ConflictGuide:让竞争行为可见,提升 AutoResearch 的模型演化效果
ConflictGuide: AutoResearch Improves When Competing Behaviors Are Made Visible
摘要
新加坡国立大学等机构的研究者提出 ConflictGuide,在基于大语言模型的 AutoResearch 循环中引入竞争行为反馈:先用标量任务反馈做广泛探索,待任务增益减弱后,用文献分类体系识别模型特有的行为冲突并设计探针,把探针结果反馈给代码智能体以引导修改和保留决策。
摘要由模型根据原文撰写,以原文为准。
正文 · 原文
Qiran Zou Affiliation: National University of Singapore Xiangbo Shu Affiliation: Nanjing University of Science and Technology Dianbo Liu Affiliation: National University of Singapore
Abstract
When designing machine learning models, desirable properties are often in tension: improving one behavior can impair another, so task progress can depend on alleviating the conflict. LLM-based AutoResearch systems, which iteratively edit model code and retain edits based on scalar task-performance feedback, have largely ignored this trade-off. We find that scalar feedback supports broad exploration early in search, but it does not reveal how edits affect competing behaviors. In matched-budget experiments, introducing competing-behavior feedback as task gains diminish increases the share of proposals that improve both behaviors and sustains progress beyond scalar-only plateaus. Obtaining this feedback for a given model requires identifying its competing behaviors and designing probes to measure them. To make competing-behavior feedback actionable, we introduce ConflictGuide. Its reusable ConflictGuide-Skill combines a literature-grounded taxonomy with model-specific evidence to identify competing behaviors and specify probes for a code agent to implement as metrics. Evolution proceeds in two stages: Stage I explores with task feedback; Stage II uses probe feedback to steer proposals toward conflict alleviation and retains marginal-gain edits only when probes indicate sufficient alleviation. Across five diverse model families, ConflictGuide reduces task and conflict-related errors by up to 28% and 14%, respectively, relative to scalar-only AutoResearch, with gains extending to other code agents.
1 Introduction
Machine-learning models are often expected to exhibit more than one desirable behavior (Sener and Koltun, 2018). Balancing these behaviors has long been a challenge: improving one can impair another (Tsipras et al., 2019). In the 1990s, soft-margin support vector machines balanced margin width against the cost of margin violations (Cortes and Vapnik, 1995). GANs face a different challenge: generating convincing samples without collapsing to a few modes (Salimans et al., 2016). Related challenges arise in adversarial classifiers, where gains in standard accuracy can reduce robustness (Tsipras et al., 2019), and in uncertainty-aware classifiers, which must predict accurately on familiar inputs while expressing greater uncertainty as inputs move farther from the training data (Liu et al., 2020). The sources of tension vary across models: limited capacity, competing demands on shared representations, properties of the data, and training choices can all contribute (Sener and Koltun, 2018). The resulting trade-offs need not be strictly zero-sum: advances in model design or training can improve the attainable balance (Addepalli et al., 2022).
Recent AutoResearch systems automate model development through iterative experimentation. In a typical loop, an LLM coding agent edits training code, evaluates each revision under a fixed training-time budget, and retains edits primarily based on a scalar task metric (Karpathy, 2026). Some systems augment this loop with task-specific diagnostic feedback. Self-EvolveRec uses simulated-user critiques and model diagnostics to identify recommendation failures (Kim et al., 2026), while EvoPINN analyzes training trajectories to guide changes to neural representations and training procedures (Yin et al., 2026). These systems use failure diagnosis and training-dynamics analysis, respectively, to identify task-specific performance bottlenecks and guide subsequent revisions. From a model-design perspective, however, unresolved tensions between desirable behaviors may limit performance, yet scalar task metrics do not reveal how code edits affect each behavior. Competing-behavior feedback can therefore complement these diagnostics by exposing such effects. To our knowledge, we provide the first explicit exploration of this feedback in AutoResearch.
How competing-behavior feedback shapes search may, however, depend on when it is introduced. We therefore conducted two matched-budget exploratory studies within a standard scalar-guided AutoResearch loop. On a spectral neural operator (Qin et al., 2024), feedback provided from the outset produced conflict-specific edits but concentrated the search on spectral compensation, whereas scalar-only feedback yielded a broader mix of representational and optimization changes (Appendix A). We then tested delayed feedback from common scalar-only branch points reached as task gains diminished. The share of proposals improving both behaviors rose from 7.2% to 13.1%, while the share degrading both behaviors fell from 29.0% to 20.7% (Figure 1(b)). Delayed-feedback searches also continued to improve task performance, whereas matched scalar-only continuations made little further progress (Figure 1(c)). Together, these observations motivate a two-stage design in which scalar feedback first supports broad task-oriented exploration, after which competing-behavior feedback focuses subsequent refinement on unresolved conflicts.
To obtain competing-behavior feedback across models, we construct a literature-grounded conflict taxonomy. It organizes conflicts by root cause, competing axis, and mechanism, with nine roots, six axes, and 110 mechanisms spanning model design, data, training, and evaluation (Appendix D). Built on this taxonomy, the reusable ConflictGuide-Skill uses evidence from a target model’s architecture, task and data, training objective, and evaluation setting to identify candidate conflicts. For each supported conflict, it specifies a compact, non-redundant probe set that a code agent implements as metrics (Figure 2(a)). Before evolution, probes are experimentally qualified, with supporting evidence and results available for inspection. Guided by the exploratory findings, ConflictGuide begins with scalar task feedback for broad exploration (Stage I). As task gains diminish, Stage II makes probe results visible to the code agent while recording them alongside code edits in the search history (Figure 2(b)). These results reveal the conflict-related effects of code edits and guide subsequent proposals toward conflict alleviation. They also inform retention: edits with marginal positive task gains are kept only when the probes indicate sufficient alleviation.
Our main contributions are summarized as follows: 1) Competing-behavior feedback for AutoResearch. To our knowledge, we are the first to introduce such feedback into AutoResearch to alleviate behavioral conflicts and enable further performance gains. 2) ConflictGuide-Skill for conflict identification. We introduce a reusable agent skill built on a literature-grounded Root–Axis–Mechanism taxonomy. Given a target model, it identifies model-specific conflicts and designs measurable probes for experimental qualification. 3) ConflictGuide for two-stage evolution. We propose ConflictGuide, which uses scalar task feedback for initial exploration and then introduces skill-derived conflict feedback to guide proposals toward conflict-relevant model components and inform edit retention. 4) Evaluation across models and agents. Across five different model families, ConflictGuide achieves up to 28% lower task error and 14% lower conflict-related error under matched budgets, improves beyond scalar-only search plateaus, and generalizes across code agents.
2 Related Work
Feedback and Diagnosis in Automated Model Evolution.
Automated model-evolution systems supplement task-performance feedback with diagnostic and structural signals. LLaMEA-SAGE derives mutation guidance from performance-relevant code structures (van Stein et al., 2026), while NOVA integrates history, verification diagnostics, and trajectory memory into an architecture gradient (Liu et al., 2026c). Other systems evaluate candidates against external criteria, such as machine-checkable physical requirements (Abueidda et al., 2026) or benchmarks for known alignment failures (Yueh-Han et al., 2026). A more targeted line diagnoses performance limits and intervention targets: Self-EvolveRec translates model weaknesses into directional guidance (Kim et al., 2026), GoalEvolve localizes multi-objective gaps to optimization stages (Liu et al., 2026a), and EvoPINN conditions proposals on training-state diagnostics (Yin et al., 2026). Whereas these methods derive guidance from code structure, verification, domain requirements, or performance bottlenecks, ConflictGuide diagnoses a persistent mechanism-level conflict between competing behaviors. Quantitative Probes track this conflict after each edit, revealing whether the edit alleviates or aggravates it. Introduced after task gains diminish, this conflict-specific evidence guides subsequent proposals and informs retention. Additional related work appears in the Appendix B.
3 Method
As shown in Figure 2, ConflictGuide combines ConflictGuide-Skill with a two-stage evolution pipeline. The skill identifies a model-specific conflict and operationalizes it through qualified probes of the competing behaviors. The pipeline uses scalar task feedback for initial exploration, then probe-derived feedback to guide conflict-aware proposals and provide an auxiliary retention path.
3.1 Problem Setup
Let xt denote the training code retained at iteration t. A coding agent proposes an edit et, producing the candidate xtet=Tet(xt), which is evaluated under a fixed experimental budget. Let S(x) be the scalar task metric, which is minimized in all our experiments, and define its task gain as
| Gt=S(xt)−S(xtet), | (1) |
such that Gt>0 indicates improved task performance. Standard AutoResearch conditions each proposal on the current code and a task-feedback history,
| et∼π(⋅∣xt,ℋtS),ℋtS={(ei,Gi)}i<t. | (2) |
Although Gt determines whether an edit improves overall performance, it does not reveal how that edit affects the competing behaviors underlying the task metric. We define a model-specific conflict c=(BA,BB,Mc) by two desirable behaviors, BA and BB, that interact through a model mechanism Mc such that improving one may impair the other. ConflictGuide-Skill associates the conflict with a set of probes 𝐙c(x)=[Z1(x),…,Zm(x)]. Each probe has a pre-specified desirable direction. Let
| 𝐆c,tZ=[G1,tZ,…,Gm,tZ] | (3) |
denote the behavior-specific probe improvements of the candidate relative to the current code. A positive component indicates improvement in the corresponding behavior.
3.2 ConflictGuide-Skill
ConflictGuide-Skill screens Root–Axis–Mechanism paths from a literature-grounded taxonomy using evidence from the target model’s architecture, task and data, training objective, task metric, and evaluation setting. It instantiates c only when the evidence supports two desirable behaviors coupled by a concrete mechanism Mc; otherwise, it abstains.
For an identified conflict, the skill specifies a minimal, non-redundant probe set
| Zj(x;ℰj)=gj(Oj(x;ℰj)),j=1,…,m, | (4) |
where Oj is an observable from model outputs, internal states, or parameters, and gj computes the behavior metric. A code agent implements the probes as read-only metrics. The skill also defines a probe-based alleviation function Ac(et), evaluated in the current search context using model-specific reference and guard conditions. Before evolution, null calibration and paired evaluation reject unsupported probes and calibrate the threshold τc for substantial alleviation. Only qualified outputs (c,𝐙c,Ac,τc) are passed to ConflictGuide; full taxonomy (Appendix D), screening, abstention, and qualification details are provided in the Appendix C.
3.3 Two-Stage ConflictGuide Evolution
Stage I: scalar-guided exploration.
ConflictGuide follows standard AutoResearch for T1 iterations. The agent observes only ℋtS, supporting broad exploration before conflict-specific feedback is introduced. The stage boundary T1 is fixed before evolution; we evaluate its sensitivity in Section 4.
Stage II: conflict-aware refinement.
After Stage I, ConflictGuide augments the evolution history with the qualified probe improvements:
| ℋtS,Z=ℋT1S∪{(ei,Gi,𝐆c,iZ)}T1≤i<t,et∼π(⋅∣xt,ℋtS,Z,c,𝐙c). | (5) |
In Stage II, the agent observes each edit’s task gain and probe-derived behavior changes. The prompt specifies the identified conflict and conflict-relevant components available for modification. This information reveals how prior edits affected the conflict and guides proposals within that scope.
Probe feedback additionally informs retention of marginal task gains and ties. Let τS≥0 separate substantive from marginal task gains, and let ℬc⊆[0,τS] denote the model-specific task-gain band eligible for probe-based retention. ConflictGuide retains an edit when
| Keep(et)=𝕀[Gt>τS∨(Gt∈ℬc∧Ac(et)>τc)]. | (6) |
The first branch retains substantive task improvements; the second requires qualified probe-based alleviation within ℬc. Negative task gains are never retained. Model-specific task-gain bands, reference choices (current parent or frozen Stage-I anchor), and guard conditions are detailed in Appendix G. More generally, Appendix E formalizes how probe feedback can improve the identifiability of conflict-alleviating edits beyond scalar feedback alone.
4 Experiments
Experimental Setup.
All models follow a two-stage protocol with model-specific budgets (mostly 100/100; see Appendix G): a task-feedback-only phase followed by two matched continuations from the same branch point. AutoResearch uses task-performance feedback alone, whereas ConflictGuide additionally observes the conflict-specific feedback in Table 1. Both methods use Claude Code Opus 4.6 (Anthropic, 2025) unless otherwise noted. We repeat the full process over three independent search rounds and select one winner from each trajectory for formal evaluation. We consider five heterogeneous settings: SpecB-FNO (Qin et al., 2024), two-dimensional Navier–Stokes operator learning at 64×64 resolution (Li et al., 2021) using a width-32, four-layer FNO with 32 Fourier modes (validation NRMSE); SNGP (Liu et al., 2020), a WRN-28-2-based SNGP on CIFAR-100 (Krizhevsky, 2009) (temperature-scaled validation NLL); GCNII (Chen et al., 2020), node classification on Chameleon (Pei et al., 2020) using an eight-layer GCNII with hidden dimension 64 (clean validation NLL); ESN (Inubushi and Yoshimura, 2017), a 100-unit echo-state network for NARMA-30 (Schrauwen et al., 2008) sequence prediction (validation NRMSE); and TCM-Lite (Liu et al., 2023), learned image compression on DIV2K (Agustsson and Timofte, 2017) and Flickr2K (Lim et al., 2017) using a lightweight TCM configuration (estimated rate–distortion loss).
For formal evaluation, we transfer only the evolved source modifications and retrain each winner from scratch under matched settings. SpecB–FNO is evaluated on the held-out Navier–Stokes test set (Li et al., 2021), SNGP on CIFAR-100 (Krizhevsky, 2009), CIFAR-10 (Krizhevsky, 2009), and SVHN OOD dataset (Netzer et al., 2011), GCNII across seven node-classification datasets (Pei et al., 2020; Yang et al., 2016), ESN on Mackey–Glass (Mackey and Glass, 1977), and TCM-Lite on Kodak (Liu et al., 2023), with additional compression benchmarks (Asuni and Giachetti, 2013) used for secondary evaluation. Full data splits, model and training configurations, editable components, selection rules, and evaluation protocols are provided in the Appendix G.
Main Results.
ConflictGuide consistently improves mean task performance over the unmodified reference and AutoResearch across five model families and three independent search rounds (Tables 2–6), with simultaneous gains in task and conflict-related metrics in most settings. These results support the effectiveness of conflict-aware evolution across heterogeneous architectures and datasets. As shown in Figure 3, AutoResearch often plateaus after the common branch point, while ConflictGuide continues to improve under matched continuation budgets. This divergence supports the usefulness of probe-derived feedback for continued refinement beyond scalar-only plateaus.
Ablation Studies.
As shown in Table 7, both conflict-specific guidance and retention contribute to ConflictGuide. Guidance yields larger gains on Navier–Stokes (NRMSE and ND-NMSE), whereas retention contributes more on CIFAR-100 (NLL and OOD AUPR), suggesting complementary roles: guidance redirects proposals via conflict-specific feedback, while retention filters noisy task gains and preserves conflict-alleviating edits through a separate path. We further replace the original code agent with Kimi K2.7 Code (Moonshot AI, 2026) and integrate Probe guidance into AIDE (Jiang et al., 2025) under two LLM configurations (Figure 4). Across all settings, Probe-derived feedback consistently improves task and conflict-related metrics, indicating that the benefit is not tied to a particular code agent or search framework. Integration details are in the Appendix I.
Hyperparameter Analysis.
Stage I and ConflictGuide budgets are varied over {50,100,150}. Figure 5(a) shows that a 100-iteration Stage I provides the most favorable starting point: too few iterations may not reach the identifiability-limited regime, while too many can overcommit the trajectory and leave less room for Probe-guided refinement. Under a fixed total budget of 200 iterations (Figure 5(b)), the 100/100 split achieves the lowest test NRMSE. The 100/100 default for models with sufficient evolution capacity was fixed before inspecting test results; model-specific exceptions are detailed in Appendix G.4.
Proposals Analysis.
Figure 6 analyzes proposals across three search rounds for SNGP and GCNII. Conflict-specific feedback nearly doubles the relief rate on SNGP (10.8% to 21.5%) and raises it from 20.0% to 28.8% on GCNII. The proposal distribution also shifts: SNGP favors random-feature-map and kernel-geometry edits while reducing generic regularization, whereas GCNII shifts toward neighbor suppression and away from broad capacity changes. These results show that Probe feedback changes not only the relief rate but also the types of edits proposed, redirecting search toward the targeted conflict mechanisms. Additional analysis is provided in the Appendix J.
Value of conflict feedback.
ConflictGuide outperforms the multi-metric and prompt-only alternatives across GCNII metrics and leads on both NLL and OOD AUPR for SNGP (Table 8). This suggests that guidance benefits from measuring the instantiated competing behaviors, rather than providing additional metrics or describing the trade-off. Appendix H details both alternatives.
5 Conclusion
We introduced ConflictGuide, which incorporates competing-behavior feedback into AutoResearch. ConflictGuide-Skill uses a literature-grounded taxonomy to identify model-specific conflicts and design measurable probes. A code agent implements them before qualification and evolution. After scalar-guided exploration, probe-derived signals guide proposals and filter edits with marginal task gains but insufficient conflict alleviation. Experiments across diverse model families and code agents show that this feedback redirects search toward conflict-relevant changes and sustains progress beyond scalar-only plateaus. Limitations and future directions are discussed in the Appendix K.
AI use statement
We used generative AI tools to conduct the AutoResearch experiments studied in this paper and to improve the manuscript’s wording. The central research idea was developed by the authors without generative AI assistance. We reviewed all AI-assisted work and take responsibility for the final content of this paper, including AI-assisted text, claims, and artifacts.
Reproducibility statement
The Method and Experimental Setup sections describe ConflictGuide’s two-stage search, retention rules, and evaluation protocols. Its search loop can be reproduced by extending the publicly available AutoResearch codebase with the feedback and retention rules specified in the Method section. Appendices C–I document the datasets and five base models, including their source references and experimental settings, and provide detailed definitions of the probe metrics for all five model families. The ConflictGuide-Skill and experimental code are included in the supplementary material.
References
- Abueidda et al. (2026) D. W. Abueidda, B. Ahmed, P. Pantidis, and M. E. Mobasher Physics-audited agentic discovery in scientific machine learning. arXiv preprint arXiv:2607.07379. Cited by: §B.2, §2.
- Addepalli et al. (2022) S. Addepalli S. Jain et al. Efficient and effective augmentation strategy for adversarial training. Advances in Neural Information Processing Systems 35, pp. 1488–1501. Cited by: §1.
- Agustsson and Timofte (2017) E. Agustsson and R. Timofte Ntire 2017 challenge on single image super-resolution: dataset and study. In 2017 IEEE conference on computer vision and pattern recognition workshops (CVPRW), pp. 1122–1131. Cited by: §G.2.5, §4.
- Anthropic (2025) Anthropic Claude code. Note: https://claude.com/product/claude-code Cited by: §4.
- Asuni and Giachetti (2013) N. Asuni and A. Giachetti TESTIMAGES: a large data archive for display and algorithm testing. Journal of Graphics Tools 17 (4), pp. 113–125. Cited by: §4.
- Baek et al. (2025) J. Baek, S. K. Jauhar, S. Cucerzan, and S. J. Hwang Researchagent: iterative research idea generation over scientific literature with large language models. In Proceedings of the 2025 conference of the nations of the Americas chapter of the association for computational linguistics: human language technologies (volume 1: long papers), pp. 6709–6738. Cited by: §B.1.
- Ceni and Gallicchio (2024) A. Ceni and C. Gallicchio Residual echo state networks: residual recurrent neural networks with stable dynamics and fast learning. Neurocomputing 597, pp. 127966. Cited by: §G.2, §G.2.4.
- Chen et al. (2020) M. Chen, Z. Wei, Z. Huang, B. Ding, and Y. Li Simple and deep graph convolutional networks. In International conference on machine learning, pp. 1725–1735. Cited by: §G.2, §G.2.3, §G.2.3, §4.
- Chollet (2017) F. Chollet Xception: deep learning with depthwise separable convolutions. In 2017 IEEE conference on computer vision and pattern recognition (CVPR), pp. 1800–1807. Cited by: §J.3.
- Cortes and Vapnik (1995) C. Cortes and V. Vapnik Support-vector networks. Machine learning 20 (3), pp. 273–297. Cited by: §1.
- Guo et al. (2017) C. Guo, G. Pleiss, Y. Sun, and K. Q. Weinberger On calibration of modern neural networks. In International conference on machine learning, pp. 1321–1330. Cited by: §G.2.2.
- He et al. (2016) K. He, X. Zhang, S. Ren, and J. Sun Deep residual learning for image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 770–778. Cited by: §J.3.
