current items analyzed and ranked.

Executive synthesis

Research Summary

Today's research is dominated by AI safety, interpretability, and evaluation integrity, alongside notable advances in robotics and RL.

Deception and lie detection drew the most substantive work:

Evaluation reliability is a recurring theme:

Architecture and learning advances:

Key Themes

AI Safety and Alignment · 14AI Safety and Red-Teaming · 7LLM Agents · 20Evaluation and Benchmarks · 9Language Models · 34Benchmarks and Evaluation · 41Interpretability · 12Efficiency and Model Compression · 14Interpretability & Sparse Autoencoders · 6Reasoning · 10

Primary evidence

Top Ranked Signals

74 score
AI Analysis

Evaluates LLM lie detectors by building belief-verified model organisms that demonstrably hold a belief contrary to what they state, plus a prompted-lying testbed. Finds that activation- and logprob-based detectors scale positively when lying is prompted but drop sharply when lying is trained in, casting doubt on current detectors' reliability.

TL;DR. Lie detectors for LLMs could be valuable for auditing and monitoring. But evaluating them requires testbeds where the model verifiably believes the opposite of what it says, which isn’t straightforward. We determine that most existing trained model organisms don't clear this bar. We train 13 reasoning model organisms, with evidence they hold the alternative belief in chain-of-thought, as well as evidence that they have generalised out of distribution. We also build a broad prompted-lying
AI SafetyInterpretabilityDeceptionEvaluation
Research arXiv (Artificial Intelligence) Jun 18

Vision-language models for chest radiography do not always need the image

By Mahshad Lotfinia, Sebastian Ziegelmayer, Lisa Adams, Daniel Truhn, Andreas Maier, Soroosh Tayebi Arasteh

36 score
AI Analysis

Already covered in Research yesterday, A causal audit reveals that medical vision-language models for chest radiography often rely on finding-name text priors rather than reading the actual image, with a text-only model coming within ~6 accuracy points of multimodal systems. Highlights a serious validity gap in current medical AI benchmarks.

arXiv:2606.17710v1 Announce Type: cross Abstract: Medical vision-language models report strong chest radiograph accuracy, and this is increasingly read as evidence that they use the image. That inference is unsafe: a model exploiting finding-name priors scores like one that reads the scan, and no standard benchmark separates them. We introduce a causal audit that intervenes on the image, occluding the relevant region, occluding an irrelevant one, and swapping in another patient's same-label sca
Vision-Language ModelsMedical ImagingEvaluationAI Safety
Research arXiv (Artificial Intelligence) Jun 18

Rift: A Conflict Signature for Deception in Language Models

By Petr Nyoma

71 score
AI Analysis

Rift investigates whether deception leaves an internal signature in LLMs by contrasting a sleeper agent that lies on trigger against a naive liar producing identical wrong answers. It finds deceptive passes carry a conflict signature with higher residual rank, enabling lie identification with 100% accuracy and no labels.

arXiv:2606.17229v1 Announce Type: cross Abstract: A model that lies while knowing the truth is the central case ELK cannot handle with behavioral evaluation alone. We ask whether such deception leaves an internal signature distinguishing it from honest error. Our key move is a control for wrongness: we contrast a sleeper agent (knows the truth, lies on trigger) against a naive liar (fine-tuned to emit the same wrong answers with no honest training). Both produce identical wrong outputs; any dif
AI SafetyInterpretabilityDeception DetectionAlignment
Research arXiv (Machine Learning) Jun 18

SAE Interventions are Unreliable: Post-Intervention Recovery of Suppressed Behavior

By Mingyue Cui, Linghui Shen, Xingyi Yang

70 score
AI Analysis

Shows that interventions on sparse autoencoder features intended to suppress unsafe model behavior are unreliable, because the behavior can be recovered via residual-space optimization even after clamping. This challenges latent-space safety defenses that assume SAE features are actionable handles for control.

