AgentAbstain: Do LLM Agents Know When Not to Act?
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
Agent systems based on large language models (LLMs) are increasingly deployed for autonomous tasks, yet existing evaluations mostly focus on task success rather than whether agents know when to abstain. This gap poses real risks: under ambiguity, conflicting constraints, or tool failures, agents may execute unintended and irreversible actions. To close this gap, we present the first systematic evaluation framework for agentic abstention: the calibrated ability of tool-using LLM agents to recognize when not to act. At its core, AgentAbstain is a paired-task benchmark built on an agent-native taxonomy of 8 abstention scenarios across pre-execution reasoning and runtime discovery. It contains 263 paired tasks across 42 executable sandbox environments, where each pair consists of a should-act task and a should-abstain variant produced through a controlled perturbation to the instruction, tool, or environment state. To scale this paired design and resist data contamination, we propose AbstainGen, a fully automated pipeline that synthesizes sandbox environments and generates paired tasks end-to-end, validated by deterministic replay and semantic LLM judges; fresh task instances can be regenerated on demand, and three independent annotators rate 94-98% of sampled tasks as well-designed. Across 17 frontier LLMs in 4 agent harnesses, the best agent (Gemini 3.1 Pro) achieves only 59.5% paired accuracy (correct on both the act and abstain sides of each paired task). More importantly, abstention capability is largely independent of general task-solving capability, indicating that scaling task-solving alone will not close this gap. We further identify failure modes such as post-hoc abstention, in which agents execute irreversible actions before recognizing abstention triggers. Our code and dataset are open-sourced at agentabstain.github.io.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 57 of its 79 references that are in the map. First posted on arXiv 11 Jul 2026.
Builds on
57 of 79 references.
Closest ancestors · 6
Same direction, newest first
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?27 Jun
- 2026HiL-Bench (Human-in-Loop Benchmark): Do Agents Know When to Ask for Help?10 Apr
- 2025FieldWorkArena: Agentic AI Benchmark for Real Field Work Tasks26 May
- 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Tasks18 Dec
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains17 Jun
- 2023AgentBench: Evaluating LLMs as Agents7 Aug
Other references · 51
- 2024GPT-4o System Cardcited by 4,467
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
- 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
- 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 558
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 515
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2026GLM-5: from Vibe Coding to Agentic Engineeringcited by 502
- 2026Kimi K2.5: Visual Agentic Intelligencecited by 449
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 406
- 2024AppWorld: A Controllable World of Apps and People for Benchmarking Interactive Coding Agentscited by 359
38 more
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2024ToolSandbox: A Stateful, Conversational, Interactive Evaluation Benchmark for LLM Tool Use Capabilitiescited by 272
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
- 2023Do Large Language Models Know What They Don't Know?cited by 238
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
- 2024The BrowserGym Ecosystem for Web Agent Researchcited by 152
- 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 129
- 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agentscited by 126
- 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 116
- 2024Large Language Models Must Be Taught to Know What They Don't Knowcited by 99
- 2024Do LLMs Know When to NOT Answer? Investigating Abstention Abilities of Large Language Modelscited by 55
- 2025FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoningcited by 53
- 2024Uncertainty-Based Abstention in LLMs Improves Safety and Reduces Hallucinationscited by 51
- 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 51
- 2024CLAMBER: A Benchmark of Identifying and Clarifying Ambiguous Information Needs in Large Language Modelscited by 48
- 2025Calibrating Verbal Uncertainty as a Linear Feature to Reduce Hallucinationscited by 48
- 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 38
- 2024I Don't Know: Explicit Modeling of Uncertainty with an [IDK] Tokencited by 26
- 2024ToolBeHonest: A Multi-level Hallucination Diagnostic Benchmark for Tool-Augmented Large Language Modelscited by 25
- 2025Just Enough Shifts: Mitigating Over-Refusal in Aligned Language Models with Targeted Representation Fine-Tuningcited by 22
- 2025SafeToolBench: Pioneering a Prospective Benchmark to Evaluating Tool Utilization Safety in LLMscited by 21
- 2024ClarQ-LLM: A Benchmark for Models Clarifying and Requesting Information in Task-Oriented Dialogcited by 20
- 2025MCPVerse: An Expansive, Real-World Benchmark for Agentic Tool Usecited by 16
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 14
- 2025Mitigating LLM Hallucination via Behaviorally Calibrated Reinforcement Learningcited by 13
- 2025ClarifyMT-Bench: Benchmarking and Improving Multi-Turn Clarification for Conversational Large Language Modelscited by 12
- 2026When and What to Ask: AskBench and Rubric-Guided RLVR for LLM Clarificationcited by 12
- 2025Are Your Agents Upward Deceivers?cited by 11
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2026Defensive Refusal Bias: How Safety Alignment Fails Cyber Defenderscited by 10
- 2025When Robots Should Say "I Don't Know": Benchmarking Abstention in Embodied Question Answeringcited by 9
- 2025ORFuzz: Fuzzing the "Other Side" of LLM Safety -- Testing Over-Refusalcited by 6
- 2025Do Retrieval Augmented Language Models Know When They Don't Know?cited by 5
- 2026Coding Agents Don't Know When to Actcited by 4
- 2026The Yes-Man Syndrome: Benchmarking Abstention in Embodied Robotic Agentscited by 4
- 2025Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMscited by 3
- 2026OpaqueToolsBench: Learning Nuances of Tool Behavior Through Interactioncited by 3
- 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agentscited by 2
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026Counterfactual Tool Ranking under Utility, Cost, and Privilege Constraintscited by 3
- 2026Failure-Aware Long-Form Translation: Design and Implementation of a Recoverable LLM Translation Systemcited by 0
- 2026No Task Fails Every Time: Why One-Shot Audits Are Structurally Blind to Agent Damagecited by 0
- 2026Fabrication After Tool Failure: Tool-Augmented Agents Assert Values Their Tools Did Not Returncited by 0
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Racescited by 0
- 2026A Benchmark and Diagnostic Study of Epistemic Admission in Shared Agent Memorycited by 0
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMscited by 0
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agentscited by 0
- 2026A Competing-Hazards Systematization of Loss of Control in Autonomous Agents29 Sep 2026
- 2026Shared Experience, Separate Learning: Companion Confidence Calibration for LLMs27 Sep 2026
- 2026A Benchmark and Diagnostic Study of Epistemic Admission in Shared Agent Memory25 Sep 2026
- 2026Counterfactual Tool Ranking under Utility, Cost, and Privilege Constraints19 Sep 2026
- 2026Fabrication After Tool Failure: Tool-Augmented Agents Assert Values Their Tools Did Not Return13 Sep 2026
- 2026Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races25 Aug 2026
- 2026No Task Fails Every Time: Why One-Shot Audits Are Structurally Blind to Agent Damage15 Aug 2026
- 2026Failure-Aware Long-Form Translation: Design and Implementation of a Recoverable LLM Translation System10 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2026AgentEscapeBench: Evaluating Out-of-Domain Tool-Grounded Reasoning in LLM Agents
- 2026Agentic CLEAR: Automating Multi-Level Evaluation of LLM Agents
- 2025Beyond Task Completion: An Assessment Framework for Evaluating Agentic AI Systems
- 2025GroundAct: Can LLM Agents Ground Actions in Environmental States?
- 2026AgentCompass: A Unified Evaluation Infrastructure for Agent Capabilities
- 2024AgentQuest: A Modular Benchmark Framework to Measure Progress and Improve LLM Agents
- 2025Exploring Autonomous Agents: A Closer Look at Why They Fail When Completing Tasks
- 2026Agent-Editing World Model: Rethinking World Modeling for LLM Agents