Pith. sign in

REVIEW 3 major objections 2 minor 2 cited by

Lexical Hints of Accuracy in LLM Reasoning Chains

T0 review · 3 major / 2 minor · reviewed 2026-08-05 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read Chain-of-thought words such as 'guess', 'stuck', and 'hard' are claimed to be the strongest lexical signals that an LLM's answer is incorrect, supporting a lightweight post-hoc calibration signal.

desk verdict The abstract describes a CoT-calibration study, but the submitted full text is an unrelated cognitive-cybersecurity paper; as submitted, the empirical claims have no supporting analysis. read the letter →

arxiv 2508.15842 v1 pith:HS5J7IJ7 submitted 2025-08-19 cs.CL cs.LG

Arne Vanhoyweghen , Brecht Verbeken , Andres Algaba , Vincent Ginis This is my paper
classification cs.CLcs.LG
keywords chain-of-thoughtcalibrationlexicaluncertaintymarkerssentimentvolatilityDeepSeek-R1Claude3.7SonnetHumanity'sLastExamOmni-MATH
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

The paper is trying to establish that a language model's chain-of-thought text leaks information about whether the final answer is correct. Across DeepSeek-R1 and Claude 3.7 Sonnet, on a frontier benchmark (Humanity's Last Exam) and a saturated one (Omni-MATH), it reports that lexical markers of uncertainty—words like 'guess', 'stuck', and 'hard'—are the strongest indicators of an incorrect response. Sentiment volatility is a weaker but complementary signal, and chain-of-thought length is informative only on the moderate-difficulty benchmark, suggesting length works inside the model's demonstrated capability but not at the frontier. The payoff would be a lightweight post-hoc calibration signal that improves on the models' own unreliable confidence scores without retraining.

What carries the argument

The central objects are three feature classes extracted from the chain-of-thought: (i) CoT length, (ii) intra-CoT sentiment volatility—how much the reasoning text's emotional tone swings—and (iii) lexicographic hints, the presence or absence of hedging and uncertainty words such as 'guess', 'stuck', and 'hard'. The load-bearing mechanism is the lexical marker set: the paper reports it as the strongest signal, and its definition determines whether the result is a genuine prediction or a post-hoc fit.

What would settle it

Fix the lexeme list and sentiment features in advance, then apply the same pipeline to fresh, unseen items from the same benchmarks with both models; if chain-of-thought uncertainty markers do not predict incorrect answers above base rate out of sample, the central claim fails.

Watch

Extended reading notes

Core claim

The central claim is that chain-of-thought text contains readable traces of whether the model's final answer is correct, and that among three feature classes—CoT length, sentiment volatility, and lexicographic hints—the lexical markers of uncertainty ('guess', 'stuck', 'hard') are the strongest predictors of an incorrect response. The paper reports this pattern consistently on two frontier models (DeepSeek-R1 and Claude 3.7 Sonnet) and two benchmarks of very different difficulty (Humanity's Last Exam at roughly 9% accuracy, Omni-MATH at roughly 70%). It further claims that CoT length is informative only on Omni-MATH and carries no signal on HLE, and that uncertainty indicators are more salie

Load-bearing premise

The load-bearing premise is that the uncertainty-word list and sentiment features were fixed before the authors looked at which HLE and Omni-MATH answers were wrong; if the words were chosen or pruned using those labels, the reported predictive strength is a fit, not a forecast, and the supplied full text does not show the feature-selection procedure or the experiments.

Editorial extensions

If this is right

  • A deployable post-hoc calibration flag: outputs whose chain-of-thought contains uncertainty lexemes can be routed to human review or down-weighted without retraining the model.
  • Because uncertainty indicators outweigh confidence markers, a model's reasoning words are safer evidence of error than its stated confidence.
  • CoT length should not be used as a confidence proxy on frontier-hard benchmarks; it is informative only in the difficulty band where the model already performs well.
  • The asymmetry makes flagging one-sided: absence of uncertainty words is weak evidence of correctness, so automated mitigation should focus on what the model says when it is unsure.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Editorial note: the supplied full-text body is a different manuscript (a cognitive-cybersecurity risk framework), not the lexical-hints experiments; the abstract's empirical claims have no supporting body text in this submission.
  • Because the paper reports errors easier to predict than successes, the practical deployment pattern is asymmetric: treat uncertainty markers as triggers for review, but do not treat clean reasoning as strong evidence of correctness.
  • Sentiment volatility should transfer across models and domains better than a fixed word list, since specific words are style-dependent while emotional tone is more general; that is a testable extension.
  • A pre-registered or leave-one-out selection of the marker list would separate genuine prediction from post-hoc fit; the abstract does not describe such a procedure.
Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 2 minor

