Research

Research & publications

I study the gap between what models represent and what they act on: audio-language models that encode tone of voice but don't use it, and models whose chat-time safety largely disappears once they act as agents.

Themes

Themes

  1. What a simulated student knows
  2. Teaching a small model to talk like people
  3. What audio-language models hear
  4. Safety of computer-use agents
  5. Self-evolving computer-use agents
  6. Deception & Theory of Mind
  7. Earlier: human pose estimation

Note · Nov 2026

What a simulated student knows

Four checks on a small stand-in for a simulated student. A short prompt creates wrong answers, the right number is still in the model when the reply is wrong, and saying the number does not carry to the next problem.

Read the note

Note · Nov 2026

Teaching a small model to talk like people

A small rebuild of the recipe behind humans&' Persimmon, on a 0.6B model and free GPUs. Training on real group chats gets the voice. Training against a judge helps from the fourth message on, but only once the judge is good enough not to be fooled by shorter messages.

Read the note

Theme 01

What audio-language models hear

Audio-language models are meant to understand how something is said, not just what. I trace where that paralinguistic information lives inside these models and where it gets lost. Across four models, speaking style is strongly encoded in the late audio encoder, then degrades before it reaches the output: the models hear it but don't heed it.

Interactive paper page · CoLM 2026 Heard but Not Heeded Listen to one sentence in four speaking styles, then see what each model said it heard. Open the page

Papers

  1. Heard but Not Heeded: Paralinguistic Information Encoding and Loss in Audio-Language Models

    B. Koduru, D. Alharthi, R. Singh, B. Raj

    CoLM 2026

    A mechanistic analysis of Whisper-large-v2, Qwen2-Audio, Qwen2.5-Omni, and Chroma-4B. The projector reshapes the style signal rather than discarding it.

  2. Subliminal Prosody Learning: Auxiliary Emotion Supervision Redistributes Affective Representations Across ALM Layers

    B. Koduru, D. Alharthi, R. Singh, B. Raj

    ICML 2026 WorkshopMechanistic Interpretability

    Adding an auxiliary emotion objective changes where affective information is represented across the layers of an audio-language model.

  3. RIVET: Robust Idempotent Voice Attribute Editing

    D. Alharthi, B. Koduru, R. Singh, B. Raj

    INTERSPEECH 2026Oral

    Training a voice editor to be idempotent (f(f(x)) = f(x)) regularizes it against noisy attribute labels, improving edit success and speaker-identity preservation for attributes like age and gender.

Figure 1

Heard, but not heeded

  • Probe at the audio-encoder peak
  • Probe at the last layer
  • The model's own answer
chance
Qwen2-Audio
82.0% 19.7%
Qwen2.5-Omni
85.3% 53.7%
Chroma-4B
85.3% 22.6%

Speaking-style accuracy across 7 styles. A linear probe recovers style from every model's audio encoder at 82–85%, and much of it survives to the last layer. Asked directly, the models identify it far less often. The probe is trained while the answer is zero-shot, so the two aren't directly comparable; the gap shows style is decodable, not that the model uses it. Whisper-large-v2, which has no language model to answer with, is omitted.

Speaking-style accuracy (7 styles; chance 14.3%)
ModelProbe, audio-encoder peakProbe, last layerModel's own answer
Qwen2-Audio82.0%78.7%19.7%
Qwen2.5-Omni85.3%73.6%53.7%
Chroma-4B85.3%59.5%22.6%

Figure 2 · Figure 5 in the paper

How speaking styles separate, layer by layer

CKA by layer for all 21 style pairs in Whisper-large-v2: every pair stays between about 0.92 and 1.0 across all 32 encoder layers.

CKA similarity by layer for all 21 pairs of speaking styles, one line per pair; lower means the two styles are represented more differently. The red dashed line marks the projector boundary. Whisper keeps every pair geometrically similar. All three audio-language models separate styles in the late encoder, consistently across pairs, and Chroma collapses every style difference at the backbone boundary (layer 32). View in the paper

Theme 02

Safety of computer-use agents

Does safety training survive the move from chatting to acting? I gave the same harmful requests to models in chat and to the same models acting as computer-use agents, across 8 models and 49 tasks. In chat they mostly refused. As agents, they mostly didn't.

Paper

  1. Chat-safe is not CUA-safe: Chat Methods May Not Transfer to Computer Use

    B. Koduru, J. Yang, A. Li, X. E. Wang

    NeurIPS 2026 WorkshopAgents in the Wild · poster

    Chat-time safety methods can't be assumed to transfer to computer use, and need to be evaluated on agent actions directly.

Figure 3

Refusals on harmful requests

In chat
31/47
As an agent
4/47

The same harmful requests, posed in chat and to the model acting as a computer-use agent.

Refusals on harmful requests
SettingRefused
In chat31 of 47
As a computer-use agent4 of 47

Steering moved the words, not the actions.

Activation steering raised chat refusal from 0.71 to 0.85, but agent actions didn't change.

Theme 03

Self-evolving computer-use agents

Instead of hand-engineering a scaffold for every environment, can an agent write its own interface in code and improve it from experience? Our agents match specialized scaffolds on OSWorld (361 tasks) with no computer-use-specific engineering, and an island-based evolutionary loop that grows a reusable code library from rollouts alone beats Agent S3 on ScienceBoard. Agent S4 makes interface design itself the agent's job: a meta-agent rewrites repositories of interfaces and usage notes from unlabeled practice tasks, taking an open 27B model to 21.3% on OSWorld V2, above GPT-5.5 and Claude Opus 4.8 at a fraction of their cost.

