The results show that tool failures can be recognized at the return boundary, but reliable diagnosis requires combining multiple signals, and likelihood-based signals clearly capture incomplete returns and some direct inconsistencies, while action-based signals reveal how strongly a failure changes the next decision.
Abstract
Tool-using agents increasingly rely on external tools to complete multi-step tasks, but tool returns can fail in different ways and require different recovery actions. Existing robustness studies often use uncertainty-based measures to detect when an agent becomes unreliable. These measures can reveal that something has gone wrong, but they do not directly identify the type of tool failure or the appropriate response. We address this limitation by analyzing tool failures at the moment a return enters the agent context. Our approach combines two complementary signals. The first compares the likelihood of the returned content under the tool schema and under the full trajectory prefix. The second measures the agent's probability distribution over its legal next actions. We evaluate the approach by injecting incomplete and inconsistent returns into a retail customer-service benchmark. The results show that likelihood-based signals clearly capture incomplete returns and some direct inconsistencies, while action-based signals reveal how strongly a failure changes the next decision. Some failures that are weak under likelihood signals can still redirect the agent toward state-changing actions. These findings show that tool failures can be recognized at the return boundary, but reliable diagnosis requires combining multiple signals.
LLM agents use tools to access information and perform computations beyond their parametric knowledge. Existing tool-use benchmarks evaluate whether agents select and call the right tools, assuming that tool returns are reliable. However, tools can return plausible but incorrect outputs. We evaluate 14 models with thre...
Hoyeol Yang, Woojung Song, Taewon Kim et al.· 2 citations
TimeEvo is proposed, which clusters an agent's diagnosed failures into capability gaps, plans a measurement for each, synthesizes evidence-only tools that fill them, and admits the candidate library only through a paired admission gate.
Jie Yang, Yan Zheng, Jia-Rui Sun et al.· 0 citations
This work introduces AgentBound, the first four-way counterfactual generation-and-evaluation framework for tool-using agent safety, and shows that effective agentic alignment requires action decisions to track permission-relevant execution evidence, rather than refusal strength alone.
Tian-Zhuo Yang, Zi-Rui Mi, Yan-Tao Huang et al.· 1 citation
This paper investigates whether model's internal representations provide stronger signals of eventual task success in multi-turn agentic setups, and introduces two complementary methods: Latent Trajectory Dynamics (LTD) and the Action Representation Probe (ARP), which predicts success from representations formed at act...
Priyanka Mary Mammen, Emil Joswin, Srujananjali Medicherla· 0 citations
Automated red teaming often replays a fixed set of prompts, which measures known risks but cannot learn from failures found during testing. We present CART (Closed-Loop Adaptive Red Teaming), a framework that uses each result to guide what it tests next. CART begins with broad risk coverage, follows weaknesses that eme...
Dong-Dong Zhang, Teng-Chao Lv, Yi-Ling Jia et al.· 0 citations
This work introduces recoverability as a system primitive that makes reuse an explicit decision: select a supported starting point and a permitted recovery action, or withhold automatic continuation, and establishes why recovery decisions need their own evaluation.