Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents
AI assistants would rather double-check facts than ask you a question, even when asking is the right call
Researchers built MCB, a benchmark that tests whether an LLM agent correctly decides to permanently remember, use only once, re-verify, or ask the user about information it picks up during conversation. Testing Claude and Qwen models, they found both families were far more willing to verify facts against the world than to ask users to resolve ambiguity. Prompting tricks improved accuracy or reduced bad memory storage, but the failure to ask users when needed persisted across the board.
What they did
- The team released MCB, a 140-scenario benchmark forcing models to choose among persist, ephemeral use, verify, or clarify-with-user for information encountered mid-conversation.
- Two independent non-author annotators labeled the data with 97.1% agreement and a Cohen's kappa (inter-rater agreement score) of 0.962, giving the gold labels credibility.
- A bare Qwen model asked the user zero times out of 12 genuinely ambiguous cases, while correctly re-verifying 12 of 18 cases involving facts that could change over time.
- Adding a few example demonstrations (few-shot prompting) raised Qwen's accuracy from 0.557 to 0.771, but its recall for spotting clarification-needed cases stayed stuck at 0.333.
- A five-rule policy prompt cut erroneous permanent-memory storage from 0.243 to 0.100 of all items, though it didn't produce a statistically clear accuracy improvement.
- Agreement between a model's stated answer and its actual tool-call choice (e.g., memory_write vs. ask_user) was only 57% for each Claude model and 23% for Qwen, showing stated decisions don't reliably predict real actions.
| Benchmark | Recall/reuse | Storage gate | Ask user | Check world | Structured action |
|---|---|---|---|---|---|
| LongMemEval / LoCoMo [12, 4] | ✓ | – | – | – | – |
| MemBench [9] | ✓ | – | – | – | – |
| PerMemBench [3] | ✓ | ✓ | – | – | – |
| CLAMBER [17] | – | – | ✓ | – | – |
| Mem2ActBench [8] | ✓ | – | – | – | ✓ |
| MCB (ours) | – | ✓ | ✓ | ✓ | ✓ |
| Acquire / candidate update | Later reuse | Gold | Boundary cue |
|---|---|---|---|
| “I always prefer dark mode.” | Configure a new workspace | Persist | Explicitly durable and reusable preference |
| “Use APA for this report.” | Prepare an unrelated report | Ephemeral | Scope is limited to one artifact |
| “Restaurant X is open tonight.” | Rely on it one month later | Verify | The world state can change |
| “Make it like last time.” | Several prior artifacts fit | Clarify | Only the user can resolve the referent |
| System | Condition | Accuracy [95% CI] | Macro-F1 | OM↓ | Clar.↑ | Ver.↑ |
|---|---|---|---|---|---|---|
| Always Persist | – | .257 [.157,.371] | .102 | .743 | .000 | .000 |
| Majority Action | – | .314 [.214,.429] | .120 | .000 | .000 | .000 |
| Keyword | – | .257 [.157,.371] | .228 | .071 | .833 | .056 |
| Category oracle | – | .800 [.700,.900] | .792 | .071 | .667 | .889 |
| Claude Haiku 4.5 | bare | .629 [.514,.743] | .615 | .029 | .500 | .944 |
| policy | .857 [.771,.929] | .846 | .014 | .750 | .944 | |
| few-shot | .757 [.643,.857] | .732 | .057 | .500 | .944 | |
| Claude Sonnet 4.6 | bare | .814 [.714,.900] | .790 | .057 | .500 | .889 |
| policy | .843 [.757,.929] | .831 | .014 | .667 | 1.000 | |
| few-shot | .814 [.729,.900] | .796 | .043 | .583 | .944 | |
| Qwen3.5-9B | bare | .557 [.443,.671] | .450 | .243 | .000 | .667 |
| policy | .629 [.514,.743] | .542 | .100 | .083 | .944 | |
| few-shot | .771 [.671,.871] | .726 | .129 | .333 | .833 | |
| Claude Haiku 4.5 | act | .514 [.400,.629] | .456 | .143 | .583 | .778 |
| Claude Sonnet 4.6 | act | .529 [.414,.643] | .531 | .100 | .500 | .556 |
| Qwen3.5-9B | act | .343 [.243,.457] | .236 | .057 | .083 | .056 |
| Comparison | Δ [95% CI] | pH |
|---|---|---|
| Haiku policy–bare | +.229 [.114,.343] | .002 |
| Haiku few-shot–bare | +.129 [.043,.214] | .047 |
| Sonnet policy–bare | +.029 [-.086,.143] | 1.000 |
| Sonnet few-shot–bare | +.000 [-.100,.100] | 1.000 |
| Qwen policy–bare | +.071 [-.014,.157] | .539 |
| Qwen few-shot–bare | +.214 [.114,.329] | .002 |
| Qwen policy–bare (OM) | -.143 | .038 |
| Sonnet act–bare | -.286 [-.414,-.143] | <.001 |
| Qwen act–bare | -.214 [-.386,-.029] | .047 |
Why it matters
If a personal AI assistant silently commits a wrong permanent memory, its future behavior can quietly go off track, so knowing when to remember versus when to ask is central to building safe personalized AI. This work shows that evaluating only a model's stated answer misses real failures that surface once that answer is translated into an actual tool call.
