I work on world models, representation learning, graph learning and AI safety.

My research asks what structural assumptions learning systems quietly hard-code, and what becomes possible when those assumptions are made explicit, tested, or removed. I work end to end: the question, the mechanism, experiments, falsification, the manuscript.

Alongside research I founded Varaigen, where I design and operate production AI systems.

publications & manuscriptsthree

public preprint · arxiv:2605.25662 · revised oct 20262026 Can useful graph learning be performed without gradient training? Closed-form graph predictors above or within one point of tuned GNNs on all sixteen benchmarks — and unlearnable exactly: after a deletion, the update matches retraining from scratch, model selection included, bit for bit across 400 sequential deletions. public preprint2026 Is the observed graph the right circuit for inference, or only the evidence about it? Graph models use the observed graph twice — as the evidence and as the circuit inference runs along. On identical evidence, recompiling the circuit lifts a budget-matched GCN by 4.28 AUC points; scrambling its alignment drops it to near chance. With a one-board interactive explainer. manuscriptai safety Which apparent emergent-misalignment effects survive a change of evaluator? A preregistered audit of the measurement itself: two model families, seed-matched organism and control pairs, held-out prompts, automated judges and blinded human raters — agreement on 86 of 90 rows. Some effects survive; others are properties of a narrow task.

world modelsone

ongoing, privateworld models When is representation collapse actually harmful? A world-model representation should preserve distinctions by their future consequences, not by generic numerical diversity. Under visual distribution shift it recovers task-relevant latent state at R² 0.96, against 0.21 for a matched baseline.

research infrastructureone

private infrastructureprocess What does research infrastructure look like when it refuses retrospective storytelling? Vyasa keeps hypotheses, preregistrations, evidence ledgers, negative results and research state continuous across sessions, so a programme cannot quietly become a story told afterwards.

record

apr 2025 — nowml lab, iiit hyderabad Undergraduate researcher Lead a small student research team across world models, representation learning, graph learning and AI safety — from hypothesis and theoretical framing through preregistered experiments, falsification and manuscript preparation.
nowvaraigen ↗ Founder Founded Varaigen to design and operate production AI systems: product evaluation, applied research, AI infrastructure and end-to-end system development.
nov 2022 — jul 2024varaisys pvt. ltd. Machine learning researcher IC-ATA mapping and validation workflows, dataset-ingestion systems, configuration-driven training for span and text categorization, model versioning and deployment, evaluation dashboards.
apr 2021 — may 2022mityung Software developer Medzinc, an automated medical-record dashboarding product: ETL ingestion and normalization, role-based access control, backend views, audit logging and REST APIs.

engineering

Varaigen CTEM A commercial-grade continuous threat exposure management platform, built around our patented graph-based approach and sold commercially. Company-owned, so details stay off the page. ctem · graph-based · patented · commercial BUYSELLRENT A campus-gated marketplace: auth, role-based access, listings, search, cart and orders, real-time chat, OTP delivery confirmation. react · node · mongodb · websocket Asset Management System The institutional asset lifecycle for IIIT Hyderabad — procurement to scrapping — with role-based views, audit trails and utilization reports. php · mysql C-Shell A POSIX shell: pipes, redirection, job control, 20+ commands, /proc and TCP built-ins, signal-safe logging and command replay. c · posix · signals Network File System Naming, storage and client processes with path caching, asynchronous writes and networked command handling. c · tcp sockets · lru cache

elsewhere

B.Tech. Honours in Computer Science and Engineering at IIIT Hyderabad, 2023 to 2027, in the Machine Learning Lab. Before research: JEE Main 2022, All India Rank 1790, and nationally ranked junior tennis — AITA U-14 #66. There is a court in the other version of this site.

Working with PyTorch, PyTorch Geometric, DGL, scikit-learn, Hugging Face, Weights & Biases and Hydra. Python, C, C++, Rust, SQL. Linux, Docker, FastAPI, PostgreSQL. Preregistration, ablation design, falsification, reproducibility, human evaluation.

contact

tell me what you are working on.

I am interested in research internships, collaborations and research-engineering roles in world models, representation learning, structured inference and AI safety.

aditya.gaur@students.iiit.ac.in

phone number, home address and private repository links are deliberately not published

Home / Research

Research

Public artifacts are separated from ongoing work on purpose. Nothing here is labelled as accepted until it is.

Publications and public artifacts
Can useful graph learning be performed without gradient training?
Preprint

Deterministic closed-form graph predictors above or within one point of tuned GNNs on all sixteen benchmarks, with exact, retrain-equivalent deletion — model selection included. 280 deletion checks; 400 sequential reselections reproduced bit for bit.

Graph learning Exact unlearning arXiv:2605.25662 Read
Is the observed graph the right circuit for inference, or only the evidence about it?
Preprint

Most graph models use the observed graph twice: as evidence about the problem, and as the circuit inference runs along. The paper separates the two, shows when more reach cannot replace the right interaction, and builds a system that adds inference only when it earns acceptance.

Structured inference Graph learning Interactive explainer Read
Interests

Five areas

  • World models and self-supervised representation learning
  • Graph learning and structured inference
  • Exact machine unlearning and auditable learning systems
  • AI safety, model behavior, and evaluation validity
  • Autonomous research infrastructure and empirical methodology
Method

How I approach research

I prefer research questions where the field may be optimizing the wrong object. My work emphasizes explicit hypotheses, preregistered tests, negative evidence, reproducible artifacts, and clearly stated failure boundaries.
Longer account
Home / Publications

Publications

Two public preprints, and two manuscripts that are labelled as ongoing because that is what they are.

Public

Public preprints

Closed-Form Node Classification with Exact Graph Unlearning
Aditya Gaur, Charu Sharma
arXiv preprint2026arXiv:2605.25662revised oct 2026
PDF arXiv Project page Code — on release
Graphs Are Evidence, Not Circuits
Aditya Gaur, Charu Sharma
Preprint2026
Home / Projects

Engineering projects

Systems and product work, kept separate from the research.

Featured
varaigen · commercial ctem platform
Commercial CTEM Platform At Varaigen we built and sold a full commercial-grade Continuous Threat Exposure Management platform, designed around our patented graph-based approach to exposure modeling. The platform is company-owned commercial work, so the specifics — architecture, methods, customers — stay off this page.
CTEMGraph-basedPatented approachShipped & sold
buysellrent · campus marketplace
BUYSELLRENT Built a campus-gated marketplace with authentication, role-based access control, image-based listings, categories, search, filters, cart and order flows, and secure uploads. Added real-time chat, live updates, OTP-based delivery confirmation, rate limiting, and an AI-assisted interaction layer.
ReactNode.jsMongoDBJWTWebSocket
Marketplace · listing · chat · order
asset management system · iiit hyderabad
Asset Management System Designed the database schema and the complete institutional asset lifecycle, covering procurement, assignment, maintenance, utilization and scrapping. Implemented role-based views, audit trails, custom scrapping workflows, and utilization reports for administrators.
PHPMySQLBootstrapSessions
Dashboard · lifecycle · roles · reports
More projects
C-Shell A POSIX-compatible shell supporting pipes, redirection, job control, foreground and background execution, and more than 20 commands. Added custom commands using /proc and TCP, along with signal-safe logging and command replay.
CPOSIXSignalsNetworkingLinux
Network File System Separate naming, storage and client processes supporting read, write, create, delete, list and stream operations. Implemented path caching, asynchronous writes, networked command handling, and command-line tooling.
CTCP socketsLRU cache
Home / Experience

