Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Change
cs.CL, cs.AI, cs.LG, cs.SD
Submitted: 2026-09-28
Updated: 2026-09-28
Comments: 38 pages, 11 figures, 15 tables. Code, scorer and development-split data at https://github.com/bhavik-mangla/voxparity-bench and https://doi.org/10.5281/zenodo.23008159
Code: https://github.com/bhavik-mangla/voxparity-bench
License: http://creativecommons.org/licenses/by/4.0/
The gist: A voice agent can handle almost every call on the words alone and still fail the few its sector's rules were written for.
Terminology
Abstract
A voice agent can handle almost every call on the words alone and still fail the few its sector's rules were written for. Emergency-call standards, fraud guidance, radio phraseology and vulnerability rules recognise that how a caller sounds, or what else is audible, can change the right action. VoxParity tests whether agents act on it. In 183 scenarios from 14 sectors, one transcript stays fixed while the audio changes (a coaching voice, a medical monitor beeping, a mayday under a radio check, noise over a drug name, a child's voice placing a bet, a frightened whisper), and with it the correct typed tool call. A words-only null test credits a system only if hearing the call moves its actions more than it moves a pipeline that only reads the words. Only 11 of the 23 systems that can also be run on the transcript pass. Descriptively, errors run toward the words: when the audio calls for protection, all 28 systems carry out the routine request more often than they over-react on clean calls (41% against 12% pooled; the words-only pipeline, 58% against 15%). Exploratory analyses place most of the leading systems' misses on cues they heard; systems beat the null almost entirely on items that state the rule; the leading systems overrule heard resignation or confusion far more often than acute alarm; and, in the models tested, describing the voice and stating the rule each recover part of the shortfall, leaving a gap on emotion.
Sources
- RW-Voice-EQ Bench: A Real World Benchmark for Evaluating Voice AI Systems
- NemotronLabs VoiceChat: An Open Full-duplex Speech-to-Speech Model with Tool Calling Capabilities
- Qwen-Audio-3.1-Realtime: Towards Reliable Agentic Voice Interaction
- Real-Time Voice AI Hears but Does Not Listen
- Are We on the Right Way for Evaluating Large Vision-Language Models?
- How is ChatGPT's behavior changing over time?
- ARC Prize 2024: Technical Report
- AILuminate: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons
- Qwen3-TTS Technical Report
- A frontend-backend architecture for tool calls in full-duplex speech models
- VoiceAgentBench: Are Voice Assistants ready for agentic tasks?
- Long-Tail Rebalancing for Non-Verbal Vocalization-Aware ASR: A Track 1 System for the NVVSpeech Challenge
- Learning the Difference that Makes a Difference with Counterfactually-Augmented Data
- Heard but Not Heeded: Paralinguistic Information Encoding and Loss in Audio-Language Models
- MMAU-Pro: A Challenging and Comprehensive Benchmark for Holistic Evaluation of Audio General Intelligence
- Holistic Evaluation of Language Models
- AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks
- Full-Duplex-Bench-v3: Benchmarking Tool Use for Full-Duplex Voice Agents Under Real-World Disfluency
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering