One email each morning — yesterday's AI, sortedGet it in your inbox

METAL LAB

Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents

arXiv:2608.195642026-08-21

AI assistants would rather double-check facts than ask you a question, even when asking is the right call

Researchers built MCB, a benchmark that tests whether an LLM agent correctly decides to permanently remember, use only once, re-verify, or ask the user about information it picks up during conversation. Testing Claude and Qwen models, they found both families were far more willing to verify facts against the world than to ask users to resolve ambiguity. Prompting tricks improved accuracy or reduced bad memory storage, but the failure to ask users when needed persisted across the board.

What they did

  1. The team released MCB, a 140-scenario benchmark forcing models to choose among persist, ephemeral use, verify, or clarify-with-user for information encountered mid-conversation.
  2. Two independent non-author annotators labeled the data with 97.1% agreement and a Cohen's kappa (inter-rater agreement score) of 0.962, giving the gold labels credibility.
  3. A bare Qwen model asked the user zero times out of 12 genuinely ambiguous cases, while correctly re-verifying 12 of 18 cases involving facts that could change over time.
  4. Adding a few example demonstrations (few-shot prompting) raised Qwen's accuracy from 0.557 to 0.771, but its recall for spotting clarification-needed cases stayed stuck at 0.333.
  5. A five-rule policy prompt cut erroneous permanent-memory storage from 0.243 to 0.100 of all items, though it didn't produce a statistically clear accuracy improvement.
  6. Agreement between a model's stated answer and its actual tool-call choice (e.g., memory_write vs. ask_user) was only 57% for each Claude model and 23% for Qwen, showing stated decisions don't reliably predict real actions.
TABLE I: Positioning by explicit scored target. “Structured action” includes tool selection or parameterized memory operations; MCB-Act scores tool-call selection but does not execute downstream effects.
BenchmarkRecall/reuseStorage gateAsk userCheck worldStructured action
LongMemEval / LoCoMo [12, 4]
MemBench [9]
PerMemBench [3]
CLAMBER [17]
Mem2ActBench [8]
MCB (ours)
TABLE II: Illustrative MCB decisions. Each label reflects authority or commitment scope rather than a lexical topic.
Acquire / candidate updateLater reuseGoldBoundary cue
“I always prefer dark mode.”Configure a new workspacePersistExplicitly durable and reusable preference
“Use APA for this report.”Prepare an unrelated reportEphemeralScope is limited to one artifact
“Restaurant X is open tonight.”Rely on it one month laterVerifyThe world state can change
“Make it like last time.”Several prior artifacts fitClarifyOnly the user can resolve the referent
TABLE III: Held-out MCB results on non-author-adjudicated gold (n=70). Accuracy includes a bootstrap 95% CI. OM is erroneous persistence over all items; Clar. and Ver. are recalls on 12 and 18 relevant gold items. All invalid-output rates are zero. Act rows emit one tool-call object without a policy prompt.
SystemConditionAccuracy [95% CI]Macro-F1OM↓Clar.↑Ver.↑
Always Persist.257 [.157,.371].102.743.000.000
Majority Action.314 [.214,.429].120.000.000.000
Keyword.257 [.157,.371].228.071.833.056
Category oracle.800 [.700,.900].792.071.667.889
Claude Haiku 4.5bare.629 [.514,.743].615.029.500.944
policy.857 [.771,.929].846.014.750.944
few-shot.757 [.643,.857].732.057.500.944
Claude Sonnet 4.6bare.814 [.714,.900].790.057.500.889
policy.843 [.757,.929].831.014.6671.000
few-shot.814 [.729,.900].796.043.583.944
Qwen3.5-9Bbare.557 [.443,.671].450.243.000.667
policy.629 [.514,.743].542.100.083.944
few-shot.771 [.671,.871].726.129.333.833
Claude Haiku 4.5act.514 [.400,.629].456.143.583.778
Claude Sonnet 4.6act.529 [.414,.643].531.100.500.556
Qwen3.5-9Bact.343 [.243,.457].236.057.083.056
TABLE IV: Selected exact paired comparisons. Δ is accuracy unless marked OM; intervals are paired-bootstrap 95% CIs; pH is Holm-adjusted within the families defined in Sec. III-B.
ComparisonΔ [95% CI]pH
Haiku policy–bare+.229 [.114,.343].002
Haiku few-shot–bare+.129 [.043,.214].047
Sonnet policy–bare+.029 [-.086,.143]1.000
Sonnet few-shot–bare+.000 [-.100,.100]1.000
Qwen policy–bare+.071 [-.014,.157].539
Qwen few-shot–bare+.214 [.114,.329].002
Qwen policy–bare (OM)-.143.038
Sonnet act–bare-.286 [-.414,-.143]<.001
Qwen act–bare-.214 [-.386,-.029].047

Why it matters

If a personal AI assistant silently commits a wrong permanent memory, its future behavior can quietly go off track, so knowing when to remember versus when to ask is central to building safe personalized AI. This work shows that evaluating only a model's stated answer misses real failures that surface once that answer is translated into an actual tool call.

Terms in this paper

  • LLM agent · A large-language-model-based program that retains conversation history and uses tools to complete tasks
  • Cohen's kappa · A statistic measuring how much two raters agree beyond what chance would predict
  • few-shot prompting · Giving a model a few example answers upfront to guide its response format and behavior
  • over-memory · The error of permanently storing information that should not have been kept
  • McNemar test · A statistical test comparing correct/incorrect outcomes on the same items across two conditions

Original abstract (English)

Persistent memory can personalize an LLM agent, but an incorrect durable update can silently distort future behavior. We study the memory-clarification boundary: whether interaction-derived information should be persisted, used only in the current context, re-verified, or clarified with the user. MCB contains 140 primary scenarios, split into 70 development and 70 held-out items, plus a separate 70-item contrast set. It evaluates both action labels and structured tool-call selection. Two non-authors independently label the 70 held-out primary and 70 contrast items (97.1% agreement, Cohen's kappa = 0.962); a blind third resolves four disagreements, replacing eight author labels by non-author majority. Across Claude and Qwen, models verify changing facts more reliably than they ask users to resolve ambiguity. Bare Qwen asks on 0/12 clarification items while verifying 12/18 freshness items. Few-shot prompting raises accuracy from 0.557 to 0.771 (paired delta = +0.214, Holm-adjusted exact McNemar p_H = 0.002), yet clarification recall remains 0.333. The policy prompt reduces erroneous persistence from 0.243 to 0.100 (p_H = 0.038), although its accuracy gain is not significant. Label-tool agreement is 57% for each Claude model and 23% for Qwen; Qwen accuracy falls from 0.557 to 0.343 (p_H = 0.047). Memory evaluation must test both stated decisions and tool-call choices.

Authors · Baichuan Li, Junyi Yao, Zihao Zheng

Read on arXiv

Latest papers

All papers →

Latest from METAL LAB