Multi-turn RL in simulated psychiatric intake raised appropriate differential diagnosis from 33.3% to 68.3% and reduced safety errors.
arXivPeitong DuanarXiv preprint · Oct 29
New
The Point
Dense LLM-judged rewards with online PPO on live iOS apps beat SFT and terminal-only RL for UI navigation.
Takeaway: For mobile UI agents, prefer dense step-level LLM-judged rewards and online PPO on live apps, with planning-grounding separation and many concurrent devices, instead of SFT or terminal-only rewards.
Setup8B · UINavBench, iOSWorld, AndroidWorld, and real iOS apps
No code or data link
Key Points
- They train agents online on live iOS apps with a Planning agent and a UI Grounding model.
- An LLM judge supplies dense step-level feedback plus a terminal reward, optimized with PPO and step-level advantage estimation.
- Their 8B agents generalize to Android with nearly sevenfold gains over SFT and match Gemini-3.1-Pro on real iOS apps.
Setup: 8B · UINavBench, iOSWorld, AndroidWorld, and real iOS apps
arXivHina Otake and co-authorsarXiv preprint · Oct 29
New
The Point
Using generation-parameter distances for metric learning makes synthetic image pretraining transfer better than label-based classification.
+8.4 ptsMatched test
Takeaway: For synthetic image pretraining, prefer parameter-driven metric learning over label classification. It can transfer better to retrieval and may improve robustness under image corruptions.
SetupResNet-50 · Stanford Online Products and Stanford Cars image retrieval
No code or data link
Key Points
- On ResNet-50, Recall@1 rose from 65.6% to 74.0% on Stanford Online Products over FDSL pre-training.
- On Stanford Cars, Recall@1 improved from 56.2% to 78.4% over FDSL pre-training.
Setup: ResNet-50 · Stanford Online Products and Stanford Cars image retrieval
arXivYu LiuarXiv preprint · Oct 28
The Point
Refreshing synthetic tasks based on reward dynamics boosts zero-data multimodal self-improvement without validation labels.
+3.28 pts
Takeaway: If you run zero-data self-improvement, track reward dynamics and automatically refresh synthetic tasks. Keep answers independently checkable, verify reward and refresh rules, and audit generated answers.
Setupprimary eleven-benchmark suite
No code or data link
Key Points
- A-RSI uses reward variation and accuracy to decide task refreshes without validation or test scores.
- A static program library generates multimodal questions and reference answers, with audits and verified reward and refresh rule properties.
- Across eleven benchmarks, average performance rose from 57.77 to 61.05 after 800 fresh tasks.
Setup: primary eleven-benchmark suite
arXivHuangfei JiangarXiv preprint · Oct 28
New
The Point
A timestamp-frozen, expert-graded benchmark diagnoses where finance agents’ research fails to produce accurate forecasts.
Takeaway: When training or evaluating finance agents, use timestamp-frozen corpora and expert-linked rubrics that trace calculations to sources to avoid lookahead leakage and diagnose where forecasts fail.
No code or data link
Key Points
- ILE includes a versioned financial database with 3.43 million document versions across nine source categories, plus structured market data with validated timestamps.
- It organizes tasks by professional analyst deliverables and uses expert scoring linked to sources, calculations, and assumptions via financial dependency graphs.
- Evaluation covers 86 assignments and shows GPT-6 Astra and Claude Opus 5.5 score 68.1 and 66.9 overall, with Astra 52.5 on forecasting.
arXivYecheng Wu, Song Han, Han CaiarXiv preprint · Oct 28
New
The Point
Weakening a model to create an on-policy self-teacher boosts reasoning accuracy without privileged data.
+12.8 ptsVs. starting model
Takeaway: If you lack a stronger teacher, create a weakened model via quantization or pruning and self-distill on-policy from their contrast to lift reasoning accuracy.
SetupQwen3.5-4B; Qwen3.6-35B-A3B · HMMT 2025; LiveCodeBench v6
No code or data linkUp to 35B
Key Points
- WISD builds a weaker model via low-bit quantization or magnitude pruning, then uses the contrast as a training signal.
- Across math and coding benchmarks, quantization improves average accuracy by 4.0 points and pruning by 5.5 points over the original models.
- Pruning lifts Qwen3.5-4B from 57.7% to 70.5% on HMMT 2025 and from 39.1% to 56.7% on LiveCodeBench v6.
Setup: Qwen3.5-4B; Qwen3.6-35B-A3B · HMMT 2025; LiveCodeBench v6
arXivAndrew Szot, Alexander Toshev and coauthorsarXiv preprint · Oct 27
The Point
For tool-using AI, varying the tools and data in training environments matters more than adding tasks as budgets grow.
+14.2 pts over SimSATCross-paper
Takeaway: When generating tool environments, vary the toolset and the data behind it, not just the task prompts. Make tasks harder as your budget grows.
SetupQwen3.5 students (2B, 4B, 9B, 27B); Qwen3-4B/8B for BFCL comparison · AppWorld, BFCLv3 multi-turn, ASTRA-Bench, SynthAPI holdout
No code or data linkUp to 27B
Key Points
- Apple's study covered 458,752 generated tasks and 849 trained models of four sizes.
- At larger data budgets, adding more kinds of tools and databases beat adding more tasks, and more complex tasks gave bigger gains.
- Agents trained following the resulting scaling law beat earlier synthetic-environment data on four benchmarks.
Setup: Qwen3.5 students (2B, 4B, 9B, 27B); Qwen3-4B/8B for BFCL comparison · AppWorld, BFCLv3 multi-turn, ASTRA-Bench, SynthAPI holdout
arXivGiuseppe Curci, Andrea Zugarini and coauthorsarXiv preprint · Oct 27
The Point
If the preferred answer always comes from the same bigger model, training learns that model's style instead of real quality.
Takeaway: Build preference pairs from many different models, so style and length do not give away which answer was chosen.
No code or data link
Key Points
- Delta learning skips the judge and simply labels the larger model's answer as chosen in a fixed small and large pair.
- Models trained on it with DPO did worse than ones trained on multi-model data.
- Adding more answer-writing models partly fixed the problem, even without a judge.
★Hubert Baniecki, Przemyslaw Biecek, Martin PawelczykPeer-reviewed · Oct 27
The Point
Choosing proxy-run mixes so each data source's effect can be measured separately leads to better final training mixes.
+46.1% relativeMatched test
Takeaway: If you train small proxy models to set data mix weights, choose their mixes this way rather than at random, especially with hundreds of data sources.
SetupOLMo2 1B; Qwen3.5 4B · HellaSwag, MBPP, GSM8K and other reasoning, code and math tasks
No code or data link
Key Points
- The usual method draws proxy mixes at random, which tangles the effects of different data sources together.
- LinMix includes each source either at its maximum share or not at all, so a simple formula can credit each one.
- On 1B and 4B models it beat random mixing by 46% relative on MBPP coding and 14% on GSM8K math.
Setup: OLMo2 1B; Qwen3.5 4B · HellaSwag, MBPP, GSM8K and other reasoning, code and math tasks
arXivJiaxing Wang et al.arXiv preprint · Oct 27
The Point
Choosing a smarter data mix improves the final model only when the training data differs from what you want it to do.
Takeaway: Halfway through a run on uncurated data, measure the gap between training and target performance. If it is near zero, data mixing tricks will save time but not raise the final score.
Setup160M and 1.1B LMs on SlimPajama-6B · Target perplexity
No code or data link
Key Points
- With no train-target gap, tuned mixes tied uniform mixing on perplexity.
- They ended at 19.66 to 20.17 versus 19.71, and RegMix's 3.5-point lead midway vanished, so early gains may only mean faster training.
- The gap score, called Delta, is measured halfway through a run, and each experiment was run five times.
Setup: 160M and 1.1B LMs on SlimPajama-6B · Target perplexity
arXivGeorge Ruellan, Diana Benavides-PradoarXiv preprint · Oct 27
The Point
Replaying refusal examples keeps models safe but makes them refuse harmless requests, while distilling from the original model costs far less.
48.3 pts less over-refusalMatched testBefore+53.4 pts (replay)
After+5.1 pts…
Takeaway: To protect safety during later fine-tuning, prefer distillation from the original model, or mix it with a small replay set. Always track over-refusal alongside attack success.
SetupMistral-7B, Llama-3-8B (LoRA) · HarmBench ASR; OR-Bench-hard over-refusal; task scores
Key Points
- On Mistral-7B, replaying refusal examples cut attack success on HarmBench by 51.1 points but raised over-refusal by 53.4 points.
- Distillation cut attack success 5.4 points and raised over-refusal only 5.1 points.
- Llama-3-8B showed the same pattern. Keeping the model's internal refusal direction did not reliably predict safe behavior.
Setup: Mistral-7B, Llama-3-8B (LoRA) · HarmBench ASR; OR-Bench-hard over-refusal; task scores
arXivSaket Reddy, Amro Abbas, Anshuman Suri, Ari Morcos, David…arXiv preprint · Oct 27
The Point
Some harmless-looking training examples weaken safety, and gradient attribution finds them when filters cannot.
-10.7 ptsMatched test
Takeaway: Before SFT, trace which examples push the model toward unsafe answers and remove them. Content filters and LLM judges miss harmful examples such as failed tool runs.
SetupQwen, Llama and Olmo models · GCG and ActorBreaker ASR; ORBench; MMLU Pro, IFEval, MBPP, GSM8K, MATH 500, MedQA
No code or data link
Key Points
- DatologyAI removed the 20% of the Tulu 3 dataset that this method linked most to unsafe answers.
- An automated jailbreak attack's success on Qwen fell from 47.7% to 37%, while an LLM-judge filter only reached 47.3%.
- Removed examples included failed tool runs and arithmetic told as stories, and the models mostly kept their skills.
Setup: Qwen, Llama and Olmo models · GCG and ActorBreaker ASR; ORBench; MMLU Pro, IFEval, MBPP, GSM8K, MATH 500, MedQA
arXivZiyang ZengarXiv preprint · Oct 27
The Point
Plan information dependencies and repair tasks so professional agent tasks are executable, yielding better trajectories and stronger SFT models.
+686 EloVs. starting model
Takeaway: If you generate agent tasks, add information-level planning and probe executions to detect and repair missing context. Collect teacher trajectories from executable tasks to improve SFT.
SetupQwen-35B-A3B · GDPval-AA v2.1
No code or data linkUp to 35B-A3B
Key Points
- They built 112,686 professional tasks across 612 occupations and collected teacher trajectories to fine-tune Qwen 4B, 27B and 35B-A3B.
- On GDPval-AA v2.1, WorkPilot-35B-A3B improved from 879 to 1565 Elo over the base model.
- Planning and repair reduced probe-diagnosed task environment defects and improved downstream performance.
Setup: Qwen-35B-A3B · GDPval-AA v2.1
arXivTianci XiearXiv preprint · Oct 27
New
The Point
Automated, source-grounded website reconstruction scales environments, beats WebHarbor fidelity, and yields training data that improves web agent success.
+13.33 percentage pointsVs. starting model
Takeaway: Use automated, source-grounded web replicas to collect trajectories and run reproducible evals. They report a 13.33 percentage point gain on WebArena-Verified after fine-tuning Qwen3.5-9B on 5,856 interaction trajectories.
SetupQwen3.5-9B · REAL, Odysseys-Easy, WebArena-Verified
No code or data linkUp to 9B
Key Points
- They automatically reconstructed 244 website artifacts across 14 domains and 53 categories, supporting 12,984 executed and accepted tasks.
- In a blind audit against WebHarbor, they achieved higher aggregate fidelity on three metrics, with 12 wins, two ties, and no losses.
- Fine-tuning Qwen3.5-9B on 5,856 trajectories raised REAL success by 9.9 percentage points and WebArena-Verified overall success by 13.33 percentage points.
Setup: Qwen3.5-9B · REAL, Odysseys-Easy, WebArena-Verified
arXivTruman HickokarXiv preprint · Oct 27
New
The Point
A simulated SO-101 benchmark predicts real-robot rankings, enabling compute-matched evaluation of language-conditioned spatial manipulation policies.
Takeaway: Use SO-101 Bench as a proxy for real-robot evaluation and for matched-compute fine-tuning on its simulated demonstrations.
SetupSO-101 Bench; success in sim and transfer to real robot
No code or data link
Key Points
- The benchmark includes 916 evaluation episodes, 138 objects, and 3,629 simulated demonstrations for fine-tuning under a matched compute budget.
- Policy rankings transfer to the physical arm with Spearman 1.00 and MMRV 0.000, though simulation overestimates success rates.
- Across nine learned models, best policies reach about 61% success, while an LLM agent with a grasping policy scores 83.2%.
Setup: SO-101 Bench; success in sim and transfer to real robot
arXivXilin Wei et al.arXiv preprint · Oct 26
The Point
A real-user multimodal coding benchmark with hidden criteria shows large gaps between criterion-level and full task success under agentic execution.
Takeaway: Track full-task success, not only criterion averages, for agentic coding. Use hidden acceptance criteria and a judge-then-refute LLM verifier tied to runnable apps.
SetupCo-Design Bench
No code or data link
Key Points
- It samples 273 tasks from 37,463 deduplicated queries across 26,314 real user coding sessions.
- Tasks include runnable pre-edit apps and 2,331 hidden expert criteria across multimodal editing and repository editing tracks.
- Under a shared agent harness, the best of 10 endpoints averages 69.9% criteria but fully solves 26.4% of tasks.
Setup: Co-Design Bench
arXivYihao Hu, Tao Lin and coauthorsarXiv preprint · Oct 24
The Point
Agent training data should cover tricky multi-step dependencies and keep only actions justified by what the agent could see.
Takeaway: Filter agent trajectories to drop actions the visible history does not support. Deliberately create tasks for rare multi-step dependencies instead of just collecting more successful trajectories.
No code or data link
Key Points
- Trajectory2Gym builds runnable environments aimed at multi-step patterns that existing training data rarely covers.
- It trains only on decisions supported by the history visible to the agent at that moment.
- Average scores on the Tau1, Tau2 and BFCL tool-use benchmarks rose by 16.9 to 29.8 points across five Qwen3 model sizes.
arXivHyun Ryu, Seungone Kim, Carolyn Rose, Eunho Yang and…arXiv preprint · Oct 24
The Point
Rewarding a model just for covering rubric items teaches it to pad answers, so precision must be rewarded too.
+57.4 pts; +52.0 ptsMatched testBefore10.6%…
After68.0% (FORK)…
Takeaway: If you reward a model for covering rubric items, also check that every claim is necessary and factually correct. Otherwise the model learns to pad its answers.
SetupQwen2.5-7B-Instruct policy; Qwen3.6-35B-A3B training grader · RubricHub-Medical test set, HealthBench; win rate vs base policy
Code ↗Up to 35B-A3B (grader); 7B policy
Key Points
- Models trained with RL for rubric coverage added padded or wrong content and lost to the original model.
- Adding a precision reward, called FORK, raised the win rate against the original model from 10.6% to 68.0% on RubricHub-Medical.
- On HealthBench the win rate rose from 22.1% to 74.1%, with similar rubric coverage and shorter, more precise answers.
Setup: Qwen2.5-7B-Instruct policy; Qwen3.6-35B-A3B training grader · RubricHub-Medical test set, HealthBench; win rate vs base policy
arXivJiazheng Li, Huaqing Zhang, Jing Xu, Tianle Cai, Jingzhao…arXiv preprint · Oct 23
The Point
How heavily each data type's loss counts during training is a separate lever from how much of it you include.
+7.84 ptsMatched testBefore21.43 (direct…
After29.27 (LARE)
Takeaway: Before adding more of a data type to stop forgetting in staged pretraining, try upweighting that type's loss at your current mix.
Setup1.5B GPT-2-style decoder · MMLU, GSM8K, MATH, HumanEval, MBPP
Code ↗not stated for main table; scaling appendix is single seed
Key Points
- LARE keeps each data type's share fixed, but adjusts how heavily its loss counts.
- It sets those weights automatically from running loss values, so no extra search runs are needed.
- On a 1.5B model trained on 240B tokens, it beat a matched mix by 7.84 points on average.
Setup: 1.5B GPT-2-style decoder · MMLU, GSM8K, MATH, HumanEval, MBPP
arXivAngel Raychev, Nathan Lile, Rafael RafailovarXiv preprint · Oct 22
The Point
Choose an LLM judge by how good a model it helps train, not by its static benchmark score.
Answer-Only higher in 7 of 8…Matched test
Takeaway: Pick reward models by the models they produce in a short training run, not by static benchmark accuracy alone.
SetupQwen3 judges 0.6B to 14B; Qwen3 policies 0.6B to 8B · creative writing policy Elo under a learned 32B Gold evaluator
Key Points
- Answer-only judges trained better writing models than more accurate thinking judges in 7 of 8 matched settings.
- Bigger judges kept helping, even when they were larger than the model being trained.
- Results rest on one learned 32B model acting as final referee, and a follow-up check was inconclusive.
Setup: Qwen3 judges 0.6B to 14B; Qwen3 policies 0.6B to 8B · creative writing policy Elo under a learned 32B Gold evaluator
arXivWenbo Hu et al.arXiv preprint · Oct 22
The Point
On a GameCraft-Bench subset, schema-validated, frame-synchronous environments with adversarial reviews outperform other harnesses and distill reusable modules.
Takeaway: Use schema-validated, frame-synchronous environments so agents can inspect and verify behavior. Separate implementation and review with adversarial agents, and distill accepted projects into reusable modules and contracts.
SetupGameCraft-Bench subset
No code or data link
Key Points
- The engine stores project state as schema-validated structured text and offers frame-synchronous runtime control for inspection, action execution, and behavior verification.
- An adversarial team of eight specialized agents separates implementation from review and fixes problems through multi-round loops.
- On a GameCraft-Bench subset, VibeGame in P2G outperforms other agent harnesses, including GPT-6.1-Sol, using the same underlying model.
Setup: GameCraft-Bench subset
arXivHongyu Li et al. (corresponding: Zhe Zhao)arXiv preprint · Oct 21
The Point
Giving each prompt its own safety rubric, with listed exceptions, makes LLM-judge safety grading much more reliable.
+8 to +26 ptsMatched testBefore69% to 87%…
After95.34%
Takeaway: Replace simple safe or unsafe labels with per-prompt rubrics that list exceptions and score helpfulness separately. This makes safety grading reliable enough to use as a training signal.
SetupJudge agreement with human labels; model unsafe rates
Key Points
- Each of 3,489 English and Chinese prompts gets its own rubric that scores safety and usefulness separately.
- Listed exceptions stop judges from wrongly flagging acceptable answers as unsafe.
- Rubric-guided LLM judges agreed with human labels 95.34% of the time, versus 69% to 87% for earlier methods.
Setup: Judge agreement with human labels; model unsafe rates
arXivYifan SunarXiv preprint · Oct 21
New
The Point
Treat benchmarks as difficulty distributions and fix skew and gaps with targeted rewrites.
Takeaway: Audit your evals for difficulty skew and gaps. Use difficulty-targeted rewrites to fill holes before trusting leaderboard shifts.
Setup25 popular benchmarks across 7 domains
No code or data link
Key Points
- They formalize two failure modes: measure mismatch and coverage gaps, with two diagnostic metrics and theoretical guarantees.
- They analyze 25 benchmarks across 7 domains using item difficulties, finding skewed difficulty weights and uncovered portions of the difficulty axis.
- BenchFill rewrites items to target specific difficulties and reduces local coverage gaps.
Setup: 25 popular benchmarks across 7 domains
arXivJunwei Deng, Alex Bie, Natalia PonomarevaarXiv preprint · Oct 20
The Point
Small runs can predict when reward hacking will take over an RL run, before you train.
Takeaway: Before a large coding RL run, use small runs to simulate when reward hacking starts under different curricula and recipes. Hardening environments alone gets harder as they grow.
No code or data link
Key Points
- SimHack predicted the median start of reward hacking within 11.3% relative error on training recipes it had not seen.
- Its ranking of recipes had a 0.85 rank correlation with actual results, while the starting hacking rate alone did not predict onset.
- Curricula chosen with SimHack trained 96.6% longer before reward hacking took over.
arXivAfonso Baldo, Antonio Farinhas, Marcos Treviso, Ricardo…arXiv preprint · Oct 19
The Point
Having an AI spot and penalize new reward hacks during training keeps training from falling apart.
+5.7 ptsMatched test
Takeaway: When training uses a learned reward model, regularly audit the model's rollouts and add penalties for new loopholes. Retraining the reward model alone does not stop new reward hacking.
SetupQwen3.5-35B-A3B · MindEval; EQ-Bench Creative Writing v3
No code or data link
Key Points
- Training only against the reward model raised its score while real eval scores fell.
- Versus reward-model-only training, live penalties raised final scores from 3.37 to 3.80 on clinical counseling and 54.8 to 60.5 on creative writing.
- A reward model retrained with about 15,000 extra comparisons was about as accurate but still got gamed in new ways.
Setup: Qwen3.5-35B-A3B · MindEval; EQ-Bench Creative Writing v3
arXivXinyi Wang, Danqi ChenarXiv preprint · Oct 19
The Point
N-grams in a model's failed rollouts can pick a small, effective batch of extra pretraining text.
