Helix research watch · November 4, 2026

Autonomous AI is becoming a systems problem

Six recent papers connect model training, agent orchestration, robot action, skill security, and evaluation. The common question is how a system learns from experience without losing control of what it does or how success is measured.

It is tempting to call every new agent paper a step toward self-improving AI. These six papers make narrower, more useful claims. Some change the training loop. Others give agents a route from visual prediction to physical action. Two show why capable agents can still be unsafe or badly measured. Read together, they suggest a research agenda for the whole agent system, from data and rewards to permissions and evaluation.

Reading guide. The performance figures below are the authors’ results in different tasks and settings. They are not comparable scores. The TrendToKnow reviews linked below examine each paper’s methods, evidence, and limitations in detail.

1. The training loop is becoming more unified

Training Foundation Models with a Single Algorithm argues that several stages usually run as separate procedures can be expressed as likelihood fitting to suitable target distributions. Its implementation mixes static data with reinforcement-learning generations in one trainer. The practical research question shifts toward which data to mix, at what rate, and at which point in training. This is a framework for the objectives the authors derive, not proof that every reinforcement-learning method is interchangeable with pretraining.

R²Orch moves the same systems view into agent orchestration. An inner self-play loop improves an orchestrator on proposed tasks; an outer loop adjusts the task curriculum and tests whether a skill can be withdrawn after its behavior has been internalized. The paper reports results on twelve datasets spanning question answering, math, code, and interactive work. Its central idea is a controlled transition from external scaffolding toward learned behavior, rather than a claim that an agent can safely redesign itself without oversight.

2. Action needs both a world model and a usable interface

WorldBridge separates a video expert that predicts what should happen from an action expert that turns that prediction into robot behavior. On its RoboTwin 2.0 out-of-distribution task experiment, the authors report 25.07% success with only in-distribution video-action supervision, 55.90% after adding videos of the new tasks, and 70.70% after adding one action-labeled demonstration per new task. This comparison isolates the value of broader visual coverage and then sparse action grounding within that evaluation.

CaPtain takes a different route: a vision-language model writes code against low-level robot APIs and sees execution results. Supervised fine-tuning teaches the interface; multi-turn reinforcement learning improves the policy. A simulator-side critic uses privileged state during training to assign credit to individual requests, while the deployed policy does not receive that state. The authors report held-out LIBERO success rising from 55.4% after fine-tuning to 73.8% after RL. WorldBridge and CaPtain address different robot setups, so these numbers should not be ranked against each other.

3. More capable composition creates a security boundary

CoSA studies a failure mode that single-skill checks miss. Individually admitted skills can exchange artifacts, decisions, and target bindings in ways that cross authorization boundaries once an agent composes them. In the authors’ benchmark, additions limited to 5% of the original skill pool increased the measured policy-violation rate from 35.02% to 58.45% across the tested models and harnesses. A harness-level guard reduced violations in a separate recruiting-task evaluation, but the paper does not establish universal protection. As agents learn to choose and combine more tools, permission checks need to follow the flow between actions.

4. Evaluation can change the story without changing the agent

MisconceptDialogue holds tutoring dialogues fixed and changes the scoring rule. Exact-match evaluation gives a 42.1% remediation success rate; a human-calibrated LLM judge gives 81.3% on the same dialogues. The paper also tests whether tutors use supplied misconception diagnoses and finds little evidence of reliable conditioning in its tested format. Its students are LLM-simulated, so the results do not show that any tutor improved learning for real students. The larger lesson for agent research is that a reward or benchmark can look precise while measuring a narrower behavior than the application needs.

What this means for the next wave of agent research

Research directionWhat the papers contributeWhat remains to test
Continuous learningUnified Training mixes static and generated targets; R²Orch studies curriculum and skill withdrawal.Retention, compute cost, and whether newly learned behaviors remain reliable after skills are removed.
Grounded actionWorldBridge connects video prediction to actions; CaPtain trains a code-writing robot policy.Transfer across tasks, embodiments, and real environments with comparable protocols.
Controlled compositionCoSA shows how cross-skill flows can violate policy even when the components were admitted.Authorization checks that follow data and decisions across longer workflows.
Trustworthy measurementMisconceptDialogue shows how the same outputs receive very different scores under different criteria.Human-anchored, multi-criterion evaluation before a system treats a score as proof of improvement.

Our synthesis is that the next useful experiments should join these concerns. For example, a self-improving orchestrator could be evaluated with both skill-withdrawal tests and cross-skill authorization checks; a robot agent could be judged on task transfer, physical safety, and whether the training critic predicts real outcomes. These are research proposals, not results reported by the six papers.

Read the six full reviews

Source note: the findings above are attributed to the authors’ arXiv preprints. Cross-paper connections and suggested experiments are Helix analysis. The papers use different benchmarks and should be read in their own settings.