mlsanityData to 7 Oct 2026

OpenClawBench: Benchmarking Process-side Anomalies in Real-world Agent Execution Trajectories

arXiv 2605.29253 ↗First posted 28 May 2026cs.AIcited by 4

Not on the map. Why?

Abstract (arXiv)

Task success can hide process anomalies in real-world agent executions. An agent may pass the final task oracle while still accumulating unresolved ambiguity, unsafe external writes, ignored errors, weakly grounded commitments, or capability-boundary overcommitment. We study this mismatch as the Outcome-Process Gap and introduce OpenClawBench, a large-scale dataset for measuring and supervising process-side anomalies in real agent execution processes. OpenClawBench is built from BFCL-driven OpenClaw sessions produced by 6 source models and contains 31,264 annotated trajectories. It aligns task-oracle outcomes with structured process evidence. FullTax converts the aligned trajectories into structured anomaly supervision: binary labels, supporting evidence, onset/span localization, severity, recoverability, and a 5-class anomaly taxonomy. Using OpenClawBench, we make the Outcome-Process Gap measurable. Among 31,135 oracle-passing executions, 2,904 are still labeled process-anomalous under FullTax. These results show that success-only evaluation misses a concrete class of process-side failures in real agent executions. A LoRA-fine-tuned Gemma 3 12B detector trained on the high-confidence FullTax supervised pool reaches binary F1=0.729 on the cleaner-labels held-out test split. Together, OpenClawBench turns real agent execution logs into auditable and reusable supervision for studying, diagnosing, and operationally monitoring runtime agent reliability.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 18 of its 25 references that are in the map. First posted on arXiv 28 May 2026.

Builds on

18 of 25 references.

References · 18

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  3. 2025Qwen3 Technical Reportcited by 8,195
  4. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
  5. 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
  6. 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agentscited by 341
  7. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
  8. 2025AgentAuditor: Human-Level Safety and Security Evaluation for LLM Agentscited by 82
  9. 2026ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedbackcited by 64
  10. 2026Claw-Eval: Towards Trustworthy Evaluation of Autonomous Agentscited by 57
  11. 2026AgentProcessBench: Diagnosing Step-Level Process Quality in Tool-Using Agentscited by 28
  12. 2026Auditable Agentscited by 14
6 more
  1. 2026TrajAD: Trajectory Anomaly Detection for Trustworthy LLM Agentscited by 13
  2. 2026Cloud-OpsBench: A Reproducible Benchmark for Agentic Root Cause Analysis in Cloud Systemscited by 13
  3. 2026Wink: Recovering from Misbehaviors in Coding Agentscited by 11
  4. 2026HINTBench: Horizon-agent Intrinsic Non-attack Trajectory Benchmarkcited by 8
  5. 2026Harnessing Embodied Agents: Runtime Governance for Policy-Constrained Executioncited by 7
  6. 2026Verify Before You Commit: Towards Faithful Reasoning in LLM Agents via Self-Auditingcited by 7

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.