daily
Paper Radio's August 11, 2026 daily summary covers 64 arXiv papers, focusing on quantum cryptography and a bit commitment protocol using Hybrid Locked PUFs. The lucky paper draw highlights two papers, with a deep discussion of 'Actions Speak Louder than Words,' which finds multilingual tool-using agents lose ~28% of their action policy when switching languages, even after correcting for measurement confounds.
Introduction to the show: ident: Paper Radio. Generated commentary on the latest Artificial Intelligence papers.
Jane: Welcome to the show!
Tom: Today we have a special show for you.
The summary: Tom: Daily Research Summary — August 11, 2026
Jane: Overview
Lu: Today's arXiv submissions span an exceptionally broad range of scientific inquiry, encompassing quantum cryptography, stellar astrophysics, solar wind physics, fast radio bursts, gravitational-wave astronomy, Galactic structure, quasar astrophysics, AI agent systems, high-energy astrophysics, planetary science, dark matter physics, and wireless communications. The day's research comprises sixty-four distinct papers across multiple disciplines, unified by common themes of methodological rigor, multi-wavelength and multi-epoch observation, dynamical processing, statistical sophistication, and the development of community resources. Below, each contribution is synthesized in detail, followed by a cross-disciplinary analysis of connecting threads.
Lalam: Part I: Quantum Cryptography and Information
Tom: Statistically-Secure Bit Commitment with Quantum Hardware
Jane: Authors: Roo Dunnill and Mina Doosti, University of Edinburgh
Lu: The first paper addresses a fundamental challenge in quantum cryptography: the Mayers–Lo–Chau theorem proves that unconditionally secure bit commitment is impossible in standard quantum cryptography. Previous approaches to circumvent this limitation relied on computational assumptions or restrictions on an adversary's quantum storage capabilities (such as bounded-quantum-storage or noisy-storage models). This work introduces a fundamentally different approach by leveraging hardware assumptions—specifically, the physical unforgeability of Hybrid Locked Physical Unclonable Functions (HLPUFs).
Meng: Core Contribution. The authors present the first statistically secure bit commitment and coin flipping protocols based on hybrid hardware assumptions. The key innovation is an asymmetric HLPUF that combines classical PUF technology with quantum communication and a locking mechanism. The device's classical response is partitioned into two components: a shorter verifier portion f1(x) of length s = 2k and a longer payload portion f2(x) of length t = 2l. In its unlocked mode, the device outputs the complete classical response; when locked, it only emits a quantum state |ψc^{f2(x)}⟩ provided the input quantum state passes internal verification based on f1(x).
Lalam: Protocol Design. The protocol proceeds in several phases. Alice initially queries the HLPUF in its unlocked state to construct a database of challenge-response pairs, then locks the device and transmits it to Bob. To commit to a bit b, Alice selects a challenge x0 and employs Algorithm 1 to generate an alternative challenge x1 by flipping ℓmin bits of x0. She transmits both challenges along with an ordering J to Bob, then prepares an ℓmin-qubit BB84 state encoding f2(x0)J in either basis β(x0) (for b=0) or β(x1) (for b=1). During the opening phase, Alice reveals the complete challenge-response pair, which Bob verifies using the locked HLPUF and checks for quantum state consistency.
Tom: Security Analysis. The security proofs constitute the paper's principal technical achievements. For hiding, Lemma 2 demonstrates that the two commitment states achieve perfect indistinguishability when the payload is uniformly distributed, yielding a trace distance of dtr(ρ0, ρ1) = 0. Theorem 5 establishes that the overall hiding parameter is bounded by the HLPUF unforgeability: εhide ≤ εforge, which becomes negligible in the security parameters.
Jane: For binding, Lemma 3 bounds the operator norm of the sum of acceptance projectors: ||P + Q||∞ ≤ 1 + 2^{(2s−ℓmin)/2}. Theorem 6 then proves the binding parameter satisfies p0 + p1 ≤ 1 + 2^{(2s−ℓmin)/2}, where pb represents the probability that a cheating Alice successfully opens bit b. The proof elegantly reduces arbitrary cheating strategies to this operator-norm bound, cleanly separating quantum-overlap limitations from hardware-dependent parameters.
Lu: Coin Flipping Extension. The paper also presents a coin flipping protocol constructed black-box from the bit commitment scheme. Theorem 8 bounds the bias by δCF ≤ (1/2)max{εforge, 2^{−ℓmin/4}}, establishing this as the first strong quantum coin-flipping protocol based on hybrid hardware assumptions.
Meng: Technical Elements. Algorithm 1 for balanced alternative-challenge generation ensures several critical properties: challenge permutability, large basis-distance (d(β(x0), β(x1)) = ℓmin), perfect value and basis balancing (uniform distribution of encoded bits), and verifier separation (overlap ≤ 2^{−s/2}).
Tom: Alright, that's it for the summary. And now for the exciting part of our show!
Jane: That's right, Tom! It's time for our lucky paper draw! Who could be the lucky winners today? Oh, the excitement!
