-
Preprint
May 2026
CausalGuard: Conformal Inference under Graph Uncertainty
Vikash Singh, Weicong Chen, Debargha Ganguly, Yanyan Zhang, Nengbo Wang, Sreehari Sankar, Mohsen Hariri, Alexander Nemecek, Chaoda Song, Shouren Wang, Biyao Zhang, Van Yang, Erman Ayday, Jing Ma, Vipin Chaudhary
Treatment effect estimation from observational data is fundamentally challenged when the underlying causal graph is unknown. We introduce CausalGuard, a framework that aggregates graph-conditional doubly robust estimates and applies a conformal calibration procedure to deliver distribution-free, finite-sample marginal coverage. The method generates candidate DAGs using LLM-derived priors, filters them via conditional-independence tests, and reweights using a Bayesian Information Criterion. Across multiple benchmarks, CausalGuard attains coverage above the nominal 90% level while producing tighter intervals than graph-agnostic alternatives, offering a principled route to reliable causal inference under structural uncertainty.
@misc{singh2026causalguardconformalinferencegraph,
title={CausalGuard: Conformal Inference under Graph Uncertainty},
author={Vikash Singh and Weicong Chen and Debargha Ganguly and Yanyan Zhang and Nengbo Wang and Sreehari Sankar and Mohsen Hariri and Alexander Nemecek and Chaoda Song and Shouren Wang and Biyao Zhang and Van Yang and Erman Ayday and Jing Ma and Vipin Chaudhary},
year={2026},
eprint={2605.21928},
archivePrefix={arXiv},
primaryClass={cs.LG},
url={https://arxiv.org/abs/2605.21928}
}
-
Preprint
May 2026
Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation
Osama Zafar, Alexander Nemecek, Yiqian Zhang, Wenbiao Li, Debargha Ganguly, Vikash Singh, Vipin Chaudhary, Erman Ayday
Retrieval-Augmented Generation (RAG) over sensitive corpora suffers from contextual data leakage that ordinary PII filters miss: combinations of attributes that, taken together, are re-identifying even when no single field is. We propose a Privacy Policy Enforcement (PPE) framework built on dual one-class density estimators trained on synthetic data spanning medicine, finance, and law. Our T3+OCSVM detector achieves strong leakage-detection performance with low latency and substantially fewer false positives than supervised baselines, enabling policy-aware guardrails for production RAG systems.
@misc{zafar2026privacypolicyenforcementguardrails,
title={Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation},
author={Osama Zafar and Alexander Nemecek and Yiqian Zhang and Wenbiao Li and Debargha Ganguly and Vikash Singh and Vipin Chaudhary and Erman Ayday},
year={2026},
eprint={2605.17034},
archivePrefix={arXiv},
primaryClass={cs.LG},
url={https://arxiv.org/abs/2605.17034}
}
-
Preprint
May 2026
Reliability-Gated Source Anchoring for Continual Test-Time Adaptation
Vikash Singh, Debargha Ganguly, Weicong Chen, Sabyasachi Sahoo, Sreehari Sankar, Biyao Zhang, Mohsen Hariri, Shouren Wang, Osama Zafar, Christian Gagné, Vipin Chaudhary
Continual test-time adaptation (CTTA) methods commonly rely on a frozen source checkpoint as an anchor. We identify a failure mode we call "blind anchoring": when the source model itself becomes unreliable on a drifting target stream, anchoring to it actively harms adaptation. We propose RMemSafe, which uses normalized predictive entropy as a reliability gate over source-dependent components and gracefully reduces reliance on the source as its reliability degrades. RMemSafe exhibits a 1.13x shallower harm slope than ROID+ASR under source degradation while preserving competitive accuracy on standard CTTA benchmarks.
@misc{singh2026reliabilitygatedsourceanchoringcontinual,
title={Reliability-Gated Source Anchoring for Continual Test-Time Adaptation},
author={Vikash Singh and Debargha Ganguly and Weicong Chen and Sabyasachi Sahoo and Sreehari Sankar and Biyao Zhang and Mohsen Hariri and Shouren Wang and Osama Zafar and Christian Gagné and Vipin Chaudhary},
year={2026},
eprint={2605.14063},
archivePrefix={arXiv},
primaryClass={cs.LG},
url={https://arxiv.org/abs/2605.14063}
}
-
Preprint
May 2026
Overcoming Dynamics-Blindness: Training-Free Pace-and-Path Correction for VLA Models
Yanyan Zhang, Chaoda Song, Vikash Singh, Xinpeng Li, Kai Ye, Zhe Hu, Zhongzhu Pu, Yu Yin, Vipin Chaudhary
Vision-Language-Action (VLA) models trained on single-frame observations are fundamentally "dynamics-blind": they cannot perceive temporal dynamics of the scene, leading to catastrophic failures when objects move during execution. We propose a training-free, inference-time correction that decomposes the corrective signal into two orthogonal components: a pace term that modulates execution speed along the planned trajectory and a path term that provides spatial adjustments orthogonal to the path. On our MoveBench diagnostic, the method delivers up to 28.8% improvement in dynamic-only scenarios and 25.9% in mixed settings over strong VLA baselines, with zero additional training.
@misc{zhang2026overcomingdynamicsblindnesstrainingfreepaceandpath,
title={Overcoming Dynamics-Blindness: Training-Free Pace-and-Path Correction for VLA Models},
author={Yanyan Zhang and Chaoda Song and Vikash Singh and Xinpeng Li and Kai Ye and Zhe Hu and Zhongzhu Pu and Yu Yin and Vipin Chaudhary},
year={2026},
eprint={2605.11459},
archivePrefix={arXiv},
primaryClass={cs.RO},
url={https://arxiv.org/abs/2605.11459}
}
-
SSRN Preprint
May 2026
A Survey on Agent Skills for LLMs: A Lifecycle Perspective from Construction to Ecosystems
Wang Yang, Chaoda Song, Xinpeng Li, Shouren Wang, Nengbo Wang, Yanyan Zhang, Chuang Ma, Debargha Ganguly, Vikash Singh, Shuai Xu, Jing Ma, Yu Yin, Vipin Chaudhary, Xiaotian Han
This survey takes a lifecycle perspective on agent skills for Large Language Models, organizing the rapidly fragmenting literature around how skills are constructed, acquired, distilled, evaluated, composed, and ultimately deployed within broader agent ecosystems. We synthesize advances in skill specification (e.g., SKILL.md-style schemas, MCP), acquisition (from demonstration, self-play, and curriculum), evaluation in realistic settings, and the emerging security threat model around shareable skills. The survey aims to give practitioners and researchers a unified map from per-skill design choices to system-level concerns of governance, reuse, and safety.
@article{yang2026agentskills,
author = {Yang, Wang and Song, Chaoda and Li, Xinpeng and Wang, Shouren and Wang, Nengbo and Zhang, Yanyan and Ma, Chuang and Ganguly, Debargha and Singh, Vikash and Xu, Shuai and Ma, Jing and Yin, Yu and Chaudhary, Vipin and Han, Xiaotian},
title = {A Survey on Agent Skills for LLMs: A Lifecycle Perspective from Construction to Ecosystems},
year = {2026},
month = {May},
journal = {SSRN},
url = {https://ssrn.com/abstract=6746498},
doi = {10.2139/ssrn.6746498}
}
-
Preprint
April 2026
Path-Lock Expert: Separating Reasoning Mode in Hybrid Thinking via Architecture-Level Separation
Shouren Wang, Wang Yang, Chuang Ma, Debargha Ganguly, Vikash Singh, Chaoda Song, Xinpeng Li, Xianxuan Long, Vipin Chaudhary, Xiaotian Han
Hybrid-thinking language models use a single set of parameters to serve both an explicit "think" mode and a fast "no-think" mode, which causes reasoning behaviour to leak into responses that are meant to be direct. We propose Path-Lock Expert (PLE), an architectural fix that splits the feed-forward networks into per-mode experts while leaving the rest of the model shared. PLE preserves strong performance on the thinking path and yields a markedly stronger no-think path: more accurate, more concise, and far less prone to spurious reflection. On Qwen3-4B, PLE substantially reduces reflective tokens while improving accuracy across math and science benchmarks.