arXiv:2606.18322v1 Announce Type: new Abstract: Sparse Autoencoders (SAEs) decompose residual-stream activations into interpretable features. Recent latent-space defenses increasingly rely on these decompositions, assuming that identified "unsafe" SAE features serve as actionable handles for monitoring and intervention. In this paradigm, clamping a specific harmful feature is expected to reliably prevent model misbehavior. However, we show that this success may hide a recoverable failure mode:
InterpretabilityAI SafetySparse Autoencoders
Research arXiv (Computer Vision) Jun 18

Do as I Do: Dexterous Manipulation Data from Everyday Human Videos

By Bhawna Paliwal, Haritheja Etukuru, William Liang, Pieter Abbeel, Nur Muhammad Mahi Shafiullah, Jitendra Malik

70 score
AI Analysis

DO AS I DO reconstructs and retargets monocular RGB human videos to multi-fingered dexterous robot hands, recovering hand-object interactions from in-the-wild egocentric and exocentric sources. It aims to unlock abundant RGB-only human video as scalable dexterous manipulation data.

arXiv:2606.19333v1 Announce Type: cross Abstract: How can we scalably generate data for robotic manipulation, especially on human-like platforms such as dexterous multi-fingered hands? Learning from human videos has recently emerged as a likely answer to this question. However, difficulties in estimating hand-object interaction and crossing the human-to-robot embodiment gap have hindered the adoption of abundant monocular RGB-only human videos as the primary source of robot manipulation data. I
Dexterous ManipulationRobot Learning from Human VideoData Generation
Research arXiv (Artificial Intelligence) Jun 18

Nothing from Something: Can a Language Model Discover 0?

By Phoebe Zeng, Thomas L. Griffiths, Brenden M. Lake

34 score
AI Analysis

Already covered in Research yesterday, Investigates whether language models can independently discover the concept of zero, using arithmetic as a case study for out-of-distribution mathematical generalization. It probes the limits of models reaching genuinely beyond training data.

arXiv:2606.17289v1 Announce Type: new Abstract: AI systems based on artificial neural networks are being developed with aspirations of pushing the boundary of human mathematical knowledge. A key question for these systems is how much they can reach beyond their training data. Mathematical discovery requires a strong form of out of distribution generalization; the ability to hypothesize genuinely new - and potentially logically more powerful - mathematical structures. It has been hypothesized th
Mathematical ReasoningCognitive ScienceGeneralizationLanguage Models
Research arXiv (Artificial Intelligence) Jun 18

Models Take Notes at Prefill: KV Cache Can Be Editable and Composable

By Bojie Li

68 score
AI Analysis

This work shows that an LLM's KV cache acts like a notebook of memoized conclusions, where a field's own key/value vectors drive under 1% of downstream decisions. This enables editable and composable caches, allowing field corrections via chain-of-thought at roughly 1% compute.

arXiv:2606.17107v1 Announce Type: cross Abstract: Prefix caching reuses prefill only across an exactly shared prefix, so one changed field invalidates the entire downstream cache. Yet overwriting the field's own key/value vectors and reusing the rest leaves the model acting on the old value. The reason, established causally across four model families: at prefill the model has already written the field-conditioned conclusion onto downstream notes; the field's own key/value drives under 1% of the
Inference EfficiencyInterpretabilityKV CacheLanguage Models
Research arXiv (Artificial Intelligence) Jun 18

Decoding Hidden Deception in Reasoning LLMs: Activation Explainers for Deception Auditing

By Kexin Chen, Yi Liu, Haonan Zhang, Yanhui Li, Xinyu Deng, Dongxia Wang

68 score
AI Analysis

STATEWITNESS is an activation explainer for deception auditing that uses a separate decoder to read a target model's hidden states and produce natural-language reports about suspicious behavior. It reaches 0.916 mean AUROC across seven deception datasets, outperforming black-box and probe baselines.

