Research→Official→arXiv Information Retrieval
A new preprint introduces MC-RAG, a structure-driven retrieval-augmented generation (RAG) system that reformulates retrieval as a subgraph matching problem over a knowledge graph. By combining semantic and structural embeddings with path-level indexing, MC-RAG aims to improve the handling of complex, multi-constraint queries, offering more interpretable and constraint-consistent retrieval and generation. The system is demonstrated with interactive examples and a demo video.
Why it matters: MC-RAG proposes a novel approach to address the challenge of constraint violations and hallucinations in RAG systems when handling complex queries, potentially improving reliability and interpretability.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
A new preprint demonstrates that cross-lingual prompt injection attacks can significantly inflate relevance scores in LLM-based information retrieval systems, while evading current prompt-injection defenses. The attacks, tested across eight languages and multiple open-weight models, can also adapt to bypass modified defense mechanisms. This exposes a critical vulnerability in using LLMs as automated relevance judges.
Why it matters: The study reveals that language diversity can be exploited as an attack vector, exposing a major security gap in LLM-based evaluation systems.
Jul 14, 2026
Research→Official→arXiv Cryptography and Security
Researchers introduce MCPZoo, the largest collection of MCP servers for dynamic analysis, comprising 64,611 unique servers. Using this dataset, they find that existing security scanners report 96.89% of servers as risky, but manual validation shows less than 50% of sampled alerts are true positives, with significant inconsistency across scanners. MCPZoo enables large-scale, reproducible measurement of MCP server security and highlights limitations in current scanning practices.
Why it matters: This study exposes critical flaws in current MCP security assessment methods, raising concerns about the reliability of reported risk levels for LLM-based agent tools.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
Researchers from Vrbo introduce a training-free candidate generation pipeline that leverages off-the-shelf large language models (LLMs) to address the long-tail problem in vacation rental marketplaces. By generating semantic queries from property metadata and retrieving candidates via approximate nearest-neighbor search, the system significantly extends candidate coverage to tens of thousands of properties previously unreachable by behavioral methods. A Union fusion strategy merges LLM-generated candidates with existing behavioral approaches, maintaining or improving performance for well-served properties while delivering the largest gains for niche and new listings.
Why it matters: This work offers a scalable, practical solution for improving recommendation coverage for underrepresented listings in large marketplaces, using LLMs without additional training or reliance on expensive APIs.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
A new framework, NGM-RAG, integrates graph construction, graph matching, and answer generation to enhance retrieval-augmented generation (RAG) for large language models. By combining text-based and graph-based retrieval using neural graph matching and adaptive weighting, NGM-RAG better captures relational knowledge. Experiments show that NGM-RAG outperforms NaiveRAG, GraphRAG, and LightRAG on multi-hop question answering and long-context summarization tasks.
Why it matters: This approach addresses a key limitation of traditional RAG by enabling more effective multi-hop reasoning, potentially improving LLM performance on complex information-seeking tasks.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
Researchers propose a distillation method that trains a compact dense retriever using only teacher score vectors, without requiring access to teacher hidden states. Their 0.6B parameter student model recovers up to 50% of the base-to-teacher performance gap on a standard evaluation panel, while achieving 4.7× faster query encoding and 9.7× faster document encoding compared to sequential teacher fusion. However, external-transfer performance after distillation is mixed.
Why it matters: This approach offers a practical path to compress large retrieval models for more efficient online serving, though its effectiveness may vary across tasks.
Jul 14, 2026
Research→Official→arXiv Computers and Society
A large-scale study analyzing over 300 million scientific works across 26 fields finds that the decades-long decline in solo-authored papers halted and partially reversed following the public release of ChatGPT in late 2022. This reversal is most pronounced in fields where coauthors' contributions are more easily replaced by AI, and is observed among both established researchers and newcomers who previously only coauthored papers. The study suggests that generative AI is enabling more researchers to publish solo work, particularly in computationally oriented topics.
