评测语言模型执行标准流程的合规性,发现顶级模型仍易出错。
SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints
- 将流程代码转为可执行图,用规则验证器自动判断动作合规性
- 在7个客服领域测试超900个用例,顶尖模型通过率仅30%-50%
- 揭示大模型易被绕过规则,适合评估AI安全与工业应用可靠性
随着语言代理越来越多地自动化关键任务,其在执行操作和工具调用时遵守特定领域标准操作流程(SOP)、政策和约束的能力变得至关重要,但这一能力仍缺乏深入研究。为此,我们开发了自动化评估流水线SOPBench:(1) 包含7个客服领域共167个工具/函数的可执行环境,配有服务特定的SOP和基于规则的验证器;(2) 自动化测试生成框架,生成超过900个经验证的测试用例;(3) 自动化评估框架,从多个维度严格评估代理的遵循程度。我们的方法将每个服务特定的SOP代码程序转化为可执行函数的有向图,并要求代理根据自然语言SOP描述调用这些函数。原始代码作为基于规则的验证器评估合规性,减少对人工标注和LLM评估的依赖。我们评估了18个领先模型,结果表明该任务即使对顶级模型(如GPT-4o、Claude-3.7-Sonnet)也极具挑战性,不同领域表现差异明显。推理模型如o4-mini-high表现更优,而其他强大模型表现较差(通过率30%-50%),小型模型(7B、8B)表现显著更差。此外,语言代理极易被越狱以忽略SOP和约束。代码、数据及超过24,000条代理轨迹已发布于https://github.com/Leezekun/SOPBench。
原文摘要 · Abstract (English)
As language agents increasingly automate critical tasks, their ability to follow domain-specific standard operating procedures (SOPs), policies, and constraints when taking actions and making tool calls becomes essential yet remains underexplored. To address this gap, we develop an automated evaluation pipeline SOPBench with: (1) executable environments containing 167 tools/functions across seven customer service domains with service-specific SOPs and rule-based verifiers, (2) an automated test generation framework producing over 900 verified test cases, and (3) an automated evaluation framework to rigorously assess agent adherence from multiple dimensions. Our approach transforms each service-specific SOP code program into a directed graph of executable functions and requires agents to call these functions based on natural language SOP descriptions. The original code serves as oracle rule-based verifiers to assess compliance, reducing reliance on manual annotations and LLM-based evaluations. We evaluate 18 leading models, and results show the task is challenging even for top-tier models (like GPT-4o, Claude-3.7-Sonnet), with variances across domains. Reasoning models like o4-mini-high show superiority while other powerful models perform less effectively (pass rates of 30%-50%), and small models (7B, 8B) perform significantly worse. Additionally, language agents can be easily jailbroken to overlook SOPs and constraints. Code, data, and over 24k agent trajectories are released at https://github.com/Leezekun/SOPBench.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。