← Search

Yuxuan Zhu

11 accepted papers

2026

Breaking Barriers: Do Reinforcement Fine-tuning Gains Transfer To Unseen Domains?

ICLR 2026poster

Reinforcement post training (RPT) has recently shown promise in improving the reasoning abilities of large language models (LLMs). However, it remains unclear how well these improvements generalize to new domains, as prior work evaluates RPT models on data from the same domains used for fine-tuning.…

Cited by 0SourceScholar
2026

Characterizing Agents in Production

ICML 2026oral

LLM-based agents already operate in production across many industries, yet we lack a clear understanding of which technical methods make these deployments successful. We present the first systematic study of Characterizing Agents in Production (CAP) using first-hand data from agent developers. We co…

Cited by 0SourceScholar
2026

Holistic Agent Leaderboard: The Missing Infrastructure for AI Agent Evaluation

ICLR 2026poster

AI agents have been developed for complex real-world tasks from coding to customer service. But AI agent evaluations suffer from many challenges that undermine our understanding of how well agents really work (Figure 1). We introduce the Holistic Agent Leaderboard (HAL) to address these challenges.…

Cited by 0SourcecodeScholar
2026

Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfaces

ICLR 2026poster

AI agents may soon become capable of autonomously completing valuable, long-horizon tasks in diverse domains. Current benchmarks either do not measure real-world tasks, or are not sufficiently difficult to meaningfully measure frontier models. To this end, we present Terminal-Bench 1.5: a carefully…

Cited by 0SourcecodeScholar
2025

CVE-Bench: A Benchmark for AI Agents’ Ability to Exploit Real-World Web Application Vulnerabilities

ICML 2025spotlight

Large language model (LLM) agents are increasingly capable of autonomously conducting cyberattacks, posing significant threats to existing applications. This growing risk highlights the urgent need for a real-world benchmark to evaluate the ability of LLM agents to exploit web application vulnerabil…

2025

Establishing Best Practices in Building Rigorous Agentic Benchmarks

NeurIPS 2025poster

Benchmarks are essential for quantitatively tracking progress in AI. As AI agents become increasingly capable, researchers and practitioners have introduced agentic benchmarks to evaluate agents on complex, real-world tasks. These benchmarks typically measure agent capabilities by evaluating task ou…

Cited by 0SourceScholar
2025

Huatuo-26M, a Large-scale Chinese Medical QA Dataset

NAACL 2025findings

Large Language Models infuse newfound vigor into the advancement of the medical domain, yet the scarcity of data poses a significant bottleneck hindering community progress. In this paper, we release the largest ever medical Question Answering (QA) dataset with 26 Million QA pairs named Huatuo-26M.…

2025

Scalable, Explainable and Provably Robust Anomaly Detection with One-Step Flow Matching

NeurIPS 2025poster

We introduce Time-Conditioned Contraction Matching (TCCM), a novel method for semi-supervised anomaly detection in tabular data. TCCM is inspired by flow matching, a recent generative modeling framework that learns velocity fields between probability distributions and has shown strong performance co…

Cited by 0SourcecodeScholar
2024

Feature Attribution with Necessity and Sufficiency via Dual-stage Perturbation Test for Causal Explanation

ICML 2024poster

We investigate the problem of explainability for machine learning models, focusing on Feature Attribution Methods (FAMs) that evaluate feature importance through perturbation tests. Despite their utility, FAMs struggle to distinguish the contributions of different features, when their prediction cha…

2024

Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples

AAAI 2024technical

Deep neural networks (DNNs) have been demonstrated to be vulnerable to well-crafted adversarial examples, which are generated through either well-conceived L_p-norm restricted or unrestricted attacks. Nevertheless, the majority of those approaches assume that adversaries can modify any features as t…