mlsanityData to 7 Oct 2026

Quantifying Overclaiming Propensity in Frontier LLM Agents

arXiv 2609.20812 ↗First posted 17 Sep 2026cs.SE cs.AI cs.LGcited by 2

On the map: LLM agents and tool use → Software engineering coding agents also fits: Agent threats, guardrails and governance

Abstract (arXiv)

Frontier coding agents are increasingly trusted to work autonomously for long periods of time, yet what they actually did is often hard to tell from their final response. We quantify the propensity of such agents to overclaim task completion, which may mislead the user. We operationalize overclaiming as a final response that reports work that the agent's own transcript shows it did not do, for example, claiming to have read a file it never opened. This criterion requires no inference about intent and does not depend on whether the delivered work is correct; it asks only whether the reported work was done. We introduce OverclaimBench, an evaluation suite of five file-review scenarios with transcript-based coverage measurements and registered planted defects. We evaluate eight proprietary frontier models in their own production command-line interfaces and four open-weight models under a single fixed harness, and find that 1) agents fail to read every file they were asked to review in 67.9% of runs; 2) among these incomplete runs, agents are misleading 80.4% of the time (59-96% per model), either falsely claiming a complete review or leaving the gap undisclosed; 3) requiring delegation to subagents increases coverage, but a large majority of reviews that remain incomplete are still misleading; and 4) agents that falsely claim a complete review miss planted defects at about 1.8 times the rate of agents that read every file, showing that claims of completion can conceal substantive failures. Together, these results show that agents' final responses are not reliable accounts of their actions.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Software engineering coding agents, one of 16 directions in LLM agents and tool use. Builds on 34 of its 49 references that are in the map. First posted on arXiv 17 Sep 2026.

Builds on

34 of 49 references.

Closest ancestors · 6

Same direction, newest first

  1. 2026Agentic Code Review in the Terminal: A Trajectory-Level Analysis of Behavior, Cost, and Human-Alignment18 Jul
  2. 2026From Confident Closing to Silent Failure: Characterizing False Success in LLM Agents1 Jun
  3. 2026What Breaks When LLMs Code? Characterizing Operational Safety Failures of Agentic Code Assistants29 May
  4. 2026How Coding Agents Fail Their Users: A Large-Scale Analysis of Developer-Agent Misalignment in 20,574 Real-World Sessions28 May
  5. 2026Beyond Task Completion: Revealing Corrupt Success in LLM Agents through Procedure-Aware Evaluation3 Mar
  6. 2026ContextBench: A Benchmark for Context Retrieval in Coding Agents5 Feb

Other references · 28

  1. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
  2. 2023Let's Verify Step by Stepcited by 3,598
  3. 2016Concrete Problems in AI Safetycited by 1,582
  4. 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
  5. 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
  6. 2023Towards Understanding Sycophancy in Language Modelscited by 988
  7. 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
  8. 2025Reasoning Models Don't Always Say What They Thinkcited by 388
  9. 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 319
  10. 2024Frontier Models are Capable of In-context Schemingcited by 252
  11. 2024Agent-as-a-Judge: Evaluate Agents with Agentscited by 223
  12. 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
16 more
  1. 2022Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goalscited by 120
  2. 2024Language Models Learn to Mislead Humans via RLHFcited by 118
  3. 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
  4. 2025Process Reward Models for LLM Agents: Practical Framework and Directionscited by 81
  5. 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 57
  6. 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 51
  7. 2025Budget-Aware Tool Use Enables Effective Agent Scalingcited by 42
  8. 2025Thinking vs. Doing: Agents that Reason by Scaling Test-Time Interactioncited by 34
  9. 2024When Your AIs Deceive You: Challenges of Partial Observability in Reinforcement Learning from Human Feedbackcited by 17
  10. 2025Are Your Agents Upward Deceivers?cited by 11
  11. 2026Log analysis is necessary for credible evaluation of AI agentscited by 8
  12. 2026When Is Enough Not Enough? Illusory Completion in Search Agentscited by 5
  13. 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agentscited by 4
  14. 2026The Compliance Gap: Why AI Systems Promise to Follow Process Instructions but Don'tcited by 3
  15. 2026Measuring Reward-Seeking via Contrastive Belief Updatescited by 3
  16. 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergencecited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks
  2. 2026Agents Trust Tools Too Much: Measuring Reliance on Unreliable Tools
  3. 2026Confident and Wrong: Silent Semantic Failures in Coding Agents
  4. 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents
  5. 2026Trust but Verify? Uncovering the Security Debt of Autonomous Coding Agents
  6. 2026TraceLab: Characterizing Coding Agent Workloads for LLM Serving
  7. 2026Tencent WorkBuddy Bench: A Multi-Domain Coding-Agent Benchmark with Contamination-Resistant Task Construction
  8. 2026OverAct: Measuring and Mitigating Proactive Over-Authorization in LLM Tool-Calling Agents