mlsanityData to 7 Oct 2026

AgentAbstain: Do LLM Agents Know When Not to Act?

arXiv 2607.10059 ↗First posted 11 Jul 2026cs.AIcited by 8

On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks

Abstract (arXiv)

Agent systems based on large language models (LLMs) are increasingly deployed for autonomous tasks, yet existing evaluations mostly focus on task success rather than whether agents know when to abstain. This gap poses real risks: under ambiguity, conflicting constraints, or tool failures, agents may execute unintended and irreversible actions. To close this gap, we present the first systematic evaluation framework for agentic abstention: the calibrated ability of tool-using LLM agents to recognize when not to act. At its core, AgentAbstain is a paired-task benchmark built on an agent-native taxonomy of 8 abstention scenarios across pre-execution reasoning and runtime discovery. It contains 263 paired tasks across 42 executable sandbox environments, where each pair consists of a should-act task and a should-abstain variant produced through a controlled perturbation to the instruction, tool, or environment state. To scale this paired design and resist data contamination, we propose AbstainGen, a fully automated pipeline that synthesizes sandbox environments and generates paired tasks end-to-end, validated by deterministic replay and semantic LLM judges; fresh task instances can be regenerated on demand, and three independent annotators rate 94-98% of sampled tasks as well-designed. Across 17 frontier LLMs in 4 agent harnesses, the best agent (Gemini 3.1 Pro) achieves only 59.5% paired accuracy (correct on both the act and abstain sides of each paired task). More importantly, abstention capability is largely independent of general task-solving capability, indicating that scaling task-solving alone will not close this gap. We further identify failure modes such as post-hoc abstention, in which agents execute irreversible actions before recognizing abstention triggers. Our code and dataset are open-sourced at agentabstain.github.io.

Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 57 of its 79 references that are in the map. First posted on arXiv 11 Jul 2026.

Builds on

57 of 79 references.

Closest ancestors · 6

Same direction, newest first

  1. 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?27 Jun
  2. 2026HiL-Bench (Human-in-Loop Benchmark): Do Agents Know When to Ask for Help?10 Apr
  3. 2025FieldWorkArena: Agentic AI Benchmark for Real Field Work Tasks26 May
  4. 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Tasks18 Dec
  5. 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains17 Jun
  6. 2023AgentBench: Evaluating LLMs as Agents7 Aug

Other references · 51

  1. 2024GPT-4o System Cardcited by 4,467
  2. 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
  3. 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
  4. 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
  5. 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
  6. 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 558
  7. 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 515
  8. 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
  9. 2026GLM-5: from Vibe Coding to Agentic Engineeringcited by 502
  10. 2026Kimi K2.5: Visual Agentic Intelligencecited by 449
  11. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 406
  12. 2024AppWorld: A Controllable World of Apps and People for Benchmarking Interactive Coding Agentscited by 359
38 more
  1. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
  2. 2024ToolSandbox: A Stateful, Conversational, Interactive Evaluation Benchmark for LLM Tool Use Capabilitiescited by 272
  3. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
  4. 2023Do Large Language Models Know What They Don't Know?cited by 238
  5. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
  6. 2024The BrowserGym Ecosystem for Web Agent Researchcited by 152
  7. 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 129
  8. 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agentscited by 126
  9. 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 116
  10. 2024Large Language Models Must Be Taught to Know What They Don't Knowcited by 99
  11. 2024Do LLMs Know When to NOT Answer? Investigating Abstention Abilities of Large Language Modelscited by 55
  12. 2025FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoningcited by 53
  13. 2024Uncertainty-Based Abstention in LLMs Improves Safety and Reduces Hallucinationscited by 51
  14. 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 51
  15. 2024CLAMBER: A Benchmark of Identifying and Clarifying Ambiguous Information Needs in Large Language Modelscited by 48
  16. 2025Calibrating Verbal Uncertainty as a Linear Feature to Reduce Hallucinationscited by 48
  17. 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 38
  18. 2024I Don't Know: Explicit Modeling of Uncertainty with an [IDK] Tokencited by 26
  19. 2024ToolBeHonest: A Multi-level Hallucination Diagnostic Benchmark for Tool-Augmented Large Language Modelscited by 25
  20. 2025Just Enough Shifts: Mitigating Over-Refusal in Aligned Language Models with Targeted Representation Fine-Tuningcited by 22
  21. 2025SafeToolBench: Pioneering a Prospective Benchmark to Evaluating Tool Utilization Safety in LLMscited by 21
  22. 2024ClarQ-LLM: A Benchmark for Models Clarifying and Requesting Information in Task-Oriented Dialogcited by 20
  23. 2025MCPVerse: An Expansive, Real-World Benchmark for Agentic Tool Usecited by 16
  24. 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 14
  25. 2025Mitigating LLM Hallucination via Behaviorally Calibrated Reinforcement Learningcited by 13
  26. 2025ClarifyMT-Bench: Benchmarking and Improving Multi-Turn Clarification for Conversational Large Language Modelscited by 12
  27. 2026When and What to Ask: AskBench and Rubric-Guided RLVR for LLM Clarificationcited by 12
  28. 2025Are Your Agents Upward Deceivers?cited by 11
  29. 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
  30. 2026Defensive Refusal Bias: How Safety Alignment Fails Cyber Defenderscited by 10
  31. 2025When Robots Should Say "I Don't Know": Benchmarking Abstention in Embodied Question Answeringcited by 9
  32. 2025ORFuzz: Fuzzing the "Other Side" of LLM Safety -- Testing Over-Refusalcited by 6
  33. 2025Do Retrieval Augmented Language Models Know When They Don't Know?cited by 5
  34. 2026Coding Agents Don't Know When to Actcited by 4
  35. 2026The Yes-Man Syndrome: Benchmarking Abstention in Embodied Robotic Agentscited by 4
  36. 2025Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMscited by 3
  37. 2026OpaqueToolsBench: Learning Nuances of Tool Behavior Through Interactioncited by 3
  38. 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agentscited by 2

50 most cited of 51 All 51 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 8.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026AgentEscapeBench: Evaluating Out-of-Domain Tool-Grounded Reasoning in LLM Agents
  2. 2026Agentic CLEAR: Automating Multi-Level Evaluation of LLM Agents
  3. 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systems
  4. 2025GroundAct: Can LLM Agents Ground Actions in Environmental States?
  5. 2026AgentCompass: A Unified Evaluation Infrastructure for Agent Capabilities
  6. 2024AgentQuest: A Modular Benchmark Framework to Measure Progress and Improve LLM Agents
  7. 2025Exploring Autonomous Agents: A Closer Look at Why They Fail When Completing Tasks
  8. 2026Agent-Editing World Model: Rethinking World Modeling for LLM Agents