SurfDesign: treating molecular surfaces as manifolds, not point clouds

Backbone-conditioned inverse folding is the dominant paradigm in AI-driven protein design: hand a model a target 3D backbone, get back a sequence predicted to fold into it. It's a clean, well-posed problem, and deep learning has made steady progress on it. But SurfDesign, a paper from a team spanning Stanford, Yale, Hunan University, and the Toyota Technological Institute at Chicago (accepted to KDD 2026's AI4Science track), argues that backbone conditioning is solving the wrong problem for most design tasks that actually matter. Function — binding, catalysis, receptor engagement — isn't set by fold geometry alone. It's set by the molecular surface: the charge distribution, curvature, and hydrophobic pattern presented at the interface where a protein actually touches its partner. Two proteins can share nearly identical backbones and do completely different things, because their surfaces differ. Code is on GitHub.

What makes SurfDesign worth a close read isn't the biology alone — it's the geometric argument underneath it, which is the kind of thing that's easy to get subtly wrong.

The fold-centric blind spot

Inverse folding treats a backbone as a fixed scaffold and asks which sequences are compatible with it. That's a sound question, but it's a diagnostic for structural compatibility, not a specification for function. Many practical design tasks — engineering an enzyme's active site, designing a de novo binder, tuning receptor specificity — are governed by localized surface shape and physicochemical complementarity, not global fold. A backbone-only model has no mechanism to condition on that; surface information, when it's used at all, tends to get bolted on as an auxiliary feature rather than treated as the primary conditioning signal.

A manifold, not a mesh

Prior surface-aware methods exist, but the paper points to a specific failure in how they represent the surface: molecular surfaces are continuous, infinitely differentiable manifolds, and most existing approaches (dMaSIF among them) discretize them into unordered point clouds or fixed meshes, which throws away local tangent structure, curvature, and directional consistency. dMaSIF, for instance, approximates geodesic distance by constructing tangent vectors at each point — a construction that breaks rotational equivariance, the property that a model's output should transform consistently with its input rather than depend on an arbitrary reference frame.

SurfDesign's encoder (SEMP, for surface-based equivariant message passing) is built to avoid that. It samples an oriented point cloud from the PyMOL-computed solvent-excluded surface, denoises it with Gaussian kernel smoothing, and, for each point, computes a rotation-invariant curvature descriptor from the eigen-decomposition of the local covariance matrix, plus directional features — the angles between neighboring surface normals and the dihedral angle of the connecting line — encoded through spherical Fourier-Bessel bases. All of that geometry gets folded into message passing that only ever propagates information through relative displacement vectors, which is what keeps the whole encoder SE(3)-equivariant by construction rather than by training the model to approximate equivariance from augmented data. It's notable, as someone who spent years thinking about symmetry constraints in physical systems, to see that distinction — equivariance as a structural guarantee versus a statistical tendency — actually matter for a downstream design metric.

Reprogramming a language model instead of retraining one

Structural data is scarce relative to sequence data, so training a surface-to-sequence model from structure-sequence pairs alone starves it of the evolutionary signal locked in large sequence databases. SurfDesign's answer is to keep a pretrained protein language model (ESM) as the sequence decoder and adapt it with a hybrid parameter-efficient fine-tuning setup — a structural adapter plus LoRA (rank 4, scaling factor 8) — so the surface encoder's output steers the PLM's predictions without retraining its backbone. Training uses conditional masked language modeling: mask residues, condition on the surface and the unmasked context, predict what's missing.

What the numbers show

The results are reported across three task families, and the pattern across them is consistent. On de novo binder design (six receptor targets, evaluated by AlphaFold2's predicted interface alignment error), SurfDesign reaches a 30.14% average success rate against native binders, versus 26.22% for the next-best surface method and 11.96% for ProteinMPNN, and it posts the best score on five of the six targets. On enzyme design (five enzyme-substrate categories scored by predicted enzyme-substrate compatibility), it reaches a 0.9058 average compatibility score and a 47.30% success rate, both the best among the compared methods, with the improvement holding up in a zero-shot substrate category the model never trained on.

On inverse folding, used here as a diagnostic for structural compatibility rather than the main objective, SurfDesign is the first surface-conditioned model to clear 70% amino-acid recovery on the CATH 4.2 and 4.3 benchmarks, reaching 74.13% recovery there and 82.16% and 84.70% on the TS50 and TS500 test sets, ahead of the previous best method on every one of them. The ablations are the more interesting number, though: strip the pretrained language model out and recovery drops from 74.13% to 65.35%; strip out the directional and curvature features and it drops by a comparable margin. But a backbone-only variant of the same architecture, with no surface conditioning at all, still reaches 65.12% recovery, ahead of other backbone-only baselines. Read together, the ablations rule out the obvious worry with a surface-conditioned model — that the surface features are smuggling in privileged sequence identity rather than genuine physical constraints — and show the geometric encoder is adding real information on top of an already-solid architecture.

The reframe that matters beyond this paper

The paper's own framing is that this shifts protein design from a fold-centric to an interaction-centric paradigm — surfaces as a first-class conditioning signal rather than a derived feature of the backbone. I'd generalize that one step further. The recurring lesson across geometric deep learning, in physics-adjacent applications and beyond, is that where you can build a symmetry into the architecture rather than hope a model learns it from data, you should — it's cheaper in data, and it fails more predictably when it fails. SurfDesign is a clean demonstration of that principle applied somewhere the payoff is concrete: proteins designed to actually bind and catalyze, not just fold correctly.