TRACE: Diagnosing Verifier Brittleness in Agentic Evaluation
cs.CL
Submitted: 2026-10-08
Updated: 2026-10-08
Code: https://github.com/RGaonkar/trace-verifier-stress-tests
License: http://creativecommons.org/licenses/by-nc-sa/4.0/
The gist: Verifier scores now serve as both benchmark metrics and training rewards for large language model (LLM) agents, and a change in score is routinely read as a change in capability.
Terminology
Abstract
Verifier scores now serve as both benchmark metrics and training rewards for large language model (LLM) agents, and a change in score is routinely read as a change in capability. It may instead reflect a change in the evaluation. We introduce TRACE, a protocol that turns a score change from a verdict into a testable diagnosis: it applies a targeted change to one part of an evaluation, compares paired runs, checks whether the agent's behavior changed, and rescores unchanged trajectories to test whether the scoring rule is responsible. In a controlled suite of 25 synthetic tasks, renaming tools lowers a scripted agent's score by 0.250 even though it performs exactly the same operations; restoring the original names at scoring time closes the entire gap, while the same mutation exposes a genuine behavioral failure in a second agent. On public τ squared-bench tasks with four LLM agents, an initial 30-task study finds mixed reward changes whose one clear effect does not replicate. In a larger follow-up on 88 new tasks with repeated runs per condition, renaming tools or reformatting tool outputs leaves reward unchanged to within plus or minus 0.10 for seven of eight agent-change pairs, whereas tool names that deliberately mislead lower every agent's reward by 0.20-0.44, showing that the setup can detect real effects. Identical reruns flip 15-36% of task outcomes, so single-run comparisons cannot separate presentation effects from run-to-run variation. Two frontier LLM judges give consistent verdicts when a fixed trajectory is presented differently, yet disagree with each other on 57% of the same records, largely because one grades procedure rather than outcome. TRACE thus separates what a score change says about the agent from what it says about the measurement.
Sources
- Constitutional AI: Harmlessness from AI Feedback
- $\tau^2$-Bench: Evaluating Conversational Agents in a Dual-Control Environment
- Measuring what Matters: Construct Validity in Large Language Model Benchmarks
- Training Verifiers to Solve Math Word Problems
- Agent-RLVR: Training Software Engineering Agents via Guidance and Environment Rewards
- Helping or Herding? Reward Model Ensembles Mitigate but do not Eliminate Reward Hacking
- Beyond Math and Code: Lightweight Corpus-Grounded Process Rewards for Factual Question Answering
- EvilGenie: A Reward Hacking Benchmark
- SWE-bench: Can Language Models Resolve Real-World GitHub Issues?
- AI Agents That Matter
- Catastrophic Goodhart: regularizing RLHF with KL divergence does not mitigate heavy-tailed reward misspecification
- AgentBench: Evaluating LLMs as Agents
- AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories
- Adversarial NLI: A New Benchmark for Natural Language Understanding
- Training language models to follow instructions with human feedback
- Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formatting
- Rewarding Progress: Scaling Automated Process Verifiers for LLM Reasoning
- Learning to summarize from human feedback
- Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use
- HiL-Bench (Human-in-Loop Benchmark): Do Agents Know When to Ask for Help?
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering