Skip to content

DRNOISE: Benchmarking Deep Research Agents in Misleading Evidence Environments

Jul 2026 · arXiv.org · Vol abs/2607.17291 · 2 citations · 31 references
Computer Science

TL;DR

DRNOISE, a 100-task benchmark for answer recovery under misleading evidence, is introduced, a 100-task benchmark for answer recovery under misleading evidence that requires active reconciliation of direct claims with record-level evidence.

Abstract

Deep research agents increasingly operate over the open web, where relevant records coexist with redundant summaries, outdated reports, and misleading documents. Existing evaluations offer limited insight into whether agents preserve sound evidential standards when an ordinary-looking false document is deliberately seeded into a searchable environment and offers a direct shortcut to a conflicting answer. We introduce DRNOISE, a 100-task benchmark for answer recovery under misleading evidence. Each task has a unique gold answer supported by two corroborating indirect record chains; the paired noisy condition adds one plausible document that states a conflicting answer directly. The benchmark spans ten families of evidence operations. Across agents with strong clean-task performance, this single intervention causes 66-88 percentage-point accuracy drops. Trace analyses identify verification inertia as the dominant failure mode: agents often retrieve truthful records but stop before completing and reconciling the evidence chain, instead deferring to the answer-like document. Generic verification prompts reduce but do not close this gap. The setting is especially relevant to open-web deployment, where plausible falsehoods arrive through ordinary-looking pages rather than explicit attacks. Reliable deep research therefore requires more than retrieval and citation; it requires active reconciliation of direct claims with record-level evidence.

View source

Similar papers

Jul 2026

Is Deep Research Reliable? Misleading Knowledge Induces False Conclusions

MisKnow-Agent is introduced, a controlled evaluation framework that constructs task-specific documents supporting manually audited false conclusions with controlled authority cues and source styles that evaluates DeerFlow and WebThinker with three backbone LLMs using a report-level false-conclusion adoption rate that c...

Peng-Yu Zhu, Lijun Li, Long-Ping Yang et al. · 4 citations
Preprint Aug 2026

From Inertia to Objectivity: Improving Deep Research Agents with Noise Isolation

NIS-Agent is proposed, which applies context isolation at the two decision points most vulnerable to inertia bias: webpage triage and final-answer validation, and trains an 8B model to be intrinsically more resistant to inertia bias.

Xiang-Xin Zhang, Zhanwei Zhang, Zhihang Fu et al. · 1 citation
#artificial intelligence Preprint Sep 2026

Evaluating Deep-Search Agents under Hierarchical Web Evidence Poisoning

HAE-GEO is introduced, a benchmark that tracks the full trajectory from exposure to recovery under progressively more persuasive Web poisoning and finds three recurring patterns: evidence recognition degrades under the corroboration trap, agentic search improves final resistance without improving evidence recognition o...

Zhong-An Bi, Qi-Wen Wang, Jian-Rong Jiang et al. · 1 citation
Jul 2026

Do Agent Benchmarks Measure Capability? Protocol Validity in the Age of Agentic AI

Agent benchmarks increasingly evaluate repository editing, web research, terminal use, and long-horizon interaction. Their scores support capability claims only when the evaluation protocol keeps the intended capability necessary for success. Recent reward-hacking benchmarks and system reports show that agents can inst...

Jia-Qi Shao, Hanck Chen, Wei Zhang et al. · 4 citations
#artificial intelligence Review Sep 2026

RAP: Research Attention Prediction Reveals Target-Conditioned Evidence Acquisition Biases

Research Attention Prediction (RAP), a rolling benchmark covering 278 AI/ML fields and 1,390 episodes, is introduced, a rolling benchmark covering 278 AI/ML fields and 1,390 episodes for large language models to track shifts in research attention.

Ying-Qian Wu, Jingcong Liang, Si-Yuan Wang et al. · 0 citations
Preprint Aug 2026

SearchAuditor: Auditing and Attributing Failures in Long-Horizon Search Agents

A benchmark that evaluates whether LLM auditors can localize, attribute, and repair search-agent failures through evidence-grounded adjudication, and proposes SearchAuditor, a multi-perspective auditing framework that effectively localizes, attributes, and repairs search-agent failures through evidence-grounded adjudic...

Zhixiang Liang, Yifei Liu, Yi-Dan Huang et al. · 1 citation

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.