Summary. The arXiv metadata and abstract describe an empirical study of chain-of-thought (CoT) features as calibration signals: lexical markers of uncertainty (e.g., 'guess', 'stuck', 'hard') are claimed to be the strongest indicators of incorrect responses, with sentiment volatility a weaker complementary signal and CoT length informative only on Omni-MATH. The analysis is said to use DeepSeek-R1 and Claude 3.7 Sonnet on HLE and Omni-MATH. However, the submitted full text is a different paper, titled 'CIA+TA Risk Assessment for AI Reasoning Vulnerabilities' by Yuksel Aydin, whose running footer identifies it as arXiv:2508.15839v1. This body develops a cognitive-cybersecurity framework (CCS-7, CIA+TA), a quantitative risk methodology, and empirical results from 12,180 AI trials and 151 human participants. It contains no CoT traces, no HLE or Omni-MATH experiments, no uncertainty-lexicon definitions, no sentiment analysis, and no calibration results. The abstract's central claim is therefore entirely unsupported by the submitted manuscript.

Significance. If the abstract's finding were established, it would be practically valuable: a lightweight, post-hoc calibration signal derived from CoT text, complementary to self-reported probabilities, would require no retraining and could improve reliability assessment for low-accuracy benchmarks. The abstract also states a falsifiable benchmark-dependent length effect and an asymmetry between uncertainty and confidence markers. These are interesting and testable claims. However, the submitted manuscript provides no evidence for any of them. The empirical protocol, the marker lists, the datasets, and the quantitative results are all absent. The significance of the claimed result does not compensate for the absence of the claimed analysis.

major comments (3)
  1. [Abstract vs. full text] The full text is not the paper described in the abstract. The body is titled 'CIA+TA Risk Assessment for AI Reasoning Vulnerabilities' and deals with cognitive cybersecurity, OWASP/ATLAS mappings, CCS-7 vulnerabilities, and a risk-assessment framework. There is no section describing chain-of-thought experiments, no mention of DeepSeek-R1 or Claude 3.7 Sonnet, no HLE or Omni-MATH results, and no analysis of lexical markers, sentiment volatility, or CoT length. This is a load-bearing mismatch: the central claim of the submission is completely absent from the manuscript.
  2. [Feature definitions] The abstract's central finding depends on how the uncertainty lexicon (e.g., 'guess', 'stuck', 'hard') and the sentiment-volatility features were constructed. The manuscript contains no feature-engineering section and no definition of these features. Consequently, the reader cannot determine whether the marker list was chosen or pruned after inspecting correctness labels on HLE and Omni-MATH. This is not a minor omission; it makes the claimed predictive strength unfalsifiable from the submitted text.
  3. [Empirical results] No quantitative results support the abstract's four claims: no sample sizes for HLE or Omni-MATH, no AUC/accuracy/calibration tables, no effect sizes for lexical markers, no comparison with self-reported probabilities, and no analysis of the reported length-by-benchmark interaction. The only empirical content in the body concerns the cybersecurity experiments, e.g., Table 2, Eq. (2)-(5), and §5.3's limitations, all of which are unrelated to CoT calibration.
minor comments (2)
  1. [General] The manuscript's title, abstract, and body must be brought into agreement. If the submitted text is a clerical error, the correct version should be resubmitted; as it stands, the abstract cannot be evaluated against the full text.
  2. [Table 1] Table 1's caption contains 'OW ASP' (missing space) and the text has several formatting inconsistencies (e.g., collapsed words, missing spaces). These are presentation issues secondary to the structural mismatch.