- Hu et al. (2018) J. Hu, L. Shen, and G. Sun Squeeze-and-excitation networks. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 7132–7141. Cited by: §J.3.
- Inubushi and Yoshimura (2017) M. Inubushi and K. Yoshimura Reservoir computing beyond memory-nonlinearity trade-off. Scientific reports 7 (1), pp. 10199. Cited by: §4.
- Jiang et al. (2025) Z. Jiang, D. Schmidt, D. Srikanth, D. Xu, I. Kaplan, D. Jacenko, and Y. Wu Aide: ai-driven exploration in the space of code. arXiv preprint arXiv:2502.13138. Cited by: §4.
- Jin et al. (2026) Y. Jin, K. Xu, H. Li, X. Han, Y. Zhou, C. Li, and J. Bai Reveal: self-evolving code agents via reliable self-verification. In International Conference on Learning Representations, Vol. 2026, pp. 149800–149824. Cited by: §B.2.
- Karpathy (2026) A. Karpathy Autoresearch. Note: https://github.com/karpathy/autoresearch Cited by: §B.1, §G.6, §1.
- Kim et al. (2026) S. Kim, S. Park, H. Kang, W. Kim, J. Seo, Y. In, K. Yoon, H. Jeon, and C. Park Self-evolverec: self-evolving recommender systems with llm-based directional feedback. arXiv preprint arXiv:2602.12612. Cited by: §B.3, §1, §2.
- Krizhevsky (2009) A. Krizhevsky Learning multiple layers of features from tiny images. Technical report University of Toronto. Cited by: §G.2, §G.2.2, §4, §4.
- Li et al. (2026) Y. Li, C. Shao, X. Liu, R. Zhao, P. Liu, H. Su, Z. Chen, Q. Yang, A. Xu, Y. Fang, et al. Autosota: an end-to-end automated research system for state-of-the-art ai model discovery. arXiv preprint arXiv:2604.05550. Cited by: §B.1.
- Li et al. (2021) Z. Li, N. Kovachki, K. Azizzadenesheli, B. Liu, K. Bhattacharya, A. Stuart, and A. Anandkumar Fourier neural operator for parametric partial differential equations. In International Conference on Learning Representations, Cited by: §J.3, §G.2, §G.2.1, §4, §4.
- Lim et al. (2017) B. Lim, S. Son, H. Kim, S. Nah, and K. M. Lee Enhanced deep residual networks for single image super-resolution. In 2017 IEEE conference on computer vision and pattern recognition workshops (CVPRW), pp. 1132–1140. Cited by: §G.2.5, §4.
- Liu et al. (2026a) H. Liu, L. Zhou, Y. Ren, Y. Wu, and Z. Wang GoalEvolve: from handcrafted algorithm priors to goal-driven evolution of physical design algorithms. arXiv preprint arXiv:2608.16733. Cited by: §B.3, §2.
- Liu et al. (2020) J. Liu, Z. Lin, S. Padhy, D. Tran, T. Bedrax Weiss, and B. Lakshminarayanan Simple and principled uncertainty estimation with deterministic deep learning via distance awareness. In Advances in neural information processing systems, Vol. 33, pp. 7498–7512. Cited by: §G.2, §G.2.2, §1, §4.
- Liu et al. (2023) J. Liu, H. Sun, and J. Katto Learned image compression with mixed transformer-cnn architectures. In 2023 IEEE/CVF conference on computer vision and pattern recognition (CVPR), pp. 14388–14397. Cited by: §G.2, §G.2.5, §4, §4.
- Liu et al. (2026b) M. Liu, J. Chen, H. Cao, X. Zhang, P. Ma, X. Tang, S. Jin, Z. Yang, T. Fu, F. Wu, et al. AgentFold: closed-loop agentic search for protein folding model design. arXiv preprint arXiv:2608.26747. Cited by: §B.1.
- Liu et al. (2026c) S. Liu, L. Fang, Y. Sun, S. Huang, Q. Luo, S. Liu, X. Chen, D. Liu, C. Ma, Z. Chai, et al. NOVA: a verification-aware agent harness for architecture evolution in industrial recommender systems. arXiv preprint arXiv:2606.27243. Cited by: §B.2, §2.
- Lu et al. (2026) C. Lu, C. Lu, R. T. Lange, Y. Yamada, S. Hu, J. Foerster, D. Ha, and J. Clune Towards end-to-end automation of ai research. Nature 651 (8107), pp. 914–919. Cited by: §B.1.
- Mackey and Glass (1977) M. C. Mackey and L. Glass Oscillation and chaos in physiological control systems. Science 197 (4300), pp. 287–289. Cited by: §G.2, §4.
- Moonshot AI (2026) Moonshot AI Kimi code. Note: https://www.kimi.com/code Cited by: §4.
- Netzer et al. (2011) Y. Netzer, T. Wang, A. Coates, A. Bissacco, B. Wu, A. Y. Ng, et al. Reading digits in natural images with unsupervised feature learning. In NIPS workshop on deep learning and unsupervised feature learning, Vol. 2011, pp. 4. Cited by: §4.
- Novikov et al. (2025) A. Novikov, N. Vũ, M. Eisenberger, E. Dupont, P. Huang, A. Z. Wagner, S. Shirobokov, B. Kozlovskii, F. J. Ruiz, A. Mehrabian, et al. Alphaevolve: a coding agent for scientific and algorithmic discovery. arXiv preprint arXiv:2506.13131. Cited by: §B.1.
- Park et al. (2026) S. Park, W. Kim, R. Tan, J. Zhang, W. Han, P. Gao, C. Park, Y. Yao, R. Fu, E. Nallipogu, et al. AutoSaddler: automatic harness optimization with durable updates from agent execution traces. arXiv preprint arXiv:2608.23041. Cited by: §B.3.
- Pei et al. (2020) H. Pei, B. Wei, K. C. Chang, Y. Lei, and B. Yang Geom-gcn: geometric graph convolutional networks. In International Conference on Learning Representations, Cited by: §G.2, §G.2.3, §4, §4.
- Qin et al. (2024) S. Qin, F. Lyu, W. Peng, D. Geng, J. Wang, X. Tang, S. Leroyer, N. Gao, X. Liu, and L. L. Wang Toward a better understanding of fourier neural operators from a spectral perspective. arXiv preprint arXiv:2404.07200. Cited by: §1, §4.
- Salimans et al. (2016) T. Salimans, I. Goodfellow, W. Zaremba, V. Cheung, A. Radford, and X. Chen Improved techniques for training gans. In Advances in neural information processing systems, Vol. 29. Cited by: §1.
- Schmidgall et al. (2025) S. Schmidgall, Y. Su, Z. Wang, X. Sun, J. Wu, X. Yu, J. Liu, M. Moor, Z. Liu, and E. Barsoum Agent laboratory: using llm agents as research assistants. In Findings of the Association for Computational Linguistics: EMNLP 2025, pp. 5977–6043. Cited by: §B.1.
- Schrauwen et al. (2008) B. Schrauwen, M. Wardermann, D. Verstraeten, J. J. Steil, and D. Stroobandt Improving reservoirs using intrinsic plasticity. Neurocomputing 71 (7-9), pp. 1159–1171. Cited by: §4.
- Sener and Koltun (2018) O. Sener and V. Koltun Multi-task learning as multi-objective optimization. In Advances in neural information processing systems, Vol. 31. Cited by: §1.
- Tompson et al. (2015) J. Tompson, R. Goroshin, A. Jain, Y. LeCun, and C. Bregler Efficient object localization using convolutional networks. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 648–656. Cited by: §J.3.
- Tran et al. (2021) A. Tran, A. Mathews, L. Xie, and C. S. Ong Factorized fourier neural operators. arXiv preprint arXiv:2111.13802. Cited by: §G.2, §G.2.1.
- Tsipras et al. (2019) D. Tsipras, S. Santurkar, L. Engstrom, A. Turner, and A. Madry Robustness may be at odds with accuracy. In International Conference on Learning Representations, Cited by: §1.
- Van Stein and Bäck (2024) N. Van Stein and T. Bäck Llamea: a large language model evolutionary algorithm for automatically generating metaheuristics. IEEE Transactions on Evolutionary Computation 29 (2), pp. 331–345. Cited by: §B.1.
- van Stein et al. (2026) N. van Stein, A. V. Kononova, L. Kotthoff, and T. Bäck LLaMEA-sage: guiding automated algorithm design with structural feedback from explainable ai. arXiv preprint arXiv:2601.21511. Cited by: §B.2, §2.
- Verstraeten et al. (2007) D. Verstraeten, B. Schrauwen, M. d’Haene, and D. Stroobandt An experimental unification of reservoir computing methods. Neural networks 20 (3), pp. 391–403. Cited by: §G.2, §G.2.4.
- Wang et al. (2026) M. Wang, J. Fang, S. Qiao, Z. Xu, H. Xu, H. Wang, S. Deng, L. Yang, Z. Cui, X. Xu, et al. Mechanist: ai as a scientific instrument for discovering the mechanisms of intelligence. arXiv preprint arXiv:2608.12036. Cited by: §B.3.
- Woo et al. (2018) S. Woo, J. Park, J. Lee, and I. S. Kweon Cbam: convolutional block attention module. In European conference on computer vision, pp. 3–19. Cited by: §J.3.
- Xu et al. (2026a) W. Xu, Y. Liu, Y. Nan, L. Ye, X. Hu, Z. Qin, and P. Liu Neural architecture discovery via autonomous evolution. In Third Conference on Language Modeling, Cited by: §B.1.
- Xu et al. (2026b) W. Xu, T. Mi, Y. Liu, Y. Nan, Z. Zhou, L. Ye, L. Zhang, Y. Qiao, and P. Liu Asi-evolve: ai accelerates ai. arXiv preprint arXiv:2603.29640. Cited by: §B.1.
- Yang et al. (2016) Z. Yang, W. Cohen, and R. Salakhudinov Revisiting semi-supervised learning with graph embeddings. In International conference on machine learning, pp. 40–48. Cited by: §4.
- Yin et al. (2026) P. Yin, K. Li, Y. Zhang, and J. Cheng EvoPINN: agentic discovery of executable algorithms for physics-informed neural networks. arXiv preprint arXiv:2607.26490. Cited by: §B.3, §1, §2.
- Yueh-Han et al. (2026) C. Yueh-Han, J. Wen, and J. H. Kirchner Automated researchers can reliably mitigate alignment failures. arXiv preprint arXiv:2608.28945. Cited by: §B.2, §2.
- Zhang et al. (2026) X. Zhang, G. Wang, Y. Cui, Z. Li, W. Qiu, B. Zhu, and P. He Who grades the grader? co-evolving evaluation metrics and skills for self-improving llm agents. arXiv preprint arXiv:2607.12790. Cited by: §B.2.
- Zhu et al. (2026) K. Zhu, X. Ye, Z. Han, Y. Zhao, B. Li, W. Zhang, M. Tian, X. Tang, P. Lu, J. Zou, et al. AgentDebugX: an open-source toolkit for failure observability, attribution, and recovery in llm agents. arXiv preprint arXiv:2607.18754. Cited by: §B.3.
Appendix Overview
- A.
- B.
- C.
- D.
- E.
- F.
- G.
- H.
- I.
- J.
- K.
Appendix A Exploratory Studies and Design Motivation
This section studies when conflict-specific feedback should be introduced for SpecB–FNO. The early-feedback study compares Scalar-only and Probe-from-outset evolution under matched total proposal budgets. The delayed-feedback study branches from a shared Scalar-only Stage-I checkpoint and compares ConflictGuide with a Scalar-only continuation under matched refinement budgets. Because both studies cover only one model family, they motivate our two-stage design rather than establish a universally optimal feedback schedule.
Shared setup and proposal audit.
Both studies use the SpecB–FNO task, proxy-search configuration, training protocol, and full-scale evaluation described in Appendix G. The task metric, conflict Probes, safety metrics, and qualification thresholds are defined in Appendix F. All non-feedback settings are fixed within each comparison. To characterize proposal distributions, we annotate code edits with five non-exclusive mechanism labels spanning frequency-specific spectral, spatial/local, architectural, fusion, and optimization changes (Table 9). Figure 8 shows representative implementations, including per-mode reweighting and a gated bypass as two distinct frequency-specific interventions.
Early Competing-Behavior Feedback
Providing Probe feedback from the outset shifted proposals toward frequency-specific spectral edits: their share increased from 18.1% to 31.8%, while normalization, activation, or channel-structure edits fell from 59.6% to 31.8%. Yet this narrower focus did not translate into stronger performance: Scalar-only evolution improved both Test NRMSE and ND-NMSE over the reference, whereas Probe-from-outset improved neither. Together, these results suggest that early conflict feedback steered the search toward spectral compensation before sufficiently broad task-oriented exploration.
Delayed Competing-Behavior Feedback
After the shared Scalar-only Stage I, ConflictGuide redirected the proposal budget toward the identified conflict mechanism: frequency-specific spectral edits rose from 12.3% to 43.4%, while stage-fusion and optimization-related edits sharply declined. From the same branch point, ConflictGuide reduced Test NRMSE by 9.9% and ND-NMSE by 14.0% relative to the matched Scalar-only continuation. These aligned shifts in proposals and performance support the two-stage rationale: broad task exploration first identifies a strong solution, after which conflict feedback focuses refinement on the under-addressed spectral behavior. This experiment motivates the delayed schedule without implying that it is optimal for every model or conflict.
Frequency-specific spectral I: per-mode gain Learnable parameters, initialized once as a no-op. gain_pos[modes_x, modes_y] <- 1 gain_neg[modes_x, modes_y] <- 1 function spectral_branch(x): X <- RFFT2(x) Z <- zeros(output_spectrum_shape) Z[pos_modes] <- ComplexMix(X[pos_modes], W_pos) Z[neg_modes] <- ComplexMix(X[neg_modes], W_neg) Apply an independent amplitude gain to every retained mode. Z[pos_modes] <- gain_pos * Z[pos_modes] Z[neg_modes] <- gain_neg * Z[neg_modes] return IRFFT2(Z)
Frequency-specific spectral II: gated bypass A negative gate initialization keeps the new route nearly closed. gate_logit[modes_x, modes_y] <- -4 input_projection <- Conv1x1(in_ch, out_ch) function spectral_branch(x): X <- RFFT2(x) Z <- SpectralMix(X) B <- RFFT2(input_projection(x)) gate <- Sigmoid(gate_logit) Each retained mode controls its own input bypass. Z[retained] <- Z[retained] + gate * B[retained] return IRFFT2(Z)
Spatial/local pathway: separable local branch spatial_filter <- DepthwiseConv3x3(padding=1) channel_mixer <- PointwiseConv1x1(in_ch, out_ch) function mixed_operator(x): h_spec <- SpectralBranch(x) The depthwise filter extracts local spatial patterns. h_local <- spatial_filter(x) The pointwise projection then mixes feature channels. h_local <- channel_mixer(h_local) return h_spec + h_local
Normalization/activation/channel: mean–max SE channel_mlp <- MLP(out_ch, out_ch / r, out_ch) function recalibrate(h_spec, h_local): h <- GroupNorm(h_spec + h_local) h <- GELU(h) Combine average activity with spatially concentrated peaks. q_avg <- Mean(h, dimensions=(height, width)) q_max <- Max(h, dimensions=(height, width)) scale <- Sigmoid(channel_mlp(q_avg + q_max)) return h * scale[:, :, None, None]
Stage fusion/residual scale: gated correction The correction initially enters with sigmoid(2)≃0.88. fusion_logit <- 2.0 function residual_stage(x, previous_prediction): stage_input <- Concatenate(x, previous_prediction) correction <- CorrectionOperator(stage_input) Learn how strongly this stage changes the previous output. scale <- Sigmoid(fusion_logit) next_prediction <- previous_prediction + scale * correction return next_prediction
Optimization/regularization: channel dropout dropout_probability <- 0.05 function postprocess(h): h <- GELU(GroupNorm(h)) if training: Use one mask value per sample and channel, shared spatially. keep <- Bernoulli(1 - dropout_probability, shape=(batch, channels, 1, 1)) h <- h * keep / (1 - dropout_probability) return h
Appendix B Additional Related Work
B.1 Automated Scientific Agents and Model Evolution
LLM-based agents increasingly automate scientific research at different levels. General scientific agents support stages of the research workflow, including literature analysis, hypothesis generation, experiment design, implementation, and iterative refinement (Lu et al., 2026; Schmidgall et al., 2025; Baek et al., 2025). A second line of work focuses on automated algorithm and model discovery. LLaMEA evolves executable algorithms through iterative LLM-based generation and evaluation (Van Stein and Bäck, 2024), while AlphaEvolve extends evaluator-driven code evolution to broader algorithmic and scientific problems (Novikov et al., 2025). ASI-Evolve further explores model architectures, training data, and learning algorithms (Xu et al., 2026b), with related systems targeting autonomous architecture discovery and domain-specific model design (Xu et al., 2026a; Liu et al., 2026b). More closely related to our setting, systems for automated ML experimentation place coding agents in iterative experimental loops over existing ML implementations. AutoResearch repeatedly modifies and evaluates training code under a fixed experimental budget (Karpathy, 2026), while AutoSOTA automates the reproduction and subsequent improvement of existing models (Li et al., 2026). ConflictGuide falls within this paradigm, building on an AutoResearch-style coding-agent loop that iteratively modifies and evaluates model implementations.
B.2 Feedback Signals in Automated Model Evolution
Automated model evolution need not rely solely on a scalar task metric. LLaMEA-SAGE extracts structural and complexity features from generated code, models their relationship with performance, and translates the resulting explanations into mutation guidance (van Stein et al., 2026). NOVA combines modification history, verification diagnostics, metric changes, and trajectory memory into an architecture gradient for recommender architecture evolution (Liu et al., 2026c). Beyond performance- and structure-derived feedback, ReVeal uses reliable self-verification and tool-based evaluation to support iterative code improvement (Jin et al., 2026). Other systems introduce criteria beyond the standard task objective. Physics-Audited Agentic SciML evaluates candidates against machine-checkable physics requirements and advisory numerical probes (Abueidda et al., 2026), while automated alignment researchers use benchmark suites for specific alignment failures to guide their mitigation (Yueh-Han et al., 2026). Related work also treats the evaluation metric itself as an object of evolution, co-evolving evaluation metrics with agent skills when reliable task metrics are unavailable (Zhang et al., 2026).
Collectively, these studies highlight both the limitations of scalar-only feedback and the value of feedback tailored to what must be resolved during evolution. Existing approaches derive such signals from code structure, verification, external requirements, or well-characterized failure modes. ConflictGuide focuses on a complementary yet underexplored form of feedback in ML model evolution: how candidate edits affect competing behaviors. Such feedback becomes especially important when further progress depends on balancing these behaviors, while their behavior-specific effects remain obscured by the scalar task metric. ConflictGuide exposes these effects through quantitative Probes, providing conflict-specific feedback to guide subsequent evolution.
B.3 Diagnosis-Guided Automated Model Evolution
Beyond providing richer feedback, a more targeted line of work uses diagnosis to determine what should be modified next. Self-EvolveRec augments recommendation metrics with a Model Diagnosis Tool and qualitative user feedback, translating diagnosed weaknesses into directional guidance for model evolution (Kim et al., 2026). GoalEvolve identifies dominant bottlenecks from multi-objective target gaps, localizes them to the relevant optimization stages, and uses these diagnoses to focus source-code modifications (Liu et al., 2026a). EvoPINN similarly summarizes training traces into diagnostics of convergence, stability, and physics-loss behavior, conditioning representation or training-program proposals on the diagnosed state (Yin et al., 2026). Unlike general feedback enrichment, these methods explicitly diagnose a limiting factor and use that diagnosis to direct the next modification. Related agentic systems extend this diagnosis-to-intervention pattern beyond automated model evolution. Mechanist proposes and tests mechanistic hypotheses about model behavior and translates validated mechanisms into targeted interventions (Wang et al., 2026). AutoSaddler diagnoses failure traces to generate targeted patches for agent harnesses (Park et al., 2026), while AgentDebugX organizes agent debugging around detection, root-cause attribution, recovery, and rerun (Zhu et al., 2026).
ConflictGuide brings this diagnosis-guided paradigm to competing behaviors in ML model evolution. For a given model–task setting, a model-design conflict represents a persistent mechanism-level tension whose state evolves with the model. ConflictGuide therefore maintains a consistent diagnostic target while recomputing quantitative Probes after each edit, providing an up-to-date view of how the competing behaviors have shifted. This consistent diagnostic coordinate enables edits to be compared across the evolution trajectory, revealing whether each modification alleviates or aggravates the conflict and providing targeted evidence to guide subsequent proposals.
