mlsanityData to 14 Oct 2026

Proof-of-Use: Mitigating Tool-Call Hacking in Deep Research Agents

arXiv 2510.10931 ↗First posted 13 Oct 2025cs.AIcited by 4

On the map: LLM agents and tool use → Reinforcement learning for LLM agents

also in 1 more
Abstract (arXiv)

While reinforcement learning (RL) enhances their ability to plan and reason across retrieval steps, we identify a critical failure mode in this setting: Tool-Call Hacking. Unlike execution-based tools (e.g., code or math), whose effects are directly observable, the weak observability of causal dependencies between retrieved evidence and reasoning under format- and outcome-level supervision enables agents to maximize surface-level reward signals without genuinely grounding their reasoning in the returned evidence. This leads to distinctive pathologies, including mode collapse via tool overuse and hallucinated tool usage where tool calls are largely decorative. To address this issue, we propose Proof-of-Use (PoU), an evidence grounded RL framework that explicitly optimizes the causal dependency from retrieval to reasoning and final answers. PoU re-fomulate a fine-grained stepwise interaction protocol in which agents must auditably cite normalized evidence identifiers. We operationalize this via a multi-objective reward design consisting of: (1) two progressive process rewards that constrain citation validity at intermediate steps; (2) a global Answer--Support Alignment reward that enforces consistency between final answers and retrieved evidence; and (3) a curriculum-style adaptive reward mixing mechanism that smoothly transitions agents from dense process supervision to sparse outcome-based objectives. Extensive experiments show the strong performance of PoU and demonstrate the effectiveness in mitigating tool-call hacking. Beyond this, PoU exhibits a notable emergent property: adaptive and robust tool-usage patterns naturally arise under domain and tool shifts, even though PoU does not explicitly optimize for tool adaptation.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Reinforcement learning for LLM agents, one of 16 directions in LLM agents and tool use. Builds on 14 of its 31 references that are in the map. First posted on arXiv 13 Oct 2025.

Builds on

14 of 31 references.

References · 14

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  3. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  4. 2016Concrete Problems in AI Safetycited by 1,642
  5. 2024A Survey on LLM-as-a-Judgecited by 1,423
  6. 2020Constructing A Multi-hop QA Dataset for Comprehensive Evaluation of Reasoning Stepscited by 1,282
  7. 2022Measuring and Narrowing the Compositionality Gap in Language Modelscited by 1,075
  8. 2021MuSiQue: Multihop Questions via Single-hop Question Compositioncited by 916
  9. 2022Defining and Characterizing Reward Hackingcited by 203
  10. 2025LLM Agents Making Agent Toolscited by 48
  11. 2024LLM-Generated Black-box Explanations Can Be Adversarially Helpfulcited by 21
  12. 2024How do you know that? Teaching Generative Language Models to Reference Answers to Biomedical Questionscited by 5
2 more
  1. 2025RAG in the Wild: On the (In)effectiveness of LLMs with Mixture-of-Knowledge Retrieval Augmentationcited by 3
  2. 2025The Strong, Weak and Benign Goodhart's law. An independence-free and paradigm-agnostic formalisationcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 3.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Chaining the Evidence: Robust Reinforcement Learning for Deep Search Agents with Citation-Aware Rubric Rewards
  2. 2026Controllable and Verifiable Tool-Use Data Synthesis for Agentic Reinforcement Learning
  3. 2026SynPlanResearch-R1: Encouraging Tool Exploration for Deep Research with Synthetic Plans
  4. 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use
  5. 2026Spurious Tool Use: When RL Agents Learn the Wrong Reason to Act
  6. 2026STAMP: Provenance-Guided Credit Assignment for Deep Search Agents
  7. 2026ToolRLA: Multiplicative Reward Decomposition for Tool-Integrated Agents
  8. 2026Copy Less, Ground More: Overcoming Repetitive Copying in Long-Context Reasoning via Evidence-Aware Reinforcement Learning