When Do Agent Loops Mistake Stagnation for Progress? Self-Evaluation Bias and Externally Grounded Verification in Long-Running Autonomous LLM Agent Loops
cs.AI
Submitted: 2026-07-27
Updated: 2026-09-29
Comments: 23 pages. Preregistered pilot measurement study. Also deposited on Zenodo (concept DOI 10.5281/zenodo.21594735)
License: http://creativecommons.org/licenses/by/4.0/
The gist: Long-running autonomous agents plan, act, and judge their own completion without human intervention.
Terminology
Abstract
Long-running autonomous agents plan, act, and judge their own completion without human intervention. When an agent grades its own work, self-evaluation bias takes hold: plausible changes are accepted as progress while real-world outcomes stagnate or regress. We name this failure mode the progress mirage and show, with controlled measurement, that it is a question of what the evaluator is grounded in. We built a testbed that holds the agent and its tool surface fixed and manipulates only the information-channel type of the evaluator that gates the loop. A world-state oracle, unfakeable in principle, is enforced by container and network isolation and verified at every run. Across 54 cycles a frontier agent claimed improvement every time, yet 56 percent had a measured delta of zero or below. Self-report was thus uninformative, and the self-verdict gate degenerated into accept-all, eroding the best deployed state it had reached by 19 percent. Even the strongest in-band judge, reading the full artifact text, the change diff, and its own verdict history, accepted cycles of which 44 percent were real-world regressions and rejected 38 percent of real improvements; the preregistered adversarial hypothesis that a strong judge closes the gap was rejected. On a boundary task whose success specification is verifiable from the artifact itself, the same judge's mirage vanished to zero and the gap collapsed within the registered threshold, showing that the gap depends on where the success signal resides. A sign-only variant returning only the acceptance verdict kept real-world output similar to full feedback (110.0 versus 113.0), locating the benefit in the gate's grounding rather than in feedback content. For open-ended objectives whose success signal lives outside the transcript, scaling up the judge is not enough; out-of-band evaluation with real-world access is a structural requirement.
Sources
- From Confident Closing to Silent Failure: Characterizing False Success in LLM Agents
- Concrete Problems in AI Safety
- RewardHackingAgents: Benchmarking Evaluation Integrity for LLM ML-Engineering Agents
- Constitutional AI: Harmlessness from AI Feedback
- Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation
- Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervision
- Reward Hacking in Language Model Agents: Revisiting AI Safety Gridworlds
- ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents
- GroundEval: A Deterministic Replacement for LLM-as-Judge in Stateful Agent Evaluation
- EvilGenie: A Reward Hacking Benchmark
- AI safety via debate
- Scalable agent alignment via reward modeling: a research direction
- Early Diagnosis of Wasted Computation in Multi-Agent LLM Systems via Failure-Aware Observability
- AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories
- Retrospective Progress-Aware Self-Refinement for LLM Agent Training
- Categorizing Variants of Goodhart's Law
- Spontaneous Reward Hacking in Iterative Self-Refinement
- Solving math word problems with process- and outcome-based feedback
- The Verification Horizon: No Silver Bullet for Coding Agent Rewards
- Forage V2: Knowledge Evolution and Transfer in Autonomous Agent Organizations
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems