REVIEW 4 major objections 5 minor 24 references
AgentTrails: Towards Trust and Reuse for Agentic Tasks
T0 review · 4 major / 5 minor · reviewed 2026-08-01 · deepseek-v4-flash
Pith's one-line read AgentTrails reconstructs dependency graphs from raw chronological agent logs, making the hidden dataflow of tool-calling agents explicit for debugging, comparison, and reuse.
desk verdict A genuinely new post-hoc provenance reconstruction plus multi-trace alignment prototype, honestly scoped but unvalidated at its load-bearing step. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The central object is the provenance graph G_T = (A_T ∪ E_T, R_T), a bipartite graph whose nodes are tool-call activities and data artifacts and whose edges are generatedBy, usedBy, and informedBy relations. Reconstruction relies on key matching between recovered entity keys (storage ids, paths, filenames, URLs, names) and references in later tool-call arguments, plus semantic candidate matching and a constrained LLM refinement. The multi-trace mechanism is the activity capsule: each activity is summarized by tool identity, input/output structure, local graph context, and upstream root lineage, and capsules are clustered using a weighted Jaccard/cosine similarity S(κ_i, κ_j) = Σ w_m s_m(κ_i,
What would settle it
Hand-annotate a gold set of agent traces with true dependency edges and compute precision and recall of the reconstructed graph. If coincidental token overlaps produce false edges, or if references without shared keys cause missed edges in numbers that materially change the workflow, the claim that hidden dependencies are revealed would be undermined. The paper itself notes that provenance quality needs gold dependency benchmarks and reports only preliminary hand-annotation on 10 traces (234 edges) without numbers.
Extended reading notes
Core claim
The paper's core discovery is that a bipartite provenance graph can be reconstructed from a raw trace by matching key evidence from outputs to references in later inputs. Tool calls become activities, and the entities they produce or consume—inputs, outputs, intermediate artifacts, returned values—become data artifacts. Edges are assigned deterministically for exact matches (e.g., a filename or URL appears in a later call's arguments) and as auditable candidates for weaker semantic matches, with a constrained LLM refinement step that may patch the graph but only within schema, temporal, and reference constraints. This graph exposes fan-in/fan-out structures and artifact reuse that chronologi
Load-bearing premise
The load-bearing premise is that producer-consumer dependencies can be reliably recovered from raw trace evidence such as artifact IDs, paths, filenames, URLs, and semantic token reuse without instrumenting the agent framework; if reconstruction yields false or missed edges, the hidden dependencies and joined alignments built on top inherit those errors.
Editorial extensions
If this is right
- Reconstructed provenance graphs expose hidden dependency structure—fan-in/fan-out patterns and artifact reuse—that is invisible in raw chronological logs.
- The joined quotient graph aligns multiple stochastic executions, revealing high-support workflow motifs and low-support trace-specific branches that are candidates for debugging or pruning.
- Because reconstruction is trace-agnostic and requires no framework instrumentation, the approach can be applied to heterogeneous agent logs from different frameworks and domains.
- The auditable separation of exact edges, semantic candidates, and LLM edits supports trust: users can see which dependencies are grounded in direct evidence and which are inferred.
- Patterns extracted from joined graphs can feed skill abstraction and workflow reuse, turning trajectory corpora into structured assets.
Reading between the lines
- A reliable reconstruction method would let teams retroactively add provenance to existing agent systems whose frameworks cannot be instrumented, as long as logs contain enough structural artifacts.
- The capsule-clustering alignment could be reused as a preprocessing step for automated workflow mining: clusters with high support across many traces could seed libraries of reusable agent skills, turning raw trajectory corpora into structured training data.
- One testable extension is to use support patterns in joined graphs as a weak signal for execution quality: if low-scoring runs systematically exhibit more off-path branches, then provenance-level structure could serve as a debugging heuristic without gold labels.
- The approach's dependence on visible artifact identifiers suggests a boundary condition: agents that pass data only through semantic content with no shared keys may require much more aggressive semantic matching, and the system's confidence should be exposed to users.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper introduces AgentTrails, a prototype system that takes raw chronological tool-calling agent logs and reconstructs a bipartite provenance graph in which tool calls are activities and their inputs/outputs are data artifacts. Reconstruction proceeds in three stages: a deterministic skeleton from exact artifact-key matches (identifiers, paths, filenames, URLs), optional semantic dependency candidates, and a constrained LLM refinement step that outputs patch operations. For multi-trace analysis, activities are abstracted into 'activity capsules' and clustered across traces using a weighted similarity measure; each cluster becomes a joined anchor, producing a joined quotient graph that highlights recurring structures and trace-specific deviations. A visual analytics front end and an LLM-based copilot support inspection and comparison. The paper demonstrates the approach on two usage scenarios (a SciAgentGym physics trace and Discovera gene-set traces) and claims that AgentTrails reveals hidden dependencies, aligns divergent executions, and surfaces recurring tool-use patterns.
Significance. If the reconstruction is accurate, AgentTrails addresses a real and timely gap: recovering dependency topology from unstructured agent logs without framework instrumentation. The design has several commendable properties: the deterministic skeleton is grounded in exact trace evidence, the final graph keeps exact, semantic, and LLM-refined edges distinguishable, and the multi-trace alignment via activity capsules is a plausible way to handle stochastic executions. These features make the paper's central claims falsifiable and the approach potentially reproducible. However, the paper provides no quantitative evidence that the recovered provenance graphs are correct. The two usage scenarios are illustrative; they show that the system can produce visually coherent graphs, not that those graphs correspond to true dataflow. Because every downstream claim—joined alignment, pattern extraction, workflow reuse—inherits the accuracy of the reconstruction step, the missing evaluation is load-bearing rather than cosmetic.
major comments (4)
- [§3, 'Provenance Graph Construction' and 'Two questions remain'] The central claim that AgentTrails 'reveals hidden dependencies' rests entirely on the reconstruction step, yet the only evaluation reported is: 'we hand-annotated 10 traces with 234 gold dependency edges; preliminary results are promising.' No precision, recall, F1, edge-type breakdown, or error analysis is given. The paper itself admits 'provenance quality needs gold dependency benchmarks.' This is not a minor omission: if the reconstructed graphs contain false or missed edges, the joined quotient graph and extracted patterns are built on unreliable topology. The authors should report full metrics on the 234-edge gold set, ideally with a per-edge-type breakdown (exact key, semantic candidate, LLM-refined), and compare against baselines such as exact matching alone or direct LLM inference. If possible, they should also test on instrumented frameworks where ground-truth provenance is ava
- [§3, 'Provenance Graph Construction' (constrained LLM refinement)] The LLM refinement step can add or remove edges beyond exact evidence, constrained only by valid node references, temporal order, and the activity/entity schema. These constraints do not prevent the LLM from introducing plausible-looking but incorrect dependencies. Because the final graph is a co-production of evidence and LLM judgment, the paper's auditability claim ('exact edges, semantic candidates, and LLM-refined edits remain distinguishable') is good, but it is not enough. The evaluation must quantify the accuracy of each edge source separately and include an ablation that removes the LLM refinement to show whether it improves or degrades reconstruction. Without this, the 'hidden dependencies' shown in §4 could be partially artifacts of the LLM rather than recovered dataflow.
- [§3, 'Multi-Trace Provenance Graph', Eq. for capsule similarity] The alignment quality depends on the capsule similarity weights w_m, which are free parameters. The paper does not state how the weights were chosen, reports no sensitivity analysis, and §5 concedes that 'the capsule similarity function and its weights require principled tuning and evaluation.' Since the joined graph and the claimed alignment of divergent executions are central contributions, the paper should at least report the chosen weights, test robustness to reasonable perturbations, and ideally evaluate clustering quality against a gold alignment of traces for the same task. Without this, it is unclear whether the alignment results in §4 are meaningful or an artifact of parameter choice.
- [§4, usage scenarios] Both usage scenarios are post-hoc narrative reconstructions. They demonstrate that AgentTrails can produce a neat graph and that the graph matches the authors' scientific interpretation of the task, but they do not validate that the recovered dependencies are correct. For the SciAgentGym scenario, the paper mentions comparing with the benchmark's expected tool use, but provides no quantitative comparison. For the Discovera scenario, the graph is shown to align with the expected data-processing pipeline, but again without ground-truth dependency edges. The authors should provide a systematic evaluation on a larger set of traces where the true dependency structure is known (e.g., from an instrumented workflow-aligned agent), reporting edge-level accuracy and, where possible, demonstrating that the joined graph's high-support paths correspond to reusable workflows and its low-support paths
minor comments (5)
- [§3, notation] The notation K(e_j) and refs(c_i.args) is introduced informally. A precise definition of what counts as a 'key' (e.g., exact string, normalized identifier, filename prefix) and what counts as a 'reference' would make the deterministic skeleton reproducible. Similarly, the 'informedBy' edge type is mentioned but not defined; its semantics should be clarified.
- [§3, activity capsule] The activity capsule is described verbally as containing tool identity, input/output structure, local graph context, and upstream root lineage, but the feature set and the similarity functions s_m are not specified. A table or pseudocode listing the features and the Jaccard/cosine variants would improve clarity and enable independent implementation.
- [§3, 'Multi-Trace Provenance Graph'] The term 'quotient graph' is used but never formally defined. It would be helpful to state explicitly how the original nodes/edges are mapped to joined anchors and how the aggregated edges preserve trace-specific multiplicity and support.
- [§4, Figure 4] The text references panels (A), (B), and (C) of Figure 4 but does not explain all visual encodings (e.g., node size, edge width, color) in the figure caption. Adding a legend or explicit caption text would help readers interpret the claimed support and score summaries.
- [§3, 'Interactive Visualization'] The provenance copilot is said to 'help users interpret trace-derived, auditable graphs,' but the copilot itself is an LLM and could introduce interpretive errors. A brief note on how copilot outputs are grounded or bounded would be useful, even if the copilot is not the focus of the paper.
Circularity Check
No significant circularity: graph reconstruction is evidence-based, copilot is explicitly non-definitional, and acknowledged limitations are validation gaps rather than circular steps.
full rationale
AgentTrails' load-bearing steps—the deterministic skeleton using exact evidence (K(e_j)∩refs(c_i.args)), the separate semantic candidate pool, and constrained LLM patch refinement—are not defined in terms of the claimed revealed dependencies, and no parameter is fitted to the hand-annotated gold edges. The paper describes the gold annotations as an evaluation ('we hand-annotated 10 traces with 234 gold dependency edges; preliminary results are promising'), not as training or fitting data. The joined quotient graph is built from the stated capsule similarity S(κ_i,κ_j)=Σ_m w_m s_m(κ_i,κ_j) and aggregates reconstructed graphs rather than reintroducing the conclusion. The paper explicitly guards against the main place circularity could enter: 'The copilot does not define provenance; it helps users interpret trace-derived, auditable graphs.' The admitted limitations—'provenance quality needs gold dependency benchmarks' (§3) and 'provenance quality lacks ground-truth benchmarks' (§5)—are validation gaps, not definitional or constructional circularity. No equation, fitted parameter, or load-bearing self-citation reduces the claimed outputs to their inputs; therefore the circularity score is 0.
Assumptions & free parameters
free parameters (2)
- capsule similarity feature weights w_m
- matching/clustering thresholds (exact-key match thresholds, capsule cluster cutoff)
assumptions (4)
- domain assumption Tool-call inputs and outputs can be identified from raw trace fields (arguments, responses, artifact IDs, paths, URLs, returned objects)
- domain assumption Key/value overlap between a later call's arguments and an earlier entity's recovered keys implies a producer-consumer dependency
- ad hoc to paper LLM-refined graph patches, constrained to preserve schema and temporal order, improve reconstruction
- ad hoc to paper Activity capsules with weighted Jaccard/cosine similarities over tool tokens, I/O structure, graph context, and root lineage capture workflow-role equivalence
invented entities (2)
-
activity capsule
-
joined anchor node
Cite this review
Pith. "Pith review of AgentTrails: Towards Trust and Reuse for Agentic Tasks." pith.science (2026). https://pith.science/paper/55HM5XHK
@misc{pith2026260718816,
author = {Pith},
title = {Pith review of: AgentTrails: Towards Trust and Reuse for Agentic Tasks},
year = {2026},
howpublished = {\url{https://pith.science/paper/55HM5XHK}},
note = {Machine review of arXiv:2607.18816}
}
read the original abstract
LLM-powered agents increasingly tackle complex tasks by invoking tools, querying databases, executing code, and manipulating intermediate artifacts. These agents follow trajectories that are typically stored as chronological logs, obscuring the underlying dataflow -- the dependencies between their actions and the artifacts they create and manipulate. This limits developers' ability to understand the agents' trails, compare executions, debug failures, and re-use the computations. We present AgentTrails, a prototype system for agent provenance and sensemaking. AgentTrails converts raw trajectories into structured provenance graphs, where tool calls are modeled as computational actions and inputs and outputs as data artifacts. The system supports the comparison of executions by placing multiple provenance graphs on a shared canvas and constructing a joined quotient graph that aligns recurring tools, artifacts, and dependency structures across trajectories. On top of this representation, AgentTrails supports pattern extraction, downstream analysis, and skill abstraction. We demonstrate AgentTrails on real-world agent trajectories, showing that it reveals hidden dependencies, aligns divergent executions, and surfaces recurring tool-use patterns beyond chronological logs.
Figures
Figures from the paper (1 more)
Reference graph
Works this paper leans on
-
[1]
Bjarni Haukur Bjarnason, André Silva, and Martin Monperrus. 2026. On Ran- domness in Agentic Evals. InICLR 2026 Workshop on Agents in the Wild
2026
-
[2]
Timothy Bula, Saurabh Pujar, Luca Buratti, et al . 2025. SeaView: Software Engineering Agent Visual Interface for Enhanced Workflow. arXiv:2504.08696
arXiv 2025
-
[3]
Yanda Chen, Joe Benton, Ansh Radhakrishnan, et al. 2025. Reasoning Models Don’t Always Say What They Think. arXiv:2505.05410
arXiv 2025
-
[4]
Darshan Deshpande, Varun Gangal, Hersh Mehta, et al . 2025. TRAIL: Trace Reasoning and Agentic Issue Localization. arXiv:2505.08638
arXiv 2025
-
[5]
Michael Desmond, Ja Young Lee, Ibrahim Ibrahim, et al. 2025. Agent Trajectory Explorer: Visualizing and Providing Feedback on Agent Trajectories.Proc. AAAI Conf. Artif. Intell.39, 28 (2025). https://doi.org/10.1609/aaai.v39i28.35350