Circularity Check

1 steps flagged · score 4.0 of 10

Body's empirical validation rests on a self-citation chain; abstract's CoT prediction is absent from the submitted text.

  1. self citation load bearing [Section 1 (Validation) and Section 5.1 (Experimental Methodology Summary); references [32] and [35]]
    "Validation through previously published studies (151 human participants; 12,180 AI trials) reveals strong architecture dependence: identical defenses produce effects ranging from 96% reduction to 135% amplification of vulnerabilities. ... The empirical foundation for the cognitive cybersecurity framework rests on two studies. ... [32] ... [35]."

    The paper's quantitative risk framework (Eqs. 2-5) uses empirically-derived coefficients (E, κ, η) that are not derived from experiments in this manuscript; they are imported from [32] and [35], both authored by the same Yuksel Aydin. The validation loop therefore closes on the author's own prior work. Neither prior study is reproduced, machine-checked, or independently benchmarked in the submitted text, so the empirical support is a self-citation chain rather than independent evidence.

full rationale

The submitted text is internally incoherent: the abstract describes a chain-of-thought lexical-analysis study on HLE and Omni-MATH that never appears in the body, which is instead a CIA+TA cybersecurity risk-assessment paper. Under the strict circularity rubric, this absence is not by itself a demonstrated circular step: there is no equation, fitted parameter, or marker list to audit, so I cannot exhibit a reduction from output to input. I flag it as an omitted proof affecting verifiability. The one demonstrable circularity-like step is in the body's own empirical validation: Sections 1 and 5.1 state that the framework is 'validated through previously published studies' [32,35], both by the same author, and the quantitative coefficients used in Eqs. (2)-(5) are imported from those prior papers rather than derived or independently benchmarked here. That is a load-bearing self-citation chain for the body's empirical claims. Because the framework still has conceptual content (CCS-7 taxonomy, OWASP/MITRE mapping, deployment guidelines) that is not forced by the self-citations, the score is moderate rather than high.

Assumptions & free parameters 2 free parameters · 3 assumptions · 0 invented entities

The central claim rests on feature-level assumptions that cannot be checked because the manuscript body is a different paper. The free parameters are the unspecified marker lexicon and sentiment configuration; their selection procedure is invisible. The axioms are the interpretive bridge from text features to internal confidence, each of which is asserted rather than validated.

free parameters (2)
  • Uncertainty marker lexicon (guess, stuck, hard, ...) = unspecified
    The abstract names example markers but does not state whether the list was fixed a priori or tuned on the evaluation benchmarks. If tuned on HLE and Omni-MATH labels, the reported predictive strength is fitted rather than predictive. The body contains no feature-engineering section.
  • Sentiment volatility feature configuration = unspecified
    Computing intra-CoT sentiment volatility requires a sentiment model, windowing choices, and thresholds. None are described anywhere in the manuscript; the body is an unrelated paper.
assumptions (3)
  • domain assumption CoT lexical and sentiment properties are a stable proxy for a model's internal confidence, transferable across models and benchmarks.
    The abstract interprets generated reasoning text as honest evidence of uncertainty; this is an interpretive assumption about model-generated text, not a demonstrated fact.
  • domain assumption The feature-correctness association observed on HLE and Omni-MATH holds under deployment distribution shift.
    The proposed calibration signal would be used outside these two benchmarks; the abstract reports no transfer test and no external validation.
  • domain assumption Sentiment analysis of CoT text produces a meaningful valence signal.
    No sentiment tool, validation set, or error analysis is described for the sentiment volatility feature class.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Lexical Hints of Accuracy in LLM Reasoning Chains." pith.science (2026). https://pith.science/paper/HS5J7IJ7

@misc{pith2026250815842,
  author       = {Pith},
  title        = {Pith review of: Lexical Hints of Accuracy in LLM Reasoning Chains},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/HS5J7IJ7}},
  note         = {Machine review of arXiv:2508.15842}
}
abstract