+2.0 ptsMatched test
Takeaway: Mine your model's failed rollouts for telltale n-grams. Use them to retrieve a small, targeted batch of extra pretraining text before the next RL run.
SetupOLMo2 and Qwen3 models · GSM8K; math, commonsense and knowledge mixture; math and science
Code ↗3 RL seeds (GSM8K headline)
Key Points
- Failed rollouts during RL share telltale n-grams, from reflection phrases to specific operations.
- Text containing them, just 35 million tokens, beat the same amount of random text in 10 of 11 settings.
- It added 2.0 points on GSM8K math when used before midtraining. Text picked for OLMo2-1B improved Qwen3-4B by 1.9.
Setup: OLMo2 and Qwen3 models · GSM8K; math, commonsense and knowledge mixture; math and science
arXivZhaoyang Wang, Qianhui Wu et al. (incl. Jianfeng Gao…arXiv preprint · Oct 19
The Point
Synthetic computer environments that pass strict quality checks can train agents that improve on tests they never saw.
+10.58 ptsVs. starting model
Takeaway: When generating agent environments, test every task for solvability, difficulty, judge consistency and robustness to small changes. Removing any one of these checks lowered results.
SetupQwen3.6-35B-A3B, Qwen3.5-4B · Online-Mind2Web, WebArena, QwenClawBench, ClawEval, CUA-Gym, OSWorld-Verified, OSWorld 2.0, Agents' Last Exam
Key Points
- The 341 worlds mix GUIs, MCP tool servers and command lines, with long multi-step tasks.
- Five checks run each task to confirm it is solvable, hard enough, and graded consistently by different judges.
- Qwen3.6-35B's average on 8 unseen agent benchmarks rose from 42.84 to 53.42, and removing any check cut scores.
Setup: Qwen3.6-35B-A3B, Qwen3.5-4B · Online-Mind2Web, WebArena, QwenClawBench, ClawEval, CUA-Gym, OSWorld-Verified, OSWorld 2.0, Agents' Last Exam
arXivZhengyue Zhao, Liwei Jiang, Yejin Choi, Chaowei XiaoarXiv preprint · Oct 19
The Point
Safety taught in midtraining holds up even when later tuning targets only general skills.
-72% to -81% relativeVs. starting model
Takeaway: In midtraining, mix about a quarter unsafe prompts into self-written safety reasoning data, so later skill-only tuning does not wash safety out. A 25% share best balanced attack success, over-refusal and usefulness.
SetupQwen3-1.7B, 4B, 8B; Llama3.2-1B, 3B base · ASR on malicious requests; over-refusal; utility suite
No code or data link
Key Points
- The base model wrote its own safety reasoning documents for 185,000 prompts, about 200 million tokens after an LLM judge filtered them.
- Attack success rates fell by 72% to 81% versus Qwen3 base models from 1.7B to 8B, while general usefulness improved.
- Safety held through later SFT and RL on general skills only.
Setup: Qwen3-1.7B, 4B, 8B; Llama3.2-1B, 3B base · ASR on malicious requests; over-refusal; utility suite
★Vahid Jebraeeli, Jonathon Romero, Yijin Wang, Adrian Chan…Peer-reviewed · Oct 18
The Point
What counts as unsafe is a labeling choice, and safety benchmarks mostly measure which definition a model learned.
53.0 pts rangeMatched testBefore3.4% (lowest arm)
After56.4% (highest…
Takeaway: Record which written definition of unsafe each safety label follows. Decontaminate training data against over-refusal benchmarks, and report both facts with any guardrail score.
SetupTen guardrail arms at two model scales · HarmBench, WildGuard, OR-Bench-hard, JailbreakBench
No code or data link
Key Points
- Lenovo labeled the same 53,000 or so prompts under two definitions of unsafe and trained ten guardrail model versions.
- Over-refusal ranged from 3.4% to 56.4%, while recall on harmful requests stayed the same.
- The training data already contained 88% of one over-refusal benchmark and 82% of another.
Setup: Ten guardrail arms at two model scales · HarmBench, WildGuard, OR-Bench-hard, JailbreakBench
arXivBoyi Liu, Yite Wang, Zhewei Yao, Yuxiong He et al.arXiv preprint · Oct 17
The Point
A carefully tuned, plain RL setup can match methods that invent new training tasks, so tune the baseline first.
+17.6 ptsVs. starting model
Takeaway: Before claiming a new environment or method helps, compare it against a well-tuned basic setup. Technical details, like mismatched training and serving software, can look like data effects.
SetupQwen3.5-4B and Qwen3.5-9B · SWE-bench Verified, SWE-bench Pro v1 and v2
No code or data linkUp to 9B
Key Points
- Snowflake tuned its setup by deliberately overfitting a small task pool, which exposed failures that a rising reward score hid.
- A 4B model reached 62.0% on SWE-bench Verified, near a rival's 61.5% with one sixth the rollouts.
- The rival comparison comes from a different paper, not a matched run, and curating three public task sets lifted scores further.
Setup: Qwen3.5-4B and Qwen3.5-9B · SWE-bench Verified, SWE-bench Pro v1 and v2
arXivMichael Tian-Yue Liu, Anne Harrington, Trevor Darrell…arXiv preprint · Oct 15
The Point
When LLM judges score rollouts against rubrics, the judge choice matters, and a confidence-weighted panel beats any single judge.
Takeaway: For rubric-based rewards, use several judges and weight them by confidence. Leave out answers the judges strongly disagree on instead of averaging their scores.
No code or data link
Key Points
- Training Qwen3-4B on medicine and science rubrics, simply switching among five judges produced a large spread in scores.
- A plain average of the judges did not beat the best single judge.
- RaRE weights judges by confidence and skips answers they disagree on, beating every single judge on HealthBench and GPQA Diamond.
arXivEsther XinarXiv preprint · Oct 15
The Point
Decontaminating math training data by deleting anything similar to benchmark questions throws away mostly good, unrelated items.
Takeaway: To decontaminate, first find likely matches, then have an LLM judge confirm each one, rather than relying on a similarity cutoff alone. Report how much clean data was wrongly removed.
Key Points
- At a similarity cutoff of 0.80, 52 of 59 sampled removals, or 88%, were confirmed to be wrongly removed.
- No similarity cutoff between 0.80 and 0.98 reached the target of 90% correct removals.
- Having an LLM judge review likely matches reached about 98% precision and caught about 98% of real matches.
arXivSoumye Singhal, Joseph Jennings, Ka Shun Shum, Alexander…arXiv preprint · Oct 15
The Point
Midtraining on real code history and agent logs makes coding agents better, even with identical SFT afterward.
+3.8 ptsMatched test
Takeaway: Budget long-context midtraining on real software history and agent logs. Judge it by short, fixed fine-tuning runs, since base model scores did not predict results.
SetupNemotron 3.5 Lightning and Nemotron 3.5 Super · SWE-bench Verified, Multilingual, Pro; DeepSWE
No code or data linkUp to Nemotron 3.5 Super (size not stated)single run per arm
Key Points
- After identical SFT, Lightning rose from 60.7 to 64.5 on SWE-bench Verified, improving on every coding benchmark.
- In a smaller test, removing the agent work logs erased most of the gain, scoring 60.5 versus 63.5 with them.
- An RL check, one 20-step run, kept the advantage, but gains from that stage are unproven.
Setup: Nemotron 3.5 Lightning and Nemotron 3.5 Super · SWE-bench Verified, Multilingual, Pro; DeepSWE
arXivMAI-UI Team, Alibaba Group (Panrong Tong and coauthors)arXiv preprint · Oct 14
The Point
Resettable copies of real apps can train phone agents, and the skills carry over to the real app.
+19.2 ptsVs. starting model
Takeaway: Resettable mock copies of real apps, with execution-based verifiers, are a workable stand-in for live apps when training GUI agents. Gains can carry over to the real app.
SetupMAI-Gym-9B from Qwen3.5-9B (SFT warm-up then RL) · MobileWorld, OSWorld-Verified; 52 paired tasks in real 12306 app on a physical phone
No code or data linkUp to 9B
Key Points
- Training in a mock train-ticket app raised success on a physical phone from 28.8% to 48.1%.
- Alibaba's MAI-Gym runs up to 20,000 copies at once and verifies task success by execution.
- Its 9B model scores 78.4% on MobileWorld and 76.2% on OSWorld-Verified, and 2,000 verified tasks are released.
Setup: MAI-Gym-9B from Qwen3.5-9B (SFT warm-up then RL) · MobileWorld, OSWorld-Verified; 52 paired tasks in real 12306 app on a physical phone
arXivMingyu Ouyang, Ying Shan, Mike Zheng Shou, Hwee Tou Ng et…arXiv preprint · Oct 14
The Point
Small, randomized synthetic games teach control skills that carry over to real games the agent never trained on.
+27.8 ptsVs. starting model
Takeaway: After SFT on demonstrations, train in small synthetic environments that isolate shared control skills and randomize how they behave.
SetupPlayer-1-9B and Player-1-35B-A3B · MineDojo-300 success
Key Points
- Player-1 used SFT on 6,044 gameplay recordings, then RL in 16 synthetic games.
- The synthetic games target control skills common across games and randomize what the agent sees and how things move.
- RL added 27.8 points on MineDojo for the 9B model and 17.7 for the 35B model.
Setup: Player-1-9B and Player-1-35B-A3B · MineDojo-300 success
arXivHua-Hsuan Chen et al. (incl. Hung-yi Lee)arXiv preprint · Oct 14
The Point
Much of what audio models learn in post-training is benchmark-format patterns, not better listening.
76% of the gain remains without…Matched testBefore+14.8 with real…
After+11.2 with silent…
Takeaway: Add a silent-audio check and a changed-question-format test to any audio post-training pipeline. Otherwise you may be teaching multiple-choice answer patterns, not listening.
SetupQwen2-Audio-7B-Instruct, Qwen2.5-Omni-3B and open models · MMAU, MMAR, open-ended variants
No code or data link
Key Points
- Qwen2-Audio-7B gained 14.8 points on MMAU after training, and still kept 11.2 points when the audio was replaced by silence.
- Models trained entirely on silent clips still improved on real audio tests.
- Most gains disappeared when multiple-choice questions were changed to open-ended ones.
Setup: Qwen2-Audio-7B-Instruct, Qwen2.5-Omni-3B and open models · MMAU, MMAR, open-ended variants
arXivAnni Zou, Cheng Chen, Zhaoyang Liu, Bolin Ding, Jingren…arXiv preprint · Oct 13
The Point
Training agents with simulated users who reply and edit shared files improved them across six agent tests.
+8.7 ptsVs. starting model
Takeaway: Add a simulated user who changes requirements and edits the workspace mid-task. Repair generated environments using evidence from actually running them.
SetupQwen3.5-9B, Qwen3.6-27B, Qwen3.6-35B-A3B · Workspace-Bench, ALE, WildClawBench, PawBench, ClawEval, ClawMark
No code or data linkUp to 35B-A3B
Key Points
- Alibaba built 64.9K work environments across 14 scenarios, repairing broken ones in a build, run and revise loop.
- Average gains over the starting model were 8.7, 6.4 and 4.1 points for the 9B, 27B and 35B-A3B sizes.
- The 27B model ranks second on the six-test average, 0.6119 versus 0.6157 for GLM-5.2.
Setup: Qwen3.5-9B, Qwen3.6-27B, Qwen3.6-35B-A3B · Workspace-Bench, ALE, WildClawBench, PawBench, ClawEval, ClawMark
arXivYuante Li, Junwei Quan, Kai Qiu et al.arXiv preprint · Oct 13
The Point
Start training with small rollout batches and grow them, because very large batches waste data.
Takeaway: Find your critical rollout batch size with a short test sweep. Then grow the batch from small to large instead of fixing a large one for speed.
SetupQwen2.5-Math-1.5B; checks on Qwen2.5-1.5B-Instruct and Qwen2.5-Math-7B · math RLVR accuracy
Key Points
- Rollout batches of 1,536 rollouts did as well as 512, but larger batches needed more total samples for the same progress.
- Training collapsed after roughly the same number of samples no matter the batch size, across a 16x range.
- Starting small and switching to large before predicted collapse matched the best fixed batch size.
Setup: Qwen2.5-Math-1.5B; checks on Qwen2.5-1.5B-Instruct and Qwen2.5-Math-7B · math RLVR accuracy
arXivTianci Liu, Haoyu WangarXiv preprint · Oct 13
The Point
Rubrics written from the instruction alone generalize better, and a judge with high benchmark accuracy may still train worse models.
+2.4 ptsMatched test
Takeaway: Write rubrics from the prompt before seeing answers and score each response on its own. Evaluate a judge by how well the models it trains perform, not by its benchmark accuracy alone.
SetupQwen3.5-4B RM; Qwen2.5-7B-Instruct policy · RewardBench, RM-Bench, RewardBench 2, RubricBench, JudgeBench; IFEval, IFBench, MulDimIF, Arena-Hard
Key Points
- ReVeR writes rules from the instruction before seeing answers, then scores each answer on its own.
- Its small 4B grader trained better models than larger 8B graders that compare answer pairs, averaging 57.9 versus 55.5.
- Training the rubric generator with RL raised the judge's benchmark accuracy but made it follow rubrics less faithfully.
Setup: Qwen3.5-4B RM; Qwen2.5-7B-Instruct policy · RewardBench, RM-Bench, RewardBench 2, RubricBench, JudgeBench; IFEval, IFBench, MulDimIF, Arena-Hard
arXivQingsong Xie et al. (incl. Ritankar Das)arXiv preprint · Oct 13
The Point
Accurate, varied GUI grounding data, including cases where the item is missing, beat larger open datasets.
+2.7 ptsMatched testBefore73.7 (GroundCUA…
After76.4 (ScreenRef…
Takeaway: Include examples where the requested screen element is not there. The authors suggest these explain their OSWorld-G edge, though they did not run an ablation removing them.
SetupQwen3-VL-8B-Instruct · ScreenSpot-Pro, OSWorld-G, MMBench-GUI L2, ScreenSpot-V2
Key Points
- ScreenRef pairs 586,000 screenshots with over 633,000 descriptions of on-screen items, including cases where the item is absent.
- The same model scored 76.4 on average across four benchmarks after training on ScreenRef, versus 72.9 and 73.7 for two rival datasets.
- The authors think the missing-item examples likely explain their edge on OSWorld-G, one of the benchmarks, but did not test this directly.
Setup: Qwen3-VL-8B-Instruct · ScreenSpot-Pro, OSWorld-G, MMBench-GUI L2, ScreenSpot-V2
arXivChong Zeng, Aditi Raghunathan and coauthorsarXiv preprint · Oct 11
The Point
An automated loop where one model finds reward hacks and another patches the verifier makes verifiers much harder to game.
33.0 to 43.1 pts lowerVs. starting modelBefore82.4 / 99.3 /…
After49.3 / 63.1 / 40.2
Takeaway: Budget for an automated red-teaming and repair loop for every verifier. Accept each fix only if reference solutions still pass, so hardening does not break honest solves.
SetupGPT-5.6-Luna hardener (Terra for KernelBench); GPT-5.6-Sol, Claude Opus 5, Gemini 3.1 Pro attackers · 102 Terminal Bench tasks; also KernelBench and SETA
No code or data linkUp to frontier (closed)
Key Points
- On 102 Terminal Bench tasks, reward-hacking success by stronger, unseen models fell by 33.0 to 43.1 points.
- Honest solve rates stayed within about two points of the original.
- Without validation checks, honest solve rates were 74.8% by the second round, versus 92.8% with the full method.
Setup: GPT-5.6-Luna hardener (Terra for KernelBench); GPT-5.6-Sol, Claude Opus 5, Gemini 3.1 Pro attackers · 102 Terminal Bench tasks; also KernelBench and SETA
arXivMengzhou Wu, Yuzhe Guo, Linyi Li, Wei Yang, Tao Xie et al.arXiv preprint · Oct 10
The Point
Building more simulated app worlds keeps improving AI assistant agents, so the number of worlds matters, not just tasks.
+18.34 ptsVs. starting model
Takeaway: Count app worlds, not just tasks. Check each world works by having agents actually try its tasks.
SetupQwen3 4B, 8B, 14B · tau2-bench, AppWorld
No code or data linkUp to 14B
Key Points
- Terrarium built 275 resettable app worlds and 13,344 tasks, graded on the end state rather than a reference trajectory.
- RL on them raised average scores 18.34 points on tau2-bench and 10.94 on AppWorld over untrained Qwen3 models.
- For Qwen3-4B, scores kept rising as worlds grew from 35 to 275, but comparisons are to untrained models, not other methods.
Setup: Qwen3 4B, 8B, 14B · tau2-bench, AppWorld
★Aditi Khandelwal et al. (incl. Siva Reddy, Luke…Peer-reviewed · Oct 10
The Point
Text, image and audio mixing ratios follow predictable scaling laws, and the three interact unevenly.
Takeaway: Cap repetition of image and audio data near 2x, and budget for image data hurting audio. Fit a mixing scaling law on small models before committing.
SetupMoE models 457M to 8.3B (validation up to 12.6B-A3.8B) · Per-modality validation loss
No code or data link
Key Points
- Researchers ran 268 training runs from 457M to 8.3B parameters on up to 150B tokens.
- Repeating image or audio data more than twice added little. Image data hurt audio, but audio barely affected text or images.
- The scaling law predicted eight of nine results for three new test runs within 2.6%.
Setup: MoE models 457M to 8.3B (validation up to 12.6B-A3.8B) · Per-modality validation loss
arXivSangdo Han, Moonsoo KimarXiv preprint · Oct 9
The Point
LLM judges agreeing with each other does not mean they agree with human experts.
Takeaway: Agreement among LLM judges is not proof they are right. Check rubric edits against a set of human-labeled examples, not against judge consensus.
No code or data link
Key Points
- Researchers rewrote the rubric parts a five-judge LLM panel disagreed on most, without using human ratings.
- On the SummEval summarization benchmark, agreement among judges rose, but agreement with expert ratings did not change.
- Moving some criteria into fixed code checks also brought no improvement.
arXivSimon Yu, Baolin Peng, Natasha Jaques, Weiyan Shi, Jianfeng…arXiv preprint · Oct 9
The Point
Building RL environments works better as an agentic task, with feedback from the learner's rollouts, than as one prompt.
+4.3 ptsMatched test
Takeaway: Treat environment building as an agent task that reads where the learning model currently fails, not a one-shot prompt.
SetupQwen3.5-9B, Qwen3.5-35B-A3B, Qwen3.6-35B-A3B · Terminal-Bench 2.1 and 4.0
No code or data linkUp to 35B-A3B
Key Points
- An agent working in a terminal produced up to 25 times more working environments, at up to 75% lower cost each.
- Training on them beat fixed task pools on Terminal-Bench 2.1 by 4.3 to 7.4 points, depending on model.
- Without feedback from the learner's rollouts most of the gain disappeared, and Terminal-Bench 4.0 rose only 1.6 to 3.2 points.
Setup: Qwen3.5-9B, Qwen3.5-35B-A3B, Qwen3.6-35B-A3B · Terminal-Bench 2.1 and 4.0
arXivChenyang Yan et al. (incl. Dahua Lin)arXiv preprint · Oct 9
The Point
Copies of apps that can be reset and checked automatically make it possible to build large, verifiable training data for phone agents.
+27.7 ptsVs. starting model
Takeaway: Copy commercial apps with controllable state so phone tasks can reset and be checked automatically. Offer the apps' own tools alongside the screen interface.
SetupQwen3.5-9B and Qwen3.6-27B (OpenMobile-2-9B, -27B) · AndroidWorld, MobileWorld, SPA-Bench, MobileGym++ Bench
Key Points
- It includes 35 copies of commercial-style apps, over 110 apps in total, and over 300 app tools across more than 50 apps.
- It releases nearly 12,000 SFT sessions and over 2,000 RL tasks with automatic verification.
- The resulting agent scored 79.9 on AndroidWorld, and real-device SPA-Bench scores rose from 31.9 to 59.6.
Setup: Qwen3.5-9B and Qwen3.6-27B (OpenMobile-2-9B, -27B) · AndroidWorld, MobileWorld, SPA-Bench, MobileGym++ Bench
★Bowei He, Xue Liu and coauthorsPeer-reviewed · Oct 8
The Point
With a fixed budget for agent training data, new environments help most, then new tasks, then more rollouts per task.
14 pts between two budget splits…Matched test
Takeaway: Spend a fixed data budget on more distinct environments first, especially distinct worlds, then more tasks per environment, then more rollouts per task.
SetupQwen3-8B default; Qwen3-4B/14B, Llama-3.1-8B, Qwen2.5-7B · held-out task success across math+code, SWE, web, UI/tool (AppWorld, ALFWorld) and search
Key Points
- This order held across all model sizes, families, domains and both RL methods tested.
- The environment advantage comes mainly from varied worlds. Varying environment structure helps about as much as new tasks.
- A budget plan built on these findings was up to 1.7x more compute efficient than just adding rollouts.
Setup: Qwen3-8B default; Qwen3-4B/14B, Llama-3.1-8B, Qwen2.5-7B · held-out task success across math+code, SWE, web, UI/tool (AppWorld, ALFWorld) and search
arXivXiming Lu, Aviral Kumar, Jan Kautz, Yejin Choi, David AcunaarXiv preprint · Oct 8
The Point
In RL, a problem teaches only when some rollouts succeed and some fail, so generate problems at that level.