Papers

  1. Evolving Agent Interfaces

    S. Agashe, Y. Yang, G. Gonzalez-Pumariega, B. Koduru, C.-L. Li, J. Yang, A. Li, X. E. Wang

    ICLR 2027 · under reviewAgent S4 · arXiv 2026

    Agent S4 evolves its own computer-use interfaces from experience. With an open 27B model it reaches 21.3% on OSWorld V2, a new open-source state of the art, and lifts ScienceBoard from 41.4% to 58.6%.

  2. Computer Use with Evolving Software

    S. Agashe, G. Gonzalez-Pumariega, B. Koduru, J. Yang, A. Li, X. E. Wang

    CoLM 2026 WorkshopLifelong Agents

    CUES-Evol: computer-use agents that generate and evolve their own software interface in code, rather than depending on hand-engineered scaffolds.

Figure 4 · Figure 3 in the paper

How Agent S4 evolves its interfaces

  • Meta-agent
  • Task agents and selection
  1. 1

    Pick parents

    Repositories of interfaces from the population, chosen by their score on held-out validation tasks.

  2. 2

    Study the trajectories

    The meta-agent reads how task agents used each parent on synthetic practice tasks, with no success labels, and finds what held them back.

  3. 3

    Mutate or cross over

    It rewrites one repository's interfaces and usage notes, or combines ideas from two.

  4. 4

    Run the descendant

    Task agents use it on the practice tasks, and it is scored on validation tasks the meta-agent never sees.

The descendant joins its parents in the population · 30 rounds per run

A repository holds interfaces (Python modules for GUI actions, files, browsers and specific applications) and notes on when to use each. Keeping parents alongside descendants lets later rounds return to earlier designs and recombine them. Evolution added interfaces such as reading web apps as text inside the logged-in browser tab, writing a block of spreadsheet cells in one call, and checking Lean proofs. View in the paper

Figure 5 · Tables 2 and 3 in the paper

Same model, evolved interfaces

  • Fixed interfaces
  • Interfaces evolved by Agent S4
Qwen3.8-27B$1.39 per task
5.6%
GPT-5.5$25.50 per task
13.0%
Claude Opus 4.8$72.40 per task
20.6%
Qwen3.8-27B + Agent S4$1.10 per task
21.3%

Binary success on the full OSWorld V2 benchmark, with cost per task. The first and last rows are the same Qwen3.8-27B model; only the interfaces differ, a 3.8× gain at lower cost. GPT-5.5 and Claude Opus 4.8 are their batched runs.

OSWorld V2 binary success and cost per task
Model and interfacesBinary successCost per task
Qwen3.8-27B, fixed interfaces5.56%$1.39
GPT-5.5, fixed interfaces13.0%$25.50
Claude Opus 4.8, fixed interfaces20.6%$72.40
Qwen3.8-27B, interfaces evolved by Agent S421.3%$1.10

Better interfaces, not a bigger model.

On one photo-delivery task, the agent with the evolved repository earned full credit in 167 tool calls and 51 minutes. With the seed repository it took 299 calls and 98 minutes for half credit.

Figure 6

ScienceBoard success rate

  • Agent S3
  • Evolutionary loop (ours)
Haiku
22.0%
30.9%
Sonnet
30.1%
40.4%

Task success with two Claude models (Haiku and Sonnet). The evolutionary loop also uses half Agent S3's tokens.

ScienceBoard success rate
ModelAgent S3Evolutionary loop
Haiku22.0%30.9%
Sonnet30.1%40.4%

Theme 04

Deception & Theory of Mind

Can LLM agents deceive strategically, and do they track what other players believe? AmongUs-X uses the social-deduction game Among Us as a testbed, with a moderator agent grounded in a game-theoretic model of strategic deception.

Paper

  1. AmongUs-X: Benchmarking Strategic Deception of LLM Agents via Theory-of-Mind Metrics

    K. Mirakhor*, B. Koduru*, A. Kontogiannis, R. Zabounidis, K. Sycara, W. Kim

    AAMAS 2027 · under review*equal contribution

    A benchmark and released dataset for measuring strategic deception and Theory of Mind in LLM agents.

8,000+

simulated Among Us games

21

LLMs evaluated

Before CMU

Earlier: human pose estimation

Before CMU, at IIT Hyderabad's Spinal Cord Lab, I benchmarked markerless pose estimation from phone cameras against motion capture. The project led to three papers.

Papers

  1. GATI: Gait and Temporal Intelligence — A Large-scale Multi-view Movement Dataset of Daily Activities in the Indian Context

    Y. Mandayam Rangayyan, A. K. Singh, J. Chand, …, B. Koduru, …, M. Raghavan

    SSRN preprint · 2026

    A multi-view movement dataset of 16 subjects performing daily activities, chores, exercises, and yoga, with motion-capture ground truth and benchmarks of four pose estimators across camera angles.

  2. Segment Activity Effect (SAE): A Novel Structural Reliability Metric for Markerless Human Pose Estimation Using a Large Multi-View Motion Capture Dataset

    Y. Mandayam Rangayyan, A. K. Singh, J. Chand, …, B. Koduru, …, M. Raghavan

    SSRN preprint

    A metric for activity-specific structural errors, measured against 1000 Hz motion capture: flexion and abduction systematically lengthen the hip–knee segment by up to 4 cm.

  3. Segment-Aware Evaluation of 3D Human Pose Estimation under Uncalibrated Multi-View Video Settings

    Y. Mandayam Rangayyan, A. K. Singh, J. Chand, …, B. Koduru, …, M. Raghavan

    Manuscript

    Segment-level evaluation of four 3D pose estimators against high-frequency motion capture across uncalibrated camera views (14 subjects, 19 activities).