@misc{wang2026pathlockexpertseparatingreasoning,
title={Path-Lock Expert: Separating Reasoning Mode in Hybrid Thinking via Architecture-Level Separation},
author={Shouren Wang and Wang Yang and Chuang Ma and Debargha Ganguly and Vikash Singh and Chaoda Song and Xinpeng Li and Xianxuan Long and Vipin Chaudhary and Xiaotian Han},
year={2026},
eprint={2604.27201},
archivePrefix={arXiv},
primaryClass={cs.CL},
url={https://arxiv.org/abs/2604.27201}
}
-
Under Review at MICCAI 2026
Toward Guarantees for Clinical Reasoning in Vision Language Models via Formal Verification
Vikash Singh, Debargha Ganguly, Haotian Yu, Chengwei Zhou, Prerna Singh, Brandon Lee, Vipin Chaudhary, Gourav Datta
Vision-language models (VLMs) show promise in drafting radiology reports, yet they frequently suffer from logical inconsistencies, generating diagnostic impressions unsupported by their own perceptual findings or missing logically entailed conclusions. Standard lexical metrics heavily penalize clinical paraphrasing and fail to capture these deductive failures in reference-free settings. Toward guarantees for clinical reasoning, we introduce a neurosymbolic verification framework that deterministically audits the internal consistency of VLM-generated reports. Our pipeline autoformalizes free-text radiographic findings into structured propositional evidence, utilizing an SMT solver (Z3) and a clinical knowledge base to verify whether each diagnostic claim is mathematically entailed, hallucinated, or omitted. Evaluating seven VLMs across five chest X-ray benchmarks, our verifier exposes distinct reasoning failure modes, such as conservative observation and stochastic hallucination, that remain invisible to traditional metrics. On labeled datasets, enforcing solver-backed entailment acts as a rigorous post-hoc guarantee, systematically eliminating unsupported hallucinations to significantly increase diagnostic soundness and precision in generative clinical assistants.
@misc{singh2026clinical,
title={Toward Guarantees for Clinical Reasoning in Vision Language Models via Formal Verification},
author={Vikash Singh and Debargha Ganguly and Haotian Yu and Chengwei Zhou and Prerna Singh and Brandon Lee and Vipin Chaudhary and Gourav Datta},
year={2026},
eprint={2602.24111},
archivePrefix={arXiv},
primaryClass={cs.CV},
url={https://arxiv.org/abs/2602.24111}
}
-
ICML 2026
HugRAG: Hierarchical Causal Knowledge Graph Design for RAG
Nengbo Wang, Tuo Liang, Vikash Singh, Chaoda Song, Van Yang, Yu Yin, Jing Ma, Jagdip Singh, Vipin Chaudhary
Retrieval augmented generation (RAG) has enhanced large language models by enabling access to external knowledge, with graph-based RAG emerging as a powerful paradigm for structured retrieval and reasoning. However, existing graph-based methods often over-rely on surface-level node matching and lack explicit causal modeling, leading to unfaithful or spurious answers. Prior attempts to incorporate causality are typically limited to local or single-document contexts and also suffer from information isolation that arises from modular graph structures, which hinders scalability and cross-module causal reasoning. To address these challenges, we propose HugRAG, a framework that rethinks knowledge organization for graph-based RAG through causal gating across hierarchical modules. HugRAG explicitly models causal relationships to suppress spurious correlations while enabling scalable reasoning over large-scale knowledge graphs. Extensive experiments demonstrate that HugRAG consistently outperforms competitive graph-based RAG baselines across multiple datasets and evaluation metrics. Our work establishes a principled foundation for structured, scalable, and causally grounded RAG systems.
@misc{wang2026hugrag,
title={HugRAG: Hierarchical Causal Knowledge Graph Design for RAG},
author={Nengbo Wang and Tuo Liang and Vikash Singh and Chaoda Song and Van Yang and Yu Yin and Jing Ma and Jagdip Singh and Vipin Chaudhary},
year={2026},
eprint={2602.05143},
archivePrefix={arXiv},
primaryClass={cs.AI},
url={https://arxiv.org/abs/2602.05143}
}
-
ICLR 2026
Trust The Typical
Debargha Ganguly, Sreehari Sankar, Biyao Zhang, Vikash Singh, Kanan Gupta, Harshini Kavuru, A. Luo, Weicong Chen, Warren Morningstar, R. Machiraju, Vipin Chaudhary
Current approaches to LLM safety fundamentally rely on a brittle cat-and-mouse game of identifying and blocking known threats via guardrails. We argue for a fresh approach: robust safety comes not from enumerating what is harmful, but from deeply understanding what is safe. We introduce Trust The Typical (T3), a framework that operationalizes this principle by treating safety as an out-of-distribution (OOD) detection problem. T3 learns the distribution of acceptable prompts in a semantic space and flags any significant deviation as a potential threat. Unlike prior methods, it requires no training on harmful examples, yet achieves state-of-the-art performance across 18 benchmarks spanning toxicity, hate speech, jailbreaking, multilingual harms, and over-refusal, reducing false positive rates by up to 40x relative to specialized safety models. A single model trained only on safe English text transfers effectively to diverse domains and over 14 languages without retraining. Finally, we demonstrate production readiness by integrating a GPU-optimized version into vLLM, enabling continuous guardrailing during token generation with less than 6% overhead even under dense evaluation intervals on large-scale workloads.
@misc{ganguly2026t3,
title={Trust The Typical},
author={Debargha Ganguly and Sreehari Sankar and Biyao Zhang and Vikash Singh and Kanan Gupta and Harshini Kavuru and A. Luo and Weicong Chen and Warren Morningstar and R. Machiraju and Vipin Chaudhary},
year={2026},
eprint={2602.04581},
archivePrefix={arXiv},
primaryClass={cs.CL},
url={https://arxiv.org/abs/2602.04581}
}
-
ACL 2026
VERGE: Formal Refinement and Guidance Engine for Verifiable LLM Reasoning
Vikash Singh, Darion Cassel, Nathaniel Weir, Nick Feng, Sam Bayless
Despite the syntactic fluency of Large Language Models (LLMs), ensuring their logical correctness in high-stakes domains remains a fundamental challenge. We present a neurosymbolic framework that combines LLMs with SMT solvers to produce verification-guided answers through iterative refinement. Our approach decomposes LLM outputs into atomic claims, autoformalizes them into first-order logic, and verifies their logical consistency using automated theorem proving. We introduce three key innovations: (1) multi-model consensus via formal semantic equivalence checking to ensure logic-level alignment between candidates, eliminating the syntactic bias of surface-form metrics, (2) semantic routing that directs different claim types to appropriate verification strategies: symbolic solvers for logical claims and LLM ensembles for commonsense reasoning, and (3) precise logical error localization via Minimal Correction Subsets (MCS), which pinpoint the exact subset of claims to revise, transforming binary failure signals into actionable feedback. Our framework classifies claims by their logical status and aggregates multiple verification signals into a unified score with variance-based penalty. The system iteratively refines answers using structured feedback until acceptance criteria are met or convergence is achieved. This hybrid approach delivers formal guarantees where possible and consensus verification elsewhere, advancing trustworthy AI. With the GPT-OSS-120B model, VERGE demonstrates an average performance uplift of 18.7% at convergence across a set of reasoning benchmarks compared to single-pass approaches.
@misc{singh2026verge,
title={VERGE: Formal Refinement and Guidance Engine for Verifiable LLM Reasoning},
author={Vikash Singh and Darion Cassel and Nathaniel Weir and Nick Feng and Sam Bayless},
year={2026},
eprint={2601.20055},
archivePrefix={arXiv},
primaryClass={cs.CL},
url={https://arxiv.org/abs/2601.20055}
}
-
Findings of ACL 2026
Mid-Think: Training-Free Intermediate-Budget Reasoning via Token-Level Triggers
Wang Yang, Debargha Ganguly, Xinpeng Li, Chaoda Song, Shouren Wang, Vikash Singh, Vipin Chaudhary, Xiaotian Han
Hybrid reasoning language models are commonly controlled through high-level Think/No-think instructions to regulate reasoning behavior, yet we found that such mode switching is largely driven by a small set of trigger tokens rather than the instructions themselves. Through attention analysis and controlled prompting experiments, we show that a leading ``Okay''token induces reasoning behavior, while the newline pattern following ``''suppresses it. Based on this observation, we propose Mid-Think, a simple training-free prompting format that combines these triggers to achieve intermediate-budget reasoning, consistently outperforming fixed-token and prompt-based baselines in terms of the accuracy-length trade-off. Furthermore, applying Mid-Think to RL training after SFT reduces training time by approximately 15% while improving final performance of Qwen3-8B on AIME from 69.8% to 72.4% and on GPQA from 58.5% to 61.1%, demonstrating its effectiveness for both inference-time control and RL-based reasoning training.
@misc{wang2026midthink,
title={Mid-Think: Training-Free Intermediate-Budget Reasoning via Token-Level Triggers},
author={Wang Yang and Debargha Ganguly and Xinpeng Li and Chaoda Song and Shouren Wang and Vikash Singh and Vipin Chaudhary and Xiaotian Han},
year={2026},
eprint={2601.07036},
archivePrefix={arXiv},
url={https://arxiv.org/abs/2601.07036}
}