-
[6]
Juliana Freire, David Koop, Emanuele Santos, and Cláudio T. Silva. 2008. Prove- nance for Computational Tasks: A Survey.Computing in Science and Engineering 10, 3 (2008), 11–21
2008
-
[7]
Siegel, et al
Sayash Kapoor, Benedikt Stroebl, Zachary S. Siegel, et al. 2024. AI Agents That Matter.Trans. Mach. Learn. Res.2025 (2024)
2024
-
[8]
David Koop, Juliana Freire, and Cláudio T. Silva. 2013. Visual summaries for graph collections. InIEEE PacificVis. https://doi.org/10.1109/PacificVis.2013.6596128
arXiv 2013
Show all 24 references
-
[9]
Shuyang Liu, Yang Chen, Rahul Krishna, et al. 2026. Process-Centric Analysis of Agentic Software Systems.Proc. ACM Program. Lang.10, OOPSLA1 (2026). https://doi.org/10.1145/3798271
2026 doi
-
[10]
Jiaying Lu, Bo Pan, et al. 2025. AgentLens: Visual Analysis for Agent Behaviors in LLM-Based Autonomous Systems.IEEE Trans. Vis. Comput. Graph.31, 8 (2025)
2025
-
[11]
Jingwei Ni, Yihao Liu, Xinpeng Liu, et al. 2026. Trace2Skill: Distill Trajectory- Local Lessons into Transferable Agent Skills. arXiv:2603.25158
2026 arXiv
-
[12]
Jorge Piazentin Ono, Sonia Castelo, Roque López, et al. 2020. PipelineProfiler: A Visual Analytics Tool for the Exploration of AutoML Pipelines.IEEE Trans. Vis. Comput. Graph.27 (2020). https://api.semanticscholar.org/CorpusID:218470098
2020
-
[13]
Daniela Pinto Veizaga, Aécio Santos, Eden Wu, et al. 2026. Discovera: A Workflow- Aligned AI Agent for Signature-to-Mechanisms Analysis. NE Agents Day 2026 Workshop Submission, Submission 18
2026
-
[14]
Carlos Scheidegger, Huy Vo, David Koop, et al. 2007. Querying and Creating Visualizations by Analogy.IEEE Trans. Vis. Comput. Graph.13, 6 (2007). https: //doi.org/10.1109/TVCG.2007.70584
2007
-
[15]
Yujiong Shen, Yajie Yang, Zhiheng Xi, Binze Hu, et al . 2026. SciAgentGym: Benchmarking Multi-Step Scientific Tool-Use in LLM Agents. InICML
2026
-
[16]
Noah Shinn, Federico Cassano, Ashwin Gopinath, et al. 2023. Reflexion: Language Agents with Verbal Reinforcement Learning. InNeurIPS. arXiv:2303.11366
2023 arXiv
-
[17]
Renan Souza, Amal Gueroudji, Stephen DeWitt, et al . 2025. PROV-AGENT: Unified Provenance for Tracking AI Agent Interactions in Agentic Workflows. In2025 IEEE International Conference on eScience (eScience). 467–473
2025
-
[18]
Yawen Wang, Wenjie Wu, Junjie Wang, et al. 2026. From Flat Logs to Causal Graphs: Hierarchical Failure Attribution for LLM-based Multi-Agent Systems. arXiv:2602.23701
2026
-
[19]
Jiaqi Wei, Yuejin Yang, Xiang Zhang, et al. 2025. From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discovery. arXiv:2508.14111
2025
-
[20]
Shunyu Yao, Noah Shinn, Pedram Razavi, et al. 2025. 𝜏-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains. InICLR
2025
-
[21]
Shunyu Yao, Jeffrey Zhao, Dian Yu, Nan Du, Izhak Shafran, et al. 2023. ReAct: Synergizing Reasoning and Acting in Language Models. InICLR
2023
-
[22]
Jiayi Yuan, Hao Li, Xinheng Ding, et al . 2025. Understanding and Mitigating Numerical Sources of Nondeterminism in LLM Inference. InNeurIPS
2025
-
[23]
Guibin Zhang, Junhao Wang, Junjie Chen, Wangchunshu Zhou, et al . 2026. AgenTracer: Who Is Inducing Failure in the LLM Agentic Systems?. InICLR
2026
-
[24]
Andrew Zhao, Daniel Huang, Quentin Xu, et al. 2024. ExpeL: LLM agents are experiential learners. InAAAI. https://doi.org/10.1609/aaai.v38i17.29936
2024 doi
Reviewed August 1, 2026 · model on record in the stance chip above.
Discussion (0). Sign in to comment.