Agentic Abstention: Do Agents Know When to Stop Instead of Act?
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
LLM agents are expected to act over multiple turns, using search, browsing interfaces, and terminal tools to complete user goals. Yet not every goal is well specified or achievable in the available environment. In such cases, a reliable agent should recognize that further interaction is unlikely to help and abstain from additional tool calls. We define Agentic Abstention, the problem of deciding when an agent should stop acting under uncertainty. Unlike standard LLM abstention, which is usually evaluated as a single-turn answer-or-abstain decision, agentic abstention is a sequential decision problem: an agent can answer, abstain, or gather more information at each turn, and the need to abstain may only become clear after interacting with the environment. We study this problem across web shopping, terminal environments, and question answering, evaluating 13 LLM-as-agent systems and 2 agent scaffolds on more than 28,000 tasks. Our results show that the main challenge is not only whether agents can abstain, but also when they abstain. Some agents never abstain when they should, while others do so only after many unnecessary interactions. This gap is especially large on tasks where the instruction appears feasible until the environment reveals otherwise (e.g., no valid result matches the instruction). We further find that model scale, reasoning, and agent scaffolding affect abstention in different ways, where larger or more capable models sometimes perform worse at timely abstention. Finally, we introduce CONVOLVE, a context engineering method for improving agentic abstention that distills full interaction trajectories into reusable stopping rules. On WebShop, CONVOLVE substantially improves timely abstention without updating model parameters, raising Llama-3.3-70B's timely recall rate from 26.7 to 57.4. Our dataset and code are available at https://lhannnn.github.io/agentic-abstention
Key facts. Cited by 15 papers in the map (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 72 of its 89 references that are in the map. First posted on arXiv 27 Jun 2026.
Builds on
72 of 89 references.
Closest ancestors · 4
Same direction, newest first
- 2026Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities4 Feb
- 2025Position: Uncertainty Quantification Needs Reassessment for Large-language Model Agents28 May
- 2025Active Task Disambiguation with LLMs6 Feb
- 2023AgentBench: Evaluating LLMs as Agents7 Aug
Other references · 68
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,173
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,554
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
- 2019PubMedQA: A Dataset for Biomedical Research Question Answeringcited by 1,288
38 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2022Text Embeddings by Weakly-Supervised Contrastive Pre-trainingcited by 1,253
- 2022WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agentscited by 1,251
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,242
- 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memoriescited by 1,128
- 2021MuSiQue: Multihop Questions via Single-hop Question Compositioncited by 916
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2018CoQA: A Conversational Question Answering Challengecited by 683
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 585
- 2018On Evaluation of Embodied Navigation Agentscited by 547
- 2025GEPA: Reflective Prompt Evolution Can Outperform Reinforcement Learningcited by 542
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
- 2021A Dataset of Information-Seeking Questions and Answers Anchored in Research Paperscited by 486
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2025Agentic Context Engineering: Evolving Contexts for Self-Improving Language Modelscited by 398
- 2022Unnatural Instructions: Tuning Language Models with (Almost) No Human Laborcited by 397
- 2020AmbigQA: Answering Ambiguous Open-domain Questionscited by 390
- 2018QuAC : Question Answering in Contextcited by 381
- 2023FreshLLMs: Refreshing Large Language Models with Search Engine Augmentationcited by 318
- 2022RealTime QA: What's the Answer Right Now?cited by 244
- 2023Do Large Language Models Know What They Don't Know?cited by 243
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2021Latent Hatred: A Benchmark for Understanding Implicit Hate Speechcited by 217
- 2022Demystifying Prompts in Language Models via Perplexity Estimationcited by 216
- 2023Evaluating the Moral Beliefs Encoded in LLMscited by 215
- 2024Don't Hallucinate, Abstain: Identifying LLM Knowledge Gaps via Multi-LLM Collaborationcited by 180
- 2024FlashRAG: A Modular Toolkit for Efficient Retrieval-Augmented Generation Researchcited by 166
- 2025Dynamic Cheatsheet: Test-Time Learning with Adaptive Memorycited by 163
- 2024MediQ: Question-Asking LLMs and a Benchmark for Reliable Interactive Clinical Reasoningcited by 154
- 2021SituatedQA: Incorporating Extra-Linguistic Contexts into QAcited by 145
- 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 145
- 2021Simple Entity-Centric Questions Challenge Dense Retrieverscited by 140
- 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 121
50 most cited of 68 All 68 (JSON)
Built on by
Citing papers per year: 2026: 15.
15 papers.
Sort:
By area:
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?cited by 17
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMscited by 3
- 2026FinalityBench: An Effect-Level Benchmark for Agent Decisions Under Delayed and Conflicting Financial Finalitycited by 1
- 2026Before the Rollout Ends: Early Terminal Reward Prediction for Long-horizon Coding Agentscited by 1
- 2026Failure-Aware Long-Form Translation: Design and Implementation of a Recoverable LLM Translation Systemcited by 0
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Studycited by 0
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Racescited by 0
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMscited by 0
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agentscited by 0
- 2026Not Until the Evidence Says So: Teaching LLM Investigators When to Close a Casecited by 0
- 2026Asking Earns Nothing: Scoring the Decision to Act in BFCL Multi-Turncited by 0
- 2026Judged Useless, Queried Anyway: Tool-Using Agents Rarely Turn Their Own Evidence Judgments into Stopping Decisionscited by 0
3 more
- 2026Agentic Self-Awareness: Aligning Knowing, Acting, and Holding13 Oct 2026
- 2026From Evidence to Action: How Tool-Using Agents Fail6 Oct 2026
- 2026HERA: Harness-Environment Co-Evolution for Reliable Agentic Abstention5 Oct 2026
- 2026Judged Useless, Queried Anyway: Tool-Using Agents Rarely Turn Their Own Evidence Judgments into Stopping Decisions5 Oct 2026
- 2026Asking Earns Nothing: Scoring the Decision to Act in BFCL Multi-Turn3 Oct 2026
- 2026Not Until the Evidence Says So: Teaching LLM Investigators When to Close a Case2 Oct 2026
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agents29 Sep 2026
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMs27 Sep 2026
- 2026Before the Rollout Ends: Early Terminal Reward Prediction for Long-horizon Coding Agents25 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026FinalityBench: An Effect-Level Benchmark for Agent Decisions Under Delayed and Conflicting Financial Finality4 Sep 2026
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races25 Aug 2026
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?cited by 17
- 2026FinalityBench: An Effect-Level Benchmark for Agent Decisions Under Delayed and Conflicting Financial Finalitycited by 1
- 2026Before the Rollout Ends: Early Terminal Reward Prediction for Long-horizon Coding Agentscited by 1
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Studycited by 0
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Racescited by 0
- 2026HERA: Harness-Environment Co-Evolution for Reliable Agentic Abstentioncited by 0
- 2026Agentic Self-Awareness: Aligning Knowing, Acting, and Holdingcited by 0
- 2026Agentic Self-Awareness: Aligning Knowing, Acting, and Holding13 Oct 2026
- 2026HERA: Harness-Environment Co-Evolution for Reliable Agentic Abstention5 Oct 2026
- 2026Before the Rollout Ends: Early Terminal Reward Prediction for Long-horizon Coding Agents25 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026FinalityBench: An Effect-Level Benchmark for Agent Decisions Under Delayed and Conflicting Financial Finality4 Sep 2026
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races25 Aug 2026
- 2026AgentAbstain: Do LLM Agents Know When Not to Act?11 Jul 2026
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMscited by 3
- 2026Failure-Aware Long-Form Translation: Design and Implementation of a Recoverable LLM Translation Systemcited by 0
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMscited by 0
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agentscited by 0
- 2026Not Until the Evidence Says So: Teaching LLM Investigators When to Close a Casecited by 0
- 2026Asking Earns Nothing: Scoring the Decision to Act in BFCL Multi-Turncited by 0
- 2026Judged Useless, Queried Anyway: Tool-Using Agents Rarely Turn Their Own Evidence Judgments into Stopping Decisionscited by 0
- 2026From Evidence to Action: How Tool-Using Agents Failcited by 0
- 2026From Evidence to Action: How Tool-Using Agents Fail6 Oct 2026
- 2026Judged Useless, Queried Anyway: Tool-Using Agents Rarely Turn Their Own Evidence Judgments into Stopping Decisions5 Oct 2026
- 2026Asking Earns Nothing: Scoring the Decision to Act in BFCL Multi-Turn3 Oct 2026
- 2026Not Until the Evidence Says So: Teaching LLM Investigators When to Close a Case2 Oct 2026
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agents29 Sep 2026
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMs27 Sep 2026
- 2026When May an Agent Stop? Evidence-Carrying Termination for Tool-Using LLMs22 Aug 2026
- 2026Failure-Aware Long-Form Translation: Design and Implementation of a Recoverable LLM Translation System10 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2026Ask, Relax, or Act? Evaluating Actionable Indeterminacy in LLM Preference Reasoning
- 2026Knowing When to Quit: A Principled Framework for Dynamic Abstention in LLM Reasoning
- 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agents
- 2025CaRT: Teaching LLM Agents to Know When They Know Enough
- 2026Evaluation of Multi-Turn Consistency in LLM Agents: Survival Analysis and Failure-Rationale Taxonomy
- 2025Agent-Based Detection and Resolution of Incompleteness and Ambiguity in Interactions with Large Language Models
- 2025Beyond Reactivity: Measuring Proactive Problem Solving in LLM Agents
- 2026Constitutional Gating and Deterministic Recovery for Multi-Agent LLM Negotiation: Ablations Against a Stateful Adversarial Gatekeeper