This work introduces recoverability as a system primitive that makes reuse an explicit decision: select a supported starting point and a permitted recovery action, or withhold automatic continuation, and establishes why recovery decisions need their own evaluation.
Abstract
AI agents can be interrupted while editing files, calling tools, or carrying out multi-step tasks. Restarting repeats completed work, but continuing from unverified or outdated progress can carry earlier errors forward. A saved state is not necessarily a suitable place to resume. We introduce recoverability as a system primitive that makes reuse an explicit decision: select a supported starting point and a permitted recovery action, or withhold automatic continuation. Its behavioral contract binds that choice to supporting evidence, execution, and independent checks. A reference architecture connects persistence, validation, and control, with complementary runtime instances testing distinct responsibilities. Four deterministic and 20 paired file challenges demonstrate that accurate restoration and successful completion can conceal disallowed starting points. Progress controls attribute retained work to shared restoration. Event-time tests show that permission must also constrain the action, and that independently held policy evidence can expose violations even after an effect occurs. These findings establish why recovery decisions need their own evaluation, beyond restored bytes and final task success. Within supplied policies and a declared trust model, the contribution is a common, testable interface for retaining justified progress and making the conditions for its reuse explicit and enforceable.
Long-horizon agentic workflows require models to sustain repeated state-dependent actions all while the context grows, sub-task complexity changes, and new data arrives. Each situation represents an independent axis along which an agent may fail. An agent reconciling a long ledger, for example, must repeatedly read its...
Jeffrey Willette, Krishna C. Puvvada, Boris Ginsburg· 0 citations
An executable contract linking observable support, statistical calibration, and justified claims is contributed an executable contract linking observable support, statistical calibration, and justified claims.
The EIR is introduced, a lower bound on the information that must remain accessible for correct completion under specified task and access conditions and LACUNA is developed, a framework that generates tasks with known dependencies and varies information demand, retention, and recovery separately from the difficulty of...
N. Mehrotra, Ashish Tiwari, Priyanshu Gupta et al.· 0 citations
In an authored study of four incident families, five policies, and 50 seeds, every policy fixed the visible incident and R² audits whether the repaired system can detect, localize, repair, and verify a different unseen fault within budget within budget.
Dominic Dabish· Proceedings of the 1st Inter...· 0 citations
The results show that the dominant source of failure can shift across model generations, motivating evaluation that diagnoses where and why long-horizon security agents fail rather than relying only on aggregate task success.
Wei Shao, Chongzhou Fang, Zu-Xiong Tan et al.· 1 citation
This work introduces SINGED (Source Integrity and the Nonidentifiability Gap in Execution Decisions for LLM Agents), a controlled benchmark covering five primary and two held-out task families and exposes a rank-, evidence-, and choice-sensitive outcome-to-execution gap.
XiaoYu Xu, Zi Liang, Min-Xin Du et al.· arXiv.org· 0 citations