MOHAMMED.

Research / 02

Preprints, papers,
and ongoing work.

5 papers spanning knowledge-guided reinforcement learning, controllable protein design, interpretable clinical NLP, mechanistic safety of tool-using LLMs, and few-shot fault diagnosis under data scarcity. Click any thumbnail or title to open the full PDF.

01 / Themes

/01

RL & Knowledge

When structured priors help agents, and when they hurt.

/02

Protein Design

Controllable biophysics in inverse folding and binder design.

/03

Healthcare AI

Interpretable clinical NLP, concept-grounded diagnosis.

/04

LLM Safety

Channel-specific vulnerability, mechanistic interpretability.

/05

Applied Generative ML

Few-shot diagnosis, augmentation under data scarcity.

02 / Papers (5)
The Mechanism Matters: When Knowledge Graphs Help Reinforcement Learning preview
Submitted2026

Reinforcement Learning · Knowledge Graphs

The Mechanism Matters: When Knowledge Graphs Help Reinforcement Learning

Mohammed Sameer SyedAAAI 2027 · arXiv:2607.19616University of Arizona

Knowledge graphs (KGs) are widely used to inject prior knowledge into reinforcement learning, yet the literature is dominated by single-domain, positive-result method papers, so we lack a systematic account of when KG structure helps an agent, when it is neutral, and when it hurts. We run a controlled study that independently varies the RL task, the injection mechanism (state features, action masking, or potential-based reward shaping), and KG quality over a synthetic, fully controllable KG on MiniGrid. Structured guidance improves sample efficiency and solve reliability on compositional sparse-reward tasks, and a shuffle control that permutes the KG's edges while preserving their count collapses the benefit toward baseline (masking p=0.0001; shaping p=0.006), so the gain is structural rather than generic regularization. Most consequentially, safety depends on the mechanism: soft, optimality-preserving injection benefits from correct knowledge and harmlessly ignores incorrect knowledge, whereas hard masking is brittle and can make a wrong KG worse than no KG. A UMLS-derived clinical case study on MIMIC-IV sepsis management under offline RL is a careful null, underscoring that benefits require task structure the chosen mechanism can exploit.

70% → 97%

Solve reliability

seeds solved

p = 0.0001

Shuffle control

masking, d=1.08

6 × 2

Envs × learners

Knowledge GraphsReward ShapingAction MaskingMiniGridOffline RL
ZetaDial: dialing net charge of protein binders at inference time for therapeutic developability preview
Preprint2026

Computational Biology · Controllable Generation

ZetaDial: dialing net charge of protein binders at inference time for therapeutic developability

Mohammed Sameer Syed, Tamara DinneenZenodo · doi:10.5281/zenodo.21832956University of Arizona

Net charge is a developability-relevant property of therapeutic binders, associated with viscosity, clearance, nonspecific interaction and aggregation, and antibody screens already apply charge-related criteria. Yet inverse-folding pipelines expose no way to set it to a target value: ProteinMPNN offers global and per-residue amino-acid biases and BindCraft offers weight choices and custom losses, but neither supplies a per-protein feedback loop that measures realised charge after sampling and corrects it toward a requested setpoint. ZetaDial contributes a post-sampling, per-protein secant controller around fixed-backbone ProteinMPNN. On 52 RCSB protein-protein complexes the secant loop reaches a mean absolute charge error of 5.17 units against 6.46 for a fixed-slope loop, and 5.57 against 8.23 on Cas13 monomers; against an optimized global bias it cuts RCSB error from 11.71 to 5.17 (cluster bootstrap p < 0.001), while on Cas13 the two are statistically indistinguishable. Per-protein sensitivity tracks how hard a protein is to calibrate, at Pearson r = 0.79 across 800 overlapping eight-protein subsets. Interface quality sets the usable band: DockQ declines clearly at bias magnitudes of ±3 but not at ±1.5 in the full seed-0 analysis, with paired declines at every nonzero setting once five further seeds are run on eight selected complexes.

5.17

Charge MAE

52 RCSB complexes · 6.46 fixed-slope

11.71 → 5.17

vs global bias

cluster bootstrap p < 0.001

r = 0.79

Sensitivity ↔ calibration

800 eight-protein subsets

ProteinMPNNBindCraftInverse FoldingNet ChargeESMFold
Read PDFPaper #02
ShifaMind: A Multiplicative Concept Bottleneck for Interpretable ICD-10 Coding preview
Preprint2025

Healthcare AI · Interpretability

ShifaMind: A Multiplicative Concept Bottleneck for Interpretable ICD-10 Coding

Mohammed Sameer Syed, Xuan LuUniversity of Arizona

Automated ICD-10 coding from clinical discharge summaries requires models that are both accurate on long-tailed multi-label classification tasks and interpretable to clinicians. We present ShifaMind, a concept-grounded architecture built around a Multiplicative Concept Bottleneck (MCB), which changes the form, rather than the width, of the bottleneck. Instead of projecting through a narrow concept layer, ShifaMind uses a learned multiplicative gate over a concept-grounded representation while retaining a scalar concept interface for inspection. On MIMIC-IV top-50 ICD-10 coding, ShifaMind achieves performance competitive with the strongest baseline LAAT across F1, AUC, and ranking metrics, while outperforming five additional ICD-coding baselines and providing concept-mediated explanations.

0.712

Macro-F1

MIMIC-IV top-50

4.3×

over Vanilla CBM

0.704

CSTPR

Concept BottleneckClinical NLPICD-10MIMIC-IVInterpretability
Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models preview
Preprint2025

LLM Safety · Mechanistic Interpretability

Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models

Mohammed Sameer Syed, Rozhin YasaeiUniversity of Arizona

As language models take on agentic roles that span calling external APIs, reading tool outputs, and acting on instructions embedded in third-party content, their attack surface expands well beyond what users type. We introduce the Safety Asymmetry Score (SAS), which measures how much a model's susceptibility to adversarial content shifts depending on whether that content arrives in the user message, tool metadata, or tool output, using matched payload pairs that keep the malicious text identical and vary only the context of delivery. Evaluated across 6 production LLMs and three attack families, agent-native models are substantially more vulnerable when adversarial content arrives via tool descriptions than via user messages, while general-purpose models show the reverse. A mechanistic study on Llama 3.3 70B reveals that the safety-relevant representation is causally present at mid-to-late network depths but non-linearly encoded, explaining why linear probes fail to detect it.

+30.4 pp

Group SAS gap

6 / 98

Models · cases

ρ = 0.54

vs MCPTox

LLM SafetyTool UseMCPActivation PatchingLlama 3.3
Fault Diagnosis of Power Transformer Using Frequency Response Analysis with the aid of SpectralGAN-Augmented Transformer Neural Network preview
Submission Pending2025

Power Systems · Generative Models

Fault Diagnosis of Power Transformer Using Frequency Response Analysis with the aid of SpectralGAN-Augmented Transformer Neural Network

Mohammed Sohail Syed, Madhava Rao Trilingi, Mohammed Sameer SyedIEEE Transactions on Power DeliverySRM University · University of Arizona

Accurate classification of power transformer winding deformation faults from frequency response analysis (FRA) measurements is constrained by the fundamental scarcity of labelled fault data. Existing data-driven methods either overfit to small training sets or rely on evaluation protocols that expose the test sample to the generative model, producing optimistic accuracy estimates. This paper presents a three-stage diagnostic pipeline that directly addresses both limitations. First, 48-dimensional indicator vectors are extracted from three IEC-standard sub-bands of the measured FRA transfer function. Second, SpectralGAN (a conditional WGAN-GP whose critic employs spectral normalisation on every linear layer) synthesises class-conditional indicator vectors from as few as 20 training samples per fold. Third, FRATransformer, a lightweight multi-head self-attention classifier that treats each sub-band feature block as a distinct token, classifies a mixed corpus of simulated samples, Gaussian jitter copies, and GAN-generated data. Evaluated under strict 21-fold Leave-One-Out Cross-Validation on a 21-sample simulated dataset spanning healthy, axial displacement, and radial deformation classes, with no test sample participating in GAN or classifier training, the pipeline achieves 85.7% accuracy and macro F1 = 0.838, a +23.8 pp improvement over the best SVM baseline (61.9%), with a 95% Clopper-Pearson confidence interval of [63.7%, 97.0%]. A four-condition ablation reveals that Gaussian jitter augmentation is the dominant driver of performance gain, while SpectralGAN synthesis further alters error patterns without changing total error count at this dataset scale.

85.7%

Accuracy

21-fold LOOCV · 95% CI [63.7, 97.0]

+23.8 pp

over SVM baseline

0.838

Macro F1

WGAN-GPSpectral NormalisationSelf-AttentionFRAFew-Shot