Skip to content
Preprint

Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failures

Jul 2026 · 0 citations · 106 references
Computer Science

TL;DR

This work introduces an interaction-centric taxonomy that localizes failures to the interactions in which they originate and identifies the responsible component, and organizes 41 failure modes by assigning each to an edge between two components and a fault side indicating where the repair belongs.

Abstract

Existing evaluations often reduce agent failures to system-level outcomes, obscuring where the fault originated and which intervention would improve the agent system. This creates a repair-assignment problem: the same visible failure may call for model post-training, harness engineering, environment redesign, or benchmark repair depending on its source. Because agent behavior emerges from interactions among models, harnesses, users, tools, memory, and environments, outcome-level labels are often insufficient for improvement. Most failure taxonomies do little to resolve this problem because they are benchmark-specific and lack a shared structure. We introduce an interaction-centric taxonomy that localizes failures to the interactions in which they originate and identifies the responsible component. It organizes 41 failure modes by assigning each to an edge between two components and a fault side indicating where the repair belongs. This makes the taxonomy actionable: model-side failures identify targets for post-training, harness-side failures point to scaffolding and tool-integration fixes, and environment or grader failures reveal evaluation conditions requiring redesign. The schema applies across agent architectures, from coding assistants to long-horizon personal assistants and multi-agent systems. We ground the taxonomy in worked examples from public benchmarks, model system cards, published reports, and logged agent trajectories, and evaluate its reproducibility using independent reasoning agents as judges. Across four frontier models, the strongest judge reaches Cohen's $\kappa=0.76$ against human category labels, suggesting that the categories capture shared structure rather than annotator-specific preferences.

View source

Similar papers

Preprint Jul 2026

Who Broke the System? Failure Localization in LLM-Based Multi-Agent Systems

Experimental results show that AgentLocate consistently outperforms existing failure localization methods in identifying both responsible agents and failure steps, while remaining efficient in terms of token usage and running time.

Yu Xia, Anjun Gao, Yueyang Quan et al. · 0 citations
Preprint Aug 2026

Adaptive Influence Graphs for Failure Attribution in Multi-Agent Systems

Adaptive Influence Graphs is introduced, a two-stage agentic framework that first transforms a failed trace into a structured graph and then navigates it to identify the critical error and establishes a new state of the art on Who&When, the standard benchmark for multi-agent failure attribution.

Yarden Bakish, Amir Dudai, Roy Ganz et al. · 0 citations
Review Jul 2026

Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions

This survey treats isolation as a first-class principle for LLM-agent system safety, and organizes the literature with a boundary-centric taxonomy of five boundaries: user-agent, agent-tool, agent-execution, agent-agent, and system-environment.

Huihao Jing, Wenbin Hu, Shaojin Chen et al. · 0 citations
Preprint Jul 2026

Fantastic Adaptive Taxonomies and How to Use Them

It is argued that an agent system should maintain an explicit representation of how it fails, induced from its own behavior and reusable wherever failure feedback is needed, and AdaMAST builds this representation by converting a target system's traces into a compact, evidence-grounded failure taxonomy.

M. Cemri, Andrei Cojocaru, Melissa Z. Pan et al. · 0 citations
Preprint Jul 2026

AgentAbstain: Do LLM Agents Know When Not to Act?

This work presents the first systematic evaluation framework for agentic abstention, and identifies failure modes such as post-hoc abstention, in which agents execute irreversible actions before recognizing abstention triggers.

Xun Liu, Y. Zhang, Vira Kasprova et al. · 2 citations
Preprint Jul 2026

AgentTether: Graph-Guided Diagnosis and Runtime Intervention for Reliable LLM Agent Operation

Large language model (LLM) agents are increasingly used for multi-step, stateful tool-use tasks, yet production reliability remains limited. Unlike static software repair, agent repair must recover dynamic trajectories whose early decisions can propagate into later errors and external state changes. Existing automatic remedies address only part of this problem: blind retry adds no diagnosis, outcome feedback says whether a run failed but not where or why, and self-reflection often lacks grounded evidence to prevent the same failure from recurring. We present AgentTether, a run-time repair framework that automates post-run diagnosis and guided recovery without modifying the underlying agent or environment. AgentTether abstracts each run into Transition Units, links them through a dependency-aware Critical Transition Graph, and localizes failure-critical subtrajectories by combining an offline normal-behavior model with a run-local graph detector. It then converts the localized cause into behavior-scoped guidance backed by cross-iteration Repair Memory, and can optionally apply guarded run-time intervention to keep the correction active during re-execution. The same design can be deployed as an offline diagnostic-and-guidance tool or as an online repair layer. We evaluate AgentTether on 261 tau-bench tasks across three domains with Qwen3.7-max, and test cross-model transfer on Banking with GPT-5.4. On the hardest Banking domain, AgentTether repairs 59.04% (49/83) of initially failed Qwen3.7-max tasks and 65.12% (56/86) of initially failed GPT-5.4 tasks. Overall, AgentTether improves repair effectiveness while reducing agent turns and end-to-end approach tokens, suggesting a practical reliability layer that can wrap existing agent deployments, reduce wasted re-execution, and improve recovery without retraining the agent.

Chenyu Zhao, Shenglin Zhang, Wenwei Gu et al. · 2 citations