Tensor-coded hidden states
Implementation & benchmark of arXiv:2608.16857 — Fault-Tolerant Quantum Computation with Adversarial Errors
Source paper: Fault-Tolerant Quantum Computation with Adversarial Errors arXiv:2608.16857 ⓘ · analyzed Sep 1, 2026
AI-generated research hypothesis, automatically tested. Not peer-reviewed.
Idea description
Represent hidden features using a tensor-product polynomial-evaluation code instead of storing one value per feature. Corrupted coordinates can then be identified through violations of low-degree consistency and repaired before the next neural layer, targeting robustness to hardware faults, unreliable memory, malicious distributed workers, and adversarial activation corruption.
Formulas
Mathematical statement
For each factor i, let E_i be a finite evaluation set over a field F_q, let A_i be a subset of polynomial exponents, and let |A_i| <= ell_i <= |E_i|. The paper defines C_X^i = ev_{E_i}(F_q[X]_{A_i}^{[0,ell_i)}) and C_Z^i = ev_{E_i}(F_q[X]^{[0,ell_i)}), where ev_{E_i}(f)=(f(a))_{a in E_i} and F_q[X]^{[0,ell_i)} is the space of polynomials of degree less than ell_i. The subsystem product code is C = tensor_product_{i in [u]} C^i, with coordinates indexed by E_1 x ... x E_u. Its dimension is k = dim(C_Z + C_X^perp) - dim(C_X^perp) = dim(C_Z) - dim(C_Z intersection C_X^perp), and its distance is d = min(d_X,d_Z), where d_X = min_{c in (C_X + C_Z^perp) \ C_Z^perp} |c| and d_Z is defined analogously. The neural adaptation uses the same low-degree tensor consistency: a clean encoded activation is a multivariate low-degree evaluation tensor, and corruption on a support below approximately d/2 should be correctable by a suitable decoder. The robust decoder below uses capped residual loss as a practical approximation.
Implementation notes
Integrate the code at the output of an MLP block or Transformer feed-forward block. Choose u=2 or u=3 tensor axes, with n_i=|E_i| typically 2 or 3, and represent each scalar feature h_j by evaluations of a low-degree polynomial over the grid E_1 x ... x E_u. A practical real-valued prototype can use a Vandermonde evaluation matrix instead of finite-field arithmetic. First map h_j to polynomial coefficients theta_j, then construct Y[a_1,...,a_u] = sum_{r_1<ell_1,...,r_u<ell_u} theta_j[r_1,...,r_u] product_i a_i^{r_i}. At a fault boundary, corrupt a chosen fraction p of Y coordinates using replacement values, sign flips, or values copied from another example. Decode using alternating robust polynomial projection: initialize Y_hat=Y; for each axis i, fit a degree-(ell_i-1) polynomial independently to every line parallel to axis i using the capped loss rho(r)=min(r^2,tau^2); replace the line by fitted evaluations; repeat for 2-4 sweeps. Decode the repaired tensor back to h and continue the network. The paper supplies the code structure and distance rationale; the real-valued decoder, corruption model, and projection schedule are empirical adaptations. Test a width-256 two-layer MLP on MNIST or CIFAR-10 against an ordinary MLP and naive coordinate replication with matched decoded width and approximately matched FLOPs. Inject 0%, 5%, 10%, and 20% adversarial coordinate corruption at each hidden layer. Success means graceful accuracy degradation, clean accuracy within 1-2 percentage points, and substantially lower hidden-state reconstruction error than replication.
Verification
This idea has not been verified yet.
Verification happens in two stages: Stage 1 — a mechanism check on a toy system confirms the claimed mathematical phenomenon reproduces; Stage 2 — a benchmark implements the idea on a real (small) neural network task and compares it against a tuned baseline over 8 paired seeds with a permutation test.
Artifacts
Artifacts unavailable.