arXiv:2606.17478v1 Announce Type: cross Abstract: As LLMs acquire stronger reasoning capabilities, deceptive behavior becomes an increasingly serious safety concern. Existing deception monitors either score visible transcripts or derive scalar probe scores from representation vectors, leaving little inspectable evidence about why a response is suspicious. We introduce STATEWITNESS, an activation explainer for deception auditing. A separate decoder reads a target model's hidden states, then answ
AI SafetyInterpretabilityDeception DetectionAlignment
Research arXiv (Artificial Intelligence) Jun 18

Reversal Q-Learning

By Aditya Oberai, Seohong Park, Sergey Levine

68 score
AI Analysis

Reversal Q-Learning is an off-policy RL algorithm that trains a flow policy on prior data using an expanded MDP treating flow refinement steps as actions, generating virtual on-policy trajectories by reversing flows. It applies bias-and-variance reduction to mitigate the curse of horizon.

arXiv:2606.17551v1 Announce Type: cross Abstract: Iterative generative modeling techniques, such as flow matching, provide powerful tools to model complex behaviors for effective offline reinforcement learning (RL). In this work, we propose a new off-policy RL algorithm that trains a flow policy based on prior data. Our idea starts from the "expanded" Markov decision process (MDP) framework, which treats individual flow refinement steps as separate actions in an MDP. To enable off-policy RL wit
Reinforcement LearningOffline RLFlow MatchingGenerative Models
Research arXiv (Machine Learning) Jun 18

Self-CTRL: Self-Consistency Training with Reinforcement Learning

By Itamar Pres, Laura Ruis, Melat Ghebreselassie, Belinda Z. Li, Jacob Andreas

68 score
AI Analysis

Self-CTRL trains language models so their self-explanations and actual behavior remain consistent, by reinforcement learning that updates either explanations or behavior. Tested on probabilistic reasoning tasks, it improves the correlation between self-reported and measured biases, supporting auditability and trust.

arXiv:2606.18327v1 Announce Type: new Abstract: Language models (LMs) that faithfully describe their own behavior can more easily be audited, understood, and trusted by users. This paper describes Self-Consistency Training with Reinforcement Learning (Self-CTRL), a method that optimizes for consistency between a LM's self-explanations and behavior on related inputs by updating explanations to better predict behavior or updating behavior to better match explanations. We apply our method in two d
AlignmentReinforcement LearningLanguage ModelsInterpretability
Research arXiv (Computer Vision) Jun 18

EDoF-NeRF: extended depth-of-field neural radiance fields using a coded aperture camera

By Yoshiyuki Shirasaki, Ryoichi Horisaki

68 score
AI Analysis

SC3-Eval adapts a pretrained video foundation model into an accurate robot policy evaluator by enforcing forward-inverse dynamics, multi-view, and out-of-distribution consistency. It offers a scalable alternative to expensive real-world policy evaluation.

arXiv:2606.18826v1 Announce Type: cross Abstract: We propose a method for extending the depth-of-field (DoF) to construct high-fidelity neural radiance fields (NeRF) -- an emerging technique for rendering photorealistic novel views from a dataset of images captured at different viewpoints, based on implicit neural representations. The trade-off between DoF and light quantity is inherent not only in conventional cameras but also in NeRF, since the datasets used by NeRF are captured by these came
World ModelsRobot EvaluationVideo Generation
Research LessWrong Jun 17

Several frontier models are substantially prefill aware

By yeedrag

68 score
AI Analysis

Extends UK AISI work on prefill awareness, showing several frontier models can distinguish tampered assistant-side content from genuine content even under conservative elicitation and in low-stakes settings. This matters because prefill-based methods underpin many safety evaluations (jailbreaking, persona, introspection), and awareness could confound pre-deployment safety claims.

This blog post discusses work in a recently-published paper. However, this blogpost was primarily written by Parv Mahajan and Andy Wang, and several of the more speculative takes may not represent the all-things-considered view of the entire team.Link to paper: arxiv.org/abs/2606.12747TL;DR:We provide more conceptual grounding and extend results in prefill awareness to low-stakes settings, and show that several frontier models show prefill awareness even under conservative elicitation.Fu
AI SafetySituational AwarenessEvaluationLanguage Models