Skip to content

Success Is Not Self-Explanatory: Auditing Success Provenance in Agent Evaluation

Jul 2026 · arXiv.org · Vol abs/2607.24054 · 0 citations · 33 references
Computer Science

TL;DR

Agent benchmarks should report success together with whether the evaluated information state supported it, and whether the evaluated information state supported it should report success together with whether the evaluated information state supported it.

Abstract

A correct answer can conceal why an agent succeeded. Once agents change their information state during evaluation, correctness no longer distinguishes intended reasoning from answer acquisition. Outcome evidence and exposure detection do not establish whether success depended on an acquired target; we call this missing evaluation object success provenance. AcquaBench audits it through matched CLEAN, GOLD, and SHAM value substitution on four standardized surfaces with joint qid-clustered analysis. CLEAN retains benchmark-authorized information. GOLD makes the correct target available. SHAM preserves source structure and exposure opportunity but substitutes a matched incorrect value. GOLD minus CLEAN measures the total score response to correct-target availability; GOLD minus SHAM tests whether that response tracks target correctness beyond matched source exposure. In D0, GOLD exceeds SHAM by 19.1 to 25.9 percentage points, showing that success follows the correct value. In D2, GOLD still exceeds SHAM under distributed sufficiency while coloc no longer transfers as a high-score marker, with AUROC 0.376 and 0.142. Behavioral dependence can thus persist beyond this probe's intended observation unit. In model comparison, a supported 5.0-point CLEAN score gap compresses to a raw GOLD difference of -0.6 points without establishing rank inversion. Agent benchmarks should report success together with whether the evaluated information state supported it.

View source

Similar papers

Jul 2026

Auditing Provenance Sensitivity in LLM Agent Action Selection

A target-specific authorization audit is introduced that labels context factors separately for each tool and argument target and holds the task, proposition, position, and policy fixed while changing only the proposition's source authority.

Jun-Hui Liao · 7 citations
Review Aug 2026

No Judgment Without a Reason: Counterfactual Receipts for Versioned AI Evaluators

This work formalizes evaluator reasoning accountability via three core sources: grounds, norms, and authority, and defines judgment receipts as minimal source replacement sets that reproduce revised verdicts to explain judgment transitions.

Yefei Chen, Wei-Ning Zhang · 0 citations
Review Aug 2026

Labels Are Not Endpoints: Treatment Leakage and Construct Validity in MCP Agent Security Evaluation

A campaign-bounded measurement audit, not a population attack-rate, model-ranking, defense-efficacy, or causal estimate, of a preserved campaign, which audit a preserved campaign by tracing 10,200 execution rows to 180 model-bound requests, 45 semantic requests, and 15 observable stimuli.

Rana Muhammad Ahmed, Sabahat Abbas · 0 citations
Jul 2026

Do Agent Benchmarks Measure Capability? Protocol Validity in the Age of Agentic AI

Agent benchmarks increasingly evaluate repository editing, web research, terminal use, and long-horizon interaction. Their scores support capability claims only when the evaluation protocol keeps the intended capability necessary for success. Recent reward-hacking benchmarks and system reports show that agents can inst...

Jia-Qi Shao, Hanck Chen, Wei Zhang et al. · 4 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.