Experience

Download CV
Apr 2025 —
Machine Learning Lab, IIIT Hyderabad
Honours student / Undergraduate researcher
Lead a small student research team across world models, representation learning, graph learning, and AI safety. Drive projects from hypothesis formation and theoretical framing through implementation, preregistered experiments, falsification, reproducibility, and manuscript preparation.
Build research infrastructure using PyTorch, PyTorch Geometric, DGL, Weights & Biases, Hydra, and custom experiment orchestration systems.
Present
Varaigen
Founder
Founded Varaigen to design and operate production AI systems. Work spans product evaluation, applied research, AI infrastructure, and end-to-end system development.
Engineering intelligence, end to end. varaigen.com
Nov 2022 — Jul 2024
VARAISYS Pvt. Ltd.
Machine learning researcher
Built IC-ATA mapping and validation workflows, dataset-ingestion systems, and configuration-driven training pipelines for span and text categorization.
Developed model versioning, online and offline deployment, auto-annotation, suggestion systems, evaluation dashboards, and precision, recall and F1 reporting using Python, spaCy, scikit-learn and REST APIs.
Apr 2021 — May 2022
MITYUNG
Software developer
Worked on Medzinc, an automated medical-record dashboarding product. Built ETL ingestion and normalization, role-based access control, backend views, audit logging, tests and REST APIs using Flask and SQL.
Collaborated with clinicians and product stakeholders to translate operational workflows into software requirements.
Skills
Research World models, representation learning, graph learning, machine unlearning, model-behavior evaluation, experimental design, preregistration, ablation design, reproducibility, human evaluation
Machine learning PyTorch, PyTorch Geometric, DGL, scikit-learn, Hugging Face, pandas, NumPy, Weights & Biases, Hydra
Languages Python, C, C++, Rust, SQL, Bash
Systems and engineering Linux, Git, Docker, FastAPI, Flask, PostgreSQL, MySQL, REST APIs, WebSockets
Education
International Institute of Information Technology, Hyderabad B.Tech. Honours in Computer Science and Engineering Jul 2023 — May 2027 · Machine Learning Lab
Outside research
  • JEE Main 2022 — All India Rank 1790
  • Former nationally ranked junior tennis player — AITA U-14 rank 66
Home / About

About

I am an undergraduate researcher at the Machine Learning Lab at IIIT Hyderabad, where I study world models, representation learning, graph learning, machine unlearning, and AI safety.

My research is centered on a recurring question: what assumptions are our learning systems treating as fixed, even when they should themselves be objects of inference or design?

In graph learning, this led me to investigate how much node-classification performance can be recovered using deterministic closed-form solvers, and what exact guarantees become possible when prediction is an explicit system rather than the result of iterative gradient training. The resulting preprint develops closed-form predictors with exact retrain-equivalent unlearning for graph-object modifications.

In a separate line of work, I study the distinction between a graph as evidence and a graph as an inference circuit. Most graph models assume that the observed graph should also determine the path along which computation flows. My work asks when that assumption is valid and what becomes possible when the two roles are separated; the resulting preprint separates them and tests the consequences.

My current world-model research studies representation collapse from the perspective of future consequences. Instead of requiring representations to remain generically diverse, I investigate whether they can compress aggressively while preserving precisely the distinctions needed for prediction, action, and control.

I also work on AI-safety evaluation, particularly the measurement of emergent misalignment and the degree to which reported effects survive changes in model family, intervention, behavioral construction, evaluator, and human framing.

Across these projects, I emphasize preregistration, reproducibility, negative results, and experiments designed to falsify the central claim. I have also built private research infrastructure for maintaining long-running autonomous research programs across hypotheses, experiments, evidence, and manuscript development.

Alongside academic research, I founded Varaigen, where I work on production AI systems and applied research.

Aditya Gaur
IIIT Hyderabad · Machine Learning Lab Hyderabad, India
Now

What I am working on now

Collapse-contained world models Testing whether future-consequence equivalence can replace generic anti-collapse objectives in JEPA-style learning.
Inference structure in graph learning Studying when the computational circuit should be separated from the observed evidence graph.
Human-grounded AI evaluation Auditing which model-behavior effects survive evaluator changes and blinded human judgment.
Autonomous research infrastructure Developing tools for persistent, falsification-oriented research campaigns.
For organisers and applications

Third-person bio

copy and paste

Aditya Gaur is an undergraduate researcher at the Machine Learning Lab at IIIT Hyderabad and the founder of Varaigen. His work spans world models, representation learning, graph learning, exact machine unlearning, AI-safety evaluation, and autonomous research infrastructure. He is the first author of “Closed-Form Node Classification with Exact Graph Unlearning,” which develops deterministic graph predictors with exact retrain-equivalent unlearning. His current research studies decision-grounded representation collapse, the separation of graphs as evidence from graphs as inference circuits, and human-grounded evaluation of emergent misalignment.

Research / Exact graph unlearning
Public preprint, 2026 arXiv:2605.25662 revised oct 2026

Closed-Form Node Classification with Exact Graph Unlearning

Graph predictors fitted by regularized linear solves rather than gradient training — above or within one point of the strongest reproduced tuned GNN on all sixteen benchmarks, and unlearnable exactly, model selection included.

Read the paper arXiv Code — on release

the pdf here is the october 2026 revision. arxiv still shows the may 2026 version until its update posts.

16 / 16Benchmarks above or within one point of the strongest reproduced tuned GNN — 14 with the generic protocol alone
280Deletion checks across label, feature, edge, node and subgraph edits
400Sequential label deletions with full model reselection reproduced bit for bit
4.64×Lower end-to-end cost than fresh selection over a fully measured 100-deletion Minesweeper sequence
The question

How far can explicit closed-form solvers recover the predictive strength of carefully tuned GNNs — and what do they make possible when learned information has to be removed?

Why closed form

Graph neural networks learn node classification through hundreds or thousands of gradient steps. That is convenient, but it makes deletion hard: once a label, feature, edge, node or subgraph has shaped the optimizer's trajectory, removing its effect means retraining from scratch or accepting an approximation.

A predictor that is the explicit solution of a regularized linear system does not have that problem. The open question was whether such a predictor can still compete with tuned GNNs.

The approach

Build informative graph representations, then fit their labels through regularized linear systems. Multiscale diffusion supplies neighbourhood features, nonlinear graph kernels supply richer interactions, and optional training-label context supplies transductive information. One validation-selected procedure chooses among them, with landmark representations at OGB scale.

The organizing principle is to separate the information a representation supplies from the optimization used to fit its readout — so prediction, model selection and deletion all share the same explicit systems.

FigurePrediction in two information stages
Pipeline: graph and features feed three label-free representation families — diffusion, a GCN kernel and a SAGE kernel — whose readout is fitted by ridge or kernel ridge regression and selected on validation. An optional lower path adds training-label context and refits; validation chooses between the base and the refinement.
Diffusion or kernel representations feed an analytical solve chosen on validation. The optional lower path adds training-label context and refits; validation then chooses between the base and the refinement.
Prediction

The generic protocol exceeds the strongest reproduced tuned GNN on seven datasets and comes within one point on seven more, including both OGB graphs. Two task-aware closed forms, reported as a separate track, cover the other two: Analytic Constraint Reconstruction turns Minesweeper's clues into equations over neighbouring mine counts and reaches 99.95 ROC–AUC from an 11 ms CPU fit; Typed LCF-Net separates token order from other relations and reaches 91.60 accuracy on Roman-empire.

Across ten paired splits on each of seven established datasets, the procedure is non-inferior at a one-point margin on all seven, and superior on CiteSeer and PubMed. Frozen before its evaluation on seven further graphs, it establishes non-inferiority on four. Actor is a clear gap of 3.21 points and Deezer is inconclusive; every graph is reported.

Exact graph unlearning

The target is the retained-data fit: the predictor obtained by fitting after the edit, including model reselection when the procedure requires it. A label-free representation is reused and its readout downdated; label-dependent stages are rebuilt.

The paper verifies 280 deletion cases — 158 label deletions and 122 structural edits of edges, nodes, features and subgraphs. Replaying the whole generic selection after every request, the recomputing unlearner matches fresh fitting bit for bit across 400 sequential label deletions, including 52 changes of the selected model.

FigureDelete a label, then follow its dependencies
A deleted training label, with its node kept, splits into two paths: an unchanged representation reuses its cached factors with a Schur update of the readout, while label-derived context is refreshed and the readout refit. Both arrive at the same retained-data fit as a fresh fit, with selection replayed when the retraining target requires it.
The node remains. An unchanged representation admits a cached Schur update; label-dependent context is rebuilt. Both paths target the retained-data fit, with selection replayed when the retraining target requires it.
Maintenance, with setup charged

A fast spectral path shares one factorization per kernel across regularization values and requests. It is validated numerically against the bit-identical recomputing path rather than replacing it, retains every selection, and serves full-reselection requests in a median 2.1–5.3 s.

On Minesweeper, where the whole sequence was measured — initial fitting, caches and 100 deletion requests — the update path costs 4.64× less than fresh closed-form selection and 2.39× less than fixed-recipe GNN retraining. For fixed configurations, cached updates are a median 93× faster than a tuned GNN's training step.

What exact means here

Exactness is retrain equivalence for the specified edits: the updated predictor is the one obtained by fitting the retained data from scratch, selection included. It is a deletion guarantee — not a differential-privacy guarantee, and not resistance to structural inference — and the paper keeps those apart.

Reproducibility

The predictors are deterministic solutions, so there is no optimizer schedule or seed to match. The canonical recomputing path is the bit-identical reference; the fast path is checked against it numerically. The public code repository will be linked here on release.

Citation
Closed-Form Node Classification with Exact Graph Unlearning
Aditya Gaur, Charu Sharma
arXiv preprint2026arXiv:2605.25662
PDF arXiv
What comes next

The public code repository is the immediate next step, so that the exactness claims can be re-run rather than taken on trust.

Research / Decision-grounded world models
Ongoing private research Manuscript and additional results available privately

Decision-Grounded Representations for Predictive World Models

A world-model representation should preserve distinctions according to their future consequences, not merely maintain generic numerical diversity.

R² 0.96Task-relevant latent state recovered, controlled visual-OOD setting
R² 0.21Matched baseline, same setting
Observation A · Observation B Different pixels, same future response. Safe to merge
Observation C · Observation D Similar pixels, different future response. Must remain separate
The question

Can a representation compress aggressively while preserving exactly the distinctions needed for future prediction and control?

Why the existing formulation may be insufficient

Most anti-collapse methods define collapse geometrically through variance, covariance, rank, or teacher-target constraints. Those objectives measure the shape of the latent space, not what the latent space is for.

A representation can be numerically diverse and still erase the only distinction that matters for future behavior. It can also be highly compressed while preserving everything required for prediction and control.

Core hypothesis

Anti-collapse objectives should preserve response-relevant equivalence classes rather than arbitrary latent diversity. Collapse is only harmful when it merges observations whose futures differ.

Method

The mechanism is not public yet. What can be said publicly is the criterion it optimizes: distinctions are retained or discarded according to their effect on future prediction and control, rather than according to a geometric diversity term.

Manuscript and mechanism available privately on request.

Experimental design

The hypothesis is tested across controlled latent environments, visual distribution shift, raw pixels, dependent observations, and decision-native offline reinforcement-learning tasks. Controlled settings come first because they make the claim falsifiable before it is scaled.

Main result

In a controlled visual-OOD setting, the decision-grounded representation recovered task-relevant latent state at approximately R² 0.96, compared with approximately 0.21 for a matched baseline. The project has since transferred to raw pixels.

Failure boundaries

Current work focuses on raw-pixel transfer, correlated evidence, richer environments, and identifying the boundary at which the mechanism fails. A result that only holds in the setting it was designed for is not yet a result.

Status and disclosure

Ongoing private research. One headline result is published here; the mechanism, the full experimental ledger and the manuscript are shared privately rather than posted.

Research / Evidence, not circuits
Public preprint, 2026

Graphs Are Evidence, Not Circuits

Graph learning has mistaken its evidence for its machinery. The evidence says what is observed; the query says what must be inferred; the circuit specifies how observations are combined. Message passing usually inherits its circuit from the graph — this paper makes that choice explicit, and tests it.

+4.28AUC points from recompiling the circuit — same GCN update family, matched depth and parameters, identical evidence
.5075AUC after an isomorphic scramble: the whole circuit topology kept, its alignment with the evidence broken
9.6AUC points a linear readout stays below Bayes on one of two matched queries — after every observation is in reach
52%Of a strong GNN/ensemble baseline's remaining ranking error removed by TSGL on Minesweeper, without label inputs
The gist — one board, two questions

The paper opens with two Minesweeper clues. Step through the deduction, then ask about a different cell: the evidence never changes, but the computation the question needs does.

The question

Is the observed graph the right circuit for inference, or only the evidence about it?

Evidence, query, circuit

Message-passing GNNs use their input graph twice: once as the carrier of evidence, and once as the circuit that assembles an answer. Those are different objects. Observed edges describe relationships in the data; computational dependencies specify how to combine observations for a particular question.

The paper treats evidence, query and inference circuit as separately variable parts of a graph-learning problem. Reusing the observed graph as the circuit is still a legitimate choice — but it is an inductive bias, not a requirement, and it can be tested.

Keep the question; change the circuit

On Minesweeper, each revealed clue is compiled into a factor connected to the cells it constrains, and the same residual GCN update family runs over that circuit instead of the grid. With eight layers and parameters matched within 0.7%, AUC rises from .9021 to .9449, positive in all 25 split–seed pairs.

The control keeps everything but the alignment: variables are permuted within equal-degree classes, so the whole typed topology survives up to isomorphism while the circuit no longer matches the evidence. Performance falls to .5075 — near chance. Correct observations can even amplify a wrong circuit: under random membership, clamping correct training anchors costs 19.2 AUC points.

FigureAlignment, not graph shape alone, carries the gain
Left: the same GCN update family run over the observed adjacency or over compiled clue membership. Right: Minesweeper AUC at matched budget — evidence adjacency .9021, aligned circuit .9449, isomorphic scramble .5075, degree swaps .5058, and a sixteen-layer aligned reference at .9550.
One shared GCN update family, run on the observed adjacency or on compiled clue membership; tie-aware AUC over five splits and five seeds. The isomorphic scramble keeps the whole typed topology, features, architecture, depth and initialization, but changes which variables feed each factor.
Reach is not interaction

Holding the evidence, the class prior and the Bayes AUC fixed, the paper builds two queries on the same graph. For one, a linear readout is optimal. For the other, every linear score is capped 9.6 AUC points below Bayes at any radius: more propagation brings the second observation into reach, but cannot create the product the query needs. A product or MLP readout reaches Bayes the moment that observation arrives.

The theorem concerns fixed linear propagation and affine readouts. Nonlinear GNNs can express richer interactions; whether they learn the useful ones from the access they are given is the empirical question the rest of the paper takes up.

FigureSeeing the second check helps only a readout that can combine it
Two plots of population AUC against propagation radius. Leaf query: the linear readout stays at .800 at every radius while product and MLP readouts reach the Bayes .896 once the second check arrives at radius three. Center query, same evidence: the linear readout reaches .896 from radius one.
Fitted population AUC over propagation radius. Leaf query: the distant observation first arrives at radius three, after which product and MLP readouts attain Bayes while the linear score stays at its exact cap. Center query, same evidence: a linear readout suffices from radius one.
Two-System Graph Learning

TSGL puts the distinction to work. It preserves a capable GNN, learns explicit relationships within a declared library — affine, count and parity tables over relational memberships — and mixes them in only when a locked proposal earns acceptance on held-out nodes. A refusal returns the saved baseline exactly; the refused specialist is never executed.

FigurePreserved perception, supplemented inference
System diagram: raw evidence feeds a GNN perceiver, a typed-inference branch with learned affine, count and parity tables, and generic heads. A mixture of the preserved prediction and a specialist is selected on one validation split, then accepted or refused once on another; refusal keeps the baseline.
Candidates are fitted on training targets; the checkpoint, candidate and mixture weight are chosen on a selection set. The proposal is locked before a separate acceptance set decides once: deploy the mixture, or keep the baseline pointwise.
Results

Minesweeper. Against the best validation-selected GNN or GNN ensemble, strict TSGL raises AUC from 98.19 to 99.13 without label inputs, accepted on all nine splits — removing 52% of the remaining ranking error. Generic correction and an independent-model ensemble earn acceptance on none. With training-label anchors, in a separate matched panel, TSGL reaches 99.97.

Citation graphs. On arxiv-year, typed supplementation beats both generic correction and a second-GNN ensemble. The same recipe, unchanged and refitted on the training labels of a previously unused patent-citation graph, beats both controls in all three predeclared views, improving on the baseline by 1.85 points on average under strict access.

Reuse. A separate count-family compiler freezes a learned relationship and reuses it on 16 independent boards, answering new joint queries with no target fitting.

In these tests, every accepted deployment improved the test score, and every refusal returned the baseline exactly.

Where it does not win

On three fresh social graphs — Penn94, Twitch-gamers and Genius — the typed library beat the stronger generic or ensemble control in none of 18 evaluations. The full system deployed those controls instead: 14 improvements, 4 exact baseline returns, no observed regression. That is a boundary of the tested library and recipe, reported in full, not evidence that those graphs hold no useful relationships.

Selection costs something even when nothing is deployed: on Genius, the typed candidates took 28.75 of 33.93 summed fitting hours and were selected in none of six evaluations.

