arXiv:2607.10059cs.AI2026-07被引 2

测试大模型智能体何时该停止行动,发现当前最先进模型仅能正确判断60%的停顿场景。

AgentAbstain: Do LLM Agents Know When Not to Act?

论文配图:AgentAbstain: Do LLM Agents Know When Not to Act?
图 1 · 摘自论文原文
  • 构建8类停顿场景的配对任务基准,通过指令/工具/环境扰动生成可对比的执行与不执行任务。
  • 17个前沿模型在263组任务中平均仅59.5%准确率,且解题能力与停顿识别无关。
  • 提出自动化生成流水线AbstainGen,支持持续生成高质量任务,适合安全敏感型智能体研发者使用。

基于大语言模型的智能体系统在自主任务中日益普及,但现有评估多关注任务完成率,忽视其在模糊、冲突或工具故障时是否懂得停止行动。这一差距带来真实风险:智能体可能在不确定条件下执行不可逆操作。为此,我们提出首个系统性评估框架AgentAbstain,衡量工具使用型大模型智能体在预执行推理和运行时发现中“知道何时不行动”的校准能力。该框架基于8类停顿场景的智能体原生分类,构建了263对任务,分布在42个可执行沙箱环境中;每对任务由一个应执行任务和一个应停顿任务构成,通过受控扰动指令、工具或环境状态生成。为实现规模化并防止数据污染,我们提出完全自动化的生成管道AbstainGen,经确定性重播和语义大模型裁判验证,可按需再生任务实例;三位独立标注员对94%-98%采样任务评定为设计良好。在17个前沿大模型(4种智能体框架)中,表现最佳者(Gemini 3.1 Pro)仅达59.5%配对准确率(即同时正确判断执行与不执行)。更重要的是,停顿识别能力与通用任务解决能力高度独立,表明单纯提升解题能力无法弥合此差距。我们还识别出‘事后停顿’等失败模式,即智能体先执行不可逆动作才意识到应停顿。代码与数据集已开源于agentabstain.github.io。

原文摘要 · Abstract (English)

Agent systems based on large language models (LLMs) are increasingly deployed for autonomous tasks, yet existing evaluations mostly focus on task success rather than whether agents know when to abstain. This gap poses real risks: under ambiguity, conflicting constraints, or tool failures, agents may execute unintended and irreversible actions. To close this gap, we present the first systematic evaluation framework for agentic abstention: the calibrated ability of tool-using LLM agents to recognize when not to act. At its core, AgentAbstain is a paired-task benchmark built on an agent-native taxonomy of 8 abstention scenarios across pre-execution reasoning and runtime discovery. It contains 263 paired tasks across 42 executable sandbox environments, where each pair consists of a should-act task and a should-abstain variant produced through a controlled perturbation to the instruction, tool, or environment state. To scale this paired design and resist data contamination, we propose AbstainGen, a fully automated pipeline that synthesizes sandbox environments and generates paired tasks end-to-end, validated by deterministic replay and semantic LLM judges; fresh task instances can be regenerated on demand, and three independent annotators rate 94-98% of sampled tasks as well-designed. Across 17 frontier LLMs in 4 agent harnesses, the best agent (Gemini 3.1 Pro) achieves only 59.5% paired accuracy (correct on both the act and abstain sides of each paired task). More importantly, abstention capability is largely independent of general task-solving capability, indicating that scaling task-solving alone will not close this gap. We further identify failure modes such as post-hoc abstention, in which agents execute irreversible actions before recognizing abstention triggers. Our code and dataset are open-sourced at agentabstain.github.io.

智能体大模型安全评估

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。