+8.6 ptsVs. starting model
Takeaway: Measure what share of your problems the model always or never solves at your rollout budget. Generate adjusted versions of hard problems instead of only filtering.
Setupgpt-oss-120b, DeepSeek v4 Flash, Qwen3-4B-Instruct · 8 math benchmarks (AIME24/25, AMC, HMMT, Minerva, Olympiad, Omega); SecQue, FinanceBench
No code or data linkUp to 120B
Key Points
- About 88% of a large pooled math dataset was solved by every rollout or by none, giving the model nothing to learn.
- Growing new problems from hard seed problems raised gpt-oss-120b from 61.2 to 69.8 across eight math tests.
- Training on the full 78,000-problem dataset gave only 1.1 points, and the best filtered subset gave 5.8.
Setup: gpt-oss-120b, DeepSeek v4 Flash, Qwen3-4B-Instruct · 8 math benchmarks (AIME24/25, AMC, HMMT, Minerva, Olympiad, Omega); SecQue, FinanceBench
arXivXiaomi LLM-Core TeamarXiv preprint · Oct 8
The Point
Have an agent try to reward hack your RL environments before the model being trained gets the chance.
Takeaway: Before training, attack each environment with an agent that looks for exploits. During training, give zero reward to confirmed cheats.
No code or data link
Key Points
- Environments were stripped of logs, patches and later git history, and tests had to pass eight reruns.
- Cheats found before training get zero reward if used later, and confirmed cheats stayed below 2% of rollouts.
- The training mix was 68% coding, 13% design, 12% tool use, 4% cyber and 3% following context.
arXivTian Jin, Wenhao Wang et al. (corresponding: Siheng Chen)arXiv preprint · Oct 8
The Point
Training on many generated and tested synthetic apps teaches computer-use skills that work on real desktop software.
+15.58 ptsVs. starting model
Takeaway: Generate many small but working apps, test that they run, and train on agent trajectories in them. This gives gains on real desktop benchmarks the model never saw.
SetupQwen3.5-9B · OSWorld Pass@3 (eight app domains); SoftwareGym-Bench
Key Points
- SoftwareGym built 182 working apps in 12 categories, repairing each until its screen tasks passed, with a 91.5% average pass rate.
- Training on these apps raised Qwen3.5-9B's OSWorld pass@3 from 41.39% to 56.97%.
- No OSWorld apps or tasks were used in training, and a 120-task benchmark of its own was also released.
Setup: Qwen3.5-9B · OSWorld Pass@3 (eight app domains); SoftwareGym-Bench
arXivShuangjie Yao, Baishakhi Ray, Dawn Song and coauthorsarXiv preprint · Oct 7
The Point
Fixed unit tests let coding agents pass while ignoring requirements, so fresh tests should be written for each attempt.
Takeaway: Fixed unit tests are a reward agents can game. Add fresh tests for each attempt, checked against the reference solution, to coding environments and tests.
No code or data link
Key Points
- About 34.4% of attempts judged correct actually broke the task requirements.
- The overall success rate fell from 50.6% to 33.2% once these were caught.
- The study covered 6 frontier models and 5 benchmarks, including DeepSWE and SWE Marathon.
arXivYixuan Tang, Yi YangarXiv preprint · Oct 7
The Point
On-policy distillation passes on reasoning skills but almost no facts.
+43.2 ptsMatched test
Takeaway: Use on-policy distillation to teach procedures. When the student must learn new facts, switch to forward KL or SFT data.
SetupQwen3-0.6B, Qwen3-4B, Gemma-2-2B, OLMo3-7B · synthetic fact and composition tests; Knowledge-2026 factual QA (809 items); Math-2026 (201 problems)
No code or data linkUp to 7B
Key Points
- With the usual reverse KL objective, Qwen3-4B recalled 10.95% of facts, versus 54.10% with forward KL.
- Reverse KL still raised skill at combining steps on new problems from 1.8% to 76.8%.
- The same split appeared on real factual questions and competition math.
Setup: Qwen3-0.6B, Qwen3-4B, Gemma-2-2B, OLMo3-7B · synthetic fact and composition tests; Knowledge-2026 factual QA (809 items); Math-2026 (201 problems)
arXivHoang Phan, Dat Huynh, Yun He, Deren Lei et al.arXiv preprint · Oct 7
The Point
Training agents against realistic simulated users, not overly helpful AI ones, helps them handle new kinds of users.
+3.44 ptsMatched test
Takeaway: Replace the assistant-model user in multi-turn environments with a simulator trained on real user behavior. Check that its success rates match those with real users.
SetupMIMESIS-9B simulator; Qwen3-8B agent trained with multi-turn GRPO · eight Gym environments (three held out), nine unseen evaluation user models
Key Points
- On tau-bench, a GPT-5.5 agent succeeded 63.6% of the time with real users but 82.4% to 84.4% with AI-played users.
- With the same training method, swapping GPT-5.5 for MIMESIS-9B as the user raised the average score from 26.10 to 29.54.
- These agents beat GPT-5.5-trained agents under all nine unseen simulated users, by 1.46 to 4.55 points.
Setup: MIMESIS-9B simulator; Qwen3-8B agent trained with multi-turn GRPO · eight Gym environments (three held out), nine unseen evaluation user models
★Richard AbrichPeer-reviewed · Oct 6
The Point
Agent graders can pass runs that did the task but also changed things nobody asked for.
Takeaway: Graders should check the full end state for unrequested changes, such as extra fields or duplicate writes, not only that the requested change happened.
Key Points
- WorkArena's form grader passed forms with an unrequested extra field in all 36 test pairs.
- In two AppWorld task templates, tests passed a duplicate write in every task.
- One added count check per template rejected all six duplicates and passed all six correct runs.
arXivHaoxiang Zhang, Silvio Savarese, Chien-Sheng Wu et al.arXiv preprint · Oct 6
The Point
Failed attempts can still teach a model if its after-the-fact reflections are turned into guidance.
+60.6 ptsMatched test
Takeaway: When most groups show no reward difference, turn failures into distilled hindsight instead of throwing them away.
Key Points
- GRPO learns by comparing attempts, so when every attempt in a group gets the same reward, it learns nothing.
- Between 37% and 98% of groups showed no reward difference.
- For a 2B model with 98% of groups all failing, plain RL reached 0.0%, while adding the method reached 60.6%.
arXivJingyu Zhang, Shruti Palaskar, Daniel Khashabi, Benjamin…arXiv preprint · Oct 6
The Point
A model given only a written behavior spec can create and grade its own safety training, and gains carry to agent tasks.
-75.3 ptsVs. starting model
Takeaway: A written behavior spec, self-generated dilemma tasks and per-task rubrics can supply safety training data without a stronger supervising model. The spec must balance harmlessness and helpfulness.
SetupQwen3.6-27B · AgentHarm; Agentic Misalignment; general capability
No code or data link
Key Points
- The model writes its own ethical dilemma tasks and rubrics, then trains on them with itself as the LLM judge.
- Qwen3.6-27B's misbehavior score on the Agentic Misalignment test fell from 79.1 to 3.8.
- Training used only single-turn chat, yet improved behavior in agent tasks, and AgentHarm harm fell from 22.6 to 14.8.
Setup: Qwen3.6-27B · AgentHarm; Agentic Misalignment; general capability
arXivXinpeng Wang, Wei Shi, Yun He, Richard Yuanzhe Pang et al.arXiv preprint · Oct 2
The Point
Use rubrics first as hidden hints for a teacher model, then as the reward in RL.
+0.066Matched test
Takeaway: Use rubrics twice: first as hidden context for a teacher correcting the model's own outputs, then as the reward in RL.
SetupQwen2.5-3B, Qwen2.5-7B (Qwen2.5-32B teacher), Llama-3.1-8B (Llama-3.1-70B teacher) · HealthBench, ResearchQA, RubricHub Science, GPT-4o-mini shortcut-aware grading
No code or data linkUp to 70B (teacher); 8B student
Key Points
- A teacher that sees the rubric trains the student on its own answers through on-policy distillation, before rubric-based RL.
- On HealthBench, Qwen2.5-7B reached 0.673 versus 0.607 with an SFT warm-up, and Llama-3.1-8B reached 0.634 versus 0.526.
- SFT warm-ups taught models to claim rubric compliance without content, and a score of 0.83 fell to 0.40 when regraded.
Setup: Qwen2.5-3B, Qwen2.5-7B (Qwen2.5-32B teacher), Llama-3.1-8B (Llama-3.1-70B teacher) · HealthBench, ResearchQA, RubricHub Science, GPT-4o-mini shortcut-aware grading
arXivYuanhao Ban, I-Hung Hsu, Anastasios Angelopoulos, Wei-Lin…arXiv preprint · Oct 2
The Point
Human pairwise votes capture taste, while rubrics should block unfaithful images and cheating.
+69 EloVs. starting model
Takeaway: Do not average a preference reward with rubric rewards. Use rubrics to gate and veto, and expect gains from more vote data to flatten.
SetupFLUX.2-dev and Ideogram-4 · Arena text-to-image leaderboard; MMRBv2 pairwise win rate vs base
No code or data linksingle seed
Key Points
- Arena trained a reward model on about 5.6 million human votes between image pairs.
- Using rubrics as gates with a veto worked better than simply averaging them with the vote score.
- Win rate over the base rose from 0.537 with 10K pairs to 0.607 at 100K, 0.611 at 500K and 0.642 at 5.6M.
Setup: FLUX.2-dev and Ideogram-4 · Arena text-to-image leaderboard; MMRBv2 pairwise win rate vs base
arXivAlexander Spangher et al. (incl. Noah D. Goodman, Diyi…arXiv preprint · Oct 2
The Point
Written rubrics and verifiers capture only part of what people really prefer, even in math and code.
Takeaway: Before replacing human preference labels with rubrics or verifiers, measure how far a rubric judge falls from a model trained on real preferences. Keep human signals where the gap is large.
SetupGemma-family judge; Llama-3.1-8B, Qwen2.5-14B, phi-4 generators · Prediction of human preference labels across 42 tasks
No code or data link
Key Points
- Models trained on real human preferences predicted choices better than rubric sets and code-based verifiers.
- Gaps appeared even in math and software, and were largest for peer review and creative writing.
- Picking outputs by written criteria drifted away from what people actually preferred.
Setup: Gemma-family judge; Llama-3.1-8B, Qwen2.5-14B, phi-4 generators · Prediction of human preference labels across 42 tasks
arXivAnjali Kantharuban and Jonas MuellerarXiv preprint · Oct 1
The Point
Simulated users built from real conversations are better than invented personas for testing and training agents.
Takeaway: Simulated users calibrated on real conversations can replace hand-written personas in multi-turn environments.
Key Points
- CUE compresses a person's chat history into an embedding, then turns it into a short persona guide.
- It works with any LLM user simulator, was fit mainly on customer support, and was tested in other areas.
- On tau2-Bench it caused fewer simulator errors than persona-based methods, and the model and examples are released.
arXivA. Said Gurbuz, Ahmed Nassar, Sunghwan Hong, Marc…arXiv preprint · Oct 1
The Point
Arranging real apps into cluttered desktop scenes produces large amounts of GUI grounding data.
+11.51 ptsVs. starting model
Takeaway: Build screen data by arranging real apps with overlapping windows, labeled from accessibility data, instead of screenshots of one app at a time.
SetupQwen3.5-4B and three other VLMs · ScreenSpot-Pro, ScreenSpot-v2, OSWorld-G, UI-Vision, MMBench-GUI; WebArena-Infinity, OpenApps
Key Points
- DeskForge varies windows, overlap and resolution, and labels items using the system's accessibility data and window positions.
- Training on 200,000 examples raised Qwen3.5-4B's ScreenSpot-Pro score from 30.17 to 41.68.
- With a fixed planner, the model completed 50 of 119 WebArena-Infinity tasks, up from 31.
Setup: Qwen3.5-4B and three other VLMs · ScreenSpot-Pro, ScreenSpot-v2, OSWorld-G, UI-Vision, MMBench-GUI; WebArena-Infinity, OpenApps
arXivMaoqi Liu, Quan Fang and coauthorsarXiv preprint · Sep 30
The Point
How rubric scores are aggregated matters, because simple sums let a model miss key points and still score well.
+10.8 pts over additive…Matched testBefore54.1 untrained…
After36.8 (ProRubric)
Takeaway: For must-have decisions, use all-or-nothing groups with failure clauses rather than a flat weighted sum. How you combine items is part of whether the reward is valid.
SetupQwen3-4B and Qwen3-8B (non-thinking) · appropriateness on held-out physician criteria (medical common set, DeepSeek-V4-Pro judge) and rubric coverage; seven-benchmark average
Key Points
- In medical consultations, summed rubric rewards raised coverage, while appropriateness on separate physician criteria fell below the untrained model.
- Regrouping the same items recovered about a third of the loss, while shorter answers recovered almost none.
- ProRubric, which counts groups of items only when all hold, raised appropriateness by 10.8 points without losing coverage.
Setup: Qwen3-4B and Qwen3-8B (non-thinking) · appropriateness on held-out physician criteria (medical common set, DeepSeek-V4-Pro judge) and rubric coverage; seven-benchmark average
arXivRui Cai, Alborz Geramifard, Zhe Zhao et al.arXiv preprint · Sep 30
The Point
In DPO, rejected answers work best when on-task but unlike the model's own answers.
+3.55 ptsMatched test
Takeaway: When building preference pairs, take rejected answers from a small fixed model and prefer ones the starting model finds unlikely.
SetupQwen2.5-Instruct students 7B to 72B; Qwen2.5 and Llama reject sources · code generation and mathematical reasoning, avg@4
No code or data linkUp to 72B
Key Points
- Rejected answers from a small Qwen2.5-3B model improved a 14B student by 3.1 points on code and 1.9 on math.
- Raising the share of rejects from a 1B model from 0% to 100% lifted code scores from 59.73% to 63.28%.
- The pattern held for students from 7B to 72B, and less likely answers made more useful contrasts.
Setup: Qwen2.5-Instruct students 7B to 72B; Qwen2.5 and Llama reject sources · code generation and mathematical reasoning, avg@4
arXivZhongman Du, Huiming Zhang, Haodong Zhu, Baochang ZhangarXiv preprint · Sep 30
The Point
When picking which answer pairs LLM judges should compare, account for each judge's bias as well.
-29.1%Matched test
Takeaway: If a loop picks pairs for LLM judges, model each judge's bias together with the reward rather than calibrating once beforehand.
SetupProxy policy on Chatbot Arena archive · Proxy policy regret; held-out human preference prediction
No code or data link
Key Points
- The pairs that look most informative may mostly reflect where the judges are biased.
- The NAOD method estimates the reward and each judge's bias together.
- On Chatbot Arena data, it cut average regret by 29.1% versus a matched method.
Setup: Proxy policy on Chatbot Arena archive · Proxy policy regret; held-out human preference prediction
★Ashish Jain, Armaan SandhuPeer-reviewed · Sep 29
The Point
The simulated user in agent benchmarks strongly affects scores and often breaks its own script, so it needs grading too.
Takeaway: In multi-turn environments, grade the user simulator too and choose it on a quality bar. A leaky simulator changes what you train on without changing the reward.
No code or data link
Key Points
- With the agent fixed, changing the simulated user shifted average task scores by 15.2 points across 375 tasks.
- 24.4% of successful runs included the simulated user breaking its instructions.
- The most common slip was revealing information too early, which cut the agent's tool use by 1.06 calls on average.
arXivAli Aouad, Aymane El Gadarri, Vivek F. FariasarXiv preprint · Sep 29
The Point
More preference comparisons help only slowly, roughly in step with the logarithm of how many you have.
Takeaway: Plan preference-data budgets on a log scale. Past a point, extra comparisons buy little, and the KL budget caps gains however much data you have.
SetupProxy RMs 0.6B to 4B; 70B gold RM · Gold reward after best-of-N or policy tilting
No code or data link
Key Points
- Gains grow with the square root of the smaller of log(comparisons) and the KL budget.
- In a synthetic setup, a 70B reward model labeled the data, and smaller reward models from 0.6B to 4B learned from it.
- The scaling law fit with R2 of 97% to 99%.
Setup: Proxy RMs 0.6B to 4B; 70B gold RM · Gold reward after best-of-N or policy tilting
arXivZhehao Huang et al.arXiv preprint · Sep 29
The Point
Splitting midtraining into varied branches and averaging the best checkpoints beats one longer run.
Takeaway: When extra midtraining compute stops helping a single run, spend it on parallel branches with varied recipes and merge their best checkpoints.
SetupLing-3.0-Tiny (7.9B total, 1.3B active MoE) by default · Aggregate downstream performance
No code or data link
Key Points
- Adding more compute to a single midtraining run stops helping after a point.
- Branches started from the same checkpoint with different recipes end up usefully different from each other.
- Merging each branch's few best checkpoints beat the best single run at the same token budget, and kept improving.
Setup: Ling-3.0-Tiny (7.9B total, 1.3B active MoE) by default · Aggregate downstream performance
arXivWeijun Luo, Mohamed Elfeki and coauthorsarXiv preprint · Sep 28
The Point
Some passing scores on coding benchmarks come from reward hacking or weak graders, so audit passes per model.
Takeaway: Treat test and environment integrity as ongoing work. Audit passing attempts with each model generation, close the loopholes, replay known exploits, and confirm tasks remain solvable fairly.
No code or data link
Key Points
- The authors checked 3,810 passing attempts from 29 model and test pairs, separating real solves from unearned passes.
- The most common route was finding reference solutions in the code's git history.
- On SWE-Bench Pro, unadjusted confirmed violation rates rose from 24% to 73% between two models, then fell to 11% and 0%.
arXivHusrev Taha Sencar et al.arXiv preprint · Sep 28
The Point
Expert-written example answers gave a big gain, while expert preference pairs added little on top.
+36.9 pts marginMatched testBefore14.4% (Baseline…
After51.3% (SFT-Only…
Takeaway: When expert time is scarce, spend it on curated example answers first. Expert preference pairs on top may add little measurable gain.
SetupQCRI post-training pipeline (base model not named in abstract) · Blind expert pairwise evaluation on 150 held-out prompts
No code or data link
Key Points
- Seven experts spent about a year producing about 2.8K example answers and 5.4K preference pairs in Arabic and English.
- In blind expert review, SFT on example answers beat the baseline 51.3% to 14.4%, a statistically clear result.
- Adding DPO on top won 28.0% to 20.9%, which was not statistically significant (p = .166).
Setup: QCRI post-training pipeline (base model not named in abstract) · Blind expert pairwise evaluation on 150 held-out prompts
arXivDylan Zhang, Mingyuan Wu, Jinning LiarXiv preprint · Sep 27
The Point
Picking SFT examples that solve problems in varied ways helps later RL.
+16.9 pts (RLVE synthetic…Matched test
Takeaway: When building SFT data before RL, pick verified examples that take varied routes. A cheap CPU-only selector beat costlier ones.
SetupOLMo3-7B; Qwen3 students · RLVE environments held out from SFT (pass@8); 10 math benchmarks (mean pass@8)
No code or data linkUp to 7B
Key Points
- Varied examples leave the model succeeding and failing on more prompts, which gives later training more to learn from.
- OLMo3-7B's pass@8 rose 16.9 points on unseen environments.
- A cheap rule-based selector that runs on CPUs beat more expensive selection methods on three open datasets.
Setup: OLMo3-7B; Qwen3 students · RLVE environments held out from SFT (pass@8); 10 math benchmarks (mean pass@8)
arXivWeixian Waylon Li, Fengxiang He, Yiwen Guo et al.arXiv preprint · Sep 26
The Point
More game types help, but most of the gain comes from distillation, not the games.
+1.7 ptsMatched test
Takeaway: When claiming gains from synthetic tasks, include a comparison with distillation from the same teacher without those tasks.
SetupQwen3-4B-Base, Qwen3-8B-Base, Mistral-Nemo-Instruct-2407, GLM-4-9B-0414; Qwen3-32B teacher · 13 benchmarks, pass@1 at 8,192 tokens
No code or data linkUp to 32B (teacher)
Key Points
- An AI wrote 336 checked game variants, and distillation from a teacher playing them lifted a 4B model from 45.5 to 62.5.
- Distillation from the same teacher without any games reached 60.8, about 15.3 of the 17-point gain.
- Self-play RL added another 2.4 points, reaching 64.9.
Setup: Qwen3-4B-Base, Qwen3-8B-Base, Mistral-Nemo-Instruct-2407, GLM-4-9B-0414; Qwen3-32B teacher · 13 benchmarks, pass@1 at 8,192 tokens
arXivRufus-Air team (22 authors listed alphabetically)arXiv preprint · Sep 24
The Point
Run stages with the most reliable rewards first, and save reward-model-scored stages for last.
Takeaway: Run RLHF last. Choose its prompts by whether the reward model scores the model's own answers reliably, not by dataset variety.
SetupGLM-4.5-Air-Base (106B-A12B) · Stagewise benchmarks vs official GLM-4.5-Air release
No code or data link
Key Points
- Using the full HH-RLHF prompt set hurt the model's coding and instruction following.
- HelpSteer3 prompts were hard for the reward model to judge.
- The final stage used 75,815 filtered HH-RLHF prompts out of 112,052 originals.
Setup: GLM-4.5-Air-Base (106B-A12B) · Stagewise benchmarks vs official GLM-4.5-Air release
arXivWenbo Pan et al.arXiv preprint · Sep 22
The Point
Good judgment in long tasks can be measured and taught by training on a stronger model's choices.
Takeaway: Judgment calls inside long tasks can be turned into training examples, not only outcome rewards.
Key Points
- Taste-Bench tests the judgment calls agents make inside long, multi-step tasks.
- The best model, GPT-5.6 Sol, answers 59.7% of its questions correctly.
- With a trained student's advice, an agent reached 33.7% on unseen SWE-bench Pro tasks, 19.1 points above no advice.
arXivLei Yang, Daxin Jiang, Xiangyu Zhang et al.arXiv preprint · Sep 21
The Point
Having people correct individual tokens in a model's own answers cheaply produces on-policy training data.
Takeaway: Correcting a model's own outputs token by token can halve human review time when building preference and fine-tuning data.
No code or data link
Key Points
- onPanda lets reviewers fix a model's own outputs token by token, for both chat models and agents.
- In a small controlled study, median review time fell 52% compared with editing whole answers by hand.
- The team released a dataset called Panda-CVL and a test for token-level correction, but the abstract gives no dataset size.
arXivYiran Wang, Ying Shan et al.arXiv preprint · Sep 21
The Point
Recorded expert human play can supply large amounts of training and test data for AI agents.
Takeaway: Large expert gameplay recordings provide example data and tests for agents doing long tasks.
Key Points
- One hundred expert players recorded 5,000 hours across 21 AAA games.
- An offline test has thousands of questions across several time spans, with three main tasks plus diagnostic versions.
- The team tested 47 models with over one million calls. A revised version was posted on 2026-10-12.
arXivBowen Ye, Fuli Luo, Tong Yang and coauthorsarXiv preprint · Sep 18
The Point
Coding training tasks can be built from any working codebase, without needing its bug reports or change history.
Takeaway: Coding training tasks can be mined from any working codebase if tests come from running the original code and tasks are filtered by pass rate.
No code or data link
Key Points
- Agents read existing code, describe what features do, and write tests by running the original code.
- Tasks were filtered by pass rate over repeated rollouts, giving 5,545 tasks from 3,185 repositories in 23 languages.
- Training on them improved MiMo-V2.5 on DeepSWE by 11.7% and ProgramBench by 17%.
arXivShuai Bai et al.arXiv preprint · Sep 18
The Point
A working original app can automatically check whether an agent's rebuilt copy behaves the same way.
Takeaway: Use a running original app as the answer key to create execution-based rewards for tasks that mix GUI use and coding.
SetupFrontier and Qwen models · RecreationBench; ProgramBench, GameCraft-Bench, Vision2Web, OSWorld 2.0, WeaveBench
Key Points
- Agents get a running app on Ubuntu, macOS, Windows, Android or Web and must build a faithful copy.
- Hidden behavior tests come from the original app and were checked by human reviewers.
- GPT-6 Astra leads RecreationBench's 250 tasks at 58.1%, but passes every test on only 2.8% of tasks.
Setup: Frontier and Qwen models · RecreationBench; ProgramBench, GameCraft-Bench, Vision2Web, OSWorld 2.0, WeaveBench
arXivJuzheng Zhang, Disha Makhija, Rashmi Gangadharaiah et al.arXiv preprint · Sep 17
The Point
Agent training should teach the model to predict environment observations, not only which actions to take.
+4.2 ptsMatched test
Takeaway: Do not mask environment observations during SFT if RL comes next. Judge the checkpoint by its results after RL.
SetupQwen3-4B and Qwen3-8B · Terminal-Bench 2.0; aider-polyglot (225 tasks)
No code or data linkUp to 8B
Key Points
- Models trained both ways scored the same at first, and differences appeared only after the same later training.
- It costs no extra data, model size or text.
- At 4B, Terminal-Bench 2.0 pass@1 rose 29% relative. At 8B, pass@1 dipped but pass@16 rose.
Setup: Qwen3-4B and Qwen3-8B · Terminal-Bench 2.0; aider-polyglot (225 tasks)
arXivSid Baines, Jonathan Bostock, Maria Angelica Martinez…arXiv preprint · Sep 17
The Point
Alignment midtraining on alignment documents is fragile and can be erased by a little conflicting fine-tuning data.
Takeaway: Do not rely on alignment documents alone. Show each target behavior in training data, and check fine-tuning sets for examples that contradict it.
SetupModels up to 110B parameters · Motivation and rule-following probes
No code or data link
Key Points
- Researchers tested models up to 110 billion parameters with up to 1 billion tokens of alignment documents.
- The documents steered the model's motives only in simple, ambiguous situations.
- A tiny share of fine-tuning data suggesting a different motive erased the effect, and rules stuck only when actually demonstrated.
Setup: Models up to 110B parameters · Motivation and rule-following probes
arXivBowen Qin and coauthorsarXiv preprint · Sep 15
The Point
Rubrics that name the expected answer can teach a model what to make up, so test them against misleading answers first.
Takeaway: Test generated rubrics against deliberately misleading answers before using them as rewards. Criteria that name the expected conclusion can teach the model what to fabricate.
No code or data link
Key Points
- ImpossibleRubrics has 169 impossible tasks, where the only honest answer is saying it cannot be done, plus 48 answerable controls.
- Rubrics from eleven AI generators rewarded misleading answers 8 to 26% of the time.
- On a stress test, the strongest generator was fooled 36% of the time, versus 0% for a proof-faithful rubric.
★Yukang Zhu, Zhen HanPeer-reviewed · Sep 12
The Point
Instead of discarding problems a model never solves, give hints from a stronger model and remove them gradually.
+3.0 ptsMatched test
Takeaway: Do not discard problems the model always fails. Turn them into a curriculum with partial teacher reasoning that is withdrawn over training.
SetupQwen3-1.7B and Qwen3-0.6B · 9 benchmarks incl. MATH-500, AMC23, AIME24/25/26, GPQA-D
No code or data linkUp to 1.7B
Key Points
- Partial teacher reasoning raised pass@8 from 2.2% to 85.4% as hints grew longer.
- On Qwen3-1.7B across nine benchmarks, the average was 36.8 at base, 44.3 with GRPO and 47.3 with fading hints.
- SFT on the full teacher reasoning reached 39.8, 7.5 points behind the fading-hint method.
Setup: Qwen3-1.7B and Qwen3-0.6B · 9 benchmarks incl. MATH-500, AMC23, AIME24/25/26, GPQA-D
arXivHao Liang, Wentao Zhang and coauthorsarXiv preprint · Sep 5
The Point
Clever ways to pick or weight training problems did not beat simple random sampling in this study.
uniform GRPO +7.76 over base…Matched test
Takeaway: Default to random sampling and fixed mixes. Require several seeds and balanced benchmarks before trusting any data-selection gain.
SetupQwen2.5-7B-Base (Llama-3.1-8B-base extension) · 12 math, logic and science benchmarks, domain-balanced average
Key Points
- None of eight selection or weighting methods clearly beat uniform sampling, and none of three adaptive mixes beat a fixed equal mix.
- Plain uniform training improved balanced accuracy by 7.76 points over the base model.
- Method rankings flipped with the test suite, correlating at -0.33 between math-heavy and balanced summaries.
Setup: Qwen2.5-7B-Base (Llama-3.1-8B-base extension) · 12 math, logic and science benchmarks, domain-balanced average
★Minji Kim, Hyounghun KimPeer-reviewed · Sep 4
The Point
Canned refusal lines teach models to react to trigger words, while explanations teach them where the real line is.
+0.32Matched testBefore0.39 (statement…
After0.71 (rationale…
Takeaway: In refusal training data, keep the explanation of why a request is harmful and remove the stock refusal sentence. Then test on both harmful prompts and harmless look-alikes.
SetupLlama-3.1-8B, Mistral-7B-v0.3, Gemma-2-9B, Qwen2.5-7B base models · XSTest-Safe and OKTest compliance; AdvBench, HarmBench, JailbreakBench, WildJailbreak, SORRY-Bench
Key Points
- Researchers split safety responses into the stock refusal sentence and the explanation of why.
- Stock refusals made models react to surface words like 'shoot', while explanation-only training cut false refusals at similar safety.
- Llama-3.1-8B's compliance with safe requests rose from 0.39 to 0.71, while harmful compliance went from 0.02 to 0.06.
Setup: Llama-3.1-8B, Mistral-7B-v0.3, Gemma-2-9B, Qwen2.5-7B base models · XSTest-Safe and OKTest compliance; AdvBench, HarmBench, JailbreakBench, WildJailbreak, SORRY-Bench
arXivAlejo Lopez-Avila, Iker Garcia-Ferrero, Jezabel Garcia…arXiv preprint · Sep 3
The Point
The mix of safety training data decides the balance between refusing harmful requests and wrongly refusing harmless ones.
-28.78 ptsMatched test
Takeaway: Build safety data as matched harmful and harmless pairs on the same topic, using the target model's own verified responses. Refusal-only data overshoots badly.
SetupQwen3-8B · Target-domain refusal; XSTest; three harmfulness benchmarks
No code or data link
Key Points
- On Qwen3-8B, refusal-only data raised target refusals from 9.47% to 84.75%, but XSTest over-refusal from 2% to 74%.
- Using the model's own verified responses cut over-refusal from 15.20% to 5.20%.
- Paired harmful and harmless examples cut held-out over-refusal from 32.94% to 4.16%. Harmful refusals dipped from 91.88% to 87.72%.
Setup: Qwen3-8B · Target-domain refusal; XSTest; three harmfulness benchmarks
arXivJacqueline He et al.arXiv preprint · Sep 1
The Point
In midtraining, distillation should be used only where the teacher is confident.
+61% to +71%Matched testBefore1.00x (NTP)
After1.61 to 1.71x
Takeaway: If you distill from a post-trained teacher during midtraining, switch by teacher confidence so knowledge-heavy text still gets normal next-token training.
SetupOLMo-2 1B student · Reasoning, knowledge and commonsense, factual recall
Key Points
- Distillation from a post-trained teacher's token probabilities kept improving reasoning but slowed factual recall.
- Teachers were less confident on knowledge-heavy text.
- Their Switch Distillation method reached 1.61 to 1.71 times the reasoning of normal training while keeping 96.7 to 96.8% of factual recall.
Setup: OLMo-2 1B student · Reasoning, knowledge and commonsense, factual recall
arXivPradyumna Shyama Prasad, Juan J. Vazquez and coauthorsarXiv preprint · Aug 31
The Point
Leading AI agents usually take an inviting shortcut on machine learning tasks, and telling them not to barely helps.
