Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper critiques the inadequacy of KV-cache primitives in LLM serving runtimes to meet future-reuse obligations, arguing that these primitives can be manipulated without fulfilling claims about future KV reuse. The authors introduce the concept of ResidentClaim lowering, which requires a runtime primitive to bind its behavior to an accepted claim identity and lifecycle events. Their findings reveal that while certain systems like TensorRT-LLM and SGLang/HiCache show promise, they ultimately lack native conformance to ResidentClaim standards, highlighting a significant gap in current LLM runtime implementations.
Runtime primitives in LLMs can mislead about their future reuse capabilities, exposing a critical vulnerability in current AI systems.
LLM serving runtimes increasingly expose KV-cache primitives that resemble future-reuse controls: retention priority, TTL-like duration, host or storage offload, block events, active no-evict scheduling, and KV-aware routing. This paper argues that such primitives are weaker than accepted future-KV obligations. A runtime can expose priority, offload, events, and routing without accepting responsibility for a future reuse claim. We study ResidentClaim lowering: when a runtime primitive, trusted adapter, or patch can be treated as satisfying an accepted claim about future KV reuse. A conformant lowering must bind behavior to accepted claim identity, a materialization predicate, ordered lifecycle events, and claim-scoped outcomes. We contribute a fail-closed lowering relation, checker, descriptor format, and bad-lowering suite that classify runtime/mode mappings as native conformance, adapter-observational evidence, adapter-policy evidence under controlled pressure, approximation substrate, rejected mapping, or unknown evidence. The checker validates manually curated, anchored runtime descriptors against obligation bundles; it does not prove that unaudited runtime behavior is complete. Public TensorRT-LLM, SGLang/HiCache, and Dynamo expose strong substrates and selected adapter positives, but not native ResidentClaim conformance. The positive systems witness is a local patched vLLM connector/scheduler-boundary mechanism: claim metadata flows through real in-process offload/load behavior, and controlled same-claim restoration failure reaches vLLM's invalid-KV-load path and becomes an ordered claim-scoped fail-closed outcome. The result is a calibrated semantics boundary, not a production performance claim or a compatibility survey.