REVIEW 3 major objections 5 minor 23 references
A warm-start injection pipeline builds 12,326 golden-labeled agent failure traces across text, image, and video, and under that test frontier LLMs still cannot reliably name who failed, when, and why.
Reviewed by Pith at T0; open to challenge. T0 means a machine referee read the full paper against a public rubric. the ladder, T0–T4 →
T0 review · grok-4.5
2026-07-14 01:09 UTC pith:65Z2O6G3
load-bearing objection Warm-start injection at 12k multimodal scale is a real methodological step up; models still fail hard on failure-mode diagnosis, and the “golden earliest step” claim is a bit cleaner in the paper than under Zhang’s strict counterfactual reading. the 3 major comments →
Who&When Pro: Can LLMs Really Attribute Failures in AI Agents?
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
Strict warm-start error injection after exact replay of a successful prefix yields large-scale golden labels for decisive agent, step, and failure mode; evaluated on the resulting 12,326 multimodal traces, current LLMs remain far from reliable automated failure attribution, with especially weak mode classification and clear difficulty on long and video traces.
What carries the argument
Warm-start decisive-error injection: from a successful seed trajectory, restore agent and environment state through step t−1 (via cache or fidelity-checked replay), substitute one taxonomy-conditioned erroneous action, resume the original system, and retain only post-injection failures—so the injected step is, by construction, the earliest decisive error.
Load-bearing premise
That restoring state and forcing a single later failure is enough to guarantee the injected step was truly the earliest decisive error, and that these synthetic modes fairly represent the failures an attribution system must catch in the wild.
What would settle it
A larger human audit or counterfactual “fix the injected action and re-run” study showing that a substantial fraction of retained traces already had an earlier decisive error, or that judges trained on Who&When Pro systematically fail on naturally occurring (non-injected) agent failures.
If this is right
- Full-trajectory (all-at-once) attribution should be preferred over step-by-step or binary-search protocols for both accuracy and cost.
- Open-weight models can sit on the cost–accuracy Pareto frontier for practical attribution backbones.
- Step localization is hardest on video and long traces; mode classification is relatively easier once visual or behavioral cues appear.
- Providing the task’s ground-truth answer helps diagnose perception errors but can degrade diagnosis of reasoning errors by inviting outcome shortcuts.
- Future self-evolving agents can use externally verified step-level labels of this form rather than coarse terminal or self-graded feedback.
Where Pith is reading between the lines
- If warm-start fidelity ever leaks pre-injection drift at scale, the “golden” labels become approximate and the entire ranking of models on the benchmark softens.
- The surface-symptom bias (planning/verification/coordination misread as reasoning) suggests attribution judges may need explicit causal or counterfactual prompting, not only larger models.
- A natural next stress test is transfer: train or prompt on injected traces and measure recovery of natural failures from the same agent frameworks.
- Taxonomy extensibility matters: new embodied or long-horizon collaborative settings will likely require new modes before the same pipeline stays complete.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper introduces WHO&WHENPRO, a large-scale benchmark for automated failure attribution in LLM agentic systems. Using a warm-start pipeline that replays a successful trajectory prefix, injects a single taxonomy-conditioned erroneous action, and continues execution, the authors construct 12,326 failed traces with labels for decisive agent, step, and failure mode across 26 source benchmarks, 9 task categories, and text/image/video modalities. They evaluate closed- and open-weight frontier models under all-at-once, step-by-step, and binary-search protocols, reporting that attribution remains difficult (e.g., best text step accuracy ~73.9% but error-mode F1 only ~22.2%), with systematic effects of modality, protocol, trace length, and ground-truth availability, plus cost–performance trade-offs favoring open-weight models under all-at-once evaluation.
