Source author record

Binhan Luo

Explore this author’s publications, collaborators and research topics. This catalog record has not been claimed by its author.

ResearcherUnclaimed source record

Catalog footprint

Research overview

2works
1topics
4close collaborators

Published work

2 publications

preprint2026arXiv

Equilibrium Residuals Expose Three Regimes of Matrix-Game Strategic Reasoning in Language Models

Large language models can score well on named game-theory benchmarks while failing on the same strategic computation once semantic cues are removed. We show this gap with procedurally generated zero-sum matrix games: a model that recognizes familiar games drops to 34%, 18%, and 2% success on anonymous 2×22{\times}2, 3×33{\times}3, and 5×55{\times}5 payoff matrices. The benchmark separates semantic recall, learned approximate Nash computation, and an output-interface bottleneck that limits scale. Training only on 2×22{\times}2 and 3×33{\times}3 games, supervised fine-tuning raises unseen 5×55{\times}5--7×77{\times}7 success from 2% to 61%, while exploitability-reward training averages 37% with high seed variance. We prove that the exploitability residual is 22-Lipschitz in payoff perturbations, unlike discontinuous vertex-returning LP equilibrium selectors, explaining why residual training can transfer under payoff shifts even when formatting instability limits mean performance. A dominated-action padding experiment provides causal evidence: trained models solve 3×33{\times}3 games embedded in much larger matrices, while random-padded controls fail and dense 12×1212{\times}12 games remain near failure. Procedural evaluation is therefore necessary for measuring strategic reasoning, and residual rewards expose a real but format-limited route to approximate equilibrium computation.

preprint2026arXiv

Identified-Set Geometry of Distributional Model Extraction under Top-KK Censored API Access

Modern LLM APIs often reveal only top-KK logit scores and censor the remaining vocabulary. We study the per-position distribution-recovery limits of this access model. For censoring threshold ττ, the compatible teacher distributions form an identified set whose total-variation diameter is exactly UK=(V−K)exp⁡(τ)/(ZA+(V−K)exp⁡(τ))U_K=(V-K)\exp(τ)/(Z_A+(V-K)\exp(τ)), where ZAZ_A is the observed partition function. For KL recovery, we give a computable binary-endpoint lower bound and an asymptotically matching small-ambiguity upper bound, with an extension to reference-aware attackers. Experiments on a Qwen3 math-reasoning teacher reveal a layered extraction hierarchy: on-task top-KK distillation recovers 12% of private capability, full-logit distillation recovers 56% despite 99% KL closure, and generation-based extraction recovers 96%. Top-KK censoring therefore limits per-position distribution recovery but does not by itself prevent capability extraction, separating fidelity from transfer in prompt-only logit distillation.

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.