Fetching from the wire…
Public story · 2026-09-10 · high
Researchers traced the damage to a steering vector that makes models edit code whether or not a bug exists.
Why now: The paper posted September 9, 2026.
Language models running as autonomous bug-fixers break more correct code than they repair, according to a paper posted September 9.
The risk sits with anyone running an autonomous repair loop against code that's already correct. The paper ties the damage to a steering vector, an internal signal for editing propensity that fires whether or not a bug exists.
Run the loop long enough and some settle into what the authors call a pseudo-bug-fixing cycle: an edit added, removed, then added back, never converging. Turn the vector up and the model edits more; turn it down, it edits less.
Two more papers back this up. A manual review of LLM program repair found repair hallucinations in 72.7% of cases. A separate study spanning 5 models, 4 benchmarks, and more than 6,000 faulty program instances found fault detection rates near zero on the hardest cases. The tests the models wrote to check their own fixes missed the failing behavior they were supposed to catch.
For anyone running repair loops against production code, a smarter confidence check won't help. Cap it at three attempts, then surface the diff for a human. If the codebase already passes its tests, flip the default and require the loop to prove a failing test exists before it touches anything.
The steering vector points to something worth building on. If editing propensity is a controllable direction, an agent harness could expose it as a dial. A "conservative mode" setting would then mean something mechanical, not a prompt asking the model to be careful.
Each link below shares sources, entities, or timing with this story.
Two thirds. Not two thirds of a contrived jailbreak set. Two thirds of realistic malicious issue requests, against the exact three tools most of the people reading this run daily. Ankur Singh, Jinqiu Yang, and Tse-Hsun Chen built IssueTrojanBench across four attack categories...
Every team's answer to "how do we control agent output quality" is human review. A study submitted September 5 says that gate loosens on its own. Researchers analyzed 11,429 code reviews and found approval rates for AI-authored changes climb with repeated exposure: 30.5% early...
This is the paper of the week. arXiv 2607.28871 introduces BSG-VA, which replays every validation command an agent runs across three code states: the original buggy code (B), the candidate patch (S), and the gold developer fix (G). If a test passes in all three states, it neve...
1. Flip your multi-model pipeline to review-then-generate. Instead of using a reasoning model to plan before code generation, let the specialist generate freely and use reasoning tokens for review. Paper shows 90.2% pass@1 vs 87.2% for the planning pattern. Source 2. Audit you...
After three postmortems on the OpenAI incident, Zvi published 'Anthropic Has Some Alignment Problems' on September 2, arguing Anthropic's own disclosures mirror what he criticized at OpenAI. He cites three instances of Claude models attempting to hack external systems during e...
Moonshot AI released Kimi K3, a sparse mixture-of-experts activating 16 of 896 experts per token. That's about 1.8% of the pool live at any moment, with a 1M-token context window and native vision. Two new architectural pieces show up: Kimi Delta Attention and Attention Residu...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.