arXiv cs.SE (Software Engineering)

2 posts · arxiv.org

Constraint Decay: The Fragility of LLM Agents in Backend Code Generation arxiv.org
A systematic evaluation of LLM agents generating multi‑file backend code shows a sharp drop in correctness when structural constraints (framework conventions, ORM usage, API contracts) are added. Across 100 tasks in 8 Python web frameworks, assertion pass rates fall ~27 points, with data‑layer bugs (bad queries, ORM violations) driving most failures. Mid‑size models cope with minimal frameworks (…
arXiv cs.SE (Software Engineering)arxiv.orgFrancesco Dente, Dario Satriani, Paolo Papotti1d1 minpaperHN287197
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation arxiv.org
The authors show that the classic trusting‑trust attack is not limited to compilers: by tampering with GNU strip they can inject a payload that propagates through NixOS's bootstrap and ends up in almost every binary of the final system. The attack succeeds on a real nixpkgs revision, building a full graphical installer while backdooring the majority of its binaries.
arXiv cs.SE (Software Engineering)arxiv.orgJulien Malka, Aman Sharma, Martin Monperrus, Stefano Zacchiroli, Théo Zimmermann6d1 minpaperHN24159

Constraint Decay: The Fragility of LLM Agents in Backend Code Generationarxiv.org