arXiv one-year ban for unchecked AI-generated paper submissions

The new arXiv rule is narrow on paper and sweeping in practice. The trigger is not LLM use, but visible carelessness: hallucinated references, fabricated citations, and embedded model meta-comments such as 'here is a 200 word summary; would you like me to make any changes?' or 'the data in this table is illustrative, fill it in with the real numbers from your experiments' ^[1]. Chair Thomas Dietterich's logic is unforgiving — if the authors did not even check the LLM output, nothing else in the paper can be trusted either ^[1]. Procedurally, it is a one-strike rule, but with safeguards: arXiv moderators flag the issue, the section chair must confirm before the ban applies, and authors retain appeal rights ^[2]. Crucially, responsibility attaches to every listed author, regardless of who actually pasted the prompt response into the manuscript ^[1]. That design choice converts a content-moderation problem into a collective-liability regime: junior coauthors inherit the same one-year exile as the senior author who shipped the broken draft, and the appeal process becomes the only buffer against guilt-by-association.

Strip away the rhetoric and arXiv's policy is fundamentally a queuing problem. By September 2024, nearly a quarter of all arXiv computer science abstracts already showed evidence of LLM modification ^[3]. One year later, arXiv hit a record of roughly 26,000 monthly submissions, with the surge concentrated among new submitters ^[4]. The CS section now absorbs hundreds of AI-generated survey submissions every month, and overall rejection rates have climbed to roughly 10-12% as 'slop' grew exponentially through early 2025 ^[3][5]. Dietterich is explicit that moderator capacity, not AI use itself, is the binding constraint — arXiv simply lacks the volunteer hours to manually evaluate every LLM-assisted survey paper ^[3]. The ban-plus-peer-review-gating structure is a cost-shifting mechanism: it pushes screening labor from arXiv's unpaid moderators onto journals and conference program committees. That makes the policy less a principled stand on scientific integrity than a triage protocol, dressed up in the language of trust.

The policy's edges are where the pain concentrates. Because banned authors must clear formal peer review before posting anything new, economist Joy Buchanan argues the one-year ban 'effectively functions as a permanent preprint ban' — researchers cannot share working drafts during the restriction, and peer review timelines often dwarf the nominal ban length ^[6]. AI safety researcher Stephen Casper notes the related October 2025 rule already disadvantages 'young people, people without access to lots of compute, and people who are not at institutions that have lots of publishing,' because review and position papers are exactly the formats junior scholars use to enter a field ^[3]. Worse, AI-generated papers can list real researchers as coauthors without their knowledge, raising the prospect that innocent academics get swept into a ban they had no role in causing — a scenario Dietterich did not fully address ^[5]. Reddit discussion across r/PhD, r/math and r/MachineLearning was overwhelmingly supportive of the underlying ban, but the same threads flagged exactly these coauthor-liability and detection-bias risks, including the obvious exploit of weaponizing the rule by listing rivals as coauthors on poisoned drafts.

arXiv's enforcement model relies on visible artifacts — the dangling 'would you like me to make any changes?', the placeholder table, the fabricated DOI. As detection tightens, bad actors are already moving to adversarial techniques: a Nikkei investigation found 17 arXiv preprints with hidden prompts engineered to coerce favorable AI-assisted peer reviews ^[8]. Hallucinated citations themselves are also slipping past human review at the high end: a Columbia study of 2.5 million biomedical papers found hallucinated citations rose tenfold since 2023, reaching one in every 277 papers in early 2026, and GPTZero identified over 100 hallucinated citations across 53 accepted NeurIPS papers that had each cleared at least three human reviewers ^[5]. Founder Paul Ginsparg captures the deeper problem: LLMs invert academia's oldest heuristic. 'The abstract could look reasonable, even isolated paragraphs, but you couldn't see that something was very wrong until you actually tried to follow the logic' ^[4]. When prose polish stops correlating with thinking quality, reviewers lose their cheapest filter — and arXiv loses the moderator economics that made open preprints viable in the first place.

arXiv is the most influential preprint server in computer science, so its enforcement choices act as a template. The October 31, 2025 rule already pushed review articles and position papers behind a peer-review wall, explicitly disqualifying workshop review as sufficient ^[7]. The May 2026 ban layers personal sanctions on top of that content gate. Together they redefine the preprint server from a fast, open posting venue into something closer to a gated mirror of formally reviewed work — at least for the categories most prone to LLM abuse. Pressure on bioRxiv, medRxiv, SSRN and other preprint servers struggling with the same dynamics now rises, because they can either adopt arXiv-style sanctions or absorb the displaced submissions of authors arXiv has banned ^[7]. The deeper bet is institutional: arXiv is wagering that the cost of being slightly less open is smaller than the reputational cost of becoming a known dumping ground for unverified AI text. If that bet pays off, expect peer-review re-entry gates to become the default enforcement primitive across scientific preprint infrastructure.