mlsanityData to 7 Oct 2026

Homomorphic Advantage Operator: Stabilizing Reinforcement Learning Under Fully Homomorphic Encryption Constraints

arXiv 2610.02074 ↗First posted 1 Oct 2026cs.AI cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

Privacy-preserving machine learning presents significant deployment challenges on the cloud for intelligent systems with confidential data. Fully Homomorphic Encryption (FHE) offers a compelling solution for secure computation, preserving data confidentiality of cloud computations. However, applying FHE to reinforcement learning (RL) requires replacing non-linear operations with polynomial approximations, which diverge catastrophically due to a unique recursive error phenomenon known as the Bellman drift. This article introduces the Homomorphic Advantage Operator (HAO), a stabilization framework designed to prevent polynomial approximation divergence in FHE-based deep RL. HAO adapts the zero-mean centering projection from advantage-based value estimation directly to temporal-difference (TD) targets. This linear projection annihilates the uniform state-value baseline that drives the Bellman drift, maintaining per-state action rankings while requiring zero additional non-linear multiplicative depth and avoiding expensive ciphertext bootstrapping. The proposed HAO framework was evaluated using a three-tier experimental methodology, including a tabular Markov Decision Process (MDP), an encrypted CartPole environment using real CKKS cryptographic operations, and a 20-node logistics routing benchmark with dense continuous features. The results demonstrate that the proposed HAO strictly bounds network pre-activations within the safe polynomial approximation domain. The proposed HAO RL agents achieved 0% boundary breaches across all random seeds used, whereas regularization alone (L2 weight decay and gradient clipping) breached the bound on 3 of 5 seeds and the unstabilized baseline did so in 83.8% of episodes. Finally, HAO agents improve optimal policy accuracy by 18.0 percentage points in tabular domains and remain stable when DP-SGD-style Gaussian noise is added to the clipped gradients.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 11 of its 29 references that are in the map. First posted on arXiv 1 Oct 2026.

Builds on

11 of 29 references.

References · 11

  1. 2016Deep Learning with Differential Privacycited by 2,682
  2. 2019Deep Leakage from Gradientscited by 1,004
  3. 2015Dueling Network Architectures for Deep Reinforcement Learningcited by 769
  4. 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
  5. 2016Learning values across many orders of magnitudecited by 80
  6. 2021Return-based Scaling: Yet Another Normalisation Trick for Deep RLcited by 22
  7. 2021A methodology for training homomorphicencryption friendly neural networkscited by 10
  8. 2025A Training Framework for Optimal and Stable Training of Polynomial Neural Networkscited by 2
  9. 2021Reinforcement Learning on Encrypted Datacited by 1
  10. 2025ReBoot: Encrypted Training of Deep Neural Networks with CKKS Bootstrappingcited by 1
  11. 2026CHEHAB RL: Learning to Optimize Fully Homomorphic Encryption Computationscited by 1

Built on by

Not cited yet.