A Trust Layer for Agent Evaluation
cs.AI
Submitted: 2026-10-05
Updated: 2026-10-05
License: http://creativecommons.org/licenses/by/4.0/
The gist: Deterministic benchmark scores show that an agent received credit, but not whether that credit was earned, reported honestly, or would hold on a second run.
Abstract
Deterministic benchmark scores show that an agent received credit, but not whether that credit was earned, reported honestly, or would hold on a second run. We introduce a Trust Layer for Agent Evaluation, an additive post-hoc framework that reports, beside each recorded score, whether it should be believed. It verifies four properties: whether the result is supported by the benchmark's own grading logic, whether a passing answer was earned through traceable computation, whether the agent's completion claim matches what occurred, and whether the result is stable under repeated execution. The first three use only saved artifacts; the fourth re-runs the agent. Model judgments only label evidence under majority voting; all verdicts follow deterministic rules and never modify the recorded score. Applied to five agent configurations on 108 tasks from Agents' Last Exam, every model shows passing runs with no traceable computation (at rates varying tenfold), confirmed false completion claims, and unstable results: 18-46% of tasks do not stay in one score band over five runs. Only 22.6% of recorded passes clear all four checks (95% CI 15.0-32.6, n=84). Measuring what an agent can do and verifying that it did it are different problems, and current benchmarks address only the first.
Sources
- From Confident Closing to Silent Failure: Characterizing False Success in LLM Agents
- On Randomness in Agentic Evals
- Beyond Task Completion: Revealing Corrupt Success in LLM Agents through Procedure-Aware Evaluation
- BeHonest: Benchmarking Honesty in Large Language Models
- EvilGenie: A Reward Hacking Benchmark
- On the Reliability of Computer Use Agents
- SWE-Doctor: Guiding Software Engineering Agents with Runtime Diagnosis from Multi-Faceted Bug Reproduction Tests
- ReliabilityBench: Evaluating LLM Agent Reliability Under Production-Like Stress Conditions
- AI Agents That Matter
- Stochasticity in Agentic Evaluations: Quantifying Inconsistency with Intraclass Correlation
- The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systems
- SAGE: Governed Artifact Generation from Enterprise Guidelines
- GVD: Governed Versioning and Deduplication for Document Repositories
- Agents' Last Exam
- Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use
- Who Guards the Benchmarks? Automated Auditing of LLM Agent Benchmarks
- $\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains
- BuildBench: Benchmarking LLM Agents on Compiling Real-World Open-Source Software
- How Much Can Repeated Running Buy? A Measured Variance Ceiling for LLM Code Evaluation
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems