{"id":"https://openalex.org/W7162431807","doi":"https://doi.org/10.48550/arxiv.2605.25673","title":"Referential Security as a New Paradigm for AI Evaluations","display_name":"Referential Security as a New Paradigm for AI Evaluations","publication_year":2026,"publication_date":"2026-05-25","ids":{"openalex":"https://openalex.org/W7162431807","doi":"https://doi.org/10.48550/arxiv.2605.25673"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.25673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.25673","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092839191","display_name":"Dan Ristea","orcid":"https://orcid.org/0000-0001-7707-3986"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ristea, Dan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136995217","display_name":"Vasilios Mavroudis","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mavroudis, Vasilios","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4172999858856201,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4172999858856201,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1071000024676323,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.07280000299215317,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.6826000213623047},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5357000231742859},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5085999965667725},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.49570000171661377},{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.42669999599456787},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.41620001196861267},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.40639999508857727},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.36980000138282776},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.3671000003814697}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6947000026702881},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.6826000213623047},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5357000231742859},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5085999965667725},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.49570000171661377},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4537000060081482},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.42669999599456787},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.41620001196861267},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.40639999508857727},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.3671000003814697},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3571000099182129},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3409999907016754},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3255000114440918},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.29919999837875366},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.29840001463890076},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C2776139661","wikidata":"https://www.wikidata.org/wiki/Q288928","display_name":"Agnosticism","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C193221554","wikidata":"https://www.wikidata.org/wiki/Q5153664","display_name":"Commonsense reasoning","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C193856179","wikidata":"https://www.wikidata.org/wiki/Q5251100","display_name":"Defeasible estate","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C157657479","wikidata":"https://www.wikidata.org/wiki/Q2367247","display_name":"Closed captioning","level":3,"score":0.2646999955177307},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2572000026702881},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.25270000100135803},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C159032336","wikidata":"https://www.wikidata.org/wiki/Q2488768","display_name":"Non-monotonic logic","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.25673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.25673","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25673","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5871998071670532,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Security":[0],"evaluations":[1,56,155],"inherently":[2],"depend":[3],"on":[4],"stable":[5],"identifiers.":[6],"Any":[7],"finding,":[8],"audit,":[9],"or":[10],"regulatory":[11,166],"decision":[12],"must":[13],"remain":[14],"attached":[15],"to":[16,59,93,132],"the":[17,122,173],"specific":[18,103],"artifact":[19],"it":[20,126,142],"pertains":[21],"to.":[22],"Continuously":[23],"updated":[24],"artificial":[25],"intelligence":[26],"systems":[27],"violate":[28],"this":[29],"core":[30],"assumption,":[31],"with":[32],"public":[33],"model":[34,90,110],"designations":[35],"remaining":[36],"static":[37],"while":[38],"underlying":[39],"weights,":[40],"prompts,":[41],"retrieval":[42],"mechanisms,":[43],"misuse":[44],"classifiers,":[45],"inference":[46],"settings,":[47],"and":[48,65,117,149,165],"serving":[49],"infrastructures":[50],"undergo":[51],"unannounced":[52],"modifications.":[53],"Consequently,":[54],"current":[55,137],"frequently":[57],"apply":[58],"superficial":[60],"labels":[61],"rather":[62],"than":[63],"identifiable":[64],"distinct":[66],"systems.":[67,178],"To":[68],"resolve":[69],"this,":[70],"we":[71],"propose":[72],"referential":[73,119],"security":[74,84,124],"as":[75,112],"a":[76,89,102],"new":[77],"paradigm":[78],"for":[79],"AI":[80],"evaluation.":[81],"The":[82],"fundamental":[83],"question":[85],"extends":[86],"beyond":[87],"whether":[88,94],"is":[91],"safe":[92],"subsequent":[95],"parties":[96],"can":[97],"conclusively":[98],"determine":[99],"which":[100],"system":[101],"safety":[104,163],"claim":[105],"addressed.":[106],"This":[107,128],"approach":[108,160],"reframes":[109],"identity":[111],"an":[113],"empirically":[114],"verifiable":[115,157],"property":[116],"separates":[118],"stability":[120],"from":[121],"substantive":[123],"claims":[125],"conditions.":[127],"framework":[129],"brings":[130],"tractability":[131],"three":[133],"critical":[134],"workflows":[135],"that":[136,162],"practices":[138],"handle":[139],"poorly.":[140],"Specifically,":[141],"enables":[143],"reproducible":[144],"evaluation,":[145],"longitudinal":[146],"audit":[147],"validity,":[148],"cross-provider":[150],"equivalence.":[151],"By":[152],"grounding":[153],"these":[154],"in":[156],"artifacts,":[158],"our":[159],"ensures":[161],"audits":[164],"findings":[167],"maintain":[168],"their":[169],"empirical":[170],"utility":[171],"across":[172],"operational":[174],"lifecycle":[175],"of":[176],"dynamic":[177]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-27T00:00:00"}