Robust Agents in Open-Ended Worlds
On the map: LLM agents and tool use → Reinforcement learning for LLM agents
Abstract (arXiv)
The growing prevalence of artificial intelligence (AI) in various applications underscores the need for agents that can successfully navigate and adapt to an ever-changing, open-ended world. A key challenge is ensuring these AI agents are robust, excelling not only in familiar settings observed during training but also effectively generalising to previously unseen and varied scenarios. In this thesis, we harness methodologies from open-endedness and multi-agent learning to train and evaluate robust AI agents capable of generalising to novel environments, out-of-distribution inputs, and interactions with other co-player agents. We begin by introducing MiniHack, a sandbox framework for creating diverse environments through procedural content generation. Based on the game of NetHack, MiniHack enables the construction of new tasks for reinforcement learning (RL) agents with a focus on generalisation. We then present Maestro, a novel approach for generating adversarial curricula that progressively enhance the robustness and generality of RL agents in two-player zero-sum games. We further probe robustness in multi-agent domains, utilising quality-diversity methods to systematically identify vulnerabilities in state-of-the-art, pre-trained RL policies within the complex video game football domain, characterised by intertwined cooperative and competitive dynamics. Finally, we extend our exploration of robustness to the domain of LLMs. Here, our focus is on diagnosing and enhancing the robustness of LLMs against adversarial prompts, employing evolutionary search to generate a diverse range of effective inputs that aim to elicit undesirable outputs from an LLM. This work collectively paves the way for future advancements in AI robustness, enabling the development of agents that not only adapt to an ever-evolving world but also thrive in the face of unforeseen challenges and interactions.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Reinforcement learning for LLM agents, one of 16 directions in LLM agents and tool use. Builds on 72 of its 584 references that are in the map. First posted on arXiv 9 Dec 2025.
Builds on
72 of 584 references.
References · 72
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2013Intriguing properties of neural networkscited by 5,155
- 2014Empirical Evaluation of Gated Recurrent Neural Networks on Sequence Modelingcited by 2,367
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,330
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
38 more
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2019Meta-World: A Benchmark and Evaluation for Multi-Task and Meta Reinforcement Learningcited by 1,204
- 2015Prioritized Experience Replaycited by 1,099
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,045
- 2022Red Teaming Language Models with Language Modelscited by 1,026
- 2023ChatDev: Communicative Agents for Software Developmentcited by 919
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
- 2017Deep Reinforcement Learning that Matterscited by 754
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 672
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2019Leveraging Procedural Generation to Benchmark Reinforcement Learningcited by 483
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 459
- 2019On Evaluating Adversarial Robustnesscited by 447
- 2023MLAgentBench: Evaluating Language Agents on Machine Learning Experimentationcited by 366
- 2024Can LLMs Generate Novel Research Ideas? A Large-Scale Human Study with 100+ NLP Researcherscited by 363
- 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 326
- 2019Emergent Tool Use From Multi-Agent Autocurriculacited by 313
- 2023Low-Resource Languages Jailbreak GPT-4cited by 309
- 2017StarCraft II: A New Challenge for Reinforcement Learningcited by 274
- 2017A Unified Game-Theoretic Approach to Multiagent Reinforcement Learningcited by 268
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
- 2015Contextual Markov Decision Processescited by 220
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 216
- 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 214
- 2019Go-Explore: a New Approach for Hard-Exploration Problemscited by 212
- 2017Multi-agent Reinforcement Learning in Sequential Social Dilemmascited by 209
- 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Promptscited by 205
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 195
- 2022Evolving Curricula with Regret-Based Environment Designcited by 173
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 163
- 2024RLEF: Grounding Code LLMs in Execution Feedback with Reinforcement Learningcited by 151
- 2023Open Sesame! Universal Black Box Jailbreaking of Large Language Modelscited by 134
- 2022SMACv2: An Improved Benchmark for Cooperative Multi-Agent Reinforcement Learningcited by 122
- 2023Language Model Crossover: Variation through Few-Shot Promptingcited by 122
- 2024AgentGym: Evolving Large Language Model-based Agents across Diverse Environmentscited by 120
50 most cited of 72 All 72 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026Agent Island: A Saturation- and Contamination-Resistant Benchmark from Multiagent Games
- 2026Can AI Agents Learn Their Way to the Top? Evaluating Heuristic Learning in a Long-Running Game Agent Competition
- 2024SMAC-Hard: Enabling Mixed Opponent Strategy Script and Self-play on SMAC
- 2026Paying Less Generalization Tax: A Cross-Domain Generalization Study of RL Training for LLM Agents
- 2023Reward-Free Curricula for Training Robust World Models
- 2026OmniGameArena: A Unified UE5 Benchmark for VLM Game Agents with Improvement Dynamics
- 2024Massively Multiagent Minigames for Training Generalist Agents
- 2026Towards Generalist Game Players: An Investigation of Foundation Models in the Game Multiverse