Significance. If the label construction is accepted as high-fidelity, this is a substantial contribution: prior failure-attribution benchmarks are small and almost entirely text-only, while WHO&WHENPRO expands scale, modality coverage, and topology coverage in a way that matches modern agent deployments. The warm-start design is a clear methodological improvement over re-rollout injection that can drift before the injection point. The empirical findings—modality-dependent bottlenecks, symptom-vs-root-cause confusion, full-trajectory superiority, and open-weight cost efficiency—are actionable for both attribution systems and self-evolving agents. Strengths include a carefully engineered pipeline (tool caching, fidelity checks), stratified human review with substantial agreement, multi-protocol evaluation, and public release of traces/labels/code.
major comments (3)
- [§3.3, Fig. 2, decisive-error definition] §3.3 and the decisive-error definition (opening of §3, following Zhang et al.): the construction shows that replacing the injected action ~a_t with the original a_t and restoring the successful continuation recovers success. That establishes the injection as a controlled cause of failure, but it is not identical to the formal earliest-decisive-step claim on the observed failed trajectory (a1..a_{t-1}, ~a_t, a'_{t+1}, …). Post-injection rollouts can introduce additional independent errors, especially in stateful browser/code settings (Appendix F), so correcting only ~a_t while keeping later observed actions need not yield success, and the earliest correctable index could differ. The paper should either (i) reframe labels as “first controlled deviation / injection locus under warm-start construction” rather than unqualified golden earliest-decisive labels, or (ii) provide counterfactual ch
- [§3.5, Table 3] §3.5 / Table 3: human validation covers 100 stratified traces (~0.8% of 12,326). Annotators largely accept the generated step/agent/mode labels (94%/90%/90%, Fleiss κ=0.73), which supports recognizability, but the protocol does not test counterfactual earliest-correctability or measure how often an earlier latent fragility or a later independent failure would change the label. Given that “golden labels” are the central selling point relative to prior automatic pipelines (Table 1), the manuscript should expand validation—at least on a larger stratified sample and with an explicit counterfactual or “would fixing this step alone recover success?” criterion—or clearly bound the claim to human-recognized injection loci rather than full decisive-error semantics.
- [§3.2–3.3, Table 4, Fig. 4] §3.2–3.3 and experimental interpretation: failure modes are profiled from natural failures then re-injected into successful seeds. This is a reasonable scalability design, but the main results (Table 4, Fig. 4) are then used to conclude how models attribute failures in agentic systems generally. The paper should quantify or bound distribution shift between natural and injected failures (e.g., side-by-side human comparison of natural vs injected traces for the same modes, or attribution performance on a held-out natural-failure subset with expert labels). Without that, claims about “systematic patterns” risk being specific to synthetic injection signatures rather than organic agent failures.
minor comments (5)
- [§4.1 Metrics, Table 4] Table 4 and §4.2: Joint is described as requiring Agent, Step, and Error all correct, but Agent is only defined on multi-agent traces. Clarify how Joint is computed on single-agent traces (76% of the data per Fig. 3)—e.g., whether Agent is treated as vacuously correct.
- [Fig. 4b, Fig. 10] Fig. 4b / Fig. 10: confusion matrices average over models; also report per-model or at least variance, since the text claims a general symptom-vs-root-cause pattern.
- [§4.3, Table 6] §4.3: the ablation subset of 1,444 traces is stratified, but the main paper should state the sampling procedure and confirm that Table 6 trends match full-set all-at-once results for the overlapping setting.
- [Appendix F] Appendix F fidelity checks: report quantitative replay-abort rates by environment class (static tools vs browser vs code) so readers can assess residual selection bias in retained traces.
- [Table 5, Appendix J] Minor polish: consistent naming (WHO&WHENPRO / Who&When Pro), and ensure all 18 mode codes in Table 5 align with the evaluation prompt taxonomy block without renumbering ambiguity.
