📝 Publications

🎯 Trustworthy AI

Watermarking

KDD 2026

AGMark: Attention-Guided Dynamic Watermarking for Large Vision-Language Models \ Yue Li^*, Xin Yi^*, Dongsheng Shi, Yongyi Cui, Gerard de Melo, Linlin Wang^†.

ArXiv | Project | ACM Digital Library | Poster

• We propose AGmark, a watermarking method for LVLMs that follows the red–green token partitioning paradigm.
• At each generation step, AGmark identifies candidate token weights and determines the protected token set size, effectively mitigating the trade-off between text quality and watermark detectability.

• KBS 2025 Unified Attacks to Large Language Model Watermarks: Spoofing and Scrubbing in Unauthorized Knowledge Distillation, Xin Yi, Yue Li, Shunfan Zheng, Linlin Wang^†, Xiaoling Wang, Liang He

Fingerprinting

• ArXiv 2025 From Construction to Injection: Edit-Based Fingerprints for Large Language Models, Yue Li^*, Xin Yi^*, Dongsheng Shi, Yongyi Cui, Gerard de Melo, Linlin Wang^†

• ArXiv 2026 Construction-Driven Injection: Linguistically-Grounded Edit-Based Code-Mixing Fingerprints for Large Language Models, Yongyi Cui^*, Yue Li^*, Tianbao Jiang, Xin Yi^†

⚙️ Model Post-Training

Pruning

ACL 2025 Findings

Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models \ Yue Li^*, Xin Yi^*, Dongsheng Shi, Gerard de Melo, Xiaoling Wang, Linlin Wang^†

ArXiv | Project | ACL Anthology | Poster

• The current pruning methods will lead to a significant degradation of the model’s safety at a higher sparsity.
• The HSR (Hierarchical Safety Realignment) method we proposed can achieve safety realignment for the pruned model by restoring only a very small number of neurons. HSR is effective for both LLM and LVLM.

Fine-Tuning

• ESWA 2026 Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks, Xin Yi, Yue Li, Dongsheng Shi, Linlin Wang^†, Xiaoling Wang, Liang He

• ArXiv 2025 Unified defense for large language models against jailbreak and fine-tuning attacks in education, Xin Yi, Yue Li, Dongsheng Shi, Linlin Wang^†, Xiaoling Wang, Liang He

Reinforcement Learning

• ArXiv 2026 Reinforcement Learning for Large Language Model Selective Evidence Adoption from Contaminated Retrieval Results, Yanyu Chen^*, Yue Li^*, Yongyi Cui, Dongsheng Shi, Lichang Dai^†

📦 Others

Medical Agent Systems

• Preprint EMR: Self-Evolving Medical Multi-Agent System via Experience Mining and Reuse, Dongsheng Shi, Yue Li, Xin Yi, Linlin Wang^†

• ArXiv 2026 SURGENT: A Surgical Multi-Agent Assistance System Across the Perioperative Workflow, Dongsheng Shi, Yue Li, Xin Yi, Huawei Feng, Linlin Wang^†

Benchmarks

• ESWA 2026 Benchmarking Large Language Models for End-to-End Clinical Support in Traditional Chinese Medicine, Dongsheng Shi, Xin Yi, Yue Li, Linlin Wang^†

• ArXiv 2026 Evaluating LLMs in Database Scenarios: A Lifecycle Benchmark for Assessing Their Potential in Core Database Tasks, Shunfan Zheng, Dongsheng Shi, Yue Li, Xin Yi, Linlin Wang^†, Gerard de Melo