nlparxiv

What the Trace Shows and What the Label Says: Auditing Behavioral Detectors in Agent Evaluation

LLM agents are often evaluated by reducing execution traces to labels such as final-answer correctness, tool verification, and fault propagation. These labels are measurements produced by parsers,…

Idunnuoluwa A. Adeniji / Shilpika / Michael E. Papka

用途
原典で確認
難易度の目安
Hard
実装コストの目安
High

概要

LLM agents are often evaluated by reducing execution traces to labels such as final-answer correctness, tool verification, and fault propagation. These labels are measurements produced by parsers, behavioral detectors, and harness rules, and they may not fully capture what the trace shows. We study this in a tool-use setting built on GSM8K, where agents call a calculator whose outputs are occasionally corrupted, giving clear ground truth for what the tool returned, what the model later used, and what the detectors reported. We audit three trace-level detectors across six production models and 30 problems per model. Final correctness, visible re-verification, and fault propagation can disagree in systematic ways. A key failure mode is silent tool-output override: the calculator returns a corrupted value, but the model later uses a different, often correct, value without calling the tool again, so the bad value stops propagating while a verification detector records no re-check. Human review of 90 traces agrees perfectly with the automated labels for final correctness (67/67), fault impact (19/19), and fault relevance (18/18), but only 67/81 for verification; all 14 disagreements fall into four recurring patterns. Execution limits also change the reported result: in an ablation across two models, one ranges from 21/30 to 27/30 correct as step and token budgets change, while the other stays between 27/30 and 29/30. These findings motivate measurement transparency: an automated label should come with the trace evidence behind it, whether the question the detector asks applied to that trace, whether the run was cut off by an execution limit, and any human corrections. Our trace viewer makes this information inspectable alongside the reported results.

参考リンク

リンク先のライセンス・再現性・データ条件をご確認ください。自動分類や実装の目安は保証ではありません。

実装を始めるプロンプト

参考リンクを確認したうえで、次の内容をコピーして利用できます。

# 論文・記事
What the Trace Shows and What the Label Says: Auditing Behavioral Detectors in Agent Evaluation

# 概要
LLM agents are often evaluated by reducing execution traces to labels such as final-answer correctness, tool verification, and fault propagation. These labels are measurements produced by parsers,…

# 原典
https://arxiv.org/abs/2610.30491

上記の手法を実装してください。実行前に依存関係とライセンスを確認してください。

関連する記事

github実装リンクあり

dafeiyu-cleaner — DeepSeek 蓝色大肥鱼消除计划:识别并清理 B 站(Bilibili)评论区中由 DeepSeek 大模型、AI Agent 驱动的机器人账号(大肥鱼)的 Chrome / Edge / Firefox 浏览器插件。离线规则 + DeepSeek API 精判,AI 评论检测、空间主页鉴定、鲸鱼娘一键清场。DeepSeek AI bot detector for Bilibili comments.

DeepSeek 蓝色大肥鱼消除计划:识别并清理 B 站(Bilibili)评论区中由 DeepSeek 大模型、AI Agent 驱动的机器人账号(大肥鱼)的 Chrome / Edge / Firefox 浏览器插件。离线规则 + DeepSeek API 精判,AI 评论检测、空间主页鉴定、鲸鱼娘一键清场。DeepSeek AI bot detector for Bilibili comme

nlp