Why it matters: This research provides empirical evidence that generative AI is reshaping scientific collaboration by substituting for human labor, altering the traditional division of cognitive work in research.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
Researchers at Walmart present a unified pipeline for embedding-based retrieval that addresses both training-inference gaps and challenges in model evolution. Their approach combines hybrid hard negative mining and legacy-aware distillation, enabling a smooth transition to higher-capacity models. The system, deployed in live production, achieved a +7.34% improvement in NDCG@5 and a +0.50% increase in gross revenue.
Why it matters: This work demonstrates practical advances for improving the effectiveness and stability of large-scale embedding-based retrieval systems in real-world e-commerce settings.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
ZoRRO is a training-free, zero-weight framework for personalized news recommendation designed for scalable real-world deployment. According to offline evaluations, ZoRRO outperforms strong neural baselines in ranking tasks and, in online A/B testing, achieves click-through rates nearly on par with a state-of-the-art deep learning model, while operating over 600 times faster. The study also finds that models with similar click-through rates can produce different recommendation distributions, affecting the flow of news content.
Why it matters: ZoRRO demonstrates a highly efficient and practical alternative to deep learning models for large-scale news recommendation, emphasizing the need for evaluation metrics beyond accuracy.
Jul 14, 2026
Research→Official→arXiv Computation and Language
ResearchQA is a new benchmark comprising 6,211 question-answer pairs from 494 open-access scientific papers across eight domains, designed to evaluate citation-grounded question answering. It covers four question types and rewards grounded refusal when answers are unsupported by the source. Evaluation of eight leading models shows that citation-based metrics distinguish system performance more clearly than LLM evaluator scores, and open-weight models approach the citation accuracy of top closed models while operating at lower latency.
Why it matters: This benchmark enables more rigorous assessment of whether language models can answer scientific questions with verifiable citations, addressing a key limitation in current evaluation methods.
Jul 14, 2026
Research→Official→arXiv Computation and Language
Researchers used GPT-4.1 to annotate approximately 9,000 customer support conversations, breaking down satisfaction into five axes: overall, agent, outcome, product, and effort. Four axes (overall, agent, outcome, effort) closely tracked self-reported customer ratings, while product satisfaction showed weak alignment. The study found that satisfaction scores are significantly lower when measured across all contacts (2.91) compared to only those who responded to surveys (3.62) on a five-point scale, highlighting survey bias.
Why it matters: This work demonstrates that LLM-based decomposition can uncover hidden drivers of customer experience and reveal biases in traditional survey-based satisfaction metrics.
Jul 14, 2026
Research→Official→arXiv Computation and Language
A new preprint systematically examines how various NL2SQL pipeline extensions—such as the NatSQL intermediate representation, preprocessing, synthetic data fine-tuning, and a novel reranker—interact when integrated into two backbone models, SmBoP and RASAT. Through ablation and Shapley analyses, the study finds that combining all components does not necessarily yield the best performance; instead, the effectiveness of each extension depends on its interactions with the baseline and other components. These findings challenge the assumption that more features always improve NL2SQL systems.
Why it matters: The work offers practical guidance for building more efficient NL2SQL models by clarifying how different pipeline optimizations interact.
Jul 14, 2026
Policy Safety→Official→arXiv Cryptography and Security
Researchers have introduced Mako, a self-evolving AI agent designed to autonomously exploit web vulnerabilities by treating its exploit capability as a mutable kernel. Mako achieved full coverage on 104 CTF-style web applications spanning 26 vulnerability classes, demonstrating the ability to autonomously discover and exploit a wide range of web vulnerabilities. Due to dual-use concerns, the authors have withheld operational details, payloads, and source code.
Why it matters: Mako's results highlight that once an exploit capability is available, the difficulty of autonomous exploitation collapses, raising significant security and safety concerns about the potential for automated offensive systems.
Jul 14, 2026
Research→Official→arXiv Computers and Society
A new bilingual benchmark study shows that freely accessible large language models (LLMs) fabricate legal citations for Saudi data protection law (PDPL) in 60-77% of cases, while achieving near-perfect accuracy (94-100%) on the EU's GDPR. The research tested 120 questions in both Arabic and English across three models, revealing that fabrication rates are driven by the jurisdiction of the law, not the language of the query. The study also found that high model confidence does not prevent fabricated citations, highlighting a significant reliability gap.
