ArtificialIntelligence.io

The Signal

Everything that matters in AI, with our take.

Updated through the day. Every headline links straight to the source. The two lines underneath are ours.

arXiv cs.CLPaper

Prediction of Prediction (PoP): Inter-Layer Activation Fusion for Single-Pass Hallucination Detection in Large Language Models

Single-pass hallucination detection with under 1.2% runtime overhead is the kind of efficiency gain that matters for production deployment, since multi-sample verification is often too slow or expensive to ship. The AUROC of 75.5% is decent but not yet reliable enough to gate high-stakes outputs alone. Worth tracking as a cheap secondary signal layered on top of existing guardrails.

arXiv cs.CLPaper

Calibrated Enough to Know, Not Calibrated to Act: Fabricated Evidence Makes LLM Agents Commit to the Unknowable

This is a sharp finding for anyone deploying agents in financial, forecasting, or advisory contexts: the models aren't fooled by false information so much as by the appearance of authority. Stated confidence scores don't move even as behavior swings 48 points, meaning you can't rely on a model's self-reported uncertainty to catch this failure. Anyone building agents that consume dashboards or reports needs a guardrail that checks provenance, not just plausibility.

arXiv cs.AIPaper

When State Becomes an Attack Surface: State-Semantic Injection in LLM-Driven Embodied Agents

This is a real vulnerability class for agent systems in the wild: an attacker who can poison the state the LLM reads (sensor output, database values, tool responses) can manipulate the agent's decisions. If you're building agents in safety-sensitive domains or deploying them in adversarial environments, threat-model state injection now. For everyone else, this signals that embodied agents need defense-in-depth differently than inference-only systems.