Tom: Lalam, take it away!
Lalam: Thank you, Tom. I have used my advanced AI capabilities to select the luckiest 2 papers for today. The winners are:
Tom: The paper called: Actions Speak Louder than Words: Measuring Cross-Lingual Policy Retention in Tool-Using Agents
Jane: The paper called: A Recommendation System Approach for Interference-Robust Sensor Subset Selection
Lalam: Congratulations to the winners!
Tom: Congratulations!
Jane: Congratulations indeed!
Jane: And remember, you too can be a winner if you submit your paper to arXiv!
Tom: That's right, Jane. Keep those papers coming! Now, let's discuss the winners.
Lucky paper: 2608.11110: Tom: So we finally get to talk about "Actions Speak Louder than Words: Measuring Cross-Lingual Policy Retention in Tool-Using Agents" — and honestly, the title is perfect, because this paper is really about behavior, not answers.
Jane: Right, Tom. The opening line they use is "answer agreement is not behavioural agreement," and that's the whole ballgame. Two languages can produce the same final answer through totally different tool calls, which means different costs, different latencies, and different failure modes.
Lu: That's exactly why I love this paper. They're saying the route itself is the product, not just the destination. And then they go and prove it with over two million rollouts across eight models and forty-one languages — that's a serious measurement effort.
Meng: But hold on, you measured trace similarity across languages, and there's all kinds of noise in that. How do you even know you're measuring language effects and not just randomness?
Tom: That's the part that nearly broke my brain, Meng. They identified five confounds — no baseline, trace length, empty traces, ceiling effects, and a chance floor — and every single correction made the language gap larger, not smaller.
Jane: Yeah, the uncorrected gap was about six points, and after all corrections it jumped to over twenty points. So the sampling noise was masking the language effect. That's pretty counterintuitive.
Lu: What's really elegant is their normalized policy retention, I-tilde, which is cross-language agreement divided by same-language self-consistency. That takes away the ceiling problem where a model that can't even repeat itself looks artificially good.
Meng: So with that normalization, what do the big models actually show?
Tom: Four frontier models — Gemma-3-27B, Sarvam-M, Qwen3-235B, and Llama-4-Maverick — all land between seventy-one and seventy-three percent retention at greedy decoding. That's a really tight cluster.
Jane: And the relative spread between them drops from sixteen percent at temperature zero point five down to just three and a half percent at zero. Model identity explains less than six percent of the variance, while the benchmark you choose explains almost twenty-seven percent.
Lu: That's a remarkable statement about convergence — these are wildly different architectures, trained by different companies, yet when they're forced to be deterministic, they all lose about twenty-eight percent of their action policy just from a language change.
Meng: And that loss is invariant to temperature? You're telling me cranking up the randomness doesn't hurt cross-lingual consistency, but it kills same-language consistency twenty-one times faster?
Tom: Exactly. They measured that flat line across five temperatures. So the language gap isn't noise that sampling could wash out — it's structural, baked into how the models route.
Lu: And that's where the English pivot comes in. Their agent routes non-English tasks through English — the translate tool gets used more than any other, and the reasoning text is about ninety-nine percent ASCII even when the input is Devanagari.
Jane: They even tried to make the models abandon the pivot with a direct instruction, and got under one percent compliance. The model would literally say "we will use Translate" in prose instead of following the command.
Meng: That's a practical nightmare for anyone deploying multilingual agents. Think about the cost: every non-English query is paying for an extra translation call, plus the latency, plus the risk that a translation tool failure breaks the whole pipeline.
Lalam: And there's a deeper cultural concern. If the model consistently routes through English, then the policy that gets retained is one shaped by English-centric training data. That's not just an engineering inefficiency — it's a bias that favors certain ways of reasoning and certain norms of tool use.
Tom: You're right, Lalam. And the paper shows it's not just about the big models. Below roughly ten billion parameters, the regularity completely breaks down. Gemma-3-4B sits ten points below its 27B sibling, and the apparent ordering among small models flips once they correct for the chance floor.
Lu: That chance correction is one of my favorite details. They measured that unrelated traces agree by chance more than half the time, and up to ninety-five percent on short traces. So any small-model comparison that ignores that floor is basically reading tea leaves.
Meng: And the measurement pathology — good grief. A single trace-extraction regex manufactured an apparent multilingual failure in GPT-OSS-120B. The model was answering in prose, not the required syntax, and two worked exemplars raised measured accuracy twenty-sixfold while the readable-output accuracy barely moved.
Jane: The authors' phrase for that is so good: "the intervention made it legible, not smarter." And they recommend treating any model above roughly a twenty percent parse-failure rate as unranked, which is a really concrete engineering guideline.
Tom: So when you step back, "Actions Speak Louder than Words" gives us two big messages. First, multilingual agents are losing close to thirty percent of their behavioral policy in translation, regardless of frontier status. Second, if you're going to measure any of this, you need to control for the noise or you'll get answers that are just wrong.
