Skip to content
Preprint

When Failures Propagate: Causal Failure Attribution in Agentic Retrieval-Augmented Generation

Aug 2026 · 0 citations · 10 references
Computer Science

TL;DR

Results make propagation depth an explicit evaluation axis for diagnosing agentic RAG failures while distinguishing broad evidence of post-hoc signal loss from small-sample method comparisons.

Abstract

Agentic retrieval-augmented generation (RAG) interleaves retrieval, reasoning, and answer generation across multiple hops. A retrieval error at hop 1 can surface only as a wrong answer at hop 3, while later retrieval can also repair the trajectory. This paper introduces AgenticRAG-FP, an interventional benchmark for causal failure attribution in agentic RAG. The benchmark injects a certified fault at a specified hop, re-executes the downstream trajectory, and evaluates diagnosers against the known intervention. Its central question is whether a post-hoc trace still identifies the injected hop after the suffix changes. In the completed strict dense Claude Haiku 4.5 sweep on 80 three-hop MuSiQue questions, coverage-based diagnosis is 0.91 at hop 1 and 0.00 at hops 2 and 3 (n=43,36,21 failed trajectories). A smaller content-corruption study changes an answer-bearing or bridge fact in topically intact evidence. At depth 2, where 18 failed cases remain after filtering, coverage-based diagnosis is 0.00 and a frozen-hop counterfactual probe is 0.67 in an exploratory pooled comparison. Depth-3 content estimates are descriptive only because they contain three failed cases. These results make propagation depth an explicit evaluation axis for diagnosing agentic RAG failures while distinguishing broad evidence of post-hoc signal loss from small-sample method comparisons.

View source

Similar papers

Preprint Aug 2026

HopRefusalBench: Diagnosing Refusal Failures in Search-Augmented Agents for Multi-Hop Reasoning

This work introduces HopRefusalBench, the first controlled benchmark of refusal within multi-hop search, and proposes a final-outcome taxonomy spanning target-aware refusal, pseudo-refusal, hallucinated completion, and search-budget exhaustion, together with source-aware trajectory metrics for post-trigger continuation...

Jianan Xie, Xin Sun, Zhongqi Chen et al. · 0 citations
Preprint Aug 2026

Before Reasoning Can Fail: Pre-Evidence Procedural Failures in Agentic RAG

It is shown that evidence-gathering should be evaluated as a trajectory-level control problem, separately from answer-side reasoning, because larger hidden thinking budgets do not necessarily increase evidence inspection.

Daeyoung Roh, Donghee Han · 0 citations
Preprint Aug 2026

EvoTrustRAG: Evolution-Aware Conflict Attribution and Evidence Handling for Reliable Retrieval-Augmented Generation

Retrieval-Augmented Generation (RAG) improves the factuality of large language models with external knowledge, yet conflicting evidence remains a fundamental challenge in dynamic and adversarial environments. Existing approaches often treat conflicts as static inconsistencies and select more reliable knowledge, overloo...

Xiao-Rui Nie, Hong-Wei Li, Shenghao Wu et al. · 1 citation
Preprint Aug 2026

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates

PURPOSE is proposed, a strict black-box poisoning attack that reframes the injection as an update that minimizes conflict, rather than as a counter-claim, and identifies non-contradicting injection as a practical mode to enhance poisoning attack.

Zijian Wang, Yubo Zhu, M. Dong et al. · 0 citations
Conference 2026

Att2RAG: A Double-Condition Framework for Knowledge Poisoning Attacks on RAG Systems

Att2RAG is presented, a double-condition framework for knowledge poisoning attacks on RAG systems that decomposes a successful poisoning event into a retrieval condition and a generation condition, and casts poisoning as maximizing attack success subject to satisfying both conditions.

Zhize Hao · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.