Appendix C ConflictGuide-Skill
ConflictGuide-Skill packages the conflict taxonomy and its operational procedures as a reusable agent skill. Given a target model, the skill first maps model- and task-specific evidence to the fixed taxonomy, then instantiates the selected mechanism as a pair of competing behaviors, and finally designs and qualifies Probes that expose behavior-specific changes not captured by the scalar task metric S. Throughout this process, the skill distinguishes three conceptual levels: a taxonomy mechanism is reusable conflict vocabulary; a behavioral conflict is its model-specific realization; and a Probe is a measurement that operationalizes one of the competing behaviors.
The skill supports three modes. Analyze performs conflict identification and Probe design without modifying model code. Implement additionally integrates the minimum read-only diagnostic code required to compute the fixed Probes. Qualify evaluates an existing Probe Card through null calibration and paired replay. None of these modes starts model evolution automatically.
C.1 Interface and workflow
Inputs.
The skill receives a target-model context comprising the architecture and forward path, task and dataset, training objective, scalar task metric, evolution boundary, available evaluation outputs, and runtime budget. When source code and configuration files are available, the agent extracts this information directly and records the corresponding evidence locations. Unavailable fields are marked as unknown rather than inferred from the model name.
Workflow.
ConflictGuide-Skill follows the five-stage workflow summarized in Table 12. Each stage has an explicit evidence boundary. In particular, conflict selection precedes Probe construction and does not use evolution trajectories, final-test results, or successful evolved architectures. This prevents a conflict from being selected retrospectively to explain an observed evolution outcome.
Outputs.
A successful run returns the selected taxonomy entry, the instantiated behavior pair, their shared coupling, an analysis of what the scalar task metric captures or obscures, the minimal Probe set, its qualification state, and unresolved assumptions. These elements are also serialized as a machine-checkable Conflict Probe Card. If the available evidence is insufficient, the skill returns an abstention or rejection record instead of forcing a conflict.
C.2 Taxonomy screening and conflict instantiation
Taxonomy basis.
ConflictGuide-Skill uses the fixed Root–Axis–Mechanism taxonomy introduced in Section D. The taxonomy was constructed through agent-assisted literature collection followed by researcher consolidation and verification. It provides mechanism-level vocabulary for identifying behavioral conflicts across model families, rather than prescribing model-specific behavior pairs.
Taxonomy screening.
For each target model, the skill first identifies candidate Roots, restricts them to their permitted axes, and then selects the most relevant mechanisms from the fixed taxonomy. The selection is grounded in evidence from the model architecture, task and data, training objective, evaluation setting, and component interfaces. Causal links between mechanisms and optimization signatures are recorded when supported by the available evidence.
Screening uses only information available before evolution. It does not rely on evolution trajectories, ablations, held-out final-test results, or successful evolved solutions. The skill must use the Root, axis, and mechanism identifiers defined in the taxonomy and cannot invent or rename taxonomy entries. A compute test further distinguishes resource limitations from structural conflicts: if substantially greater compute would remove the tension, a resource-related Root is considered; otherwise, the skill examines structural, informational, distributional, normative, data-related, or evaluation-related Roots.
Model-specific instantiation.
After selecting a taxonomy mechanism, the skill instantiates it as two model-specific competing behaviors. Both behaviors must be independently desirable for the stated task or deployment setting. The skill identifies the shared representation, component, parameter path, or resource that couples them and specifies both interference directions: why improving behavior A may harm behavior B, and vice versa. Each direction must be supported by available evidence or explicitly marked as a falsifiable hypothesis.
The skill then assesses whether the scalar task metric can distinguish changes in the two behaviors. It records what the metric captures, what it aggregates away, and whether its conflict visibility is yes, partially, or no. Evaluation mechanisms such as metric insensitivity or aggregate masking are included only when supported by the evidence. Limited metric observability alone is insufficient to establish a behavioral conflict.
Abstention and rejection.
The skill does not infer conflicts from model names or transfer them directly from superficially similar examples. It abstains when the available model, task, data, objective, or evaluation context is insufficient to support a taxonomy selection. It rejects an instantiation when the two behaviors are not independently desirable, lack a defensible shared coupling, or do not exhibit plausible interference in both directions. It also rejects Probes that duplicate the scalar task metric, depend on post-evolution tuning, leak unavailable information, or are not comparable across candidates. The main conditions are summarized in Table 13.
An abstention record identifies the evidence needed to resume the analysis, whereas a rejection record states which conflict or Probe requirement failed. In either case, the skill stops before Probe qualification.
C.3 Probe design, implementation, and qualification
Probe design.
Given an instantiated conflict, the skill designs the smallest fixed Probe set that reveals behavior-specific changes not already visible in the scalar task metric S. Candidate observables are prioritized in the following order: direct ground-truth measurements, existing model outputs, internal states, representation geometry, gradient quantities, known data structure, deterministic counterfactual inference, and fixed heuristics. Separately trained diagnostic models or synthetic auxiliary tasks are used only when no direct observable is available and require explicit justification.
A separate Probe is not required for each behavior. If S already measures one behavior at the relevant granularity, a single additional Probe for the other behavior is sufficient. Before evolution, the skill fixes the evaluation data, preprocessing, partitions, reference values, perturbations, randomness, aggregation, normalization, and desirable metric directions. Probe definitions cannot depend on errors made by future candidates, final-test information unavailable during evolution, or thresholds chosen after observing evolution outcomes.
Each Probe records the fields summarized in Table 14. These fields make the intended behavior, additional information, computational cost, and possible failure modes inspectable before the Probe is exposed to the evolution agent.
Read-only implementation.
In Implement mode, a code agent adds only the minimum evaluation function or diagnostic hook required to compute the fixed Probes. The implementation may load a checkpoint, access an existing output or internal state, and emit metric values. It may not modify the training objective, gradients, training data, model parameters, optimization procedure, or candidate-retention rule. Probe implementation therefore remains a measurement operation rather than an intervention. The modified files and Probe entrypoints are recorded in the Probe Card.
Calibration and model-specific checks.
Probe calibration assesses measurement variability under no intended model change, using model-specific sampling units and threshold estimators. Additional checks include structural-variant comparisons, candidate replay, and perturbation controls. Their scope and decision criteria depend on the model-specific protocol. Initial checks may precede Stage I, while continuation calibration is performed at the Stage-I boundary before probe-guided search. A worked example for SpecB–FNO is provided in Section C.5.
C.4 Outputs and reproducibility
ConflictGuide-Skill produces a structured Conflict Probe Card whose main fields are listed in Table 15. The same information is first presented as a concise human-readable summary, allowing researchers to inspect the selected mechanism, evidence boundary, competing behaviors, coupling, observability gap, and qualification state before using the machine-readable artifact.
The complete taxonomy is provided in Section D. The machine-readable taxonomy index, output schemas, validation scripts, and model-specific example Probe Cards will be released in a public repository upon acceptance. The schemas specify the required fields for model context, behavior instantiation, and Conflict Probe Cards, while the validation scripts check taxonomy selections and generated cards for structural consistency. The examples illustrate the expected reasoning process and output format rather than serving as model-name lookup rules: the skill independently screens the taxonomy for every new target model.
The skill also separates measurement specification from evolution policy. The Probe Card defines the scalar task metric, behavior-specific Probes, and their calibrated variability thresholds, but does not encode the Stage-I/Stage-II schedule, candidate-retention routes, or conflict-alleviation rule. These choices belong to the evolution protocol described in the main paper. This separation allows the conflict definition and its measurements to be inspected and qualified independently of the subsequent evolution algorithm.
C.5 Worked Example: SpecB–FNO
Model evidence and conflict instantiation.
SpecB–FNO predicts fluid dynamics using Fourier-mode mixing and a residual-correction pathway. The conflict is mapped to R2.M2 (frequency-structure mismatch) on the space axis. The two desirable behaviors are accurate prediction of dominant spectral components and accurate prediction of non-dominant components. Both depend on shared model components. The working hypothesis is that emphasizing dominant components can leave low-energy modes underfit, while stronger non-dominant correction can interfere with dominant-mode accuracy. This coupling is a model-specific hypothesis motivated by the architecture.
Probe construction.
The scalar task metric is validation NRMSE, which aggregates prediction errors across the field. A target-derived cumulative-energy mask separates dominant and non-dominant Fourier components independently of candidate predictions. The primary Probe is non-dominant relative NMSE, ZND, with lower values indicating better prediction of non-dominant components. Dominant-mode relative NMSE and late-rollout NRMSE serve as guard metrics. The complete definitions are provided in Appendix F.2.
Initial qualification.
Before Stage I, an initial panel evaluated three structural variants under three seeds, yielding nine evaluation records. The associated qualification report records that all model-specific gates passed and sets qualified_for_evolution=true. These records concern the specified structural-variant checks; they are not nine scalar-tied parent–candidate comparisons.
Calibration before Stage II.
After Stage I, the continuation protocol was calibrated using four paired no-edit comparisons and a four-seed transition replay. This calibration was completed and frozen before probe-guided continuation. The associated record also documents implementation repairs involving parameter materialization, optimizer coverage, and stage-fusion training.
For the documented historical continuation, the direct task route required Gt≥5×10−4. The auxiliary route required Gt≥2.5×10−4 and at least a 1% relative improvement in ZND, together with the registered dominant-mode and late-rollout anchor guards. These are the recorded execution rules for this continuation.
Appendix D Full Root–Axis–Mechanism Taxonomy
This appendix documents the fixed taxonomy used by ConflictGuide-Skill. The taxonomy contains nine top-level Roots, six Axes, 110 Root-specific mechanisms, and three standalone optimization artifacts. R7 is further divided into R7a–R7c because impossibility, normative–utility trade-offs, and boundary calibration require different diagnostic logic. The inventory below preserves all active mechanism identifiers, names, and core diagnostic definitions from the operational taxonomy. To keep the paper appendix inspectable, we omit repeated axis-specific examples, the machine-readable output schema, and implementation instructions; these remain in the released Skill specification.
D.1 Taxonomy conventions and selection rules
Root–Axis–Mechanism representation.
A Root specifies what the conflict fundamentally pulls against and therefore whether it can be removed by additional compute or instead requires a change in architecture, information, data, objectives, or evaluation. An Axis specifies where the conflict manifests: space, time, module, modality, population, or objective. A Mechanism specifies the concrete failure pattern. Each Root has an axis whitelist. A mechanism manifesting on multiple axes is recorded once per axis with separate evidence; this repetition does not create a new mechanism.
Selection order and evidence boundary.
ConflictGuide-Skill first selects a Root, then an admissible axis, and finally the most relevant mechanism. Every selection must be justified using the target model’s architecture, task and data, training objective, and evaluation setting. Relevance screening does not inspect evolution outcomes, ablations, clean-run results, or held-out test results. It cannot invent or rename Root, axis, or mechanism identifiers.
Root discriminator.
The primary test asks whether 100× more compute would dissolve the conflict. Conflicts that disappear or substantially ease are generally routed to R1, R5, or R6; persistent conflicts are routed to R2, R3, R4, R7, R8, or R9. When the answer is partial, both Roots are retained and linked rather than forced into a single category. For example, a memory wall may induce an R1 context bottleneck that in turn causes R3 information loss.
Causal links and optimization signatures.
Mechanism-level downstream_of and upstream_of links encode causal structure. R4 failures are often symptoms, whereas R8 and R9 frequently act upstream; R9 additionally makes evidence based on the affected metric provisional. Optimization signatures—including gradient-direction conflict, gradient-scale imbalance, loss domination, convergence-rhythm conflict, representation-demand conflict, Pareto incompatibility, and weighted-sum masking—annotate mechanisms rather than form a separate Root.
Independent-parameters test.
If a conflict would remain with completely independent parameters, its substantive Root is retained and any gradient pattern is only an optimization signature. If the conflict would disappear, it is a pure parameter-sharing or update-merging artifact and is represented by OPT.M1--OPT.M3.
D.2 Root and axis overview
The whitelists implement routing decisions. In particular, R2 and R6 exclude population: population shifts belong to R4, protected-group trade-offs to R7, and population-dependent annotation failures to R8. R6 concerns solution-space coverage, not demographic coverage.
D.3 Complete mechanism inventory
Table 17 lists all 110 active mechanisms. The definitions retain the diagnostic question from the fixed library; detailed axis-specific manifestations and cross-references are omitted only when they repeat the general rules above.
| ID | Mechanism | Core diagnostic definition |
|---|---|---|
| R1: Resource allocation vs fidelity | ||
| R1.M1 | Insufficient fidelity | Does the model systematically underfit the target because the allocated resolution, step count, or capacity is too low? |
| R1.M2 | Uniform allocation mismatch | Does a uniform allocation waste resources on easy cases while remaining insufficient for hard cases, long-tail cases, or complex samples? |
| R1.M3 | Insufficient expressive bandwidth | Is the current positional encoding, basis, feature map, latent grid, channel rank, codebook, recurrent width, or local representation insufficient to express the required rate of variation? - Primarily space and time. May be module when a specific branch’s rank is the limit, or modality when a specific modality’s encoder is the limit. - If the loss is informational rather than budgetary (i.e. more capacity would not help because the representation deliberately discards the factor), use R3 instead. |
| R1.M4 | Added freedom causing overfitting | After adding local parameters, high-frequency encoding, extra steps, extra depth, or extra experts, does the model become more likely to fit noise, label errors, spurious patterns, or training-set-specific details? |
| R1.M5 | Cross-partition consistency issue | Do outputs become inconsistent across the partitions created by the chosen axis? |
| R1.M6 | Local fidelity vs global structure competition | After strengthening local or short-range fidelity, does the model sacrifice global layout, long-range dependency, overall semantics, global constraints, or cross-region coordination? |
| R1.M7 | Cost superlinearity | Does covering a small number of hard cases require a disproportionate global increase in cost? |
| R1.M8 | Hardware / throughput wall | Does the model theoretically need more fidelity but is practically limited by the deployment envelope? |
| R1.M9 | Allocation imbalance | Are compute loads, sample counts, gradient amounts, or assignments severely imbalanced across the partitions of the chosen axis? |
| R1.M10 | Insufficient sharing | Does excessive partitioning prevent common patterns from being reused across similar regions, steps, modules, modalities, or clients? |
| R1.M11 | Redundant partitioning | Do multiple experts, adapters, heads, branches, local modules, steps, or scales repeatedly learn similar patterns instead of forming an effective division of labor? |
| R1.M12 | Allocation / iteration mechanism pathology | Is the mechanism that decides the allocation, or the operator that drives the iteration, itself unstable or degenerate? - Routing collapse (module): routing persistently favors a small number of experts, paths, adapters, token groups, or modules, leaving others underused. - Dynamic allocation instability (module, space, time): routing, adaptive depth, token selection, region refinement, or expert assignment is highly sensitive to small input perturbations, training stage, or batch composition. - Iterative dynamics pathology (time): the iteration operator itself causes error accumulation across steps, Jacobian contraction or expansion, representation collapse over depth, or vanishing/exploding propagation - the failure grows with step count rather than being relieved by it. - This is a control-loop or operator failure, not a budget shortfall. Do not select it merely because capacity is insufficient - that is R1.M1. Do not select it for state leaving the valid region without operator pathology - that is R1.M5 time. - Modality routing collapse is modality. |
| R1.M13 | Partitioning vs interpretability | As the number of modules, steps, scales, or routing paths increases, does model behavior become harder to interpret, attribute, or debug? |
| R2: Inductive bias vs signal structure | ||
| R2.M1 | Single-bias residual under_constrained | Does the dominant architecture, basis, operator, prior, or attention pattern fit only part of the signal while leaving systematic residuals on other structures? |
| R2.M2 | Frequency-structure mismatch under_constrained | Is the model biased toward low-frequency, smooth, or global patterns while ignoring high-frequency signals, abrupt changes, periodicity, spikes, or local oscillations? |
| R2.M3 | Scale-structure mismatch under_constrained | Is the model good at one scale but unable to handle local details, mid-scale compositions, and global layout simultaneously? - Primarily space; multi-timescale problems are time; cross-modal scale mismatch is modality. |
| R2.M4 | Temporal-component mismatch under_constrained | Does the model struggle to handle trend, seasonality, shocks, regime switches, long memory, and short-term fluctuations at the same time? |
| R2.M5 | Relational-structure mismatch under_constrained | Is the model good at local texture or token patterns but weak at object relations, graph relations, entity interactions, compositional rules, or causal relations? |
| R2.M6 | Structural property violation under_constrained | Does the model violate a property the task requires it to preserve? - Invariance (space): output changes when input order, entity permutation, node indexing, or patch order changes. - Equivariance (space, time): output fails to transform correspondingly under rotation, translation, scaling, coordinate transform, time shift, or graph isomorphism. - Monotonicity (objective, space): output moves non-monotonically, unstably, or in the wrong direction with respect to key variables. - Conservation (objective, time): output violates required conservation of mass, energy, probability, flow, budget, or inventory. - Geometric / topological (space): invalid coordinates, broken structures, boundary misalignment, incorrect spatial relations. - Valid state space (time): predicted state, latent state, intermediate state, or action falls into a physically, semantically, rule-wise, or task-definition-wise invalid region. - Cross-modal legality (modality): outputs valid per modality but jointly invalid. |
| R2.M7 | Weak-constraint shortcut under_constrained | Does the model exploit input order, absolute coordinates, data-collection artifacts, format patterns, or other structurally invalid regularities to obtain superficial performance? |
| R2.M8 | Global vs local bias mismatch under_constrained | Does global attention, global latent representation, or a low-rank operator ignore local anomalies; or does a local operator or convolution ignore long-range dependencies and global structure? |
| R2.M9 | Bias fragility under regime shift under_constrained | Is the current inductive bias suited only to the dominant regime in the training distribution, so that it fails when the proportions of structural components change? |
| R2.M10 | Local freedom breaking global legality under_constrained | Are local modules, adapters, experts, branches, or refinements individually reasonable, but collectively violating global structural constraints? |
| R2.M11 | Hybrid-branch redundancy under_constrained | After combining multiple branches, bases, experts, operators, or biases, do they fail to form clear roles and instead repeatedly fit the same type of structure? |
| R2.M12 | Branch interference under_constrained | Do different inductive-bias branches interfere with each other, causing structural components to be misassigned, redundantly explained, or canceled out? |
| R2.M13 | Fusion imbalance under_constrained | Does fusion, gating, attention, residual mixing, or aggregation persistently favor one branch, preventing other structural biases from contributing? |
| R2.M14 | Constraint-induced underfitting over_constrained | After enforcing invariance, equivariance, monotonicity, smoothness, or conservation, does the model fail to express true local heterogeneity, symmetry breaking, or non-ideal dynamics? |
| R2.M15 | Approximate symmetry over-enforcement over_constrained | Is the task symmetry only approximate, so that strict constraints incorrectly erase real deviations? |
| R2.M16 | Constraint vs noise conflict over_constrained | Do observation noise, measurement error, label error, or simulation error make hard structural constraints too rigid? - Primarily objective; space / time / modality for where the noise lives. - Record downstream_of an R8 mechanism when the noise is an annotation or data-process problem. |
| R2.M17 | Prior vs data conflict over_constrained | Does a physics prior, symbolic rule, domain constraint, or hand-specified dynamics pull against what the data actually shows? - Primarily objective. - When trained with shared parameters, record optimization_signature with gradient_direction_conflict. |
| R2.M18 | Excessive bias complexity over_constrained | After combining too many inductive biases, does the model become difficult to tune, unstable to train, hard to interpret, or dependent on complex module interactions? |
