Skip to content

Robustness Analysis of Agentic AI to Inconsistent and Incomplete Tool Responses

Aug 2026 · 0 citations · 17 references
Computer Science

TL;DR

The results show that tool failures can be recognized at the return boundary, but reliable diagnosis requires combining multiple signals, and likelihood-based signals clearly capture incomplete returns and some direct inconsistencies, while action-based signals reveal how strongly a failure changes the next decision.

Abstract

Tool-using agents increasingly rely on external tools to complete multi-step tasks, but tool returns can fail in different ways and require different recovery actions. Existing robustness studies often use uncertainty-based measures to detect when an agent becomes unreliable. These measures can reveal that something has gone wrong, but they do not directly identify the type of tool failure or the appropriate response. We address this limitation by analyzing tool failures at the moment a return enters the agent context. Our approach combines two complementary signals. The first compares the likelihood of the returned content under the tool schema and under the full trajectory prefix. The second measures the agent's probability distribution over its legal next actions. We evaluate the approach by injecting incomplete and inconsistent returns into a retail customer-service benchmark. The results show that likelihood-based signals clearly capture incomplete returns and some direct inconsistencies, while action-based signals reveal how strongly a failure changes the next decision. Some failures that are weak under likelihood signals can still redirect the agent toward state-changing actions. These findings show that tool failures can be recognized at the return boundary, but reliable diagnosis requires combining multiple signals.

View source

Similar papers

#artificial intelligence Preprint Sep 2026

Agents'Overreliance on Unreliable Tools

LLM agents use tools to access information and perform computations beyond their parametric knowledge. Existing tool-use benchmarks evaluate whether agents select and call the right tools, assuming that tool returns are reliable. However, tools can return plausible but incorrect outputs. We evaluate 14 models with thre...

Hoyeol Yang, Woojung Song, Taewon Kim et al. · 2 citations
#artificial intelligence Preprint Sep 2026

TimeEvo: Failure-Driven Self-Evolution of a Time Series Agent

TimeEvo is proposed, which clusters an agent's diagnosed failures into capability gaps, plans a measurement for each, synthesizes evidence-only tools that fill them, and admits the candidate library only through a paired admission gate.

Jie Yang, Yan Zheng, Jia-Rui Sun et al. · 0 citations
#artificial intelligence Preprint Sep 2026

AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents

This work introduces AgentBound, the first four-way counterfactual generation-and-evaluation framework for tool-using agent safety, and shows that effective agentic alignment requires action decisions to track permission-relevant execution evidence, rather than refusal strength alone.

Tian-Zhuo Yang, Zi-Rui Mi, Yan-Tao Huang et al. · 1 citation
#artificial intelligence Preprint Sep 2026

Do Agents Know When They Succeed? Calibrating Agent Confidence from Internal Representations

This paper investigates whether model's internal representations provide stronger signals of eventual task success in multi-turn agentic setups, and introduces two complementary methods: Latent Trajectory Dynamics (LTD) and the Action Representation Probe (ARP), which predicts success from representations formed at act...

Priyanka Mary Mammen, Emil Joswin, Srujananjali Medicherla · 0 citations
#artificial intelligence Review Sep 2026

CART: Closed-Loop Adaptive Red Teaming for Large Language Models

Automated red teaming often replays a fixed set of prompts, which measures known risks but cannot learn from failures found during testing. We present CART (Closed-Loop Adaptive Red Teaming), a framework that uses each result to guide what it tests next. CART begins with broad risk coverage, follows weaknesses that eme...

Dong-Dong Zhang, Teng-Chao Lv, Yi-Ling Jia et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Recoverability as a System Primitive for Long-Horizon AI Agents

This work introduces recoverability as a system primitive that makes reuse an explicit decision: select a supported starting point and a permitted recovery action, or withhold automatic continuation, and establishes why recovery decisions need their own evaluation.

Zhi-Hui Zhang, Wei Liu · 0 citations

Related blog posts

Hugging Face Blog Oct 20, 2026

MPS in PyTorch 2.15

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.