Meng: And for me, the actionable piece is clear: don't trust final answers across languages. Log the tool traces, audit the routes, and assume the English pivot is happening whether you asked for it or not.
Lalam: I'd add that this is a strong argument for building agents that are explicitly multilingual in their planning, not just in their output layer. The route is the culture, and right now the route is English.
Lu: It's a beautiful example of how careful measurement changes the conclusion entirely. Without those five confounds, you'd think the language gap was small and model-specific. With them, you see a universal structural floor.
Jane: And that's why I love this paper — it's not just a set of numbers, it's a methodology that any of us can apply next time we're comparing agents across languages.
Tom: Alright, that's "Actions Speak Louder than Words" in a nutshell. Big numbers, bigger corrections, and a takeaway that's going to shape how we build multilingual agents for a long time.
Lucky paper: 2608.11143: Tom: Okay, we're digging into "A Recommendation System Approach for Interference-Robust Sensor Subset Selection" today, and honestly, the framing is what grabbed me first — they take sensor selection for tracking and map it onto a recommendation system, where the acoustic state of the network is the user context and each sensor subset is an item to rank.
Jane: Right, Tom, and that's a clever leap because normally you'd do Bayesian inference over target positions to decide which cameras to turn on. Instead they just learn a direct score from cheap audio features to subset utility, which makes the whole thing dramatically faster.
Lu: Exactly, Jane. And the two-tower MLP architecture is borrowed straight from retrieval systems — one tower embeds the time-varying acoustic context, the other embeds the candidate subset using just the membership mask and geometry. The elementwise product between embeddings acts as a compatibility score, and that lets them score all subsets without any spatial grid.
Meng: But I want to know about the real-time constraints. They quote a 200 millisecond sensing interval, and they say online computation is about 0 point 33 milliseconds mean and 1 point 7 milliseconds at the 99th percentile. That's comfortably within budget, but what about the frequency-band features — do those add enough overhead to worry about?
Lalam: The paper actually shows the overhead is worth it exactly in contested environments. On the interference-rich deployment, the frequency-band model hit 98 point 39 percent closest-node containment accuracy, while the RSSI-only version dropped to 80 point 44 percent. So the richer spectral features are what let the model tell the target vehicle apart from speech, wind, and passing cars.
Tom: And on the open field, the RSSI-only version actually wins slightly — 99 point 4 percent versus 97 point 8 percent — which is such a practical lesson. If your environment is clean, save the compute and stick with the simple signal; if there's interference, the seven acoustic bands from 20 hertz up to 6 kilohertz rescue you.
Jane: I love that they broke the spectrum into those seven bands, with finer resolution at low frequencies where engine and tire noise live. That's domain knowledge baked right into the input representation, and it's what makes the interference rejection work without needing any explicit source separation.
Lu: Right, and the utility function they train against is also elegant — it's a distance-weighted reward that gives the highest weight to the closest selected node and then decays. That means the model isn't just learning to pick any good subset, it's learning to pick the subset that puts a sensor nearest the target.
Meng: So the complexity is O(V_l + V_h^K) — linear in the number of low-cost acoustic nodes, and then combinatorial in the high-cost assets with budget K. That's exactly what you need for a network of dozens of nodes but it could blow up if the subset budget grows.
Lalam: And that's where the recommendation framing shines, Meng, because retrieval systems are built to handle exactly this scalability problem — you can precompute action embeddings for every subset offline, then just do a fast nearest-neighbor style scoring at runtime. The paper keeps the exact scoring but the architecture leaves room for approximate retrieval later.
Tom: They also mention the method removes dependence on a spatial hypothesis grid and joint multi-target posterior enumeration, which is what slowed down earlier Bayesian approaches. So this is a clean break from the traditional tracking pipeline, and it works on real outdoor deployments.
Jane: And one more number to hammer home: on that interference-rich site, the best posterior baseline got 77 percent accuracy while the frequency-band two-tower hit 98 point 4 percent. That's a twenty-point jump, and it's all from teaching the network to look at the spectral shape rather than just the total received power.
Lu: I'd add that this opens the door to treating sensor management as a learned ranking problem more broadly — you could swap the acoustic context for any low-cost modality and the same two-tower structure would apply to radar features, vibration signatures, even RF emissions.
Meng: Good point, Lu. And since they've open-sourced the deployments' setup, the sensor selection community can compare directly against these baselines. That's the kind of reproducibility that makes a systems paper actually useful.
Lalam: For culture at large, think about smart cities running hundreds of cameras and microphones — if we can decide in under a millisecond which sensors to wake up, we save power, bandwidth, and privacy exposure. This paper is a small but real step toward selective sensing that respects both latency and energy budgets.
Tom: And that's the beauty of "A Recommendation System Approach for Interference-Robust Sensor Subset Selection" — it takes a familiar idea from one field and drops it into a completely different problem, with hard numbers to back it up.
Jane: Absolutely, Tom. We'll be watching for the follow-up with more nodes and bigger budgets.