Fine-tuning Large Language Models (LLMs) with reinforcement learning to produce an explicit Chain-of-Thought (CoT) before answering produces models that consistently raise overall performance on code, math, and general-knowledge benchmarks. However, on benchmarks where LLMs currently achieve low accuracy, such as Humanity's Last Exam (HLE), they often report high self-confidence, reflecting poor calibration. Here, we test whether measurable properties of the CoT provide reliable signals of an LLM's internal confidence in its answers. We analyze three feature classes: (i) CoT length, (ii) intra-CoT sentiment volatility, and (iii) lexicographic hints, including hedging words. Using DeepSeek-R1 and Claude 3.7 Sonnet on both Humanity's Last Exam (HLE), a frontier benchmark with very low accuracy, and Omni-MATH, a saturated benchmark of moderate difficulty, we find that lexical markers of uncertainty (e.g., $\textit{guess}$, $\textit{stuck}$, $\textit{hard}$) in the CoT are the strongest indicators of an incorrect response, while shifts in the CoT sentiment provide a weaker but complementary signal. CoT length is informative only on Omni-MATH, where accuracy is already high ($\approx 70\%$), and carries no signal on the harder HLE ($\approx 9\%$), indicating that CoT length predicts correctness only in the intermediate-difficulty benchmarks, i.e., inside the model's demonstrated capability, but still below saturation. Finally, we find that uncertainty indicators in the CoT are consistently more salient than high-confidence markers, making errors easier to predict than correct responses. Our findings support a lightweight post-hoc calibration signal that complements unreliable self-reported probabilities and supports safer deployment of LLMs.

Discussion (0). Sign in to comment.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. How Much Does a Reasoning Summary Reveal? An Observability Ladder for Large Language Models

    cs.LG 2026-08 conditional novelty 6.0 of 10

    With the prompt visible, LLM-written reasoning summaries add almost no correctness signal for linear readers, while full traces still add signal; monitorability is a joint property of display and reader.

  2. Sanity Checks for Long-Form Hallucination Detection

    cs.CL 2026-05 unverdicted novelty 6.0 of 10

    Hallucination detectors on LLM reasoning traces often rely on final-answer artifacts rather than reasoning validity; once controlled, lightweight lexical trajectory features suffice for robust detection.

Reference graph

Works this paper leans on

35 extracted references · 15 canonical work pages · cited by 2 Pith papers

  1. [1]

    Not what you’ve signed up for: Compromising real-world llm-integrated appli- cations with indirect prompt injection

    Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, and Mario Fritz. Not what you’ve signed up for: Compromising real-world llm-integrated appli- cations with indirect prompt injection. arXiv preprint arXiv:2302.12173, 2023

    arXiv 2023

  2. [2]

    Benchmarking and defending against indi- rect prompt injection attacks on large language models

    Jingwei Yi, Yueqi Xie, Bin Zhu, Emre Kici- man, Guangzhong Sun, Xing Xie, and Fangzhao Wu. Benchmarking and defending against indi- rect prompt injection attacks on large language models. arXiv preprint arXiv:2312.14197, 2023

    arXiv 2023

  3. [3]

    Goodfellow, Jonathon Shlens, and Chris- tian Szegedy

    Ian J. Goodfellow, Jonathon Shlens, and Chris- tian Szegedy. Explaining and harnessing adver- sarial examples. InInternational Conference on Learning Representations (ICLR), 2015

    work page 2015

  4. [4]

    Towards evaluating the robustness of neural networks

    Nicholas Carlini and David Wagner. Towards evaluating the robustness of neural networks. In IEEE Symposium on Security and Privacy (S&P), pages 39–57, 2017

    2017

  5. [5]

    Zico Kolter, and Matt Fredrik- son

    Andy Zou, Zifan Wang, Nicholas Carlini, Mi- lad Nasr, J. Zico Kolter, and Matt Fredrik- son. Universal and transferable adversarial at- tacksonalignedlanguagemodels. arXiv preprint arXiv:2307.15043, 2023

    arXiv 2023

  6. [6]

    Towards understanding sycophancy in lan- guage models.arXiv preprint arXiv:2310.13548, 2023

    Mrinank Sharma, Meg Tong, Tomasz Korbak, et al. Towards understanding sycophancy in lan- guage models.arXiv preprint arXiv:2310.13548, 2023

    arXiv 2023

  7. [7]

    Hallucination is inevitable: An innate limita- tion of large language models

    Ziwei Xu, Sanjay Jain, and Mohan Kankanhalli. Hallucination is inevitable: An innate limita- tion of large language models. arXiv preprint arXiv:2401.11817, 2024

    arXiv 2024

  8. [8]

    Prompt injection attack against LLM-integrated applications

    Yi Liu et al. Prompt injection attack against LLM-integrated applications. arXiv preprint arXiv:2306.05499, 2023

    arXiv 2023

Show all 35 references
  1. [9]

    Automatic and universal prompt injection attacks against large language models

    Xiaogeng Liu et al. Automatic and universal prompt injection attacks against large language models. arXiv preprint arXiv:2403.04957, 2024

    2024 arXiv

  2. [10]

    Concrete problems in AI safety

    Dario Amodei, Chris Olah, Jacob Steinhardt, et al. Concrete problems in AI safety. arXiv preprint arXiv:1606.06565, 2016

    2016 arXiv

  3. [11]

    Supervising strong learners by amplifying weak experts

    Paul Christiano, Buck Shlegeris, and Dario Amodei. Supervising strong learners by amplifying weak experts. arXiv preprint arXiv:1810.08575, 2018

    2018 arXiv

  4. [12]

    Constitutional AI: Harmlessness from AI feed- back

    Yuntao Bai, Andy Jones, Kamal Ndousse, et al. Constitutional AI: Harmlessness from AI feed- back. arXiv preprint arXiv:2212.08073, 2022

    2022 arXiv

  5. [13]

    Training language models to follow instructions with hu- man feedback.arXiv preprint arXiv:2203.02155, 2022

    Long Ouyang, Jeff Wu, Xu Jiang, et al. Training language models to follow instructions with hu- man feedback.arXiv preprint arXiv:2203.02155, 2022. 10

    2022 arXiv

  6. [14]

    Deep reinforcement learning from human prefer- ences

    Paul Christiano, Jan Leike, Tom Brown, et al. Deep reinforcement learning from human prefer- ences. arXiv preprint arXiv:1706.03741, 2017

    2017 arXiv

  7. [15]

    Thinking, Fast and Slow

    Daniel Kahneman. Thinking, Fast and Slow. Farrar, Straus and Giroux, New York, 2011

    2011

  8. [16]

    Judgment under uncertainty: Heuristics and biases

    Amos Tversky and Daniel Kahneman. Judgment under uncertainty: Heuristics and biases. Sci- ence, 185(4157):1124–1131, 1974

    1974

  9. [17]

    EasyJailbreak: A unified framework for jailbreaking large language mod- els

    Weikang Zhou et al. EasyJailbreak: A unified framework for jailbreaking large language mod- els. arXiv preprint arXiv:2403.12171, 2024

    2024 arXiv

  10. [18]

    Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented genera- tion of large language models

    Wei Zou, Runpeng Geng, Binghui Wang, and Jinyuan Jia. Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented genera- tion of large language models. arXiv preprint arXiv:2402.07867, 2024

    2024 arXiv

  11. [19]

    Trojanrag: Retrieval-augmented generation can be backdoor driver in large lan- guage models.arXiv preprint arXiv:2405.13401, 2024

    Pengzhou Cheng, Yidong Ding, Tianjie Ju, Zon- gruWu, WeiDu, PingYi, ZhuoshengZhang, and Gongshen Liu. Trojanrag: Retrieval-augmented generation can be backdoor driver in large lan- guage models.arXiv preprint arXiv:2405.13401, 2024

    2024 arXiv

  12. [20]

    OWASP top 10 for large language model applications 2025

    Steve Wilson and Adam Dawson. OWASP top 10 for large language model applications 2025. Technical report, OWASP Foundation, 2025

    2025

  13. [21]

    MITRE ATLAS (adver- sarial threat landscape for artificial-intelligence systems), 2021

    MITRE Corporation. MITRE ATLAS (adver- sarial threat landscape for artificial-intelligence systems), 2021. Available at: https://atlas. mitre.org/

    2021

  14. [22]

    Artificial intelligence risk man- agement framework (AI RMF 1.0)

    Elham Tabassi. Artificial intelligence risk man- agement framework (AI RMF 1.0). Technical Report NIST AI 100-1, National Institute of Standards and Technology, 2023

    2023

  15. [23]

    Information technology—artificial intelligence— guidance on risk management, 2023

    International Organization for Standardization and International Electrotechnical Commission. Information technology—artificial intelligence— guidance on risk management, 2023. Interna- tional Standard, Edition 1

    2023

  16. [24]

    Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned

    Deep Ganguli, Liane Lovitt, Jackson Kernion, Amanda Askell, Yuntao Bai, Saurav Kadavath, et al. Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned. arXiv preprint arXiv:2209.07858, 2022

    2022 arXiv

  17. [25]

    Ziegler, et al

    Evan Hubinger, Carson Denison, Jesse Mu, Mike Lambert, Meg Tong, Monte MacDiarmid, Daniel M. Ziegler, et al. Sleeper agents: Training deceptive llms that persist through safety train- ing. arXiv preprint arXiv:2401.05566, 2024

    2024 arXiv

  18. [26]

    Alma Whitten and J. D. Tygar. Why Johnny can’tencrypt: AusabilityevaluationofPGP5.0. In 8th USENIX Security Symposium, pages 169– 184, 1999

    1999

  19. [27]

    De- veloping trustworthy artificial intelligence: In- sights from research on interpersonal, human- automation, and human-AI trust

    Jie Chen, Jingjing Zhang, Jiamin Xu, et al. De- veloping trustworthy artificial intelligence: In- sights from research on interpersonal, human- automation, and human-AI trust. Frontiers in Psychology, 15:1382693, 2024

    2024

  20. [28]

    Bartz, Karen S

    Frank Krueger, René Riedl, Jennifer A. Bartz, Karen S. Cook, David Gefen, Peter A. Han- cock, Sirkka L. Jarvenpaa, Lydia Krabbendam, Mary R. Lee, Roger C. Mayer, Alexandra Mis- lin, Gernot R. Müller-Putz, Thomas Simpson, Haruto Takagishi, and Paul A. M. Van Lange. A call for t...

    2025

  21. [29]

    A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions

    Lei Huang, Weijiang Yu, Weitao Ma, Weihong Zhong, Zhangyin Feng, Haotian Wang, Qiang- long Chen, Weihua Peng, Xiaocheng Feng, Bing Qin, and Ting Liu. A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions. arXiv preprint arXiv:...

    2023 arXiv

  22. [30]

    Prospect theory: An analysis of decision under risk

    Daniel Kahneman and Amos Tversky. Prospect theory: An analysis of decision under risk. Econometrica, 47(2):263–292, 1979

    1979

  23. [31]

    Cialdini

    Robert B. Cialdini. Influence: The Psychology of Persuasion. Harper Business, revised edition edition, 2021

    2021

  24. [32]

    thinkfirst, verifyalways

    YukselAydin. "thinkfirst, verifyalways": Train- ing humans to face ai risks. arXiv preprint arXiv:2508.03714, 2025

    2025 arXiv

  25. [33]

    O’Reilly Media, 2005

    Lorrie Faith Cranor and Simson Garfinkel.Se- curity and Usability: Designing Secure Systems that People Can Use. O’Reilly Media, 2005

    2005

  26. [34]

    Zana Buçinca, Maja Barbara Malaya, and Krzysztof Z. Gajos. To trust or to think: Cogni- tive forcing functions can reduce overreliance on AI in AI-assisted decision-making. Proceedings of the ACM on Human-Computer Interaction, 5(CSCW1):Article 188, 2021

    2021

  27. [35]

    Cognitive cybersecurity for ar- tificial intelligence: Guardrail engineering with ccs-7

    Yuksel Aydin. Cognitive cybersecurity for ar- tificial intelligence: Guardrail engineering with ccs-7. arXiv preprint arXiv:2508.10033, 2025. 11

    2025 arXiv

Pith tools

Reviewed August 5, 2026 · model on record in the stance chip above.