Research idea

Evaluation and review controls for ambiguous agent work

Day · 2026-07-23 · Software Intelligence

Agent evaluations can test reliability more precisely by locating clarification, formal verification, and specialist review at the decisions where errors become expensive to reverse. The most useful changes concern when an agent asks, whether a policy verdict has an executable derivation, and which intermediate artifacts actually trigger review.

3 ideas

Clarification checkpoints before irreversible implementation decisions

Coding-agent benchmark designers should evaluate whether an agent asks for a hidden constraint before the implementation decision that depends on it, rather than rewarding question volume or requirement coverage alone. ICAE-Bench finds that recovering more constraints does not automatically raise pass rates, while pAI-Econ-claude concentrates human authority at choices that are costly to reverse. Combining these observations suggests annotating each hidden requirement with its last responsible checkpoint—such as selecting an API, schema, or architecture—and scoring timely clarification separately from final test success and unnecessary interruptions. A small ICAE-Bench replay could compare unrestricted questioning with checkpoint-based access to the simulated user, measuring enhanced-test results and implementation rework.

Executable proof traces for security policy task verification

Security benchmark maintainers and compliance teams could require an agent to submit both its operational answer and a formal derivation from an independently authored policy model. Tencent WorkBuddy Bench already separates domain-specific verification and includes security work, while Euclid-MCP can rerun Horn-clause deductions and expose proof trees. The combined evaluation would distinguish a correct-looking answer from one supported by the stated rules: the benchmark verifier would execute the submitted query, compare its conclusion with the task outcome, and inspect whether the derivation uses the required policy clauses. Counterfactual mutations to permissions, thresholds, or dates offer a cheap check against hard-coded answers. This would test auditability rather than assume that the agent’s natural-language-to-logic translation is correct; Euclid-MCP does not report numerical baseline comparisons for that translation step.

Cue-triggered specialist review in long research workflows

Teams operating agent-assisted economic research could trigger specialist review when the workflow touches a risky artifact—an equilibrium declaration, welfare claim, counterexample, or canonical-model choice—instead of running every review stage uniformly or relying on the agent to remember prior warnings. pAI-Econ-claude’s gates improved auditability but consumed 4.6 to 18 times the baseline usage allowance. Separately, cue-anchored working memory delivered scoped information reliably across compaction, whereas an agent made no memory calls in 114 turns under the strongest voluntary control. A matched study should seed known proof, premise, and lineage defects, then compare always-on gates, voluntary review, and artifact-triggered review on defect interception, reviewer calls, and token use. The evidence does not yet show that cue-based routing preserves pAI-Econ-claude’s quality gains, so that comparison is the decision-relevant test.