Feyospace-v1: How the Cyber Mercury Seven Trained Frontier Cyber Models

Zongjie Li, Alan Z. W, John Nicolas J, Walter H. F, Scott Donald L, Gordon Y. P, Deke X Jr

Vera Praxis Lab

Published September 8, 2026 · on the feed September 14, 2026 · ▲ 124 · arXiv 2609.08418

Safety, alignment & securityAgentsReasoning & math No code arXiv ↗Hugging Face ↗Weights ↗

The abstract

Training capable cyber agents is often treated primarily as a problem of model scale, yet open-weight post-training is constrained more directly by the cost of executable environments, reliable multi-turn supervision, and access to strong teachers. We present a data-centric framework that addresses these bottlenecks through five complementary systems: Choulea analyzes hidden reasoning signatures, SkyReal reduces teacher-sampling cost, Hongzwang bypasses API restrictions on teacher execution, PSBreakup restores capabilities weakened by model merging, and Kreator converts expert interventions into trainable reasoning. Our data engine constructs resettable coding, vulnerability, CTF, kernel-history, full-exploit, firmware, and device-backed environments. Candidate trajectories are retained only after execution verification and evidence auditing, yielding 164,269 trajectories for long-context supervised fine-tuning. The three checkpoints improve over their starting models by an average of 23.76% on the full CyberGym suite and 10.49% across the pooled CTF suites. As of September 1, 2026, Feyospace-s1 achieves a verified success rate of 63.24% and ranks 10th on the official CyberGym leaderboard, while all three checkpoints rank 1st among models at comparable parameter scales. To our knowledge, this is the first end-to-end demonstration that a seven-person independent team can train open-weight models with leading agentic cyber capability.

The Brief

2:29

A short podcast summary of the paper. Written and voiced by AI.

Transcript

Feyospace-v1. How the Cyber Mercury Seven Trained Frontier Cyber Models. By Zongjie Li and six others, from Vera Praxis Lab. Published on the eighth of September. No code repository is linked to it.

Training capable cyber agents is often treated mainly as a matter of model scale. For open-weight post-training, the authors argue, the tighter constraints are elsewhere, and there are three of them. Executable environments cost a lot to build and run. Supervision across many turns has to be reliable, or the model learns from trajectories that never really worked. And strong teachers, the models whose behaviour a smaller one learns from, are hard to get access to. A small team with no advantage in scale has to solve those three problems instead.

Feyospace-v1 is a data-centric framework that goes after those bottlenecks with five complementary systems. Choulea analyzes hidden reasoning signatures. SkyReal reduces the cost of sampling from teachers. Hongzwang bypasses API restrictions on teacher execution. PSBreakup restores capabilities weakened by model merging. And Kreator converts expert interventions into reasoning that can be trained on. Two of these, SkyReal and Hongzwang, aim squarely at the teacher bottleneck: what it costs to sample from a teacher, and what an API will let a teacher execute.

Underneath sits a data engine that constructs resettable environments of several kinds: coding, vulnerability, CTF, kernel history, full exploit, firmware, and device-backed. Candidate trajectories are kept only after passing execution verification and an evidence audit. A trajectory has to have actually run, and its evidence has to check out, before it becomes training data. What survives is about one hundred and sixty-four thousand trajectories, used for long-context supervised fine-tuning.

The three resulting checkpoints improve on their starting models by an average of twenty-three point seven six percent on the full CyberGym suite, and ten point four nine percent across the pooled CTF suites. As of the first of September, Feyospace-s1 has a verified success rate of sixty-three point two four percent, and ranks tenth on the official CyberGym leaderboard. All three checkpoints rank first among models at comparable parameter scales.

The team describes this as, to their knowledge, the first end-to-end demonstration that a seven-person independent team can train open-weight models with leading agentic cyber capability. The Cyber Mercury Seven of the title are that team, and their case is that the leverage came from environments, verification and teachers rather than from scale.

Paper Quest · 7 chapters · about 22 min

Play this paper

Learn it by doing: make the calls the authors made, guess the result before you see it, and defend it in a viva graded on your own words. Chapter 1 is right here.

Chapter 1 🧩 · The problem

Every quest starts with a wall. Here it is three bottlenecks a small team must clear without the scale others rely on.

You are a small team improving an open-weight model's coding and security skills, and you cannot train a frontier model from scratch. Everyone assumes the bottleneck is model scale.

The road ahead

  1. 1 · The problem ~2 min
  2. 2 · What came before ~3 min
  3. 3 · The key idea ~3 min
  4. 4 · Choose your own research ~3 min
  5. 5 · Build the method ~3 min
  6. 6 · The experiment ~3 min You’ll guess: Across its three checkpoints, how much did this framework's post-training improve the average verified success rate on the full CyberGym suite?
  7. 7 · The viva ~5 min Three questions from the examiners, answered in your own words. Win it for the paper’s trophy.
Join free to play the whole quest ›

Free, with Google or an email address. Your stars and progress are kept.

KipQuest: the day’s AI research, as podcasts and quests. All papers Android app Privacy Contact Episodes are written and voiced by AI from each paper. Summaries can contain mistakes: the paper is the source.