| R2.M19 | Cross-modal bias incompatibility under_constrained or over_constrained | Do different modalities require different scales, abstraction levels, temporal alignments, or inductive biases, but get forced into the same shared space or the same operator? |
| R3: Information sufficiency vs compression | ||
| R3.M1 | Bottleneck information loss | Does a latent bottleneck, pooling, downsampling, low-rank projection, quantization, or summary discard task-relevant detail? |
| R3.M2 | Excessive abstraction | Does a high-level abstract representation erase local differences, rare patterns, fine-grained classes, boundary information, or individual variation? |
| R3.M3 | Invariance deleting useful information | Does a factor removed for invariance actually contain useful information for certain tasks, slices, or conditions? |
| R3.M4 | Compression vs uncertainty | Does representation compression remove the evidence needed to estimate uncertainty, making confidence unreliable? - Primarily objective; space / time / modality for where the evidence was lost; population when uncertainty is lost specifically for some groups. |
| R3.M5 | Calibration degradation | Is accuracy normal while confidence, probability, interval, risk score, or uncertainty estimate is distorted? - Primarily objective; modality or population when calibration degrades on specific modalities or groups. |
| R3.M6 | Detail retention vs overfitting | Does retaining too much input detail cause the model to learn noise, individual-sample artifacts, spurious features, or privacy-sensitive information? |
| R3.M7 | Reconstruction vs prediction conflict | If the representation serves reconstruction, does it retain too much prediction-irrelevant information; if it serves prediction, does it lose information needed for reconstruction or fine-grained reasoning? |
| R3.M8 | Context summarization loss | After compressing long context, long sequences, historical trajectories, or multi-document input, are key facts, boundary conditions, minority evidence, or remote dependencies lost? - Primarily time; space for non-temporal token positions; modality for multi-document or multimodal input. |
| R3.M9 | Quantization / discretization damage | Does quantization, discrete tokenization, codebooks, hashing, or compact encoding damage continuous values, subtle differences, or rare-state expression? |
| R3.M10 | Compact representation damaging fine structure | Does low-rank factorization, compressed encoding, shared embedding, or other compact representation damage fine-grained structural expression? - Primarily space; time for fine temporal structure; modality for shared representations; objective for multi-task shared representations. |
| R3.M11 | Insufficient rank | Are representation dimension, latent rank, attention rank, embedding size, or memory slots insufficient to preserve all necessary factors simultaneously? |
| R3.M12 | Nuisance retention | Does the model fail to compress nuisance factors, leaving style, domain, speaker, background, format, or collection conditions in the representation? |
| R3.M13 | Insufficient sufficiency | Is an intermediate representation no longer sufficient for the downstream task, so that even a fully capable head, decoder, or policy cannot recover performance? - Primarily objective; time for intermediate sequence states; modality for per-modality representations; space for spatial encodings. |
| R3.M14 | Multi-objective representation demand conflict | Is the shared representation simultaneously required to retain detail, compress invariances, align modalities, reconstruct inputs, predict rewards, and satisfy constraints, creating incompatible demands? |
| R4: Empirical fit vs robust/OOD/causal generalization | ||
| R4.M1 | Shortcut learning | Does the model rely on background, format, position, templates, co-occurring words, texture, style, metadata, or collection artifacts as shortcuts? |
| R4.M2 | Spurious correlation | Does the model treat features that are correlated with the label in training but non-causal as primary prediction evidence? - Any of space, time, modality, population. |
| R4.M3 | ID accuracy masking OOD failure | Is average validation performance normal while performance under domain shift, time shift, site shift, sensor shift, style shift, population shift, or train/inference-procedure shift degrades significantly? - Primarily time, modality, population; space when the spatial distribution changes. - Includes train/inference mismatch (teacher forcing vs free running, quantization gap, prompt-distribution shift): the deployment procedure is a different distribution from the training procedure. |
| R4.M4 | Hidden group-performance failure | Do aggregate metrics hide systematic failures on specific groups, slices, minority classes, rare regimes, or long-tail samples? |
| R4.M5 | Non-robust feature reliance | Does the model use features that are imperceptible to humans, sensitive to tiny perturbations, or semantically unstable to improve standard accuracy? - Primarily space, modality; time for sequence perturbations. |
| R4.M6 | Causal feature underlearning | Are truly causal, stable, or cross-environment-valid features underlearned because their statistical signal is weaker? - Any R4 axis, depending on where the causal feature lives. |
| R4.M7 | Causality violation | Does the model use future information, leaked variables, posterior features, label-related shortcuts, or invalid temporal dependency? |
| R4.M8 | Counterfactual instability | When only non-causal factors change while core semantics remain the same, does the model output change when it should not? |
| R4.M9 | Augmentation mismatch | Does data augmentation, domain randomization, or robust regularization improve robustness to some perturbations while harming the original distribution or other perturbation types? |
| R4.M10 | Adversarial robustness vs clean accuracy | Does improving adversarial, worst-case, or perturbation robustness reduce clean accuracy or average performance? |
| R4.M11 | OOD calibration issue | Is the model still overconfident on OOD inputs, shifted slices, rare groups, or adversarial inputs? |
| R4.M12 | Worst-case vs average-case conflict | Does improving worst-group, worst-domain, or worst-case performance reduce average-case performance? |
| R4.M13 | Client / domain conflict | In federated or multi-domain training, do updates from different clients, domains, sites, or populations harm each other? |
| R5: Plasticity vs retention | ||
| R5.M1 | Catastrophic forgetting | After sequentially learning new tasks, domains, or data, does the model significantly forget old tasks, domains, or skills? |
| R5.M2 | Insufficient plasticity | After freezing parameters, limiting updates, or applying strong regularization to protect old knowledge, does the model fail to learn new tasks or distributions effectively? |
| R5.M3 | Shared parameter overwrite | Do updates from new data overwrite parts of the shared backbone, embeddings, memory, normalization statistics, or latent space that are important for old tasks? |
| R5.M4 | Representation drift | After a new training stage, do intermediate representations drift so that old heads, adapters, classifiers, decoders, or policies no longer fit? |
| R5.M5 | Insufficient replay / memory | Is memory, replay buffer, exemplar set, summary, or rehearsal data insufficient to preserve coverage of old distributions? |
| R5.M6 | New-old distribution conflict | Are new and old data distributions incompatible in label rules, input style, objective functions, user preferences, or environment dynamics? |
| R5.M7 | Personalization vs global generality | Does adaptation to a specific user, client, domain, or site damage the general capability of the global model? |
| R5.M8 | Module proliferation | To avoid forgetting, does the system keep adding task-specific adapters, experts, memory, or modules, causing parameter and management cost to grow continuously? |
| R5.M9 | Old constraint forgetting | After new-task updates, does the model forget old safety constraints, physical constraints, format constraints, style constraints, or behavior boundaries? |
| R5.M10 | Calibration drift | After continual updates, does confidence calibration drift on old domains, new domains, or mixed domains? |
| R5.M11 | Recency bias | Does the model over-adapt to recent data, causing long-term stable patterns or low-frequency old patterns to be overwritten? |
| R5.M12 | Negative backward transfer | Does learning a new task fail to help old tasks and instead reduce old-task performance? |
| R5.M13 | Capability tax from constraint training | After alignment, safety, fairness, privacy, or policy training, does the model degrade on certain core capabilities, open-ended tasks, creative tasks, or professional tasks? |
| R6: Exploration vs exploitation | ||
| R6.M1 | Insufficient exploration | Does the system converge too early to a small number of modes, actions, paths, candidates, experts, or solution-space regions? |
| R6.M2 | Insufficient diversity | Are outputs, generated samples, candidate solutions, trajectories, retrieved items, or action sequences highly repetitive, homogeneous, or mode-collapsed? - Primarily objective; time for the decoding process; module for expert-level collapse. |
| R6.M3 | Insufficient coverage | Does the model ignore long-tail modes, rare solutions, low-frequency classes, minority strategies, rare states, or non-mainstream candidates? |
| R6.M4 | Excessive exploration | After increasing randomness, diversity, candidate breadth, or novelty, do outputs become less stable, lower quality, or less aligned with the task goal? |
| R6.M5 | Fidelity vs diversity conflict | Does increasing diversity, temperature, entropy, search breadth, or novelty reduce factuality, coherence, precision, reward, or task success? |
| R6.M6 | Excessive exploitation | Does the model over-select current high-score, high-probability, high-reward, or high-confidence candidates, missing potentially better candidates with lower initial scores? |
| R6.M7 | Search breadth vs depth | Under a fixed budget, does increasing candidate count reduce evaluation depth, rollout length, verification strength, or refinement quality per candidate? |
| R6.M8 | Beam / top-k degeneration | Do beam search, top-k, top-p, reranking, or greedy selection produce repetition, templating, local optima, or lack of novelty? |
| R6.M9 | Novelty vs constraint conflict | When pursuing novelty, coverage, or diversity, does the model become more likely to violate structural constraints, task constraints, safety constraints, or real-world feasibility? - Primarily objective; module when driven by expert routing; time for the planning process. - Record upstream_of R2.M6 (structural) or R7 (normative) as appropriate. |
| R6.M10 | Rare mode vs common quality | Does improving rare-mode coverage damage common-case quality, average performance, or mainstream user experience? |
| R6.M11 | Exploration target misidentification | Does the system mistake noisy samples, outliers, unlearnable samples, or annotation-unstable samples for high-value exploration targets? |
| R7: Normative constraints vs utility | ||
| R7a.M1 | Fairness criteria incompatibility | Are different fairness criteria - calibration, equalized odds, demographic parity, individual fairness, subgroup fairness - provably impossible to satisfy simultaneously under the given base rates? |
| R7a.M2 | Preference aggregation impossibility | Do different populations, users, annotators, policy sources, or preference models disagree in a way that admits no consistent aggregate ordering? |
| R7a.M3 | Privacy-utility lower bound | Is the required privacy guarantee (e.g. a given epsilon) mathematically incompatible with the required accuracy at the available sample size? |
| R7b.M1 | Privacy vs accuracy | Does differential privacy, noise injection, gradient clipping, data minimization, redaction, or anonymization reduce accuracy or fine-grained performance? |
| R7b.M2 | Privacy vs personalization | After reducing user-data retention or limiting personalized memory, does the model struggle to provide long-term consistent, personalized, or context-relevant service? |
| R7b.M3 | Fairness vs average performance | Does improving performance for certain groups, minority slices, or worst groups reduce overall average performance? |
| R7b.M4 | Safety vs helpfulness | Do safety constraints cause overly conservative answers, insufficient information, or failure to complete otherwise reasonable tasks? |
| R7b.M5 | Harmlessness vs truthfulness | To avoid potential risk, does the model weaken, blur, evade, or distort information that should be provided accurately? |
| R7b.M6 | Helpfulness vs policy compliance | Does the user’s requested task goal conflict with policy, legal, ethical, safety, or deployment constraints? |
| R7b.M7 | Constraint stacking | Do privacy, fairness, safety, truthfulness, helpfulness, legal compliance, and business rules conflict with each other or jointly compress the usable output space below what the task requires? |
| R7c.M1 | Over-refusal | Does the model extend safety boundaries to safe requests, causing benign requests to be incorrectly refused? |
| R7c.M2 | Under-refusal | Does the model still provide assistance on high-risk, violating, misleading, or unauthorized requests where it should not? |
| R7c.M3 | Uneven boundary generalization | Does the policy behave inconsistently across languages, domains, user groups, expression styles, context lengths, or modalities? |
| R8: Data/annotation conflict | ||
| R8.M1 | Annotator disagreement | Do different annotators, raters, preference sources, or labeling passes assign different labels to the same or near-identical inputs, so that no single target is recoverable? |
| R8.M2 | Label definition ambiguity | Is the class boundary, rating scale, or target definition itself underspecified, so that the ceiling is set by the definition rather than by the model? |
| R8.M3 | Noise vs true long tail indistinguishability | Can the training signal not separate mislabeled samples from rare-but-real patterns, so that noise-robust training also suppresses genuine long-tail structure? |
| R8.M4 | Sparse / uneven supervision | Are local labels sparse, supervision uneven, or long-tail regions under-sampled, so that added local freedom yields unstable predictions? |
| R8.M5 | Label process drift | Have labeling conventions, guidelines, annotator pools, or rating rubrics shifted over time, so that “old” and “new” labels encode different functions? |
| R8.M6 | Label leakage | Does the annotation process itself introduce features correlated with the label that will not exist at deployment (annotation order, tooling artifacts, reviewer identity)? |
| R8.M7 | Aggregation loss | Does collapsing multiple annotations into a single hard label (majority vote, mean rating) discard the disagreement signal that carries real information about ambiguity or subpopulation difference? |
| R9: Evaluation–objective mismatch | ||
| R9.M1 | Proxy-goal divergence | Does optimization pressure on a visible reward, score, ranker, or proxy metric drive the system away from the true objective while the proxy continues to improve? (reward hacking) |
| R9.M2 | Metric insensitivity | Is the metric structurally incapable of registering the failure mode that matters - averaging it away, not sampling it, or scoring it as correct? |
| R9.M3 | Benchmark artifact overfitting | Does the model overfit benchmark format, annotation style, sampling bias, data-cleaning procedure, or evaluation protocol rather than the underlying capability? |
| R9.M4 | Benchmark saturation | Has the metric ceased to discriminate - near-ceiling scores that no longer track real capability differences? |
| R9.M5 | Validation-deployment gap | Does the evaluation distribution, interaction pattern, or scoring procedure differ from deployment in ways that make validation results non-transferable? |
| R9.M6 | Judge / reward-model unreliability | Is the evaluator itself (an LLM judge, learned reward model, or heuristic scorer) biased, gameable, or inconsistent, so that its scores do not support the conclusions drawn from them? |
| R9.M7 | Aggregate masking | Does a single headline number hide the trade-off structure underneath, so that a metric-neutral change is reported as no change when it is in fact a redistribution? |
D.4 Optimization artifacts and boundary decisions
The taxonomy applies the following consolidation boundaries. First, R1 captures a budgetary capacity limit, whereas R2 captures prior–signal mismatch and R3 captures information loss that additional compute alone cannot repair. Second, R4 describes model failure under shift; R8 captures upstream label or annotation failure; and R9 captures failure of the measurement apparatus. Third, sequential overwrite belongs to R5, while simultaneous interference is assigned to the relevant substantive Root and annotated with an optimization signature. Fourth, R6 covers exploration of solutions or actions, whereas population coverage is routed to R4 or R7. Fifth, R7a represents an incompatibility that has no jointly satisfying solution, R7b represents a real normative–utility frontier, and R7c concerns calibration of a decision boundary. Finally, OPT.M3 concerns aggregation by the training objective, while R9.M7 concerns aggregation by the evaluation metric; both may hold simultaneously.
The selection stage outputs taxonomy assignments and their evidence only. It does not design probes, controlled faults, experiments, repairs, training strategies, or code modifications. These operations are handled by subsequent ConflictGuide-Skill stages. The active inventory contains 110 R*.M* mechanisms and three OPT.M* artifacts; no historical ID migration table is part of the fixed library.
Appendix E Identifiability of Conflict-Alleviating Edits
We formalize the information provided by probes at a fixed code state and candidate evaluation. Here, identifiability refers to the ability to infer whether an edit alleviates a conflict from the feedback available to the agent. The analysis concerns feedback information; it does not assume that the coding agent uses that information optimally.
Behavioral target and observations.
For analysis, let bA(x) and bB(x) denote population-level scores for the desirable behaviors BA and BB, respectively, with larger values indicating better behavior. Define the candidate’s true behavior changes by
| 𝚫c,tB=[bA(xtet)−bA(xt)bB(xtet)−bB(xt)]. | (7) |
Let ℛc⊆ℝ2 be a fixed set of behavior changes judged to alleviate conflict c, and define
| Yt=𝕀[𝚫c,tB∈ℛc]. | (8) |
For example, ℛc could require both behaviors to be non-decreasing and at least one to improve. This population-level event is the target of inference; it is distinct from the operational criterion Ac(et)>τc, which is computed from probes using the model-specific reference and guard conditions.
Let 𝒲t contain the information common to the two feedback settings before the candidate’s evaluation, including xt, et, and the shared search context. The registered retention rule and its fixed settings τS, τc, and ℬc are also included in 𝒲t. The scalar and probe-augmented information sets for the same candidate are
| ℱtS=𝒲t∨σ(Gt),ℱtS,Z=ℱtS∨σ(𝐆c,tZ,Ac(et)), | (9) |
where ∨ joins information sets and σ(⋅) denotes the information generated by an observation. The score Ac(et) is computable from the probe feedback, including the required reference values and guard measurements. Probabilities below represent uncertainty about behavioral effects conditional on the information available to the agent.
Why scalar gain can be ambiguous.
Consider an illustrative setting in which the task gain locally equals the sum of the two behavior changes. For any u>0, the changes
| (2u,−u)and(u/2,u/2) | (10) |
both yield Gt=u. The first harms BB, whereas the second improves both behaviors. Thus, the scalar gain alone does not determine whether the edit jointly improves the behaviors. Probes that distinguish the two changes can resolve this ambiguity. Eq. (10) illustrates a possibility under scalar aggregation; it is not an assumption about the task metrics in our experiments.
Proposition 1: conditional information gain.
Let
| ptS=ℙ(Yt=1∣ℱtS),ptS,Z=ℙ(Yt=1∣ℱtS,Z). | (11) |
Suppose that, on a set of positive probability, 0<ptS<1 and the conditional distribution of 𝐆c,tZ differs between Yt=1 and Yt=0 after conditioning on ℱtS. Then observing probes strictly reduces the optimal squared-error risk for predicting Yt:
| RS−RS,Z | =𝔼[(ptS,Z−ptS)2]>0, | (12) | ||
| RS | =infp^ measurable w.r.t. ℱtS𝔼[(Yt−p^)2], | |||
| RS,Z | =infp^ measurable w.r.t. ℱtS,Z𝔼[(Yt−p^)2]. |
The reduction in optimal logarithmic-loss risk is likewise
| H(Yt∣ℱtS)−H(Yt∣ℱtS,Z)=𝔼[DKL(Bern(ptS,Z)∥Bern(ptS))]>0. | (13) |
Proof. The optimal squared-error predictor under an information set is its conditional expectation. Because ℱtS⊆ℱtS,Z, the tower property gives
| 𝔼[ptS,Z∣ℱtS]=ptS. | (14) |
Expanding Yt−ptS=(Yt−ptS,Z)+(ptS,Z−ptS) and taking expectations, the cross term vanishes by conditional expectation. Hence
| 𝔼[(Yt−ptS)2]=𝔼[(Yt−ptS,Z)2]+𝔼[(ptS,Z−ptS)2], | (15) |
which proves the equality in Eq. (12).
To establish strictness, suppose instead that ptS,Z=ptS almost surely. For any measurable set D of probe values, conditional expectation would then give
| ℙ(Yt=1,𝐆c,tZ∈D∣ℱtS) | (16) | |||
| =ptSℙ(𝐆c,tZ∈D∣ℱtS). |
Where 0<ptS<1, this implies equal conditional probe distributions for Yt=1 and Yt=0, contradicting the assumption. Therefore ptS,Z≠ptS with positive probability, making the squared-error reduction strictly positive. Finally, the standard conditional-entropy identity yields Eq. (13); its KL divergence is strictly positive wherever the two posteriors differ. □
The proposition requires probes to contain information about true conflict alleviation beyond the scalar gain and shared context. Probe qualification provides empirical grounds for using the measurements, but does not by itself prove this assumption for every candidate. A strict reduction in squared or logarithmic loss also need not produce a strict reduction in binary classification error: the posterior may change without crossing a decision threshold.
Identifiability of the operational retention decision.
The retention rule in Eq. (6) makes a separate, directly observable use of probes. Define
| Mt=𝕀[Gt∈ℬc],Qt=𝕀[Ac(et)>τc],qt=ℙ(Qt=1∣ℱtS). | (17) |
Since ℬc⊆[0,τS], the two branches of Eq. (6) are disjoint:
| Keep(et)=𝕀[Gt>τS]+MtQt. | (18) |
For binary retention decisions based only on ℱtS, the smallest possible probability of disagreeing with the operational rule is
| infδ measurable w.r.t. ℱtSℙ[δ≠Keep(et)]=𝔼[Mtmin{qt,1−qt}]. | (19) |
When Mt=0, the rule is determined by Gt. When Mt=1, a scalar-only decision must predict the unobserved binary value Qt, whose optimal conditional error is min{qt,1−qt}. In contrast, Qt and Keep(et) are measurable with respect to ℱtS,Z. Thus, if ℙ(Mt=1, 0<qt<1)>0, scalar feedback cannot exactly reproduce the probe-based retention decision, whereas probe feedback can. This statement concerns the specified operational rule; its agreement with the population-level event Yt depends on probe validity.
For a common sequence of evaluated edits, the Stage-II history ℋtS,Z refines the corresponding scalar history ℋtS by recording the probe changes of earlier edits. Proposition 1 therefore gives a conditional information rationale for using that history to guide subsequent proposals. It does not imply that every probe is informative, that a coding agent necessarily uses the additional information well, or that information gain alone guarantees improved task performance.
Appendix F Model-Specific Conflicts and Probe Metrics
This appendix instantiates the model-specific conflicts summarized in Table 1 and gives the complete definitions of their Probe metrics. Each conflict is represented by two desirable behaviors, BA and BB, coupled through a shared model mechanism Mc. The Probes are designed to expose changes in these behaviors that may be hidden by the scalar task metric S.
This section focuses on the conflict definitions and measurement procedures. Dataset splits, training schedules, evolution budgets, calibration thresholds, and retention rules are reported separately with the experimental configuration. Unless stated otherwise, all Probe construction choices, including masks, sample pairs, graph perturbations, filters, scales, anchors, and random seeds, are frozen before conflict-aware evolution. Test data are not used to construct or calibrate the Probes.
