Collection
Science publishes Biomni and its Editor-in-Chief publishes an editorial calling AI in publishing "slower, worse, and more expensive" in the same window. Nature publishes Robin and a news story about data poisoning of the autonomous agents it just endorsed. The infrastructure layers keep shipping (Elicit's MCP, the Vancouver Standard consultation) but the institutional voices are now openly contradicting each other about whether any of this is. Full edition: hallway.aris.pub/no/017/
AI in scientific publishing: Slower, worse, and more expensive
There’s a saying in the management world, popularized by NASA administrator Daniel Goldin in the 1990s, that the goal of technological improvements is to make products faster, better, and cheaper. Although this strategy had some success in the aerospace industry, the zealots of artificial intelligence (AI) have been making the same argument regarding how it will transform work, claiming that so little human effort will be required that humanity will enter an era of radical abundance, free from disease, drudgery, and danger, among other benefits, leaving society with more time for creative pursuits. But history tells a different story. When machines began to increase productivity during the second industrial revolution, American engineer Frederick Winslow Taylor’s The Principles of Scientific Management encouraged corporations to use surveillance to get employees to work harder and longer, an approach that exhausted and discouraged workers and led to the transfer of knowledge and any decision-making from workers to management, while enriching the profits for only those at the top. Yet, it remains foundational to the American economic enterprise. Indeed, scientific publishing is starting to experience some Taylorism with the insertion of AI. Rigorous human checking of AI-generated research papers is creating bottlenecks as publishers strive to maintain the integrity of the scientific record. The challenge is requiring even more human effort, making the whole endeavor slower and more expensive.

Guest Post — Research Needs a Shared Standard for AI Disclosure - The Scholarly Kitchen
Today's guest post presents outcomes of the WCRI's (World Conferences on Research Integrity) Focus Track to address this gap in clarity and standardization of AI disclosure.

Open Science 2.0: Building Understanding in an AI-Mediated World - The Scholarly Kitchen
Open Science 2.0 must focus not only on access, but also on trust, interpretation, learning, and effective communication. The challenge facing the scholarly publishing ecosystem is ensuring that what is open is also trustworthy, understandable, and genuinely useful.

Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud
Scientific fraud is the instrument of doubt that malicious entities can use to establish controversy in science. Historically, it required the resources of a company: deep pockets, ghostwritten articles, and corrupt academics. Today, Artificial Intelligence (AI) is increasingly automating scientific research, so we ask: Can a remote adversary weaponize the honest use of AI in science to compromise scientific integrity? We envision and empirically evaluate a new attack, indirect data poisoning, in which an adversary corrupts an open dataset and uploads the poisoned variant to a public repository. Autonomous research agents may independently retrieve and process this data, turning honest scientists into the unpaid and unwitting distributors of fraud at scale. Across five socially-salient topics, from hiring discrimination to the safety of autonomous vehicles, three widely used frontier AI systems (Claude Code with Claude Opus 4.7, Codex with GPT-5.5, Gemini CLI with Gemini 3.1 Pro), and 450 ethically contained experimental runs, we find that poisoning succeeds in 49.56% of runs, while the rate of poisoning detection is only 6.0%. The attack requires no topic-specific trigger-words, agent access, indirect prompt injection, or fabricated papers, only the open data ecosystem and misleading metadata. To mitigate the attacks, we propose and evaluate two measures: a scientist persona and a data provenance audit with five checks (referencing papers, social markers, statistical anomalies, related datasets, poisoning caution). We find that the persona still leaves 16.67% of runs with a poisoned conclusion, but provenance auditing reduces attack success rate to zero. Our results suggest that indirect data poisoning may enable scientific fraud at unprecedented scale, but these attacks can be mitigated with suitable auditing by agents during data retrieval.

Doctored data sets could trick AI agents
Researchers warn that ‘poisoned’ information can undermine the reliability of tools that analyse data autonomously.

Demonstrating end-to-end scientific discovery with Robin | FutureHouse
Robin is the first multi-agent system for discovery in biology that integrates novel hypothesis generation with experimental data analysis in one continuous workflow.

Whoops! Most arXiv papers contain information never meant to be shared
Passwords, GPS coordinates and private conversations have all been found in the metadata and source files of millions of preprint submissions.

Introducing the Elicit API - Elicit
Search our 138M+ papers and generate Reports using our API.