Terms in this paper
- LLM agent · A large-language-model-based program that retains conversation history and uses tools to complete tasks
- Cohen's kappa · A statistic measuring how much two raters agree beyond what chance would predict
- few-shot prompting · Giving a model a few example answers upfront to guide its response format and behavior
- over-memory · The error of permanently storing information that should not have been kept
- McNemar test · A statistical test comparing correct/incorrect outcomes on the same items across two conditions
Original abstract (English)
Persistent memory can personalize an LLM agent, but an incorrect durable update can silently distort future behavior. We study the memory-clarification boundary: whether interaction-derived information should be persisted, used only in the current context, re-verified, or clarified with the user. MCB contains 140 primary scenarios, split into 70 development and 70 held-out items, plus a separate 70-item contrast set. It evaluates both action labels and structured tool-call selection. Two non-authors independently label the 70 held-out primary and 70 contrast items (97.1% agreement, Cohen's kappa = 0.962); a blind third resolves four disagreements, replacing eight author labels by non-author majority. Across Claude and Qwen, models verify changing facts more reliably than they ask users to resolve ambiguity. Bare Qwen asks on 0/12 clarification items while verifying 12/18 freshness items. Few-shot prompting raises accuracy from 0.557 to 0.771 (paired delta = +0.214, Holm-adjusted exact McNemar p_H = 0.002), yet clarification recall remains 0.333. The policy prompt reduces erroneous persistence from 0.243 to 0.100 (p_H = 0.038), although its accuracy gain is not significant. Label-tool agreement is 57% for each Claude model and 23% for Qwen; Qwen accuracy falls from 0.557 to 0.343 (p_H = 0.047). Memory evaluation must test both stated decisions and tool-call choices.
Read on arXivLatest papers
- SWE-bench Science: Can Coding Agents Resolve Engineering Tasks in Science?AI coding agents were tested on fixing real scientific software, and even the best one failed more than half the time
- When Saying No Makes Better Videos: Designing Dual Gatekeeping for Pedagogically Grounded AI Content CreationBetter teaching videos come from AI systems that know when to say no
- LoRA-GA$^2$: Low Rank Adaptation with Multi-step Gradient Adaptive AlignmentPeeking at a few early training gradients before fine-tuning starts to set up LoRA smarter
- TESTNAV: Pareto-Guided Search for Compositional Robustness TestingA smarter way to test AI models against combined real-world glitches, without checking every possible combination
- Natural Language Code Retrieval for 1C:Enterprise: An Open Benchmark and Efficient Bi-EncoderA first-of-its-kind search benchmark and AI model let you find 1C business-software code using Russian-language questions
- FlashPrefill V2: Block-Sparse Prefill Attention for Long-Context LLM ServingMaking sparse attention fast enough and accurate enough for real LLM serving, not just papers
- NepOOC-M: Bilingual Nepali-English Benchmark and Comparative Analysis of Multimodal Architectures for OOC DetectionNepali fake-news detector matches image+text model using text alone
- Robust Incomplete Multimodal Sentiment Analysis via Iterative Proxy CorrectionWhen text input is missing or broken, this AI doesn't guess once and move on—it revises its guess step by step to read emotions more reliably
Latest from METAL LAB
- OpenAI Closes In on Anthropic Again in Enterprise Spending Share
- Meta Unveils First 10 Tasks in WildArtifactBench, a Benchmark for AI Agents
- Musk: "Optimus + Grok will one day handle healthcare for all humanity"
- 35% of Web Pages Published Since ChatGPT Show Signs of AI Authorship
- GPT-Image-2 adds transparent background preview in API