mlsanityData to 7 Oct 2026

Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agents

arXiv 2606.21409 ↗First posted 19 Jun 2026cs.AIcited by 3

On the map: LLM agents and tool use → Tool learning and function calling

Abstract (arXiv)

Tool-augmented agents are typically evaluated by their gains under reliable external feedback. Yet these gains leave open a key counterfactual: when feedback is unreliable, would the agent be better off receiving no task evidence? We study this question with a controlled matched-loop comparison that fixes the agent loop, prompt, action space, and decoding, while varying only the returned observation: faithful, misleading, or absent. Across question answering and fact verification, persistent misleading feedback produces a value inversion: agents that benefit from clean tools can perform worse than the matched no-feedback fallback. On HotpotQA, Qwen2.5-7B reaches 44.8 F1 with clean retrieval and 22.3 F1 with no feedback, but drops to 4.7 F1 under shuffled retrieval. The inversion persists under stronger clean retrieval and locally plausible distractors, but weakens when later clean evidence can repair the trajectory. Early trajectory signals predict many failures, yet simple repairs remain fallback-limited: rejecting bad evidence helps only when the exposed fallback is reliable. These results show that clean-tool gains can overstate tool value, and that matched no-feedback fallback controls are necessary for evaluating tool-augmented agents.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Tool learning and function calling, one of 16 directions in LLM agents and tool use. Builds on 26 of its 28 references that are in the map. First posted on arXiv 19 Jun 2026.

Builds on

26 of 28 references.

Closest ancestors · 3

Same direction, newest first

  1. 2026The Confidence Dichotomy: Analyzing and Mitigating Miscalibration in Tool-Use Agents12 Jan
  2. 2025ToolHaystack: Stress-Testing Tool-Augmented Language Models in Realistic Long-Term Interactions29 May
  3. 2023Toolformer: Language Models Can Teach Themselves to Use Tools9 Feb

Other references · 23

  1. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  2. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  3. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  4. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
  5. 2020REALM: Retrieval-Augmented Language Model Pre-Trainingcited by 2,126
  6. 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
  7. 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,362
  8. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  9. 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memoriescited by 1,103
  10. 2023Large Language Models Cannot Self-Correct Reasoning Yetcited by 965
  11. 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 820
  12. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
11 more
  1. 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 441
  2. 2023Making Retrieval-Augmented Language Models Robust to Irrelevant Contextcited by 364
  3. 2023Adaptive Chameleon or Stubborn Sloth: Revealing the Behavior of Large Language Models in Knowledge Conflictscited by 333
  4. 2023Benchmarking Large Language Models in Retrieval-Augmented Generationcited by 307
  5. 2024The Power of Noise: Redefining Retrieval for RAG Systemscited by 275
  6. 2023Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Modelscited by 237
  7. 2023Chain-of-Note: Enhancing Robustness in Retrieval-Augmented Language Modelscited by 180
  8. 2022MRKL Systems: A modular, neuro-symbolic architecture that combines large language models, external knowledge sources and discrete reasoningcited by 153
  9. 2024How Easily do Irrelevant Inputs Skew the Responses of Large Language Models?cited by 44
  10. 2026AgentNoiseBench: Benchmarking Robustness of Tool-Using LLM Agents Under Noisy Conditioncited by 19
  11. 2026The Synthetic Web: Adversarially-Curated Mini-Internets for Diagnosing Epistemic Weaknesses of Language Agentscited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Reinforced Agent: Inference-Time Feedback for Tool-Calling Agents
  2. 2026Loud Failures, Quiet Failures: Fault Detection and Recovery in Tool-Using Language Model Agents
  3. 2026Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents
  4. 2026Before Reasoning Can Fail: Pre-Evidence Procedural Failures in Agentic RAG
  5. 2025When Tools Hurt LLM Reasoning: State-Dependent Belief Revision under External Evidence
  6. 2026Feedback That Backfires: Why Small Language Model Agents Repeat the Call They Just Watched Fail
  7. 2026Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs
  8. 2026TwinCheck: Evidence-Grounded Negative-Twin Verification for Stateful Tool Agents