Jiawei Gu, Ziyue Qiao, Xiao Luo, Forty-third International Conference on Machine Learning (ICML 2026), Oral (poster session also listed). Verified via the ICML 2026 oral/poster pages (icml.cc/virtual/2026/oral/71056, …/poster/65483) and co-author listing (Qiao homepage notes Oral, ~0.7% acceptance).

Survey table

ColumnEntry
Specific authorsJiawei Gu, Ziyue Qiao, Xiao Luo
ObjectivesA training-free early-exit criterion that stops inference when the hidden state itself has converged (a “semantic fixed point”), replacing output-confidence proxies that can be confident and wrong
MethodologyTreat each Transformer layer as a fixed-point iteration on the hidden state; empirically establish a sharp two-phase geometry (volatile early updates, then small directionally aligned ones); exit when the normalized update norm is small AND consecutive updates are cosine-aligned; O(d) overhead per layer, no learned exit heads, no architecture changes
DatasetLLaMA-2-7B and LLaMA-2-13B on QA and commonsense-reasoning suites used as accuracy anchors (exact task list pending PDF); no new benchmark released
Open sourceNo code release found in my pass (the method is training-free and drop-in, but the repo status needs the PDF/camera-ready to confirm)
AdvantagesExit signal decoupled from the vocabulary softmax, so it is cheap and independent of output calibration; 30-35% FLOP reduction while keeping over 98% of full-depth accuracy; zero training and zero added parameters make it immediately deployable; conceptually shows surface confidence and internal convergence are different things
DisadvantagesEfficiency-only evaluation: no refusal, jailbreak, or safety measurement, and if refusal forms late, geometric exit could systematically skip safety-critical layers; only LLaMA-2 7B/13B confirmed, no chat/instruct or MoE models; training-free design cannot adapt where the two-phase geometry is weak (e.g. long chain-of-thought)

Core Contribution

Early-exit methods usually ask: “is the output confident enough to stop?” This paper asks: “has the hidden state stopped changing in a meaningful way?” Framing each Transformer layer as refining a representation toward a fixed point, they show layer-wise updates have a sharp two-phase geometry: large volatile early updates, then small directionally aligned updates that mostly propagate an already-formed representation. They turn that into a training-free exit rule with \(\mathcal{O}(d)\) overhead per layer and no architectural changes.

Method

Conceptual model

Write \(h^{(\ell)}\) for the hidden state after layer \(\ell\). The layer update is \(\Delta^{(\ell)} = h^{(\ell)} - h^{(\ell-1)}\) (or an equivalent residual-form difference; exact definition needs the PDF). Full-depth inference runs all \(L\) layers. Early exit at \(\ell^* < L\) skips the remaining blocks and reads out from \(h^{(\ell^*)}\) via the existing unembedding / task head (no learned early-exit heads).

Existing methods proxy “done” with output confidence (entropy of the next-token distribution, margin, etc.). That couples the exit decision to a vocabulary-sized softmax and to a signal that can be confident and wrong, or still moving internally while the top token looks stable.

Empirical geometric observation

Across layers, update trajectories show:

  1. Phase 1 (early layers): large, volatile \(\Delta^{(\ell)}\); the representation is still being formed.
  2. Phase 2 (later layers): small updates that are directionally aligned with each other; the model is mostly propagating an already-formed semantic state.
  3. The phase transition is sharp, which is what makes a simple threshold rule viable.

Exit criterion

At each layer \(\ell\), track two scalar signals:

  1. Normalized update norm: a scale-free measure of step size \(\|\Delta^{(\ell)}\|\) (normalized, e.g. by \(\|h\|\) or a running baseline; exact normalization in the PDF). “Step size vanishes” means the representation has stopped moving much.
  2. Cosine similarity between consecutive updates: \(\cos(\Delta^{(\ell)}, \Delta^{(\ell-1)})\). “Direction stabilizes” means successive refinements point the same way rather than thrashing.

Exit when both indicate convergence (step small and direction stable). That conjunction is the method: either signal alone would be insufficient (small noisy jitter can be tiny but misaligned; large aligned steps still mean “not done”).

Systems properties

  • Overhead \(\mathcal{O}(d)\) per layer: norm and cosine over the hidden dimension; independent of vocabulary size (no extra LM-head pass for the exit decision).
  • No learned components: no exit classifiers, no early-exit fine-tuning, no added parameters.
  • No architectural modifications: drop-in at inference on a stock Transformer stack.

Dataset / evaluation protocol

Confirmed from the ICML abstract:

PieceDetail
ModelsLLaMA-2-7B and LLaMA-2-13B
Task familiesQuestion answering and commonsense reasoning
Headline results30-35% FLOP reduction while retaining >98% of full-depth accuracy

The abstract does not list the exact QA/commonsense suite (BoolQ / ARC / HellaSwag / PIQA / etc. are the usual suspects in this literature). Pending PDF: per-task tables, threshold selection (fixed vs calibrated), token-level vs sequence-level exit, and comparison set (confidence-based early exit, DeeBERT-style, LayerSkip, etc.).

What “dataset” means here: this is not a new benchmark release. The “data” are standard downstream eval sets used as accuracy anchors while measuring compute (FLOPs / layers executed). Calibration of exit thresholds, if any, would typically use a small held-out slice of the same task distribution; confirm in PDF whether thresholds are task-agnostic or tuned per task.

Limitations

  • Efficiency paper, not a safety paper: no refusal, jailbreak, or safety evaluation under early exit. If the refusal signal is low-dimensional and late-forming, exiting on geometric convergence could systematically skip safety-critical layers. That interaction is untested and matters for my niche.
  • LLaMA-2 7B/13B only in the abstract; transfer to LLaMA-3 / MoE / instruction-tuned chat models is unconfirmed here.
  • Training-free is a strength for deployment and a limit on adaptation: no learned exit policy for domains where the two-phase geometry is weaker (e.g. long CoT).

Relevance to My Niche

Adjacent but sharp for Direction 2. Early exit is a second compression mechanism beside quantization: less compute by skipping layers rather than lowering bit-width. Same open safety question as PTQ: does the efficiency trick move the refusal boundary? STLA compresses weights; this compresses depth. A quantize-then-probe study that also ablates early-exit would ask whether two independently “capability-preserving” compressors are safety-preserving when stacked. Methodologically, the paper also shows confidence ≠ internal convergence, which matters for judge/refusal metrics that trust surface fluency.