Circularity Check
No load-bearing circularity: golden labels are explicitly by construction of warm-start injection, while reported LLM metrics are external measurements against those fixed labels; only mild self-citation of the decisive-error definition from overlapping authors.
specific steps
-
self definitional
[§3.3 Scalable Failure Trace Generation (and Abstract / Fig. 2)]
"If the resulting trajectory fails, it enters the benchmark: reverting ˜at recovers the successful seed, so t is the decisive step by definition. ... Since the injected error is the only controlled change that turns a successful trajectory into a failed one, the resulting task failure can be attributed exactly to the injected agent and step, thus yielding golden labels under the decisive-error definition by (Zhang et al., 2025c)."
The paper equates the injected step with the golden decisive step purely by the construction of the pipeline (warm-start + single injection + post-injection failure). This is definitional rather than an independent derivation; however, because the paper presents the labels as synthetic ground truth for a new benchmark (not as a predicted scientific quantity), the circularity is only mild and does not force the subsequent LLM accuracy numbers, which remain external matches against those labels.
full rationale
This is an empirical benchmark-construction and evaluation paper, not a first-principles derivation of a physical or mathematical prediction. The decisive-error labels (agent, step, mode) are defined operationally: a successful seed is warm-started, a single taxonomy-conditioned action is substituted at step t, and any resulting task failure is retained with t as the golden decisive step because “reverting ˜at recovers the successful seed, so t is the decisive step by definition” (§3.3). That is intentional synthetic-label design, not a hidden reduction of an independent claim to its own inputs. Model scores (Agent/Step/Error/Joint accuracies, macro-F1, cost-Pareto, protocol ablations) are then computed by exact match or F1 against these fixed labels using held-out LLMs that did not generate the labels; the numbers are therefore ordinary external measurements, not statistically forced by a fit. The 18-mode taxonomy is distilled from natural failures then used only to constrain injection prompts, which is ordinary author-defined categorization rather than a tautology that forces the ranking of models. The sole mild circularity-adjacent element is adoption of the decisive-error definition from Zhang et al. (2025c), whose author list overlaps the present paper; that citation supplies the evaluation target but is not a uniqueness theorem or ansatz that forbids alternatives or manufactures the performance numbers. Human review (100 traces) and fidelity checks are validation, not circular self-support. Consequently the central empirical claims remain independent of any self-definitional loop, fitted-input-as-prediction, or load-bearing self-citation chain. Score 1 reflects only the minor definitional self-reference; a pure non-finding of 0 is also defensible.
Axiom & Free-Parameter Ledger
free parameters (3)
- Injection-step sampler preferences by error family
- Human-review sample size (n=100 stratified traces)
- Ablation subset size (1,444 stratified traces)
axioms (4)
- domain assumption Decisive step t* is the earliest index such that correcting a_t* turns a failed trajectory into a successful one (Zhang et al. 2025c).
- ad hoc to paper Replaying (a1..a_{t-1}) with tool caches and fidelity checks restores context and environment state sufficiently that only the injected action causes the subsequent failure.
- domain assumption An 18-mode taxonomy spanning perception, reasoning, planning, action, verification, and coordination covers the dominant failure patterns for evaluation.
- domain assumption Official benchmark evaluators correctly partition seed trajectories into success vs failure.
invented entities (3)
-
Who&When Pro benchmark (12,326 labeled failure traces)
independent evidence
-
Warm-start controlled error-injection pipeline
no independent evidence
-
18-mode failure taxonomy with per-(agent,benchmark) profiles
no independent evidence
read the original abstract
Automated failure attribution uses LLMs to identify where and why agentic systems fail. As agents become more capable, their failures become subtler, making automated attribution increasingly important. We introduce Who&When Pro, a large-scale benchmark for automated failure attribution in agentic systems. Using a strictly controlled pipeline that injects a failure only after exactly replaying a successful prefix, we construct 12,326 failed trajectories with golden labels across 3 modalities and 26 benchmarks covering various scenarios. Beyond benchmarking, we conduct extensive experiments and analyses, revealing systematic patterns in how models attribute failures across modalities, protocols, and model families, and providing empirical guidance for future automated failure attribution systems.
Figures
Reference graph
Works this paper leans on
-
[1]
URL https: //doi.org/10.1038/s41586-023-06792-0
doi: 10.1038/s41586-023-06792-0. URL https: //doi.org/10.1038/s41586-023-06792-0. Bran, A. M., Cox, S., Schilter, O., Baldassari, C., White, A. D., and Schwaller, P. Chemcrow: Augmenting large- language models with chemistry tools.arXiv preprint arXiv:2304.05376, 2023. Cemri, M., Pan, M. Z., Yang, S., Agrawal, L. A., Chopra, B., Tiwari, R., Keutzer, K., P...
-
[2]
Chen, M., Tworek, J., Jun, H., Yuan, Q., Pinto, H
URL https://openreview.net/forum? id=fAjbYBmonr. Chen, M., Tworek, J., Jun, H., Yuan, Q., Pinto, H. P. D. O., Kaplan, J., Edwards, H., Burda, Y ., Joseph, N., Brockman, G., et al. Evaluating large language models trained on code.arXiv preprint arXiv:2107.03374, 2021. Chen, Y ., Wang, Y ., Zhu, S., Yu, H., Feng, T., Zhang, M., Patwary, M., and You, J. Mult...
-
[3]
URL https://aclanthology.org/2025. emnlp-main.839/. 9 Who&When Pro: Can LLMs Really Attribute Failures in AI Agents? Ge, Y ., Xie, L., Li, Z., Pei, Y ., and Zhang, T. Who is intro- ducing the failure? automatically attributing failures of multi-agent systems via spectrum analysis.arXiv preprint arXiv:2509.13782, 2025b. Geng, X., Xia, P., Zhang, Z., Wang, ...
arXiv 2025
-
[4]
com/deepmind-media/Model-Cards/ Gemini-3-Flash-Model-Card.pdf
URL https://storage.googleapis. com/deepmind-media/Model-Cards/ Gemini-3-Flash-Model-Card.pdf . Offi- cial model card. Accessed: 2026-05-05. Google DeepMind. Gemma 4 Model Card, April
2026
-
[5]
Gou, Z., Shao, Z., Gong, Y ., yelong shen, Yang, Y ., Duan, N., and Chen, W
URL https://ai.google.dev/gemma/ docs/core/model_card_4. Gou, Z., Shao, Z., Gong, Y ., yelong shen, Yang, Y ., Duan, N., and Chen, W. CRITIC: Large language models can self-correct with tool-interactive critiquing. InThe Twelfth International Conference on Learning Represen- tations, 2024. URL https://openreview.net/ forum?id=Sx038qxjek. Grijalba, J. O., ...
-
[6]
URL https://aclanthology.org/2024. acl-long.371/. Hendrycks, D., Burns, C., Kadavath, S., Arora, A., Basart, S., Tang, E., Song, D., and Steinhardt, J. Measuring math- ematical problem solving with the math dataset.NeurIPS, 2021. Hong, S., Zhuge, M., Chen, J., Zheng, X., Cheng, Y ., Wang, J., Zhang, C., Wang, Z., Yau, S. K. S., Lin, Z., et al. Metagpt: Me...
Pith/arXiv arXiv 2024
-
[7]
Lee, Y ., Nair, R., Zhang, Q., Lee, K., Khattab, O., and Finn, C
URL https://openreview.net/forum? id=fZfUdeCC5X. Lee, Y ., Nair, R., Zhang, Q., Lee, K., Khattab, O., and Finn, C. Meta-harness: End-to-end optimization of model harnesses, 2026. URL https://arxiv.org/abs/ 2603.28052. Li, Y ., Inan, H. A., Yue, X., Chen, W.-N., Wutschitz, L., Kulkarni, J., Poovendran, R., Sim, R., and Rajmohan, S. Simulating environments ...
-
[8]
findings-emnlp.1034/
URL https://aclanthology.org/2025. findings-emnlp.1034/. Liu, J., Bursztyn, V ., Ai, L., Wang, H., Choudhary, S., Mi- tra, S., and Wu, Q. Teamfusion: Supporting open-ended teamwork with multi-agent systems. InProceedings of the 64th Annual Meeting of the Association for Computa- tional Linguistics (Volume 1: Long Papers), pp. 14435– 14456, 2026. Liu, Z., ...
2025
-
[9]
Lou, X., Lázaro-Gredilla, M., Dedieu, A., Wendelken, C., Lehrach, W., and Murphy, K
URL https://openreview.net/forum? id=XII0Wp1XA9. Lou, X., Lázaro-Gredilla, M., Dedieu, A., Wendelken, C., Lehrach, W., and Murphy, K. P. Autoharness: improving llm agents by automatically synthesizing a code harness. arXiv preprint arXiv:2603.03329, 2026. Luo, H., Dai, S., Ni, C., Li, X., Zhang, G., Wang, K., Liu, T., and Salam, H. Agentauditor: Human-lev...
arXiv 2026
-
[10]
Madaan, A., Tandon, N., Gupta, P., Hallinan, S., Gao, L., Wiegreffe, S., Alon, U., Dziri, N., Prabhumoye, S., Yang, Y ., Gupta, S., Majumder, B
URL https://openreview.net/forum? id=mrEK16Jy6h. Madaan, A., Tandon, N., Gupta, P., Hallinan, S., Gao, L., Wiegreffe, S., Alon, U., Dziri, N., Prabhumoye, S., Yang, Y ., Gupta, S., Majumder, B. P., Hermann, K., Welleck, S., Yazdanbakhsh, A., and Clark, P. Self-refine: Iter- ative refinement with self-feedback. InThirty-seventh Conference on Neural Informa...
-
[11]
Majgaonkar, O., Fei, Z., Li, X., Sarro, F., and Ye, H
URL https://openreview.net/forum? id=S37hOerQLB. Majgaonkar, O., Fei, Z., Li, X., Sarro, F., and Ye, H. Understanding code agent behaviour: An empirical study of success and failure trajectories.arXiv preprint arXiv:2511.00197, 2025. Masry, A., Islam, M. S., Ahmed, M., Bajaj, A., Kabir, F., Kartha, A., Laskar, M. T. R., Rahman, M., Rahman, S., Shahmohamma...
arXiv 2025
-
[12]
URL https://openai.com/index/ gpt-5-4-thinking-system-card/ . Official system card. Accessed: 2026-05-05. Pan, L., Zou, L., Guo, S., Ni, J., and Zheng, H.- T. Natural-language agent harnesses.arXiv preprint arXiv:2603.25723, 2026. Qian, C., Xie, Z., Wang, Y ., Liu, W., Zhu, K., Xia, H., Dang, Y ., Du, Z., Chen, W., Yang, C., Liu, Z., and Sun, M. Scaling l...
Pith/arXiv arXiv 2026
-
[13]
Song, L., Liu, J., Zhang, J., Zhang, S., Luo, A., Wang, S., Wu, Q., and Wang, C
URL https://openreview.net/forum? id=0IOX0YcCdTn. Song, L., Liu, J., Zhang, J., Zhang, S., Luo, A., Wang, S., Wu, Q., and Wang, C. Adaptive in-conversation team building for language model agents.arXiv preprint arXiv:2405.19425, 2024. Song, L., Dai, Y ., Prabhu, V ., Zhang, J., Shi, T., Li, L., Li, J., Savarese, S., Chen, Z., Zhao, J., Xu, R., and Xiong, ...
