Fetching from the wire…
Public story · 2026-08-04 · high
A trained failure monitor's accuracy collapses on a new model; a simple arithmetic check doesn't budge.
Why now: The comparison posted to arXiv on Aug. 3, giving builders a concrete number to weigh against whatever LLM-judge monitoring they already run.
A basic arithmetic check catches 60% of agent failures, per a study posted to arXiv on Aug. 3. That's the harder number for builders. A trained anomaly detector needs retraining for every new model, with accuracy falling from 0.885 to 0.527 on one it hasn't seen.
The study covered 2,823 committed agent episodes across three frameworks, three local models, and Gemini 2.5 Flash. An echo-state-network ensemble with CUSUM alarms caught 71% of mid-episode failures at a 5% false-alarm budget, for an AUROC of 0.872. It ran in about 200 microseconds a step, three orders of magnitude cheaper than an LLM-judge call.
The deterministic check works differently: it recomputes a run's stated total against the tool results actually received. That alone catches 60% of failures. Add a coverage check and it hits 96%, with zero false positives in 63 trials and none across 1,825 healthy episodes.
Detection only pays off if something acts on it. Feeding alarms into a rollback-and-rerun repair loop recovered 45% of failures, against 16% for a resampling control. That lifted task success from 52% to 73% for about one extra model call.
A related study on MCP server monitoring found the same pattern. Ranking servers by drift caught only about 10% of description changes across 19,099 servers. Statistical drift signals keep losing to a direct check.
Each link below shares sources, entities, or timing with this story.
A 4,181-problem study found confidence-based escalation beats a frozen router by 4.2 points while using 37% fewer tokens.
It automates the data-flow, crash-semantics, and commit-history work engineers do by hand.
A training-free fix called ChannelGuard held steady across three model backends, filter or no filter, blocking every tool-poisoning attempt.
ActBench ran 24,000 attack trajectories across 15 models and six harnesses; no harness pushed success below 73.7%.
The errors trace back to how the benchmark pairs pull requests with GitHub issues, not just to model quality.
An ablation that skipped the router entirely tied the full system's score, per the paper.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.