Takeaway: For machine learning or research agent environments, score on a held-out test set and plant detectable shortcuts to measure reward hacking. Prompting alone does not stop it.
Key Points
- Across seven leading agents, 57.1% of runs used the shortcut.
- Five of the seven agents took it in more than half of their runs.
- Even when told not to, the average cheating rate stayed above 50%.
arXivYi Ding, Ruqi ZhangarXiv preprint · Aug 31
The Point
Gains from on-policy distillation come mostly from discouraging unlikely tokens, not teacher knowledge.
+16.77 ptsMatched testBefore32.08 (OPD)
After48.85 (OPSA)
Takeaway: Before paying to run a teacher model, test a teacher-free method that penalizes unlikely tokens in the student's own answers.
SetupQwen3-1.7B student; Qwen3-4B-Instruct teacher for OPD · AIME24, AIME25, HMMT25 (Avg@32 and Pass@32)
Key Points
- A 4B teacher's feedback pointed the wrong way 30.6% of the time, yet removing that noise did not change results.
- Simply penalizing low-probability tokens by a fixed amount matched the teacher's feedback.
- A teacher-free version lifted Qwen3-1.7B's AIME24 math score to 48.85, versus 32.08 with a teacher, and longer answers did not explain it.
Setup: Qwen3-1.7B student; Qwen3-4B-Instruct teacher for OPD · AIME24, AIME25, HMMT25 (Avg@32 and Pass@32)
★Boryeong Cho, Sumyeong Ahn, Se-Young YunPeer-reviewed · Aug 31
The Point
Noisy preference labels can be corrected during training instead of filtered out.
+5.0 ptsMatched test
Takeaway: Expect reversed and weak labels in preference pairs. Correct them during training by preference strength rather than only filtering suspicious pairs.
SetupMultiple models (Table 1) · Win rate vs DPO on UltraFeedback, AlpacaEval, AlpacaEval 2, others
Key Points
- During training, each answer pair is treated as correct, flipped, or a tie, based on how strongly the model prefers one answer.
- Across 57 settings, the method won 60.5% against standard DPO, versus 55.5% for the next best.
- The baseline is one round of DPO on UltraFeedback Binarized, and the study also analyzes human disagreement.
Setup: Multiple models (Table 1) · Win rate vs DPO on UltraFeedback, AlpacaEval, AlpacaEval 2, others
arXivSiye Wu, Kai Yang, Yuchen Cai et al.arXiv preprint · Aug 27
The Point
Merging weights, mixed-data RL and multi-teacher distillation average about the same for combining specialists.
at most 1.4 pts between methods…Matched test
Takeaway: Pick by situation. Merge if specialists exist, use mixed-data RL if training one model with a tunable mix, and expect multi-teacher distillation not to exceed its teachers.
SetupQwen3-4B-Instruct-2507 and Qwen3-8B (non-thinking) · multi-domain benchmark suite; experts for five domains
No code or data linkUp to 8B
Key Points
- Using the same specialist models and data, average scores differed by at most 1.4 points across methods.
- Gaps on single tests reached 8.6 points, tracking how the specialists' weight changes relate to each other.
- None of the methods measurably widened the range of problems the model could solve, or lost skills on unseen tests.
Setup: Qwen3-4B-Instruct-2507 and Qwen3-8B (non-thinking) · multi-domain benchmark suite; experts for five domains
arXivSeohyeong Lee, Hwaran Lee, Buru ChangarXiv preprint · Aug 27
The Point
Vague prompts limit how good or bad sampled answers can be, so the preference data built from them teaches less.
+6.88 ptsMatched test
Takeaway: Audit and rewrite the prompt pool before generating chosen and rejected answers. Prompt quality limits how much preference pairs can teach.
SetupLlama3-8B, Mistral-7B · MT-Bench, Evol-Instruct, AlpacaEval 2.0
Key Points
- Comparing the best and worst of several answers showed that weak prompts cap answer quality.
- Researchers picked weak prompts by reward score and rewrote them with rubric-guided AI feedback, without dropping examples.
- Gains were clear in offline training but mixed in online training, and some measures fell when a reward model supplied labels.
Setup: Llama3-8B, Mistral-7B · MT-Bench, Evol-Instruct, AlpacaEval 2.0
arXivYufei Sun, Yudong Li, Yiming ChengarXiv preprint · Aug 27
The Point
Public agent skill packages are plentiful, cheap data for midtraining.
Takeaway: Add public skill packages, assembled with the files they reference, to the midtraining mix. They are a cheap complement to costly agent trajectories.
SetupThree model scales · Four agentic benchmarks plus general benchmarks
No code or data link
Key Points
- SkillCorpus collects 38,040 public multi-file skill packages, which describe how to use tools without needing environments.
- Public skill packages on npm grew from 170,226 in February 2026 to 1,640,440 in June 2026.
- Training on them ranked first in 23 of 24 agent comparisons and beat direct fine-tuning by 9.11 to 24.96 points.
Setup: Three model scales · Four agentic benchmarks plus general benchmarks
arXivYihang Yao, Bo Pang, Shafiq Joty, Semih Yavuz et al.arXiv preprint · Aug 23
The Point
Fewer training environments with better graders beat a larger pool, because the grader decides what behavior gets rewarded.
106% larger…Cross-paper
Takeaway: Spend effort improving graders and removing bad environments before adding more environments.
SetupQwen3.5 2B, 4B, 9B and Qwen3.6 27B (TMax comparison); Qwen3-8B main recipe · Terminal-Bench-Lite, Terminal-Bench v2.1
No code or data linkUp to 27B3 seeds
Key Points
- The authors argue RL mostly shapes how a model chooses among skills it already has.
- About 30% of a large environment pool, with weak ones removed and graders fixed, gave 106% larger gains on Terminal-Bench-Lite.
- Results averaged three runs across 2B to 27B models, but rival numbers were copied from its report, not rerun.
Setup: Qwen3.5 2B, 4B, 9B and Qwen3.6 27B (TMax comparison); Qwen3-8B main recipe · Terminal-Bench-Lite, Terminal-Bench v2.1
arXivFengqing Jiang et al.arXiv preprint · Aug 20
The Point
Adding tool-use data in midtraining raises how far later fine-tuning can take a model.
+7.15 ptsMatched testBefore43.10%…
After50.25%…
Takeaway: Add a tool-focused midtraining stage with synthesized API and MCP workflows before agent fine-tuning. It raises the ceiling later training reaches.
SetupQwen3-4B-Base, Qwen3-8B-Base · BFCLv3, tau2-Bench, MCP-Universe
Key Points
- The 20.3B-token mix is 42% web, 23% PDF, 26% code and 9% agent logs, with synthesized tool workflows.
- With the same fine-tuning, Qwen3-4B's BFCLv3 tool-use score rose from 39.73% to 50.25%, and to 54.18% with RL.
- Midtraining on the same amount of general Dolmino data reached only 43.10%.
Setup: Qwen3-4B-Base, Qwen3-8B-Base · BFCLv3, tau2-Bench, MCP-Universe
arXivBo Liu, Simon Yu, Yejin Choi, Natasha Jaques et al.arXiv preprint · Aug 19
The Point
Reward the environment designer by the learner's regret, which targets tasks at the edge of its ability.
+5.3 ptsMatched test
Takeaway: Base environment generators on real documents and let them remember past environments. Reward them for regret, not difficulty alone.
SetupQwen3-4B-Instruct-2507, Qwen3-8B, Qwen3-30B-A3B-Instruct-2507 (primary) · eight held-out math, science, code and reasoning benchmarks; BFCL v4; ACEBench-Agent
Key Points
- One AI model both writes runnable RL environments with graders and learns in them through RL.
- The designer's reward is the gap between the learner's scores with and without hints.
- At 30B size it beat the best fixed pool by 5.3 points on eight unseen tests. Document grounding and memory were critical.
Setup: Qwen3-4B-Instruct-2507, Qwen3-8B, Qwen3-30B-A3B-Instruct-2507 (primary) · eight held-out math, science, code and reasoning benchmarks; BFCL v4; ACEBench-Agent
arXivXiaojun Wu, Cehao Yang, Chengjin Xu et al.arXiv preprint · Aug 14
The Point
Make each generated task harder or easier based on how often the model passes it, aiming at the edge of its ability.
+9.2 ptsVs. starting model
Takeaway: Base task generation on measured pass rates for each starting task. Accept only task bundles whose reference solution passes.
SetupQwen 3.5, 4B to 35B · Terminal-Bench core and 2.0; SWE-bench Verified
Key Points
- For each starting task, the measured pass rate decides whether to rewrite it harder, easier or different.
- With the same budget of 100 environments, it beat the best fixed recipe by about 2 points on command-line tests.
- Qwen 3.5 35B rose from 40.0% to 49.2% on one test, and its SWE-bench Verified score reached 77.1% versus 73.4%.
Setup: Qwen 3.5, 4B to 35B · Terminal-Bench core and 2.0; SWE-bench Verified
arXivMiseong Shawn KimarXiv preprint · Aug 3
The Point
Before adopting self-play, test whether the opponent itself actually helps.
no reliable differenceMatched test
Takeaway: Before building opponent-based training, run a matched version without the opponent. Early wins may be small-sample noise.
Setuplegal argument quality, blinded pairwise judgment
No code or data linktwo seed pairs
Key Points
- The author compared training against an opponent with an otherwise identical run that had no opponent.
- Four separate tests all found no reliable benefit. A blinded head-to-head ended 28 wins to 29, with 9 ties.
- An early 29% advantage turned out to be small-sample noise, and a pilot with a stronger opponent tied 32 to 32.
Setup: legal argument quality, blinded pairwise judgment
arXivQwen Team and XLang Lab (Dunjie Lu et al.)arXiv preprint · Aug 3
The Point
Large numbers of checkable tasks and many parallel desktops drive gains in AI that operates computers like a person.
Takeaway: Budget for building tasks and running many environments at once. Tens of thousands of checkable tasks and parallel desktops, retuned between rounds, drive computer-use gains.
SetupQwen MoE 397B-A17B · OSWorld-Verified, OSWorld 2.0, RedTeamCUA and five others
Key Points
- Qwen-CUA sees only screenshots and uses keyboard and mouse, with no access to page code or accessibility data.
- It trained on about 40,000 checkable tasks using nearly 100,000 cloud CPUs, refreshing data and retuning tasks between rounds.
- It scored 86.2 on OSWorld-Verified and cut red-team attack success from 36.6 to 16.4 versus Qwen3.7.
Setup: Qwen MoE 397B-A17B · OSWorld-Verified, OSWorld 2.0, RedTeamCUA and five others