Fetching from the wire…
Public story · 2026-09-02 · high
Two configurations of the same verifier library disagreed on 49.9% of identical, meaning-preserving answer rewrites.
Why now: There's no earlier coverage of these figures to compare against; this is the first published read of them.
Four RLVR verifiers disagreed by up to 41 points on identical, meaning-preserving answer rewrites, per a new metamorphic-testing paper. Any RL training run that scores outputs with one of these verifiers inherits that gap as reward noise before a model gets judged on the merits.
The method targets the verifier, not the model. Researchers generated certified rewrites that keep an answer's meaning fixed while changing its form, so any rejection counts as a provable false negative. They ran 307,420 verdicts through the test.
Self-validation, a verifier checking a rewrite of its own accepted answer, ranged from 53.8% to 95.2% depending on which verifier ran. That's a 41.4-point gap on inputs that should score the same every time.
Two configurations of one library disagreed with each other on 49.9% of pairs. The settings mattered almost as much as a coin flip.
Whitespace and punctuation alone caused 93.0% of the failures in the default LaTeX config, answers marked wrong for formatting, not substance.
One verifier's numeric cascade showed a sharper failure mode. It rejected every off-by-one wrong answer under 10,000, then accepted every off-by-one wrong answer at 10,000 or above. Being wrong got rewarded once the number was large enough.
The paper doesn't say whether teams using these verifiers have audited their own false-negative rates.
Each link below shares sources, entities, or timing with this story.
Farid Zakaria's Self-Executing Linux Format uses binfmt_misc to hand the file to an interpreter that maps rows from a segments table and jumps to the entry point, with the program reading its own file via argv[0]. Symbols, relocations and application data all live in tables in...
He set the 4-byte SQLite application ID at offset 68 to "SELF", decomposed an ELF binary's components into rows across a custom schema, and registered a binfmt_misc handler that hands the file to a self-exec interpreter which queries the tables and runs the program. One file,...
21 out of 21. Not most. All of them. arXiv 2608.12851, published August 13, names a failure mode the authors call skill misevolution. An agent that learns from its own successful trajectories will turn an unsafe success into reusable policy, and that policy persists after the...
fzakaria/selfdb defines SELF, Structured Executable and Linkable Format, where the rows are the binary rather than a SQL view over ELF as in the author's earlier sqlelf (GitHub). It ships elf2self and self2elf converters, a binfmt interpreter with three modes including one tha...
Skill-based architectures let agents generate, refine and reuse procedures from past runs, which means a malicious capability can be written into the skill store as a legitimate artifact (arXiv 2608.30429). SARGE red-teams that pipeline through iterative generation, escalation...
A fleet evaluation across 46 endpoints from six vendors found a recognition-enforcement gap: source-format features are linearly decodable from activations and models verbally identify forged authority when asked, but some configurations still emit the conflicting tool call. A...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.