Reproducibility
  • Preregistered endpoints and selection rules for the interventions and fresh-data tests
  • Frozen predictions, scored misses and post-hoc controls kept distinct
  • Negative results and the social-graph boundary reported in full
  • Code, configurations, masks and retained predictions available on request
Citation
Graphs Are Evidence, Not Circuits
Aditya Gaur, Charu Sharma
Preprint2026
PDF
What comes next

Learning circuit membership and building query-specific circuits automatically are the next architectural steps. The paper shows why those objects matter; it does not yet supply an unrestricted compiler.

Research / Emergent-misalignment audit
Manuscript, 2026 Additional materials available privately

Human-Grounded Audits of Emergent Misalignment

A preregistered audit of which apparent emergent-misalignment effects survive changes in model family, intervention, behavioral construction, evaluator, and human framing.

01 Intervention Seed-matched organism and control pairs
→
02 Construction How the behavior is elicited and held out
→
03 Judge Automated verdicts on held-out prompts
→
04 Humans Blinded human raters, same rows
86 / 90Rows where blinded human and automated binary verdicts agree
2Model families, five seed-matched organism and control pairs
The question

Which apparent emergent-misalignment effects survive a change of evaluator?

FigureWhat survives the audit, in six steps
Six numbered steps. Swapping the judge on the same rows drops the catch rate to 3-44 percent. Five seed-matched pairs one KL knob apart replicate the effect: organisms plus 13 points, controls exactly on the zero line. The mean difference installs on a fresh model at plus .65. Recompressing after subtracting it shows rank 1 loses the skill (.77) while rank 2 keeps it (.03). Blinded humans re-reading the clean result drift to .14 by hand against a .10 bar.
The same rows, measured six ways. Steps 1–3 ask whether the reported effect is a property of the model or of the evaluation package; steps 4–6 install the difference on a fresh model and hand the cleaned result back to blinded human raters, who read it slightly higher than the automated judge does.
Why the existing formulation may be insufficient

Claims about emergent misalignment are only as strong as the evaluation package used to measure them. If a reported effect depends on one intervention, one behavioral construction and one automated judge, then the finding may be a property of the measurement rather than of the model.

Core hypothesis

Apparent transport of emergent misalignment is sensitive to the evaluation package. Some effects will survive a change of model family, construction and evaluator; others will not, and the difference is measurable.

Instrument

The audit stress-tests the measurement process itself rather than one model: two model families, five seed-matched organism and control pairs, preregistered checkpoints, held-out prompts, automated judges, and blinded human raters scoring the same rows.

Main result

Apparent transport depends strongly on the intervention, the behavioral construction, and who is doing the measurement. Some effects survive broad human evaluation, while others are properties of a narrow task or evaluator. Blinded human and automated binary verdicts agreed on 86 of 90 rows, so the disagreement is not simply judge noise.

Boundaries

The audit separates broad behavioral transport from narrow task-specific estimates. Where an effect is narrow, the paper says so rather than reporting the larger number.

Status and disclosure

Manuscript, 2026. Preregistrations, the full evaluation package and human-rating materials are shared privately while the work is in review.

Research / Vyasa
Private research infrastructure

Vyasa: Autonomous Research Harness

A research harness for turning open-ended ideas into persistent, falsification-oriented experimental programs.

Question → Prospective prediction → Execution → Falsification → Synthesis → Next step
The question

What does research infrastructure look like when it refuses retrospective storytelling?

Why it exists

Vyasa is private infrastructure I developed to support long-running research programs across world models, graph learning, and AI safety.

It maintains structured hypotheses, experiment registries, preregistrations, evidence ledgers, negative results, decision rules, and research-state continuity across agent sessions. The system is designed to prevent research from degenerating into disconnected experiments or retrospective storytelling.

Capabilities
  • Persistent research state
  • Hypothesis and finding registries
  • Preregistered experiment gates
  • Negative-result retention
  • Evidence and claim ledgers
  • Reproducibility tracking
  • Autonomous experiment planning
  • Multi-project research vaults
  • Human-readable research summaries
The loop it enforces

It supports repeated cycles of question formation, prospective prediction, experiment execution, falsification, synthesis, and next-step selection — in that order, with the prediction written down before the run.

Status

Private research infrastructure. The repository is not public; the design and its rationale can be discussed.

BibTeX copied
Bio copied