Graph Is the Verifier: Agentic Reinforcement Learning for Interprocedural Vulnerability Detection

arXiv:2607.26656 · cs.CR, cs.AI, cs.SE · Submitted 2026-07-29 · Read on arXiv

Yikun Li, Ting Zhang, Jiakun Liu, Jinfeng Jiang, Yuheng Yieh, Yixin Yang, Wen Bin Leow, Yide Yin, Yintong Huo, Eng Lieh Ouh, Lwin Khin Shar, David Lo

cs.CR, cs.AI, cs.SE

Submitted: 2026-07-29

Code: https://github.com/volcengine/verl

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• GRPO — 20× in this paper · explained in 6 episodes
• Accuracy — 14× in this paper · explained in 1 episode
• Reinforcement Learning — 13× in this paper · explained in 4 episodes
• Grounding — 11× in this paper · explained in 3 episodes
• Verifier — 10× in this paper · explained in 2 episodes
• Code Property Graph — 6× in this paper
• Ablation — 4× in this paper · explained in 1 episode
• Distillation — 4× in this paper · explained in 2 episodes
• Fine-Tuning — 3× in this paper · explained in 5 episodes
• Generalization — 3× in this paper · explained in 13 episodes
• Reinforcement Learning (RL) — 3× in this paper · explained in 25 episodes
• Actor — 2× in this paper · explained in 3 episodes
• Agentic Reinforcement Learning (RL) — 2× in this paper · explained in 1 episode
• Analyzer — 2× in this paper · explained in 1 episode
• Robustness — 2× in this paper · explained in 5 episodes
• Verification — 2× in this paper · explained in 2 episodes
• AI Agents — 1× in this paper · explained in 2 episodes
• Ablation study — 1× in this paper · explained in 1 episode
• Benchmark — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Core — 1× in this paper · explained in 2 episodes
• LLM judge — 1× in this paper · explained in 2 episodes
• Reward Function — 1× in this paper · explained in 2 episodes
• Trace — 1× in this paper · explained in 2 episodes
• Transformer — 1× in this paper · explained in 2 episodes
• Two-stage training — 1× in this paper · explained in 2 episodes

Sources

• Qwen2.5-Coder Technical Report
• Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs