Search-Time Contamination in Deep Research Agents: Measuring Performance Inflation in Public Benchmark Evaluation
On the map: LLM reasoning → Knowledge- and tool-augmented reasoning
also in 1 more
Abstract (arXiv)
Public benchmarks enable fair and reproducible evaluation of LLM reasoning, but they become fragile for deep research agents that actively search the web during inference. Such agents may retrieve public benchmark metadata, question context, or even ground-truth answers via web search. This gives rise to Search-Time Contamination (STC), where external retrieval bypasses intended reasoning and inflates measured performance. We systematically study STC in deep research agent evaluation. We define three contamination types with increasing severity, namely Benchmark Metadata Leakage, Question-Context Leakage, and Explicit Answer Leakage, and develop detection algorithms to identify them and quantify their impact on agent performance. Evaluating modern deep research agents on six public benchmarks, we find that STC is widespread and can inflate performance by up to 4%. Our findings show that existing evaluations may overestimate true reasoning ability. We therefore advocate contamination-aware practices, including isolated sandboxes, transparent search trajectories, and controlled benchmark access.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Knowledge- and tool-augmented reasoning, one of 17 directions in LLM reasoning. Builds on 15 of its 23 references that are in the map. First posted on arXiv 3 Jun 2026.
Builds on
15 of 23 references.
Closest ancestors · 1
Same direction, newest first
- 2025Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learning12 Mar
Other references · 14
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,324
- 2019PubMedQA: A Dataset for Biomedical Research Question Answeringcited by 1,271
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2026DeepSeek-V4: Towards Highly Efficient Million-Token Context Intelligencecited by 877
- 2025BrowseComp: A Simple Yet Challenging Benchmark for Browsing Agentscited by 616
- 2025MedXpertQA: Benchmarking Expert-Level Medical Reasoning and Understandingcited by 212
- 2024Benchmarking Large Language Models on Answering and Explaining Challenging Medical Questionscited by 106
2 more
- 2025Deep Research: A Survey of Autonomous Research Agentscited by 63
- 2025ToolUniverse: An open platform for democratizing AI scientistscited by 22
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Evaluating Deep-Search Agents under Hierarchical Web Evidence Poisoningcited by 1
- 2026On-Device Deep Research at 4B: Exposure Bounds Faithfulness, Retrieval Bounds Coveragecited by 0
- 2026Success Is Not Self-Explanatory: Auditing Success Provenance in Agent Evaluationcited by 0
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigationcited by 0
- 2026Learning to Fuse LLMs with Ontology Rankers for Rare-Disease Diagnosiscited by 0
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcutscited by 0
- 2026RECLAIM: Can Agents Reproduce the Claims of Machine Learning Papers?cited by 0
- 2026RECLAIM: Can Agents Reproduce the Claims of Machine Learning Papers?23 Sep 2026
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Evaluating Deep-Search Agents under Hierarchical Web Evidence Poisoning5 Sep 2026
- 2026Learning to Fuse LLMs with Ontology Rankers for Rare-Disease Diagnosis2 Sep 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026Success Is Not Self-Explanatory: Auditing Success Provenance in Agent Evaluation27 Jul 2026
- 2026On-Device Deep Research at 4B: Exposure Bounds Faithfulness, Retrieval Bounds Coverage14 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
Similar, not cited
Close in wording, no citation either way
- 2025Search-Time Data Contamination
- 2026DRNOISE: Benchmarking Deep Research Agents in Misleading Evidence Environments
- 2026DeepSearchQA: Bridging the Comprehensiveness Gap for Deep Research Agents
- 2026SAGE: Benchmarking and Improving Retrieval for Deep Research Agents
- 2026SearchAuditor: Auditing and Attributing Failures in Long-Horizon Search Agents
- 2026Total Recall QA: A Verifiable Evaluation Suite for Deep Research Agents
- 2026From Intent to Evidence: A Categorical Approach for Structural Evaluation of Deep Research Agents
- 2025Deep Research Bench: Evaluating AI Web Research Agents