Why it matters: This research highlights a critical jurisdiction-based reliability gap in LLM-generated legal citations, raising concerns for regulatory compliance and legal decision-making.
Jul 14, 2026
Research→Official→arXiv Cryptography and Security
Researchers introduce AMT-X, a phase-structured multi-turn red-teaming framework that employs a multi-role jury and phase-conditioned checklists to evaluate the safety of large language models (LLMs). When tested on six frontier models, AMT-X achieved 97.6-100% attack success under lenient scoring, but only 66.7-78.6% under stricter criteria requiring complete operational detail. This demonstrates a substantial gap between partially and fully actionable harmful outputs.
Why it matters: The findings indicate that current single-turn safety evaluations may underestimate the risks posed by adaptive adversaries, emphasizing the need for more nuanced assessment methods in AI safety.
Jul 14, 2026
Research→Official→arXiv Computers and Society
Researchers present Gauntlet, an open-source pipeline that uses five independent expert-persona LLM reviewers and an adversarial synthesis stage to analyze computer architecture papers. In evaluations on 20 ISCA and HPCA papers, human judges preferred Gauntlet's analyses over those by human experts in 15 out of 20 cases, with statistically significant advantages in critical rigor. Ablation studies show that the multi-agent structure, especially the synthesis stage, is key to Gauntlet's performance gains over single-agent LLM baselines.
Why it matters: This work suggests that structured multi-agent LLM pipelines can exceed human experts in deep technical critique, indicating potential new roles for AI in peer review and research evaluation.
Jul 14, 2026
Research→Official→arXiv Information Retrieval
A new soft-token fusion framework allows large language model (LLM)-based recommender systems to integrate continuous numerical and embedding features by mapping them into the LLM embedding space. The framework, implemented in a two-tower retrieval model with an interaction-based fusion module, demonstrates improved retrieval performance over LLM-based baselines on three Amazon recommendation benchmarks. The results also show that interaction-based fusion outperforms simple concatenation of heterogeneous soft tokens.
Why it matters: This work addresses a key limitation of LLM-based recommenders by enabling them to utilize non-textual signals common in real-world recommendation systems, potentially enhancing their practical effectiveness.
Jul 14, 2026
Policy Safety→Official→arXiv Cryptography and Security
NetInjectBench introduces a 130-scenario benchmark to evaluate indirect prompt injection attacks on large language model (LLM) agents used in network operations. In tests across 240 attack instances, naive execution led to an 82.50% unsafe tool-action rate, while a metadata-aware policy gate eliminated unsafe actions and preserved 99.17% usefulness. The study also compares several prompt-level defenses, finding them less effective than execution-time authorization boundaries.
Why it matters: This work reveals that LLM agents for network operations are highly susceptible to indirect prompt injection, but that metadata-aware policy gates can effectively prevent unsafe actions without sacrificing utility.
Jul 14, 2026
Research→Official→arXiv Computation and Language
A new preprint introduces Progressive Tree Drafting (PTD), a speculative decoding method that accelerates large language model (LLM) inference by up to 2x. PTD is both training-free and model-agnostic, using a progressive tree structure and stepwise pruning to explore multiple semantic paths in a single forward pass, which improves draft diversity and coherence.
Why it matters: PTD offers a practical way to significantly speed up LLM inference without the need for additional training or auxiliary models.
Jul 14, 2026
Research→Official→arXiv Cryptography and Security
Researchers have developed a method to fingerprint large language models (LLMs) by analyzing the distribution of their responses to simple, single-token prompts such as "name a random number between 1 and 100." By testing 165 models via the OpenRouter aggregator, the method achieved 59.5% accuracy in identifying model lineage and a 7.3% equal error rate in verification, all using only single-token queries. The approach also uncovered cases where a proprietary model endpoint was distributionally indistinguishable from an open-weight Qwen model.
Why it matters: This technique provides a practical way for clients to verify which LLM is actually serving them through opaque API chains, helping address trust and transparency issues in commercial model deployment.
Jul 14, 2026