VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agents
On the map: LLM agents and tool use → Agent memory systems
Abstract (arXiv)
Continual memory augmentation lets computer-using agents (CUAs) learn from prior interactions, but unvetted memories can encode domain-inappropriate or unsafe heuristics--spurious rules that drift from user intent and safety constraints. We introduce VerificAgent, a scalable oversight framework that treats persistent memory as an explicit alignment surface. VerificAgent combines (1) an expert-curated seed of domain knowledge, (2) iterative, trajectory-based memory growth during training, and (3) a post-hoc human fact-checking pass to sanitize accumulated memories before deployment. Evaluated on OSWorld productivity tasks and additional adversarial stress tests, VerificAgent improves task reliability, reduces hallucination-induced failures, and preserves interpretable, auditable guidance--without additional model fine-tuning. By letting humans correct high-impact errors once, the verified memory acts as a frozen safety contract that future agent actions must satisfy. Our results suggest that domain-scoped, human-verified memory offers a scalable oversight mechanism for CUAs, complementing broader alignment strategies by limiting silent policy drift and anchoring agent behavior to the norms and safety constraints of the target domain.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Agent memory systems, one of 16 directions in LLM agents and tool use. Builds on 13 of its 40 references that are in the map. First posted on arXiv 3 Jun 2025.
Builds on
13 of 40 references.
References · 13
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 402
- 2018AI safety via debatecited by 384
- 2024Navigating the Digital World as Humans Do: Universal Visual Grounding for GUI Agentscited by 373
- 2022Large Language Models are Better Reasoners with Self-Verificationcited by 304
- 2024OmniParser for Pure Vision Based GUI Agentcited by 193
- 2024On the Self-Verification Limitations of Large Language Models on Reasoning and Planning Taskscited by 137
- 2025Memory Injection Attacks on LLM Agents via Query-Only Interactioncited by 127
- 2016The Off-Switch Gamecited by 97
- 2023Scalable AI Safety via Doubly-Efficient Debatecited by 54
1 more
- 2023Towards Verifiable Text Generation with Symbolic Referencescited by 13
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2026MemGuard: Persisting Verifier Signals for LLM-Agent Memory Governance
- 2026TAME: A Trustworthy Test-Time Evolution of Agent Memory with Systematic Benchmarking
- 2026MemAudit: Auditing Long-Term Agent Memory via Hidden User-State Recovery
- 2026Verifiable Memory: Learning Unified Memory Management with Local and Global Verifiers for Large Language Model Agents
- 2026MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair
- 2026MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection
- 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents
- 2026Understanding and Mitigating Inference-Time Overreliance Using Agentic Memory