Pith/arXiv arXiv 2024
-
[14]
URL https://openreview.net/forum? id=BAakY1hNKS. Wu, X., Yang, J., Chai, L., Zhang, G., Liu, J., Du, X., Liang, D., Shu, D., Cheng, X., Sun, T., et al. Tablebench: A comprehensive and complex benchmark for table ques- tion answering. InProceedings of the AAAI Conference on Artificial Intelligence, volume 39, pp. 25497–25506, 2025. Wu, Y ., Jia, F., Zhang,...
Pith/arXiv arXiv 2025
-
[15]
URL https://data.x.ai/ 2025-11-17-grok-4-1-model-card.pdf . Official model card. Accessed: 2026-05-05. Xia, C. S., Deng, Y ., Dunn, S., and Zhang, L. Agentless: De- mystifying llm-based software engineering agents.arXiv preprint arXiv:2407.01489, 2024. Xia, C. S., Wang, Z., Yang, Y ., Wei, Y ., and Zhang, L. Live- swe-agent: Can software engineering agent...
Pith/arXiv arXiv 2025
-
[16]
URL https://openreview.net/forum? id=EEgYUccwsV. Yang, J., Jimenez, C. E., Wettig, A., Lieret, K., Yao, S., Narasimhan, K., and Press, O. Swe-agent: Agent- computer interfaces enable automated software engineer- ing.Advances in Neural Information Processing Systems, 37:50528–50652, 2024. Yang, K., Liu, Y ., Chaudhary, S., Fakoor, R., Chaudhari, P., Karypi...
Pith/arXiv arXiv 2024
-
[17]
Association for Computational Linguistics. ISBN 979-8-89176-251-0. doi: 10.18653/v1/2025.acl-long
-
[18]
URL https://aclanthology.org/2025. acl-long.736/. Zeng, A., Liu, M., Lu, R., Wang, B., Liu, X., Dong, Y ., and Tang, J. Agenttuning: Enabling generalized agent abilities for llms, 2023. Zhai, Y ., Tao, S., Chen, C., Zou, A., Chen, Z., Fu, Q., Mai, S., Yu, L., Deng, J., Cao, Z., Liu, Z., Ding, B., and Zhou, J. Agentevolver: Towards efficient self-evolving ...
Pith/arXiv arXiv 2025
-
[19]
/tcg-pocket-october-2025-producer-letter) Obs:Official Release Date: October 30, 2024.Platform: iOS and Android
2web_visit(pokemon.com/. . . /tcg-pocket-october-2025-producer-letter) Obs:Official Release Date: October 30, 2024.Platform: iOS and Android. . . The game is approaching itsfirst anniversary in late October 2025. . . 3† Reasoning:“. . . interpreting ‘arrive’ as when the game’s big new rollout / anniversary content arrives (rather than its original launch)...
2025
-
[20]
Late October 2025
” final_answer(“Late October 2025.”) †Injected step. The agent reinterprets “arrive” as anniversary content rather than the original launch date. w/oGw/G Model Pred. Rationale (excerpt) Pred. Rationale (excerpt) GPT-5.4 Task Misund. “The agentstructurally misunderstoodthe user’s question by reinterpreting ‘arrive’ as ask- ing about anniversary content. . ...
2025
-
[21]
Binary Search Protocol The binary search protocol bisects the transcript to narrow down the error location
Reason: (your explanation) J.3. Binary Search Protocol The binary search protocol bisects the transcript to narrow down the error location. Each call presents a contiguous slice of steps and asks the model whether the error is more likely in the upper or lower half of that slice. The runner recursively halves the range until convergence. Binary Search Eva...
-
[22]
Half: upper or lower
-
[23]
{{ query }}
Reason: (one sentence) K. Injection Prompt Templates As described in Section 3.3, we construct each corrupted action ˜at in two stages. First, a frontier model reads the seed trace’s context up to stept and generates anadaptive injection promptconditioned on the target failure mode. Second, this 32 Who&When Pro: Can LLMs Really Attribute Failures in AI Ag...
2024
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.