F.1 Common Notation and Reporting Protocol
Let fθ denote a trained candidate model with parameters θ. We use 𝒯, 𝒞, and 𝒱 for the frozen training, Probe-construction or calibration, and keep-validation sets, respectively. The official test set is excluded from all Probe construction and online evaluation.
A model-specific conflict is written as
| c=(BA,BB,Mc), | (20) |
where BA and BB are desirable behaviors and Mc is the mechanism through which they interact. Its Probe vector is
| 𝐙c(θ)=[Z1(θ),…,Zm(θ)]. | (21) |
The desirable direction of every component is stated explicitly using ↑ or ↓. Probe components are exposed separately rather than combined with S through a model-dependent weighted sum.
Each model-specific subsection identifies the taxonomy path, competing behaviors, and shared mechanism. It defines the scalar task metric S, the conflict-specific Probe metrics, and any model-specific guard metrics. For each metric, the formulas and accompanying text specify the measured quantities, desirable direction, and interpretation. The subsection also identifies construction choices held fixed across candidates and explains how the search-time measurements relate to formal evaluation.
Probe qualification is specified in the experimental protocol. It assesses determinism, whether observed Probe changes exceed no-edit evaluation noise, and whether the Probes distinguish behavioral effects among candidates with similar task performance. Numerical qualification thresholds and retention rules are given in Appendix G.
F.2 SpecB–FNO
Conflict instantiation.
SpecB–FNO performs autoregressive operator learning for two-dimensional incompressible Navier–Stokes dynamics. Its conflict instantiates R2.M2, frequency-structure mismatch, on the space axis. The competing behaviors are
| BA | :accurate prediction of dominant, energy-carrying modes, | (22) | ||
| BB | :accurate prediction of non-dominant spectral structure. | (23) |
Both behaviors depend on the shared spectral transformations, residual-correction path, and fusion of the spectral and spatial branches. Edits to these components therefore need not benefit the two behaviors equally.
Although full-field error depends on all frequencies, it tends to be driven by modes carrying most of the target energy. A candidate may consequently improve the scalar task metric by reducing dominant-mode error while leaving lower-energy spectral structure underfit. We use ZND to measure this non-dominant behavior separately.
Scalar task metric.
Let x denote a candidate implementation. For sample n and rollout step t, let 𝐲n,t∈ℝH×W and 𝐲^n,t(x)∈ℝH×W denote the target and predicted vorticity fields in physical scale. The scalar task metric is the mean per-sample, per-step full-field NRMSE:
| S(x)=SNRMSE(x)=1|𝒱keep|T∑n∈𝒱keep∑t=1T‖𝐲^n,t(x)−𝐲n,t‖2‖𝐲n,t‖2+ϵfield,S(x)↓, | (24) |
where 𝒱keep is the fixed keep-validation set, T is the rollout length, and ϵfield>0 is a numerical-stability constant. The norm is taken over the spatial grid. This metric measures overall predictive fidelity but does not isolate error in non-dominant spectral modes.
Fourier representation and spectral partition.
Let ℱr denote the orthonormal real-valued two-dimensional Fourier transform. The target coefficients and prediction residual coefficients are
| Yn,t,k | =ℱr(𝐲n,t)k, | (25) | ||
| Rn,t,k(x) | =ℱr(𝐲^n,t(x)−𝐲n,t)k, | (26) |
where k indexes a Fourier coefficient. Let 𝒦 denote the fixed set of Fourier modes represented by the spectral branch, and let wk denote the corresponding real-FFT Parseval weight.
The dominant/non-dominant partition is constructed once using only targets from a calibration set 𝒞, which is disjoint from 𝒱keep. For each k∈𝒦, define its aggregate calibration energy as
| ℰkcal=∑n∈𝒞∑t=1Twk|Yn,t,k|2. | (27) |
Let π order the retained modes by decreasing calibration energy:
| ℰπ1cal≥ℰπ2cal≥⋯. |
Using a fixed cumulative-energy threshold ρE, define
| r⋆=min{r:∑j=1rℰπjcal∑k∈𝒦ℰkcal≥ρE}. | (28) |
The dominant and non-dominant spectral sets are
| 𝒟={π1,…,πr⋆},𝒩=𝒦∖𝒟. | (29) |
The resulting partition is fixed across all candidates. Candidate predictions are never used to construct it.
Primary probe.
The primary probe is the normalized residual energy over the non-dominant spectral set:
| ZND(x)=∑n∈𝒱keep∑t=1T∑k∈𝒩wk|Rn,t,k(x)|2∑n∈𝒱keep∑t=1T∑k∈𝒩wk|Yn,t,k|2+ϵspec,ZND(x)↓, | (30) |
where ϵspec>0 is a numerical-stability constant. The numerator and denominator pool spectral energy over the same keep-validation samples, rollout steps, and frozen non-dominant modes. Thus, ZND measures residual energy relative to target energy within the representable non-dominant spectral structure.
Guard metrics.
We use two auxiliary metrics to detect whether an improvement in ZND is accompanied by worse dominant-mode fidelity or late-rollout accuracy. The dominant-mode normalized spectral error is defined analogously to ZND, with 𝒩 replaced by 𝒟:
| ZD(x)=∑n∈𝒱keep∑t=1T∑k∈𝒟wk|Rn,t,k(x)|2∑n∈𝒱keep∑t=1T∑k∈𝒟wk|Yn,t,k|2+ϵspec,ZD(x)↓. | (31) |
Let 𝒯late⊆{1,…,T} denote the fixed set of late rollout steps. The late-rollout relative error is
| Zlate(x)=1|𝒱keep||𝒯late|∑n∈𝒱keep∑t∈𝒯late‖𝐲^n,t(x)−𝐲n,t‖2‖𝐲n,t‖2+ϵfield,Zlate(x)↓. | (32) |
Here, ZND is the primary conflict-specific probe, whereas ZD and Zlate guard against degraded dominant-mode fidelity and late-rollout accuracy, respectively. These quantities are not combined with S(x) through a weighted scalar objective. Their roles in candidate retention are specified by the common evolution protocol.
Relation to formal evaluation.
Search-time ZND and formal ND-NMSE use the same functional definition and measure the same non-dominant spectral behavior. Their spectral partitions are constructed and frozen separately within the search-time and held-out evaluation protocols. Full-field NRMSE remains the primary task metric, while ZD and Zlate are used only as search-time guards. The retained Fourier set, Parseval convention, cumulative-energy threshold, rollout configuration, and evaluation splits are specified in Appendix G.
F.3 SNGP
Conflict instantiation.
SNGP combines a discriminative feature extractor with random Fourier features (RFFs), a Gaussian-process output layer, and mean-field predictive correction. Its conflict instantiates R3.M4, compression versus uncertainty, on the objective axis. The competing behaviors are
| BA | :discriminative class separation, | (33) | ||
| BB | :preservation of input-relative geometry in the pre-GP representation. | (34) |
They interact through the shared representation consumed by the RFF–GP head. Strong discriminative compression can improve class separation and predictive fit while non-uniformly distorting the local geometry used by the GP layer to express distance-aware uncertainty. Conversely, preserving this geometry can constrain aggressive discriminative compression.
We operationalize the two behaviors with
| 𝐙SNGP(x)=[Zmar(x),Zdist(x)],Zmar↑,Zdist↓, | (35) |
where x denotes a candidate implementation. Zmar measures vulnerable-tail class separation, whereas Zdist measures non-uniform distortion of input-relative geometry in the pre-GP representation. The latter is a mechanism-aligned proxy for the geometry supporting distance-aware uncertainty, rather than a direct estimate of predictive uncertainty.
Scalar task metric.
Let ℓi(x)∈ℝC denote the mean-field-corrected logits produced by candidate x for example i. A candidate-specific temperature is estimated on a calibration split:
| T^x=argminT>0[−1|𝒞temp|∑i∈𝒞templogsoftmax(ℓi(x)T)yi]. | (36) |
The scalar task metric is the temperature-scaled negative log-likelihood evaluated on the keep-validation split:
| S(x)=−1|𝒱keep|∑i∈𝒱keeplogsoftmax(ℓi(x)T^x)yi,S(x)↓. | (37) |
The calibration and keep-validation splits are disjoint. This scalar measures aggregate predictive fit, but does not reveal whether an improvement results from stronger class separation, better-preserved geometry, or a trade-off between the two.
Probe 1: vulnerable-tail centroid margin.
Let 𝐳i(x) denote the deterministic representation immediately before the GP classifier. We first normalize each representation:
| 𝐳~i(x)=𝐳i(x)max{‖𝐳i(x)‖2,ϵz}, | (38) |
where ϵz>0 is a fixed numerical-stability constant. For each class c, a candidate-specific normalized centroid is computed from the frozen training indices 𝒯c:
| 𝝁¯c(x) | =1|𝒯c|∑j∈𝒯c𝐳~j(x), | (39) | ||
| 𝝁~c(x) | =𝝁¯c(x)max{‖𝝁¯c(x)‖2,ϵz}. | (40) |
For each keep-validation example, its correct-class versus nearest-wrong-class cosine margin is
| mi(x)=𝐳~i(x)⊤𝝁~yi(x)−maxc≠yi𝐳~i(x)⊤𝝁~c(x). | (41) |
The probe summarizes the lower tail of these margins:
| Zmar(x)=Qqmar({mi(x):i∈𝒱keep}),Zmar(x)↑, | (42) |
where qmar is a fixed lower-quantile level. This probe emphasizes examples with weak class separation rather than average separation.
Probe 2: input–feature distance distortion.
Let 𝐮i∈ℝDu denote the fixed preprocessed input, and define the normalized input-space distance
| du(i,j)=‖𝐮i−𝐮j‖2Du. | (43) |
Before evolution, the evaluator constructs fixed same-class and cross-class pair panels,
| 𝒫sameand𝒫cross, | (44) |
from neighborhoods in the input space. These panels depend only on the frozen data and are reused for every candidate.
For each frozen pair (i,j), its distance in the candidate-dependent pre-GP representation is
| dz(x)(i,j)=‖𝐳i(x)−𝐳j(x)‖2Dz, | (45) |
and its log distance ratio is
| rij(x)=logmax{dz(x)(i,j),ϵd}max{du(i,j),ϵd}, | (46) |
where ϵd>0 is fixed. A candidate-specific shared median,
| r~(x)=median({rij(x):(i,j)∈𝒫same∪𝒫cross}), | (47) |
removes a common log-distance shift and therefore makes the probe insensitive to uniform global rescaling of the representation.
For each pair group g∈{same,cross}, define
| Dg(x)=Qqdist({|rij(x)−r~(x)|:(i,j)∈𝒫g}), | (48) |
where qdist is a fixed upper-quantile level. The distortion probe is
| Zdist(x)=maxg∈{same,cross}Dg(x),Zdist(x)↓. | (49) |
It measures pair-dependent distortion relative to the input space, rather than absolute feature scale, GP posterior variance, or corrected predictive uncertainty.
Guard metric.
Classification accuracy on the keep-validation split is used only as a safety guard:
| Zacc(x)=1|𝒱keep|∑i∈𝒱keep𝟏[argmaxcℓi,c(x)=yi],Zacc(x)↑. | (50) |
Because positive temperature scaling does not change the predicted class, this metric is computed directly from the mean-field-corrected logits. For a Stage-II candidate x′ and the fixed Stage-I anchor a, the guard is
| 𝒜SNGP(x′)=𝟏[Zacc(x′)≥Zacc(a)−δacc]. | (51) |
The guard prevents probe improvements from being retained at the cost of a material loss in classification accuracy. It is not included in the probe vector or combined with NLL through a weighted scalar objective.
Relation to formal evaluation.
The search-time quantities serve different roles from the held-out evaluation metrics. The scalar objective S measures validation NLL during evolution, whereas predictive fit is formally assessed by clean NLL on held-out test data. These quantities measure the same aggregate behavior but are not numerically identical because they use different data and evaluation protocols. The probes Zmar and Zdist expose in-distribution representation mechanisms associated with class separation and distance-aware uncertainty, respectively; they do not directly optimize an OOD dataset or predictive uncertainty score. Formal uncertainty performance is instead evaluated on held-out OOD data using a ranking-based Dempster–Shafer metric. Finally, Zacc is used only as a search-time safety guard, rather than as a conflict probe or primary formal evaluation metric. The quantile levels, pair-panel construction, numerical constants, and guard tolerance are specified in Appendix G.
F.4 ESN
Conflict instantiation.
An echo-state network (ESN) uses a recurrent reservoir to transform an input sequence before fitting a linear readout. Its conflict instantiates R2.M4, temporal-component mismatch, on the time axis. The competing behaviors are
| BA | :retention of sensitivity to past reservoir states, | (52) | ||
| BB | :state-dependent nonlinear temporal processing. | (53) |
Both behaviors are controlled by the reservoir state transition. Dynamics that remain close to linear may preserve past-state sensitivity but provide limited nonlinear transformation, whereas strong state-dependent contraction or saturation may erase that sensitivity over long delays.
Let x denote a candidate implementation of the reservoir update. For trajectory realization q, define
| 𝐡q,t(x)=Fx(𝐡q,t−1(x),𝐮q,t), | (54) |
where 𝐡q,t(x)∈ℝnh is the reservoir state, 𝐮q,t is the current input, and q identifies the frozen sequence–reservoir realization used by the evaluator.
The conflict-specific Probe vector is
| 𝐙ESN(x)=[Zmem(x),Znl(x)],Zmem↑,Znl↑. | (55) |
The first Probe measures the transmission of local state sensitivity across time, whereas the second measures how the local state–input transition varies over the realized trajectory.
Scalar task metric.
For candidate x and trajectory realization q, a ridge readout is fitted on the registered readout-training segment. Let y^q,t(x) and yq,t denote the prediction and target on the disjoint evolution-validation segment 𝒱q, and let
| y¯q=1|𝒱q|∑t∈𝒱qyq,t. | (56) |
The realization-level normalized error is
| Sq(x)=∑t∈𝒱q(y^q,t(x)−yq,t)2∑t∈𝒱q(yq,t−y¯q)2. | (57) |
Thus, the normalization uses centered target energy; it is not based on target range or on an already standardized RMSE. For the frozen set 𝒬evo of evolution realizations, the unique scalar metric used for search-time task feedback is
| S(x)=1|𝒬evo|∑q∈𝒬evoSq(x),S(x)↓. | (58) |
MSE and R2 may be recorded as task diagnostics, but they do not participate in search-time retention; formal evaluation reports them as additional task metrics.
Probe 1: Jacobian-product memory retention.
For trajectory q, the recurrent-state Jacobian at time t is
| Jq,t(x)=∂Fx(𝐡q,t−1(x),𝐮q,t)∂𝐡q,t−1(x). | (59) |
For delay d, define the ordered Jacobian product
| Pq,t,d(x)=Jq,t(x)Jq,t−1(x)⋯Jq,t−d+1(x)=∂𝐡q,t(x)∂𝐡q,t−d(x). | (60) |
It measures how local perturbations to a past reservoir state are transmitted to the state at the anchor time. It does not directly measure recovery of a past input, because the input Jacobian is not included.
Let 𝒯anc be the frozen set of anchor times and 𝒟lag={1,…,dmax} the evaluated delays. An anchor is therefore the pair (q,t) with q∈𝒬evo and t∈𝒯anc. For one realization,
| Zmem(q)(x)=1|𝒯anc||𝒟lag|nh∑t∈𝒯anc∑d∈𝒟lag∑j=1nhmin{σj(Pq,t,d(x)),1}. | (61) |
The reported Probe averages over the frozen realizations,
| Zmem(x)=1|𝒬evo|∑q∈𝒬evoZmem(q)(x),Zmem(x)↑. | (62) |
Clipping each singular value at one prevents expansive directions from receiving more credit than unit transmission. Higher values therefore mean that local sensitivity to more past-state directions is retained over the evaluated delays. The clipping does not by itself distinguish unit transmission from expansion and should not be interpreted as a complete stability measure.
Probe 2: local nonlinear variation.
To characterize state-dependent changes in the transition, define the joint state–input Jacobian
| Kq,t(x)=∂Fx(𝐡q,t−1(x),𝐮q,t)∂[𝐡q,t−1(x);𝐮q,t], | (63) |
where [⋅;⋅] denotes concatenation. Its realization-specific anchor mean is
| K¯q(x)=1|𝒯anc|∑t∈𝒯ancKq,t(x). | (64) |
The normalized variation for realization q is
| Znl(q)(x)=1|𝒯anc|∑t∈𝒯anc‖Kq,t(x)−K¯q(x)‖F21|𝒯anc|∑t∈𝒯anc‖Kq,t(x)‖F2+ϵnl. | (65) |
The second Probe is
| Znl(x)=1|𝒬evo|∑q∈𝒬evoZnl(q)(x),Znl(x)↑. | (66) |
Here ∥⋅∥F is the Frobenius norm. An affine transition has a location-independent Jacobian and hence zero numerator. The denominator removes overall Jacobian scale, so the Probe responds to state–input-dependent variation rather than to a uniformly large linear response. It is a mechanism-level proxy for nonlinear processing, not a direct measure of task-useful nonlinearity; large local variation is interpreted together with the scalar task metric and the companion memory Probe.
Guard metric.
No additional model-specific stability guard is registered for ESN. In particular, the evaluator does not compute or select on a separate Jacobian-expansion statistic. Candidate validation still enforces finite and deterministic state transitions, the registered operation bound, and dependence on both recurrent and input projections. The conflict-aware retention route additionally requires non-negative task gain and a calibrated improvement in one Probe without a beyond-threshold degradation of the other. Thus, no edit with degraded search-time NRMSE can be retained through the Probe route. Exact thresholds and retention logic are given in Appendix G.
Relation to formal evaluation.
Sequence realizations, reservoir matrices, anchor times, and delay indices are fixed across candidates, while candidate-dependent states and Jacobians are recomputed under this common workload. Zmem and Znl are readout-free search-time Probes of reservoir dynamics, whereas the scalar task metric is computed after fitting the ridge readout. This separates the measured reservoir mechanisms from downstream predictive performance.
Formal NRMSE uses the same centered-target-energy normalization as Eq. (57), but is evaluated on independent held-out sequence–reservoir pairs; formal MSE and R2 are additional task-reporting metrics. Mackey–Glass long-horizon transfer tests whether the selected reservoir dynamics translate into improved downstream forecasting, but its prediction error is not identical to either Probe. The exact anchor count, delay range, sequence lengths, reservoir seeds, numerical constant, singular-value computation, and transfer horizons are specified in Appendix G.
F.5 GCNII
Conflict instantiation.
GCNII propagates node representations through a normalized graph adjacency while retaining an initial residual and an identity mapping. Its conflict instantiates R2.M5, relational-structure mismatch, on the space axis. The competing behaviors are
| BA | :effective use of informative neighborhood messages, | (67) | ||
| BB | :resistance to incompatible-message contamination. | (68) |
They interact through the same propagation path: suppressing neighborhood propagation can discard useful relational evidence, whereas stronger or less selective aggregation can amplify incompatible messages. Clean validation NLL provides task-level evidence of useful aggregation, but it does not isolate neighborhood utility from node features and classifier quality. The conflict-specific Probe therefore measures the additional loss induced by frozen high-disagreement message substitutions.
The conflict-specific Probe vector contains one scalar:
| 𝐙GCNII(x)=[Zdis(x)],Zdis(x)↓, | (69) |
where x denotes a candidate implementation evaluated by the frozen training and validation procedure.
Scalar task metric.
Let A denote the clean graph representation, X the node-feature matrix, and 𝒱keep the keep-validation nodes. Let 𝒩(A) denote the fixed GCNII preprocessing operator that inserts self-loops and applies the evaluator’s adjacency normalization. For candidate x, px(⋅∣𝒩(A),X)i denotes the predictive distribution of the trained candidate at node i. Define
| ℒNLL(x;A,X,𝒱keep)=−1|𝒱keep|∑i∈𝒱keeplogpx(yi∣𝒩(A),X). | (70) |
The search-time scalar task metric is
| S(x)=ℒNLL(x,A,X,𝒱keep),S(x)↓. | (71) |
Clean accuracy is recorded as a task diagnostic, but S(x) is the scalar metric used for online task comparison.
Frozen disagreement intervention.
Let a be the frozen Stage-I anchor. To obtain a label-independent signal for intervention construction, evaluate its trained predictor using only self-loops:
| 𝐪i=pa(⋅∣𝒩(Aself),X)i, | (72) |
where 𝐪i is a class-probability vector and Aself contains no inter-node messages. For receiver i and candidate source j, define
| 𝐪¯ij=𝐪i+𝐪j2 | (73) |
and
| JS(𝐪i,𝐪j)=12KL(𝐪i∥𝐪¯ij)+12KL(𝐪j∥𝐪¯ij), | (74) |
where KL is the Kullback–Leibler divergence.
For a fixed fraction ρ of eligible incoming non-self messages to keep-validation receivers, the original source is replaced by a frozen train-or-validation non-neighbor selected from a degree-matched pool to maximize Eq. (74). Repeating this construction produces K frozen raw graph realizations
| Adis(1),…,Adis(K). | (75) |
The construction reads neither ground-truth labels nor test nodes. Thus, the intervention construction is label-free; the subsequent NLL evaluation is not, because it necessarily uses keep-validation labels.
Replacements operate on the evaluator’s stored receiver–source edge representation. They do not impose additional reciprocal edges. Every clean or perturbed raw graph is subsequently processed by the same self-loop and normalization operator 𝒩, so the intervention changes message sources without changing the GCNII graph-preprocessing convention. The anchor predictions, selected replacement pairs, and all intervention realizations are frozen before conflict-aware evolution and cannot be changed by a candidate. Exact values of ρ and K, the degree-matched pool, construction seeds, tie handling, and graph hashes are specified in Appendix G.
Primary Probe.
For a trained candidate x, first evaluate Eq. (71) on the clean graph. Without retraining or fine-tuning x, perform an additional forward evaluation on each frozen perturbed graph. The disagreement sensitivity is
| Zdis(x)=1K∑k=1K[ℒNLL(x,Adis(k),X,𝒱keep)−S(x)],Zdis(x)↓. | (76) |
Subtracting the candidate’s own clean NLL removes its candidate-specific clean-loss level and isolates the incremental cost of disagreement contamination. A smaller value therefore indicates greater resistance to incompatible incoming messages, rather than merely better clean classification. The quantity is not clipped at zero: a negative realization is valid and means that the particular frozen intervention did not increase NLL. Online parent–candidate comparisons use the same intervention set and paired training seeds; their aggregation and retention rule are given in Appendix G.
Guard metric.
GCNII introduces no additional model-specific guard metric. A small Zdis alone is insufficient, because a low-quality predictor that is uniformly insensitive on both clean and perturbed graphs could also produce a small contaminated-minus-clean difference. The common task condition therefore requires non-degraded clean validation NLL before a Probe improvement can support retention. Clean NLL is the scalar task metric, not an additional conflict Probe; exact tie handling and numerical tolerances are specified in Appendix G.
Relation to formal evaluation.
Zdis is a search-time measure of the incremental validation loss caused by frozen high-disagreement message substitutions. Formal evaluation applies the same contaminated-minus-clean functional to held-out evaluation nodes:
| ΔNLLcontam=NLLcontaminated−NLLclean. | (77) |
This difference, rather than contaminated NLL alone, is the formal quantity most directly corresponding to the Probe. The formal stress test and the search-time Probe use the same sensitivity functional but need not use the same intervention-construction information: formal contamination may use held-out ground-truth incompatibility because it is computed only after source selection and cannot affect evolution. Clean accuracy and clean NLL remain task-performance metrics. On Wisconsin, ConflictGuide reduces mean contaminated NLL in all three rounds, whereas the mean contamination-induced increase is reduced only in round 2 relative to AutoResearch. Formal replacement rules, perturbation realizations, and aggregation across evaluation splits are specified in Appendix G.
F.6 TCM–Lite
Conflict instantiation.
TCM–Lite is a learned image codec comprising an analysis transform, quantized main and hyper latents, an entropy model, and a synthesis transform. Its conflict instantiates R3.M10, compact representation damaging fine structure, on the space axis. The competing behaviors are
| BA | :entropy-efficient latent coding, | (78) | ||
| BB | :multiscale fine-detail preservation. | (79) |
The two behaviors interact through the shared quantized representation and synthesis path. Reducing the entropy of the transmitted latents can suppress edges and textures, whereas preserving additional spatial detail can require a less compact representation.
The conflict-specific Probe vector is
| 𝐙TCM(x)=[Zrate(x),Zdetail(x)],Zrate(x)↓,Zdetail(x)↓, | (80) |
where x denotes a candidate implementation evaluated under the frozen training and validation procedure. The first Probe exposes the estimated coding rate, while the second measures multiscale luminance-gradient distortion. Thus, Zdetail operationalizes fine-detail preservation through luminance-gradient structure; it does not directly measure chromatic detail.
Because the scalar rate–distortion objective aggregates rate and pixel distortion, similar scalar values can mask different changes in coding rate and spatial detail. The two behaviors are therefore exposed separately. This observability limitation is not treated as a second physical conflict.
Scalar task metric.
Let 𝒱keep denote the fixed evolution-validation image set. For image n, let 𝐘n∈[0,1]C×Hn×Wn be the target and let 𝐘^n(x) be the reconstruction produced by candidate x, where C=3. Define the total number of evaluated spatial pixels as
| Npix=∑n∈𝒱keepHnWn | (81) |
and the mean RGB reconstruction error as
| Dmse(x)=∑n∈𝒱keep‖𝐘n−𝐘^n(x)‖F2CNpix. | (82) |
At the fixed online operating point, the scalar task metric is the rate–distortion objective
| S(x)=Zrate(x)+λRDκpix2Dmse(x),S(x)↓, | (83) |
where λRD>0 is the frozen rate–distortion multiplier and κpix converts normalized image differences to the pixel scale used by the evaluator. The exact operating point and pixel convention are specified in Appendix G. Although Zrate contributes to S(x), the scalar value does not reveal whether a change arose from rate, pixel distortion, or an offsetting movement between the two.
Probe 1: estimated latent rate.
Let 𝐲^(x) and 𝐳^(x) denote the quantized main and hyper latents produced by candidate x. Let px(y^i(x)) and px(z^j(x)) denote the corresponding entropy-model likelihoods. This notation leaves implicit all model-specific conditioning, including hyperprior information and the entropy context available for the main latent.
The estimated numbers of coded bits for the two latent streams are
| bitsy(x) | =−∑ilog2max{px(y^i(x)),ϵp}, | (84) | ||
| bitsz(x) | =−∑jlog2max{px(z^j(x)),ϵp}, | (85) |
where the indices range over every latent symbol generated for 𝒱keep and ϵp>0 prevents taking the logarithm of zero.
The estimated-rate Probe is
| Zrate(x)=bitsy(x)+bitsz(x)Npix,Zrate(x)↓. | (86) |
It is measured in estimated bits per input pixel. A lower value indicates that the candidate assigns higher likelihood to its quantized latent representation and therefore predicts a more compact coded representation. It is an entropy-model estimate and need not exactly equal the number of bits produced by arithmetic coding.
Probe 2: multiscale detail distortion.
Let ℒ(⋅) denote the fixed RGB-to-luminance transform, 𝒟s(⋅) the fixed downsampling operator at scale s∈𝒮, and ∇ the fixed two-direction Sobel operator. For target image n and candidate x, define
| Ln,s | =𝒟s(ℒ(𝐘n)), | (87) | ||
| L^n,s(x) | =𝒟s(ℒ(𝐘^n(x))). | (88) |
The normalized gradient discrepancy at scale s is
| Ds(x)=∑n∈𝒱keep‖∇Ln,s−∇L^n,s(x)‖1∑n∈𝒱keep(‖∇Ln,s‖1+‖∇L^n,s(x)‖1)+ϵdetail, | (89) |
where the ℓ1 norm sums over spatial positions and both Sobel-gradient directions, and ϵdetail>0 stabilizes the normalization.
The multiscale detail Probe is
| Zdetail(x)=1|𝒮|∑s∈𝒮Ds(x),Zdetail(x)↓. | (90) |
This symmetric normalization reduces sensitivity to the absolute amount of gradient energy in the image. A lower value indicates that the reconstruction more closely preserves the target’s multiscale luminance-edge and texture structure. It should not be interpreted as a complete perceptual-quality metric or as a measurement of color-detail preservation. The scale set, luminance coefficients, downsampling rule, Sobel kernels and padding convention, and numerical stabilizers are specified in Appendix G.
Guard metric.
TCM–Lite uses no additional model-specific guard metric. The scalar rate–distortion metric S(x) provides the aggregate task measure alongside the rate and detail Probes. A change in either Probe alone does not establish an improvement in overall rate–distortion performance.
Relation to formal evaluation.
The evolution-validation images and Probe transformations are fixed across candidates. Online Zrate is computed from entropy-model likelihoods, whereas formal rate evaluation uses realized arithmetic-coded bitstreams on held-out images.
Let bn(x) be the total number of coded payload bytes in the main- and hyper-latent streams for held-out image n. Its actual rate is
| bppactual,n(x)=8bn(x)HnWn. | (91) |
The reported dataset-level rate is the unweighted mean over images:
| bppactual(x)=1Nimg∑n=1Nimgbppactual,n(x). | (92) |
Actual bpp measures the same coding-rate behavior as Zrate, but need not equal the likelihood-based estimate.
Formal detail evaluation applies the same luminance transform, multiscale downsampling, Sobel operator, and normalized gradient discrepancy to held-out images, then averages the per-image results. It measures the same detail-preservation behavior as Zdetail, although the data and aggregation differ from the online patch-level Probe. MS-SSIM and PSNR provide complementary reconstruction-quality measures. Held-out metrics are unavailable during evolution. The exact operating points, image and coding conventions, and Probe settings are specified in Appendix G.
Appendix G Experimental Details
This section specifies the data isolation, evolution substrates, editable boundaries, proposal accounting, and held-out evaluation used across the five model families. We follow the notation and retention rules defined in Sections 3.1 and 3.3; model-specific Probe definitions are provided in Appendix F. Held-out metrics are computed only after the terminal source has been frozen and are never used during evolution.
G.1 Common two-stage evolution protocol
Candidate evaluation and state isolation.
Each iteration uses a fresh coding-agent session. A candidate is evaluated under the same frozen data split, training seeds, perturbations, and resource limits that produced the registered metric record for the current incumbent. The candidate is initialized according to the model-specific training procedure rather than from the incumbent’s trained weights.
The incumbent need not be retrained or reevaluated at every iteration. Its metric record may be reused while its source hash and all evaluator, split, seed, and frozen-asset hashes remain unchanged. Evaluators requiring explicit paired reevaluation instead recompute the incumbent and candidate within the same invocation. When an edit is retained, its source and registered metric record become the new incumbent. No candidate is warm-started from inherited weights, optimizer state, fitted temperature, or covariance state. The controller history, source hashes, decisions, and eligible incumbent-metric cache persist as evolution metadata.
Matched two-stage construction.
For each search round, identified by its search seed, Stage I is run independently from the registered reference under task-only feedback. Its terminal incumbent, denoted by ar=xT1(r), is the common branch point for that round. Thus, the three reported search rounds contain three independently generated Stage-I trajectories; a Stage-I trajectory is shared only by the matched Stage-II continuations within the same round.
Within each round, the scalar-only and ConflictGuide continuations start from the same source hash and use the same evaluator, data seeds, editable source boundary, training recipe, resource limits, and proposal budget, as detailed in the Appendix G.4. The coding-agent model and base prompt contract are also fixed. The current source and accumulated history naturally diverge after branching because the two arms may retain different edits.
The scalar-only continuation follows the standard AutoResearch retention rule, whereas ConflictGuide follows Eq. (6) and additionally receives the qualified conflict and Probe feedback, together with registered route or rejection information where available. Where the evaluator computes hidden Probes in the scalar-only arm to match evaluation cost, these values are neither exposed to the agent nor used for retention. Rejected and invalid proposals leave the incumbent unchanged. In trajectory plots, the incumbent is carried forward until the next accepted edit and through the budget endpoint. The reported result is the terminal incumbent, not a candidate selected using held-out metrics.
Proposal and failure accounting.
A proposal consumes one iteration once the controller has materialized a candidate-source artifact, including candidates that subsequently fail static validation, crash, produce non-finite values, exceed the memory limit, or time out. A service failure before a candidate artifact is produced is retried without consuming the proposal budget. Each attempted source, source hash, parent hash, evaluation status, metric record, retention decision, and incumbent update is recorded in an append-only ledger. After every rejection, the exact parent source is restored.
G.2 Model-specific evolution and evaluation protocols
Split design and data isolation.
We distinguish the evolution substrate from the formal evaluation protocol. The former is a deterministic, reduced-cost proxy that makes hundreds of candidate evaluations feasible; the latter restores the full model and benchmark-scale data after the terminal source has been frozen. The benchmark datasets and formal split conventions follow the corresponding model literature: the 1,000/200 Navier–Stokes convention used by FNO-family studies (Li et al., 2021; Tran et al., 2021), the official CIFAR-100 train/test partition used by SNGP (Krizhevsky, 2009; Liu et al., 2020), the seven-dataset, ten-split GCNII protocol (Chen et al., 2020; Pei et al., 2020), standard NARMA and Mackey–Glass reservoir-computing benchmarks (Verstraeten et al., 2007; Ceni and Gallicchio, 2024; Mackey and Glass, 1977), and full-image Kodak evaluation used in learned image compression (Liu et al., 2023). In contrast, the exact search-time counts, such as the 200/48/48 SpecB–FNO allocation and the 2,048-patch TCM–Lite panels, are fixed computational allocations introduced for evolution; they are not claimed to be benchmark splits prescribed by the cited studies.
For every search seed, all search-time data roles, sample indices, random seeds, and derived Probe assets are fixed before they are used for candidate selection. When separate data are required for nuisance-parameter fitting, Probe construction, qualification, or audit, their roles are fixed as specified below. In particular, the SpecB–FNO spectral mask and SNGP temperature are estimated on panels disjoint from keep-validation. The GCNII online perturbation graphs instead use keep-validation receivers, but are constructed once at the Stage-I branch point without test nodes or ground-truth labels and are then shared unchanged by the matched Stage-II arms. Audit and formal-test data are unavailable to both the coding agent and the online retention controller. Within a search seed, matched Stage-II arms reuse the same frozen data manifest.
Source transfer and reporting.
Formal evaluation begins only after the terminal source hashes have been frozen. Only source code and architecture are transferred; proxy weights, optimizer states, fitted calibration parameters, Probe thresholds, and validation checkpoints are discarded. The reference and all compared terminal sources are retrained from scratch using paired seeds or official splits. Held-out data are never used for online retention or source selection.
SpecB–FNO, SNGP, and TCM–Lite use the checkpoint at the end of their fixed training schedules. GCNII selects checkpoints using clean validation NLL, whereas ESN fits a fresh closed-form readout for every paired configuration. No test metric is used for checkpoint selection. Unless stated otherwise, reported dispersions are sample standard deviations.
Table 19 summarizes the data roles. “Keep-val” denotes the split used for online parent–candidate decisions; it is not a formal test set.
G.2.1 SpecB–FNO
Evolution data and task.
We use NavierStokes_V1e-5_N1200_T20.mat at viscosity ν=10−5 and spatial resolution 64×64. Each example provides ten context frames followed by a ten-step autoregressive target rollout. The dataset contains the 1,000 training and 200 held-out test trajectories used in the FNO-family benchmark convention (Li et al., 2021; Tran et al., 2021). The official 200-example test set is never loaded during evolution.
Within the 1,000-example training pool, the proxy assigns 200 examples to candidate fitting, 48 to construction of the frozen dominant/non-dominant spectral partition, and 48 to keep-validation. The remaining 704 examples are deliberately unused online. Reducing candidate fitting to 200 trajectories makes repeated autoregressive training feasible under the matched proposal budget. The two 48-example panels are equal-size, disjoint computational allocations: one fixes the spectral mask without observing keep-validation, and the other supports online retention. We do not attribute these exact counts to the FNO literature or claim that they are an estimator-optimal split. Channels are standardized for training and converted back to physical scale before spectral metrics are evaluated. The scalar task metric is ten-step keep-validation NRMSE.
Evolution model and optimization.
The proxy has width 32, four Fourier layers, 32 retained modes, one residual corrector, pointwise-MLP expansion 2, GELU activations, and coordinate input. It is limited to 30M parameters and an 8-GiB device-memory envelope. Each candidate is trained for 16 base epochs followed by 16 residual-refinement epochs with batch size 16. We use AdamW with learning rate 5×10−4, zero weight decay, cosine decay, gradient-norm clipping at 10, deterministic execution, and no mixed precision.
Editable boundary.
The agent may edit the Fourier spectral transform and gates, the internal residual-corrector architecture, and fusion between the spectral and spatial branches. It may not alter the data manifest, rollout definition, objective, trainer, evaluator, formal test, input/output interface, epoch budget, or resource limits.
Formal evaluation.
After source freezing, the first 1,000 trajectories are repartitioned into 800 training, 100 mask-construction, and 100 validation examples. This increases training coverage while retaining a mask panel independent of formal validation. The selected source is instantiated as the full model, with width 100, eight Fourier layers, 32 retained modes, and one residual corrector. It is trained for 100 base epochs followed by 100 residual-refinement epochs with batch size 40, AdamW at 2×10−4, zero weight decay, cosine decay, gradient-norm clipping at 10, deterministic execution, and no mixed precision. Paired training seeds are 1, 3, and 4.
The untouched 200-example official test set reports full-field NRMSE and non-dominant-mode NMSE (ND-NMSE). Dominant-mode error is retained only as a spectral guard or diagnostic when reported; it is not substituted for the task metric. Parameter count is descriptive and is not used for model selection. Results are reported as mean ± sample standard deviation over the three paired training seeds.
G.2.2 SNGP
Evolution data and task.
CIFAR-100 provides 50,000 official training and 10,000 official test images (Krizhevsky, 2009). We split the training set within each class into 400/20/30/50 images for candidate training, temperature calibration, keep-validation, and audit, respectively. Per-class stratification preserves the original class balance in every search-time panel. The 2,000-image temperature panel is separate because fitting temperature on keep-validation would adapt a nuisance parameter to the same examples used to retain edits; this separation follows the role of held-out calibration in temperature scaling (Guo et al., 2017). The 5,000-image audit panel is unavailable to proposal generation and retention and is reserved only for protocol-level checks; it is neither used to select the online winner nor reported as a formal test set. The exact 400/20/30/50 allocation is our search-throughput design, not an SNGP benchmark split.
Training augmentation uses four-pixel padding, a random 32×32 crop, horizontal flipping, and fixed CIFAR-100 normalization. Calibration, keep-validation, and audit use deterministic transforms. The scalar metric is temperature-scaled keep-validation NLL. Temperature is fitted only on the calibration panel, constrained to [0.05,20], and optimized by L-BFGS for at most 50 steps with a strong-Wolfe line search.
Evolution model and optimization.
The proxy is WRN-28-2 with channels 16/32/64/128, four residual blocks per group, 128-dimensional pre-GP features, and dropout 0.1. It is trained for 40 epochs with batch size 256 using SGD, base learning rate 0.08, momentum 0.9, Nesterov acceleration, and weight decay 3×10−4. Epoch 0 uses 0.1 times the base rate; learning-rate multipliers at 30%, 60%, and 80% of training are 0.2, 0.04, and 0.008. After training, the GP precision matrix is rebuilt using a deterministic loader before temperature fitting and keep-validation.
Editable boundary.
The agent may edit SpectralConv2d, random-Fourier-feature (RFF) construction, normalization, scale and multi-bank structure, the RandomFeatureGP head, precision/covariance and predictive-variance calculation, and mean-field correction. The WRN backbone and adaptor remain byte-identical. RFF width is restricted to 512–1024, the complete model must remain below 10M parameters, and audit or test data cannot be loaded.
Formal evaluation.
The frozen SNGP source is transplanted into WRN-28-10, with depth 28, widen factor 10, 640-dimensional pre-GP features, and dropout 0.1. RFF-bank widths are scaled by the fivefold feature-width ratio; proxy weights, the GP precision matrix, and fitted temperature are not transferred. Each source is retrained on all 50,000 CIFAR-100 training images for 250 epochs with batch size 256, SGD at 0.08, momentum 0.9, Nesterov acceleration, and weight decay 3×10−4. Paired training seeds are 101, 202, and 303. The GP precision matrix is rebuilt deterministically after training, and no post-hoc temperature is fitted on the clean test set.
We report clean NLL on CIFAR-100. For each of SVHN, and CIFAR-10, the evaluator forms a deterministic, size-balanced comparison with CIFAR-100 test images using seed 20260814. CIFAR-100 examples form the negative class and OOD examples form the positive class. The three OOD datasets are scored separately and are not pooled.
The primary OOD score is the implemented Dempster–Shafer inverse-evidence score
| sDS(𝐮)=C∑c=1Cexp(clip(ℓc(𝐮),−30,30)), | (93) |
rather than maximum softmax probability. Clean NLL is the formal task metric, whereas OOD AUPR is a held-out conflict-related outcome and is not identical to either online SNGP Probe. This protocol evaluates the distance-aware uncertainty objective of SNGP (Liu et al., 2020) while remaining isolated from the in-distribution representation Probes used during evolution. Results are reported as mean ± sample standard deviation over the three paired training seeds.
