PreprintCited by 10Topic ModelingNatural Language Processing TechniquesAdversarial Robustness in Machine Learning

The DOI matches its DataCite record; 8 of the 8 references it cites were found in a registry or an index; 1 of the 7 sources its claims cite were checked for support.

Beyond pass@1: A Reliability Science Framework for Long-Horizon LLM Agents

Open access

Abstract

Existing benchmarks measure capability -- whether a model succeeds on a single attempt -- but production deployments require reliability -- consistent success across repeated attempts on tasks of varying duration. We show these properties diverge systematically as task duration grows, and that pass@1 on short tasks is structurally blind to this divergence. We introduce a reliability science framework for long-horizon LLM agents with four metrics: Reliability Decay Curve (RDC), Variance Amplification Factor (VAF), Graceful Degradation Score (GDS), and Meltdown Onset Point (MOP). We evaluate 10 models across 23,392 episodes on a 396-task benchmark spanning four duration buckets and three domains. Key findings: (1) reliability decay is domain-stratified -- SE GDS drops from 0.90 to 0.44 while document processing is nearly flat (0.74 to 0.71); (2) VAF bifurcates by capability tier -- high VAF is a capability signature, not an instability signal; (3) capability and reliability rankings diverge substantially, with multi-rank inversions at long horizons; (4) frontier models have the highest meltdown rates (up to 19%) because they attempt ambitious multi-step strategies that sometimes spiral; and (5) memory scaffolds universally hurt long-horizon performance across all 10 models. These results motivate reliability as a first-class evaluation dimension alongside capability.

Overview

AI snapshot

Written from the paper’s full text.

TL;DR

The paper proposes a reliability science framework for long-horizon LLM agents with four metrics—RDC, VAF, GDS, and MOP—and evaluates 10 open-source models on a 396-task benchmark across four duration buckets and three domains over 23,392 episodes. It finds that reliability decays super-linearly with task duration, diverges from capability rankings, and that naive memory scaffolds do not improve long-horizon reliability.

Key findings

  • Reliability decay is universal: aggregate pass@1 drops from 76.3% at short horizon to 52.1% at very-long horizon, a 24.3 percentage-point decline; SE GDS falls from 0.90 to 0.44 while DP is nearly flat (0.74 to 0.71).
  • VAF bifurcates by capability tier: frontier models have VAF ≥ 2.37 (up to 2.60), while mid/small models have VAF ≤ 1.26; high variance amplification is interpreted as a capability signature, not an instability signature.
  • Capability and reliability rankings diverge with multi-rank inversions; e.g., Llama 3.3 70B recovers from 5th–6th at short horizon to 3rd–4th at very-long, while GLM-4.5 Air falls from 1st at short to 4th at very-long.
  • The “MOP paradox” shows frontier models have the highest meltdown rates (DeepSeek V3 19%, MiniMax M2.5 13% at very-long) while also achieving the best very-long GDS; memory scaffolds never improve long-horizon GDS (neutral for 4 models, hurts 6, with largest penalties Kimi K2.5 −0.14 and Mistral 24B −0.13).

Methods

  • Formalizes a task model and four reliability metrics: Reliability Decay Curve (RDC), Variance Amplification Factor (VAF), Graceful Degradation Score (GDS), and Meltdown Onset Point (MOP); RDS summarizes RDC slope.
  • Constructs a 396-task benchmark with 33 tasks per duration × domain cell across four duration buckets (short ≤5 min, medium 5–30 min, long 30–120 min, very long ≥120 min) and three domains (software engineering, web research, document processing), using programmatic evaluation wherever possible.
  • Evaluates 10 open-source models via OpenRouter under two scaffolds (ReAct and memory-augmented), with k = 3 repeats, temperature 0.7, and 23,392 completed episodes (23,760 planned); analyses include pass@1, GDS, VAF, MOP, domain stratification, and cost.

Limitations

  • Stated: human-estimated duration is an imperfect proxy for agent difficulty (evidenced by DP non-monotonicity); infrastructure reliability is a validity threat (free-tier quota exhaustion inflated apparent pass@1 by up to 15%, and two models returned HTTP 404 throughout); only 10 open-source models are evaluated, excluding proprietary frontier models; task coverage is limited to three domains; programmatic evaluation may have blind spots; live web content threatens temporal reproducibility.
  • Stated: MOP thresholds are auto-calibrated from 1,590 short-horizon baseline episodes, and full manual labeling of meltdown episodes with formal precision/recall is deferred to future work.
  • Evident from the provided text: some tables and values are missing or formatting-corrupted (e.g., the MOP window-size sensitivity table is blank), which limits independent verification of those details.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

DataCite · 10.48550/arxiv.2603.29231

Cites

8 of 8 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Verification

Claims the paper makes

68 Own result · 53 Own interpretation · 17 Own method · 7 No basis given · 5 Sources not found · 1 Partly supported · 1 Not checked yet · accuracy not yet measured

Verify all 1 references — free account

Show all 72 claims

  • It may state two separate claims as one. 74
  • Probably not a substantial claim. 13
  • The quote only partly states this claim. 1
80 of 80
  • The paper relies on this without support.

    The 396-task benchmark is representative of the distribution of real-world long-horizon agent tasks.

    “We construct a 396-task benchmark across four duration buckets and three domains”
  • The paper relies on this without support.

    The 10 open-source models evaluated are representative of the broader class of LLM agents used in production.

    “We evaluate 10 open-source models via two scaffolds (ReAct and memory-augmented) with k = 3 repeats”
  • The authors state this as an assumption.

    Subtask independence holds when decomposing a long task into shorter segments.

    “(assuming subtask independence)”
3 of 3

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

Each contradiction between two passages listed here was confirmed by an independent check.

6 of 6

Citations

Cites

Research works printed but not linked: 5

  1. In-Context Learning through the Bayesian Prism. 2024. A Survey of LLM Agent Evaluation. arXiv preprint arXiv:2507.21504, 2025. · arXiv
  2. Carlos E Jimenez et al. SWE-bench: Can Language Models Resolve Real-World GitHub Issues? In ICLR, 2024.
  3. Mohammad Modarres, Mark Kaminskiy, and Vasiliy Krivtsov. Reliability Engineering and Risk Analysis: A Practical Guide. CRC Press, 2016.
  4. Shunyu Yao et al. ReAct: Synergizing Reasoning and Acting in Language Models. In ICLR, 2023.
  5. Shuyan Zhou et al. WebArena: A Realistic Web Environment for Building Autonomous Agents. In ICLR, 2024.

Metadata

Authors
Khanal, A., Tao, Y., & Zhou, J.
Affiliations
Northern Kentucky University (US)
Venue
arXiv
Publisher
arXiv
Published
2026
ISSN
2331-8422 (ISSN-L)
OpenAlex
W7147088641
Cited by
10
References
7
Citations by year
2026: 10
Type
posted content
Language
en
Open access
Locations
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Topic Modeling
  • Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Keywords
LLM agents, reliability, graceful degradation, task duration

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

A language model drew the claims from the paper on 2026-11-10, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).

A second model labelled each claim on 2026-11-10 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).

Cited sources are checked with a language model’s help (gpt-6-sol).

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review