G.2.3 GCNII
Evolution data and task.
The GCNII full-supervision protocol evaluates Cora, Citeseer, Pubmed, Chameleon, Cornell, Texas, and Wisconsin using ten per-class 60%/20%/20% train/validation/test splits (Chen et al., 2020; Pei et al., 2020). To keep hundreds of online graph retrainings tractable, evolution uses only public Chameleon split 0. Chameleon is a useful search substrate because it retains the heterophilous hyperlink setting targeted by the conflict while providing substantially more receivers and edges than the small Cornell, Texas, and Wisconsin WebKB graphs. This choice is a computational search design; it does not make Chameleon the formal test distribution or permit selection on the other six datasets.
The 60% partition trains each candidate, the 20% validation partition provides clean NLL for retention, and the 20% test partition is unavailable online. Clean accuracy is recorded as an auxiliary task statistic. At the Stage-I branch point, the final label-free disagreement graphs are constructed and frozen. They replace ρ=0.3 of incoming non-self edges for validation receivers, restrict sources to train+validation non-neighbors, degree-match a 32-node candidate pool, and select the source with maximum Jensen–Shannon disagreement under the frozen parent. Five graphs use seeds 7301–7305. Neither test nodes nor ground-truth labels participate in online graph construction.
Evolution model and optimization.
The Chameleon proxy has eight GCNII layers, hidden width 64, dropout 0.5, α=0.2, λ=1.5, non-variant identity mapping, and no additional residual flag, matching the scale of the published Chameleon GCNII configuration (Chen et al., 2020). Training uses Adam with learning rate 0.01, weight decay 5×10−4, at most 500 epochs, validation-NLL patience 50, seed 42, and deterministic execution.
Editable boundary.
Only PropagationMixer is editable. At layer ℓ, it may use the current representation h(ℓ), the propagated representation A^h(ℓ), their difference, the initial representation h(0), and the layer index. The baseline mixer is
| u(ℓ)=(1−α)A^h(ℓ)+αh(0), | (94) |
followed by the frozen identity-map coefficient θℓ=log(λ/(ℓ+1)+1). A proposal may add at most 50% to the reference parameter count, and its source must remain below 64 KiB. The graph splits, trainer, layer count, evaluator, and formal perturbation code are protected.
Formal evaluation.
The same frozen source is instantiated and trained independently on all ten public splits of each of the seven datasets; no dataset-specific source edit or post-search selection is allowed. Every model is retrained from scratch using Adam at 0.01 for at most 1,500 epochs, with clean-validation-NLL patience 100, seed 42, and deterministic execution. Checkpoint selection uses only clean validation NLL. Dataset-specific depth, hidden width, dropout, α, λ, and weight decay follow the frozen configurations in Table 20.
Formal contamination replaces ρ=0.3 of incoming non-self edges using frozen seeds 7301–7305. Validation and test receivers are evaluated separately, and sources from the full graph are allowed. Ground-truth incompatibility may be used in this stress test because it is constructed only after training and cannot affect checkpoint or source selection. We report clean accuracy, clean NLL, contaminated NLL, and the contamination increase
| ΔNLLcontam=NLLcontam−NLLclean. | (95) |
Contaminated NLL is first averaged over the five frozen perturbation graphs within each split, after which the mean and sample standard deviation are computed over the ten official splits. If Wisconsin is displayed separately in a compact main-text table, it is treated as a representative case rather than an additional model-selection target; the cross-dataset claim is supported by the complete seven-dataset protocol.
G.2.4 ESN
Evolution data and task.
NARMA-30 jointly requires nonlinear processing and information retention over long temporal dependencies and is therefore a standard reservoir-computing stress test (Verstraeten et al., 2007; Ceni and Gallicchio, 2024). Evolution uses the frozen recurrence
| yt+1=0.2yt+0.04yt∑i=029yt−i+1.5ut−29ut+0.001,ut∼𝒰(0,0.5), | (96) |
with data seed 20260827, 200 washout samples, 5,000 readout-fit samples, and the subsequent 2,500 samples for keep-validation. A single sequence removes between-sequence noise from parent–candidate comparisons and keeps every proposal inexpensive; it is an evolution proxy rather than evidence of sequence-level generalization. That limitation is addressed using independent formal sequences.
The scalar task metric is variance-normalized NRMSE. The fixed reservoir has 100 states, spectral radius 0.9, recurrent density 0.1, input scale 0.5, leak rate 1, tanh activation, reservoir seeds 1103/2207/3301, and float64 arithmetic.
Readout fitting.
For the bias-augmented design matrix Φ=[𝟏,H], the ridge readout is
| W^=(Φ⊤Φ+λR)−1Φ⊤Y,R=diag(0,1,…,1),λ=10−6. | (97) |
The bias is unregularized, and a fresh readout is fitted for every candidate and every formal sequence–reservoir pair.
Editable boundary.
Only the parameter-free ReservoirUpdateBlock, which maps (ht−1,Wresht−1,Winut) to ht, may change. It may not introduce trainable parameters or buffers, must remain within twice the reference per-step operator count, and is limited to 49,152 source bytes. Reservoir matrices, data generators, readout fitting, Probes, and evaluation are protected. Static and runtime guards reject target leakage, future-input access, non-determinism, non-finite states, or removal of dependence on either fixed projection.
Formal evaluation.
For in-domain evaluation, we cross 20 independent NARMA-30 sequence seeds 31001–31020 with ten reservoir seeds 61001–61010, producing 200 paired configurations per source. Every configuration uses 200 washout, 5,000 fresh readout-fit, and 5,000 held-out samples and refits the ridge readout. Probe diagnostics use 64 anchors and all delays 1–30. This protocol tests whether a source found on one search sequence remains effective under both new driving sequences and new reservoir realizations.
Cross-task evaluation uses the Mackey–Glass delayed dynamical system
| dxdt=0.2x(t−17)1+x(t−17)10−0.1x(t), | (98) |
integrated with step 0.1, subsampled every ten integration steps, and preceded by 1,000 sampled burn-in steps from an independently drawn 𝒰(0,1) history. Every replicate uses 200 washout, 5,000 readout-fit, and 5,000 test samples. Sequence seeds 41001–41020 are crossed with the same ten reservoir seeds, and separate direct readouts are fitted for prediction horizons h=1 and h=84.
We report NRMSE, MSE, and R2 as task metrics, together with Zmem and Znl as structural diagnostics. Primary summaries are mean ± sample standard deviation over all 200 sequence–reservoir pairs. When reported, supplementary 95% intervals are computed over the 20 sequence-level means using t0.975,19=2.093024.
G.2.5 TCM–Lite
Evolution data and task.
The source pool combines the 800 DIV2K training images with 2,650 Flickr2K images, giving 3,450 natural images (Agustsson and Timofte, 2017; Lim et al., 2017). Using split seed 20260910, source images—rather than merely extracted patches—are assigned to six disjoint roles before cropping: candidate training, mechanism development, evolution validation, hidden audit, qualification discovery, and qualification confirmation. Consequently, patches from a source image cannot occur in two roles. Patches are stored as contiguous uint8 NHWC arrays, converted to RGB values in [0,1], and receive no online augmentation.
Candidate training uses 32,768 64×64 patches. Each other role contains 2,048 patches. Mechanism development is used to instantiate and sanity-check the rate/detail pathway; qualification discovery fixes the qualification statistics, and the disjoint confirmation panel checks them without reuse. The hidden panel is reserved for audit and is unavailable to the agent and retention controller. Evolution validation is the only panel used for online keep decisions. Patch training and equal-size auxiliary panels bound per-proposal runtime and keep the costs of auxiliary comparisons comparable. These panel sizes define our fixed search proxy and are not the training split of the original TCM paper. The scalar task metric is estimated rate–distortion loss at λ=0.013.
Evolution model and optimization.
The model has 96 main-latent channels, 48 hyper-latent channels, four channel slices, at most two previous slices per context, total downsampling factor 8, attention window 4, and MLP ratio 2. Each candidate is trained for 1,500 steps with batch size 128 using Adam at 10−4, betas (0.9,0.999), zero weight decay, an auxiliary optimizer at 10−3, training-sequence seed 314159, deterministic execution, and no mixed precision. The reduced patch size and training schedule are used only to make repeated evolution affordable; they are replaced by the full formal protocol below.
Editable boundary.
The agent may modify the RateDetailCodingBlock, including hyper/context fusion, slice prediction, latent refinement, and local detail compensation. Arithmetic coding, entropy-likelihood accounting, the bitstream interface, external tensor shapes, data, and evaluator are protected. A candidate is limited to 8M parameters, 1.5 times the reference parameter count and training-step runtime, and 98,304 source bytes. It may not bypass entropy likelihoods or condition on validation/test identity.
Formal evaluation.
After source freezing, proxy weights and patch banks are discarded. Each source is retrained on all 3,450 DIV2K+Flickr2K images using 128×128 crops, batch size 64, and 30,000 Adam steps. The learning rate is 10−4 and drops to 10−5 for the final 20% of steps. The primary operating point is λ=0.013 with paired seeds 8101, 8209, and 8311. A secondary rate–distortion curve uses λ∈{0.0035,0.0067,0.013,0.025} with seed 8101. Each seed uses a separate fixed crop bank containing 32 patches per source image; runtime sampling uses replacement and horizontal flipping.
Formal testing follows the full-image compression setting used by TCM (Liu et al., 2023). Each Kodak image is compressed and decompressed using the actual arithmetic coder. Images are padded to a multiple of 32 for coding and cropped back to their original dimensions before scoring. The actual rate is
| bppactual=8NbytesHW. | (99) |
We additionally record estimated bpp, RGB PSNR, RGB MS-SSIM, and the held-out detail metric. The primary operating-point summary reports actual bpp, MS-SSIM, and the detail metric as mean ± sample standard deviation over the three paired training seeds. No Kodak outcome is used for source selection.
G.3 Proposal validation and retention
Common validity checks.
Before metric-based comparison, a proposal must parse and import successfully, satisfy the editable-file and API contracts, preserve the required tensor shapes, dtypes, and devices, and produce finite outputs and gradients. It must also satisfy the model-specific parameter-count, source-size, runtime, and memory limits. Failure of any hard check causes rejection.
Parent and candidate metrics are compared under the same evaluator manifest, data split, training seeds, perturbations, and resource limits. A cached parent result may be reused only when it is bound to the exact parent-source hash and the same immutable evaluator manifest.
Task gain and scalar-only retention.
Let pt=xt denote the incumbent parent and ct=xtet the candidate proposed at iteration t. We use the direction-aligned task gain
| GtS=S(pt)−S(ct), | (100) |
because all five search-time task metrics are defined so that lower values are better. Thus, GtS>0 denotes task improvement, GtS=0 denotes a task tie, and GtS<0 denotes task degradation.
Stage I and the AutoResearch Stage-II continuation use the scalar-only rule
| KeepAR(et)=𝕀[GtS>0]. | (101) |
They therefore have no substantive-gain threshold: every valid proposal with a strictly positive task gain is retained.
ConflictGuide retention.
For model–conflict setting c, let τS,c separate clear task improvements from the marginal task-gain region, let ℳc⊆[0,τS,c] denote the model-specific Probe-route band, and let Qc(et) denote its Probe and guard conditions. The common ConflictGuide rule is
| KeepCG(et)=𝕀[GtS>τS,c∨(GtS∈ℳc∧Qc(et))]. | (102) |
The first route retains a clear task improvement directly. The second route retains a marginal or tied task result only when the model-specific conflict condition is satisfied. No proposal with GtS<0 is admissible under either route.
Table 21 specifies the instantiated rules. In the table, p, c, and a denote the current parent, proposed candidate, and frozen Stage-I anchor, respectively. Every Probe gain is oriented so that a positive value denotes improvement.
Calibrated thresholds.
All thresholds are fixed before the corresponding Stage-II evolution begins. For the final label-free GCNII Probe, the calibrated values of τP are 2.28×10−2 and 1.35×10−2 for search seeds 1 and 2, respectively. Table 21 reports numerical values to three significant digits for readability; the executable evaluator manifests retain the full-precision values used by the experiments.
Task non-regression invariant.
Eq. (102) and all model-specific instantiations in Table 21 exclude negative task gains. Therefore, for every retained transition,
| GtS≥0,and henceS(xt+1)≤S(xt). | (103) |
Numerical tolerances may be used only to identify equality at the evaluator’s recorded precision; they do not authorize a measurable task regression. Evolution curves are generated from this retained-parent ledger, with the incumbent carried forward after rejected or invalid proposals.
G.4 Evolution budgets and protocol exceptions
Table 22 reports proposal opportunities rather than only successful evaluations or retained edits. A budget of 100+100 denotes 100 shared Stage-I proposals followed by 100 proposals in each matched Stage-II continuation.
Standard setting.
SpecB–FNO, SNGP, GCNII, and TCM–Lite use 100 task-only proposals to construct the shared Stage-I incumbent, followed by 100 proposals in each Stage-II continuation. The Stage-I trajectory is shared within a search round and is therefore executed only once. Each Stage-II method consequently receives the same 100 new proposal opportunities from the common branch point. Search seeds alter the coding-agent trajectory but not the frozen data manifest, evaluator, editable boundary, or per-candidate training budget.
ESN exception.
ESN uses 20 Stage-I proposals followed by 50 proposals in each Stage-II continuation. Its editable space is substantially narrower than those of the other substrates: only the parameter-free ReservoirUpdateBlock may change, while the reservoir matrices, readout fitting, data generator, and evaluation procedure remain fixed. Candidate updates are additionally constrained by a per-step operation budget and cannot introduce trainable parameters or buffers. Under these restrictions, the executed trajectories showed less proposal diversity and reached stable incumbents earlier, so the sources admitted to held-out evaluation were frozen at the 20+50 endpoints.
Both Stage-II arms start from the same Stage-I source and receive the same 50 proposal opportunities, preserving the within-model matched comparison. Unexecuted proposals are not imputed or included in proposal-level statistics. If a plot extends an ESN trajectory beyond its executed endpoint for visual alignment, the final incumbent is carried forward as a constant value and the extension is not counted as an evaluated proposal. Formal data, reservoir-seed crosses, readout fitting, and held-out evaluation remain identical across the reference and both terminal sources.
G.5 Agent configuration, prompts, and history
Proposal agent.
All main-table searches for SpecB–FNO, SNGP, GCNII, ESN, and TCM–Lite use Claude Opus 4.6 as the proposal agent. Each proposal is generated in a fresh, nonpersistent session. Consequently, the agent retains no hidden conversational state across iterations; all cross-iteration information available to it is supplied explicitly through the current source, the task description, and the serialized structured history. The experiment controller does not override the model with an additional sampling-temperature setting.
Prompt contents and tool boundary.
At every iteration, the prompt provides the task definition, current retained source, editable boundary, resource constraints, structured records of previous proposal outcomes, and required output format. Stage I and the AutoResearch continuation expose only scalar task feedback. The ConflictGuide continuation additionally exposes the registered conflict, Probe values and desirable directions, relevant mechanism and model components, and the corresponding keep or rejection reason.
The proposal agent may read only the registered program description, its serialized history view, and the current train.py; it may modify only train.py. It cannot invoke the protected training or formal-evaluation pipelines, inspect held-out data, modify controller code, or alter the retention rule.
Complete ledger and agent-visible history.
We distinguish the complete experimental ledger from the history rendered to the proposal agent. The complete ledger is append-only and records every attempted proposal, including retained, rejected, invalid, crashed, non-finite, out-of-memory, and timed-out candidates. Each record is bound to the proposal source hash, parent source hash, evaluator manifest, metric outputs, and retention decision.
The agent-visible history is a deterministic structured projection of this ledger. Depending on the model-specific context limit, this projection is either the complete structured history or a bounded context pack. A bounded pack preserves all retained records and deterministically selects recent, high-performing, and otherwise relevant older records. Text fields such as change_summary may be normalized and length-bounded outside the proposal agent; the original uncompressed record remains in the complete ledger.
History matching across comparison arms.
History realization is allowed to differ across model families because their proposal records, evaluation costs, and context requirements differ. It is never allowed to differ between paired comparison arms within a model and search seed. Before Stage II, the AutoResearch and ConflictGuide arms use the same branch-point source and the same preregistered history scope: either both inherit the same ordered Stage-I prefix, or both start a new history at the branch point. They also share the same serialization schema, record ordering, context limit, deterministic record-selection procedure, summary compression, and tie-breaking rules.
After branching, the two visible histories naturally diverge because the methods propose and retain different edits. This post-branch divergence is a consequence of the assigned feedback and retention policy and is therefore part of the method effect, rather than a pre-existing history confound. The paired comparison requires equality of the pre-branch history and of the history-construction policy, not equality of the method-dependent records generated after branching.
For each paired run, the branch-point source hash, ordered pre-branch history hash, history-policy identifier, prompt-template hash, and evaluator-manifest hash are stored for audit. Our cross-model conclusions aggregate paired within-model effects; they do not assume that proposal records from different model families are exchangeable.
Recovery and retries.
The controller archives the exact rendered agent input before each call, validates the returned source in an isolated child process, terminates the complete process group on timeout, and restores the incumbent after failure. Provider failures occurring before usable candidate source is returned follow the frozen retry policy and do not consume a proposal opportunity. Once usable candidate source has been produced, the iteration is recorded even if subsequent validation or evaluation fails.
G.6 Relationship to the upstream AutoResearch implementation
Our scalar-only baseline preserves the central AutoResearch abstraction: a coding agent repeatedly edits a designated training program, receives a scalar task result, and retains task-improving source code. However, our experimental system is a controlled, multi-model implementation of this abstraction rather than a literal execution of the upstream repository (Karpathy, 2026). Table 23 summarizes the deliberate differences.
Accordingly, “AutoResearch” in our figures and tables denotes the scalar-only arm of this controlled harness. It shares the proposal agent, editable source boundary, training and evaluation substrate, structured-history policy, branch-point initialization, and proposal budget with ConflictGuide; it differs in the preregistered feedback and retention policy described above.
G.7 Compute and runtime controls
All search and formal-evaluation jobs were executed on shared CUDA-enabled multi-GPU servers with explicit device assignment. Concurrent jobs were launched only when sufficient GPU memory and host CPU capacity were available. Scheduling decisions affected only resource allocation and were not used for proposal evaluation or winner selection. The assigned device, software environment, source hash, and protocol hash are retained in the corresponding run manifests.
Online evolution uses separate watchdogs for proposal generation and candidate evaluation. These watchdogs are administrative failure limits rather than optimization budgets: the number of training epochs, steps, data examples, and proposal opportunities is fixed independently by the model-specific protocol. A candidate that completes within its watchdog is evaluated solely by the registered task and Probe metrics; elapsed runtime is not part of the retention objective.
Table 24 reports all watchdog values used in the main experiments. Multiple evaluator values indicate preregistered or recorded run-specific amendments and are detailed below the table.
Where a watchdog was amended, the amendment changed only the maximum time allowed for the corresponding process to finish; it did not change the training data, epoch or step budget, proposal budget, metric definitions, or retention rule. Timeout events are recorded as failed proposal attempts under the common failure-accounting policy.
External model calls are used only to propose source edits. Candidate validation, training, metric computation, retention, formal retraining, and result aggregation are executed by frozen local code. Search cost is measured in proposal opportunities, whereas formal-evaluation cost is measured using the paired training seeds, official data splits, or crossed sequence–reservoir configurations specified in the corresponding evaluation protocols.
Incremental cost of Probe feedback.
The watchdogs in Table 24 are failure ceilings and should not be interpreted as typical runtimes. We therefore separately account for the evaluator-side computation associated with Probe feedback. Proposal-generation latency was not isolated consistently across all five model families because the available operational records can include provider latency, queueing, lock waiting, and retries. We consequently make no quantitative claim about the incremental LLM latency caused by the additional Probe fields in the prompt.
Table 25 summarizes the evaluator-side runtime records. For SpecB–FNO, ESN, and TCM–Lite, the scalar-only and ConflictGuide arms executed the same metric workload: Probes were computed in both arms but were hidden from the scalar-only agent and were not used for its retention decisions. Their realized evaluator-time difference is therefore zero. The separately reported Probe-pass time indicates the computational cost that would be removed by an evaluator that omitted these hidden measurements.
The primary search budget is therefore defined by proposal opportunities rather than aggregate wall-clock time. SpecB–FNO, ESN, and TCM–Lite use matched evaluator workloads across the two Stage-II arms. SNGP incurs a small additional representation-statistics pass, while GCNII incurs a modest additional cost for evaluating the frozen disagreement interventions. In all cases, elapsed runtime is recorded for accounting purposes and is not part of the retention objective.
Appendix H Feedback Baselines
This appendix describes the two feedback baselines compared with ConflictGuide in Table 8: multi-metric feedback and trade-off-only prompting. The comparison is conducted on SNGP and GCNII using search round 2. Its purpose is to test whether conventional additional metrics or a qualitative trade-off reminder can substitute for model-specific, quantitatively measured conflict feedback.
Unless stated below, each condition follows the corresponding main-experiment configuration in Appendix G, including the dataset partition, model and training configuration, editable scope, proposal agent, structured-history format, continuation budget, and formal-evaluation protocol.
H.1 Compared feedback conditions
All three conditions expose the same model-specific scalar task feedback: temperature-scaled keep-validation NLL and accuracy for SNGP, and clean keep-validation NLL and accuracy for GCNII. They differ only in the additional information available to the proposal agent and in whether that information supports a conflict-specific retention route.
Neither baseline receives the ConflictGuide taxonomy path, the model-specific conflict instantiation, Probe definitions or values, Probe thresholds, or Probe-aware rejection explanations.
H.2 Multi-metric feedback
The multi-metric baseline augments ordinary task feedback with conventional outcome or robustness measurements. These quantities are shown to the proposal agent and included in its structured history. Unlike ConflictGuide’s Probes, they are not constructed to measure the instantiated competing behaviors separately.
H.2.1 SNGP
Let T^x be the temperature fitted for candidate x on the frozen temperature-calibration split. Its calibrated keep-validation probabilities are
| 𝐩i(x)=softmax(ℓi(x)T^x). | (104) |
In addition to calibrated keep-validation NLL and accuracy, the agent observes the equal-width fifteen-bin expected calibration error
| MECE(x)=∑b=115|ℐb||𝒱keep||acc(ℐb)−conf(ℐb)|,MECE(x)↓. | (105) |
Here, ℐb contains the keep-validation examples whose maximum calibrated probability lies in bin b; acc(ℐb) is their empirical accuracy and conf(ℐb) is their mean maximum probability.
The second additional metric is development OOD average precision. For C=100 classes, define the inverse-evidence score
| sdev(𝐮,x)=C∑c=1Cexp(clip(ℓc(x)(𝐮)T^x,−30,30)). | (106) |
This score is a strictly increasing transformation of the corresponding bounded Dempster–Shafer score and therefore gives the same AUPR ranking.
Let 𝒟dev contain 3,000 frozen CIFAR-100 keep-validation examples and 3,000 frozen CIFAR-10 training examples. Define
| yOOD(𝐮)={1,𝐮 is from CIFAR-10,0,𝐮 is from CIFAR-100. | (107) |
The development OOD metric is
| Mdev-OOD(x)=AP({sdev(𝐮,x)}𝐮∈𝒟dev,{yOOD(𝐮)}𝐮∈𝒟dev),Mdev-OOD(x)↑. | (108) |
These metrics measure aggregate calibration and downstream OOD ranking. They do not separately measure vulnerable-tail class separation and preservation of input-relative representation geometry, and hence differ from ConflictGuide’s Zmar and Zdist.
H.2.2 GCNII
The GCNII multi-metric condition uses K=5 frozen random graph interventions,
| Arnd(1),…,Arnd(K). | (109) |
In each realization, 30% of eligible incoming non-self messages to keep-validation receivers are replaced. Each replacement source is sampled uniformly from a degree-matched pool of train-or-validation non-neighbors. Candidates are trained on the clean graph; the perturbed graphs are used only for post-training forward evaluation.
The random-perturbation NLL is
| Mrnd-NLL(x)=1K∑k=1KℒNLL(x,Arnd(k),X,𝒱keep),Mrnd-NLL(x)↓. | (110) |
The corresponding random-perturbation accuracy is
| Mrnd-Acc(x)=1K∑k=1KAcc(x,Arnd(k),X,𝒱keep),Mrnd-Acc(x)↑. | (111) |
These interventions measure generic robustness to random message replacement. Their sources are not selected using labels, anchor-prediction disagreement, or Jensen–Shannon divergence. They therefore differ from ConflictGuide’s targeted high-disagreement intervention and its contaminated-minus-clean Probe Zdis.
H.3 Trade-off-only prompting
The trade-off-only baseline tests whether a qualitative warning is sufficient without quantitative competing-behavior measurements. Its condition-specific addition to the proposal prompt is:
Consider trade-offs when modifying model components; avoid improving one behavior at the expense of another.
This reminder does not name the two model-specific behaviors, identify the components through which they interact, define a Probe, provide numerical behavior measurements, or specify how the trade-off should be assessed. Relative to ordinary task-only feedback, the quoted sentence is the only additional information visible to the proposal agent.
H.4 Matched comparison protocol
For each model, all feedback conditions start from the terminal incumbent obtained after the complete 100-proposal Stage-I search in round 2. Thus, the branch point is the final Stage-I winner, even when its last accepted update occurred before the final Stage-I iteration.
Within each model, the conditions use the same branch source, no-edit anchor, proposal agent, data partition, training recipe, editable-file boundary, structured-history policy, resource limits, and continuation-budget accounting. Prompt fields unrelated to the feedback condition are held fixed. Rejected and invalid proposals leave the retained parent unchanged.
All conditions use task performance as the primary retention criterion. The feedback baselines follow their corresponding task-based rules, while ConflictGuide incorporates qualified Probe measurements into auxiliary retention checks, as specified in Appendix G.3. Table 8 evaluates these feedback configurations together with their associated retention rules.
H.5 Formal evaluation and interpretation
The terminal source from each condition is evaluated using exactly the same full-scale retraining, paired seeds, held-out datasets, checkpoint-selection rules, and reported metrics as the corresponding SNGP or GCNII main experiment. These shared procedures are specified in Appendix G and are not repeated here.
Two distinctions are relevant when interpreting the results. First, the SNGP multi-metric agent observes a frozen subset of CIFAR-10 training examples during evolution, whereas Table 8 evaluates OOD AUPR on CIFAR-10 test examples. The samples are disjoint, but the OOD domain is the same; the result is therefore held-out evaluation within an observed development domain rather than unseen-domain generalization. The trade-off-only and ConflictGuide agents do not observe CIFAR-10 measurements during evolution.
Second, the GCNII multi-metric condition exposes generic random-perturbation metrics, whereas formal evaluation uses the registered incompatible-message stress test. The latter is applied only after source selection and is not available to any proposal agent.
Multi-metric feedback therefore tests whether additional conventional measurements are sufficient without explicitly measuring the instantiated conflict. Trade-off-only prompting tests whether a qualitative description is sufficient without quantitative evidence. ConflictGuide differs by making the competing behaviors observable through model-specific Probes and using those measurements in both proposal feedback and retention.
Appendix I Extension to Other Agents and Frameworks
The main experiments use Claude Code with Claude Opus 4.6 as the proposal agent. We examine transfer on SpecB–FNO in two settings. First, we replace Claude Code with Kimi K2.7 Code while retaining the sequential proposal–evaluation–retention controller. Second, we integrate competing-behavior feedback into AIDE’s solution-tree search under two code-generation and execution-review model configurations. Each experiment compares scalar-only feedback with ConflictGuide within the same agent or framework and under matched continuation budgets. The Kimi experiment uses search seed 2; both AIDE configurations use search seed 0. Results across settings are not intended as a controlled ranking of the underlying LLMs.
I.1 Common SpecB–FNO setup
All transfer experiments use the SpecB–FNO conflict described in Appendix F.2: dominant-mode predictive fidelity versus effective utilization of non-dominant spectral modes. The scalar search metric is validation NRMSE,
| S(x)=NRMSEval(x),S(x)↓. |
The primary conflict probe is non-dominant relative spectral error ZND↓; dominant-mode error ZD↓ and late-rollout error Zlate↓ serve as guards.
The experiments fix the Navier–Stokes data and split, optimizer, proxy training budget, seed policy, candidate interface, and evaluator. Candidates may modify only the registered spectral component, residual corrector, and stage-fusion implementation. Data loading, training, validation, selection code, and the formal evaluator are outside the editable surface. The held-out test set is unavailable during search. Proxy evaluations use width 32, four layers, and the fixed training configuration. Formal evaluation transfers the selected architecture to the full-scale model, discards its proxy-trained weights, and retrains it from scratch.
I.2 Proposal-agent transfer: Kimi K2.7 Code
The Kimi experiment changes the proposal backend while preserving the sequential controller. At each iteration, Kimi receives the task and editable-surface description, current retained source, structured history, and feedback for its assigned condition, and returns a complete candidate module. The unchanged controller validates the candidate, trains it, computes metrics, applies the retention rule, and restores the retained parent when necessary. Kimi does not receive additional evaluator files or held-out data.
Kimi first performs 100 scalar-guided Stage-I proposals from the registered initial source. The resulting source and search history form a common anchor for two 100-proposal continuations. The scalar-only continuation receives task feedback and uses task-based retention; the ConflictGuide continuation additionally receives the qualified SpecB–FNO probe results and uses probe-informed retention. The two continuations share the anchor, backend, task instructions outside the feedback section, editable surface, data, training configuration, evaluator, and proposal budget.
Each history record reports the proposal, evaluation status, scalar task measurement, retention outcome, and source identity. In the scalar-only continuation, probe results are withheld from the proposal agent. In the ConflictGuide continuation, valid records additionally report ZND, ZD, and Zlate, together with the identified conflict and the desirable direction of each measurement. The instructions prioritize clear task improvements and use the probes to assess edits in the calibrated marginal-gain region. Task and probe measurements are not combined into a weighted scalar objective.
I.3 Search-framework transfer: AIDE
AIDE maintains a journal and solution tree, expanding nodes through improvement or debugging operations. We retain its node and journal representations, improvement and debugging operations, scalar-best parent selection in the scalar-only condition, debugging probability of 0.5, maximum debugging depth of 3, and node-eligibility rules. We replace AIDE’s unrestricted initial-draft stage with the registered SpecB–FNO source as a fixed root. The root is evaluated once before search and does not consume an expansion. This gives both feedback conditions the same initial model and evaluator.
An adapter connects AIDE’s candidates to the fixed SpecB–FNO executor. The code-generation model supplies a short design sketch and a complete candidate module, with instructions to make one change to a model mechanism per node within the editable surface. The executor validates and trains each candidate and computes its metrics; neither LLM supplies metric values. A separate execution-review model assesses implementation and runtime failures without access to probe results in either condition. Failed candidates remain in the tree and consume an expansion, so eligible nodes can subsequently be selected for debugging.
We evaluate two model configurations. The first uses o4-mini for code generation and GPT-4.1-mini for execution review. The second uses GLM-5.3 with low reasoning effort for code generation and GLM-5.3-Flash for execution review. Within each configuration, the scalar-only and ConflictGuide conditions use the same models and search settings.
I.3.1 Matched continuations
Each configuration begins with 100 shared scalar-guided AIDE expansions from the fixed root. We then checkpoint the complete solution tree, node metadata, candidate sources, and random-number-generator state. Identical copies of this checkpoint initialize a scalar-only refinement and a ConflictGuide refinement, each with 100 further expansions. The search and executor seeds are 0, and the same candidate-evaluation time limit applies to both refinements. Their interventions differ in the feedback available to improvement proposals and the probe-informed parent-selection rule.
I.3.2 Probe feedback and parent selection
The scalar-only refinement stores probe measurements for analysis but excludes them from code-generation and execution-review prompts. It uses AIDE’s scalar-best rule for improvement-parent selection. In the ConflictGuide refinement, an improvement prompt additionally describes the dominant versus non-dominant spectral conflict and reports the selected parent’s validation NRMSE, non-dominant and dominant spectral errors, and late-rollout error. It states the desirable direction of each measurement and prioritizes clear task improvements; it does not prescribe an architecture or a weighted objective. Execution-review prompts remain probe-free.
For probe-informed parent selection, let 𝒩t be the valid nodes available after expansion t, and define
| St⋆=minv∈𝒩tS(v). |
The scalar frontier is
| ℱt={v∈𝒩t:S(v)−St⋆≤τS}, | (112) |
where τS is the fixed SpecB–FNO scalar-equivalence tolerance. A node in ℱt is probe-qualified only if its edit is also scalar-equivalent to its parent, provides the calibrated parent-relative improvement in ZND, and satisfies the dominant-mode and late-rollout guards relative to the refinement anchor. A qualified node may be preferred within ℱt; probe results cannot promote a node outside the scalar frontier. Remaining ties are resolved by lower validation NRMSE, stronger normalized probe relief, and then earlier node step and identifier.
In the o4-mini/GPT-4.1-mini experiment, no refinement node met the full probe-qualification rule. Thus, probe-informed parent selection did not activate in that run; differences between its continuations arose from the feedback available to code generation.
I.4 Matched formal evaluation
The selected source from each continuation is fixed before formal evaluation. Proxy-trained weights are discarded, and each architecture is retrained from scratch at width 100, with eight layers, 32 retained Fourier modes, 100 base-training epochs, and 100 residual-training epochs. The paired training seeds are 1, 3, and 4. The held-out test set comprises examples 1000–1199 and is accessed only after training; no proposal or architecture change follows test evaluation. The formal task metric is test NRMSE, and the conflict-related metric is non-dominant relative NMSE.
The o4-mini/GPT-4.1-mini selected architectures use GroupNorm(8,⋅) at proxy width 32, but eight groups are invalid at formal width 100. A construction check made before formal training or test access identified this incompatibility. Both continuations therefore use the same portability rule: select the largest divisor of the channel width that does not exceed eight. The rule retains eight groups at width 32 and uses five at width 100. The original selected sources and the common transformation are retained for inspection. The GLM-based AIDE architectures require no such change.
Appendix J Additional Results and Analyses
This section complements the aggregate results with proposal- and trajectory-level analyses. We first examine competing-behavior trajectories and the ambiguity of behavior outcomes under similar scalar gains. We then analyze how feedback shifts the distribution of code-edit mechanisms, before presenting representative edits and their connections to established design motifs.
J.1 Competing-Behavior Trajectories and Scalar-Gain Ambiguity
Figure 10 makes the masking effect of an aggregate task objective visible before any Probe feedback is introduced. The retained Stage-I source improves detail by 3.78 detail thresholds, while the rate behavior ends 0.30 rate thresholds below its initial value. Thus, a monotonically improving rate–distortion objective can be driven primarily by one component while the other moves in the opposite direction.
As shown in Figure 11, conditioning on the relative size of the scalar improvement does not identify the behavior outcome. In every task-gain quartile, proposals occupy several directional categories; the mean normalized outcome entropy is 0.892, where one is the maximum, and no category exceeds 35.8% in any quartile. The same conclusion holds with three or five within-model bins: the corresponding mean entropies are 0.891 and 0.888. The result supports a limited claim—similar scalar gains are compatible with materially different behavior changes—not the stronger claim that the scalar gain causally produces those changes.
J.2 Code-Edit Distributions and Mechanism Examples
The tag audit shows that feedback changes where proposals concentrate. For SNGP, kernel-scale edits account for 24.6% of ConflictGuide proposals versus 12.7% of AutoResearch proposals, whereas batch-normalization and spectral-bound edits become less frequent. For TCM–Lite, pointwise-mixing edits fall from 27.0% to 7.4%, while residual-refinement edits rise from 29.0% to 34.1%. The tags are non-exclusive: one proposal can instantiate more than one mechanism. The boxes below make the most relevant labels operational without reproducing long implementation diffs.
SNGP: learnable random-feature kernel scale s ←softplus(a)+ϵ, Ω′ ←Ω/s, Ω′ ←clip(Ω′,−ωmax,ωmax), ϕ(z) ←2/Mcos(zΩ′+b), ℓ ←WGPϕ(z). The edit learns the effective RFF length scale while retaining a frozen frequency bound. It changes how strongly nearby pre-GP representations are resolved by the GP head rather than adding an independent classifier.
SNGP: stabilized ridge-precision update C ←∑iϕi⊤Wiϕi, Λ ←λI+C, Λ ←Qdiag(max{λj,ϵ})Q⊤, Σ ←Λ−1. Accumulation and eigendecomposition are carried out in higher precision. Flooring small eigenvalues prevents poorly conditioned feature directions from dominating posterior-variance and mean-field corrections.
TCM–Lite: depthwise residual refinement q ←DWConv3×3(h), r ←PWConv1×1(GELU(q)), η ←σ(a), h′ ←h+ηr. The depthwise filter supplies inexpensive local spatial correction, the pointwise map mixes channels, and the learned gate controls how strongly the new detail path changes the codec representation.
TCM–Lite: pooled channel gate uavg ←meanHW(h), umax ←maxHW(h), g ←σ(MLP(uavg+umax)), h′ ←h⊙g[:,:,None,None]. Average pooling captures persistent channel activity and max pooling retains localized responses. Their gate reallocates capacity without changing the latent tensor shape.
These distributions are descriptive, not estimates of a pure feedback effect: retained-edit frequencies reflect both proposal generation and retention, and the SNGP AutoResearch audit includes all 15 retained edits but only a nonrandom subset of rejected proposals.
J.3 Representative Edits and Connections to Prior Work
The examples below are arranged vertically rather than compressed into a wide table. They are schematic summaries of recurring proposal mechanisms, not verbatim winner implementations.
SpecB–FNO: retained-mode correction.
| X | ←rfft2(x), | Zk | ←WkXk, | ||
| Zk | ←gkZk+skP(X)k, | y | ←irfft2(Z),k∈𝒦. |
The learned gain or gated bypass corrects selected retained modes without replacing the full spectral operator. The connection to the Fourier-domain parameterization of FNO (Li et al., 2021) is representational; the per-mode correction and its placement are proposal-specific.
SNGP: conditioned GP state.
| Φ | ←RFF(z), | C | ←∑iΦi⊤WiΦi, | ||
| Λ | ←λI+C, | Λ~ | ←Qdiag(max{λj,ϵ})Q⊤, | ||
| Σ | ←Λ~−1. | ||||
The edit stabilizes the precision matrix before mean-field correction. It is reported as a model-specific numerical mechanism, not as a new GP formulation.
GCNII: receiver-dependent message gate.
| mi | ←∑jA^ijhj, | ||
| αi | ←σ(MLP([hi(0),mi])), | ||
| hi′ | ←(1−αi)hi(0)+αimi. |
The gate varies self-retention and neighborhood mixing by receiver, allowing the model to attenuate incompatible messages without removing graph propagation globally.
ESN: state-dependent recurrent processing.
| gt | ←σ(Uut+Vht−1), | ||
| rt | ←Winut+gt⊙Wht−1, | ||
| h~t | ←tanh(rt),ht←(1−α)ht−1+αh~t. |
The multiplicative gate makes local processing state–input dependent while the explicit leaky path continues to carry long-range state information.
TCM–Lite: gated local correction.
| q | ←DWConv3×3(h), | ||
| r | ←PWConv1×1(GELU(q)), | ||
| h′ | ←h+σ(a)r. |
This edit combines depthwise–pointwise factorization with a gated residual correction. Its closest general motifs are depthwise separable convolution (Chollet, 2017) and residual learning (He et al., 2016); neither reference specifies this codec placement or gate.
Other audited proposals use mean/max pooled channel gates related at the mechanism level to SE and CBAM (Hu et al., 2018; Woo et al., 2018), or spatially shared channel masks related to SpatialDropout (Tompson et al., 2015). These are motif-level connections only: parameterization, initialization, placement, and measured effects remain proposal specific.
Appendix K Limitations and Future Work
Limitations.
ConflictGuide applies when a conflict is supported by sufficient model-specific evidence and its competing behaviors can be measured with probes. ConflictGuide-Skill abstains when evidence is insufficient, and probes are qualified and fixed before evolution to avoid selecting metrics based on search outcomes. Controlled comparisons with taxonomy-free probe design and systematic evaluation of abstention remain future work. Our experiments examine distinct conflicts across five model families and show directional gains in the tested alternative code-agent settings; applicability to a wider range of settings remains to be established. We compare search outcomes under matched evolution budgets and separately report the additional time required to evaluate probes. The initial specification, implementation, and qualification of model-specific probes require setup effort that varies by model and is not included in a uniform end-to-end cost comparison. The transition to Stage II and the auxiliary retention rule follow prespecified criteria; adaptive timing remains to be studied.
Future Work.
Future work could use search history to adjust the timing and strength of probe feedback and make probe construction and qualification more efficient. We also plan to study interacting conflicts, evaluate more model families and code agents, and systematically measure model-specific setup effort to better characterize applicability and total cost.
注意转载授权 · 阅读原文
来源:arXiv 科研构思与自主科研代理 · arxiv.org
引用原文
Binqian Xu. ConflictGuide: AutoResearch Improves When Competing Behaviors Are Made Visible[EB/OL]. (2026-09-30)[访问日期]. https://arxiv.org/abs/2609.39933v1.