Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents
AI助手在该向你提问的时候,却更愿意自己去核实事实
研究团队构建了名为MCB的评测基准,用来检验大语言模型(LLM)智能体能否正确判断:对话中获得的信息该永久记住、仅当次使用、重新核实,还是该向用户提问确认。他们对Claude和Qwen两个模型家族进行测试,发现两者都更倾向于去核实事实,而不是在信息含糊时主动询问用户。通过提示词技巧可以提高准确率或减少错误的永久存储,但模型该问不问的问题始终没有解决。
他们做了什么
- 研究团队发布了包含140个场景的MCB基准,要求模型对对话中获得的信息在持久保存、临时使用、重新核实、向用户提问四种动作中做出选择。
- 两名非作者标注员独立标注数据,一致率达97.1%,科恩卡帕系数(衡量评分者间一致程度的统计指标)为0.962,保证了标注质量。
- 未加任何特殊提示的Qwen模型在12个真正含糊的场景中,一次都没有向用户提问;但在18个信息可能过时的场景中,正确核实了其中12个。
- 加入少量示例的提示方法(少样本提示)让Qwen的准确率从0.557提升到0.771,但其识别出需要提问场景的召回率仍停留在0.333。
- 一套包含五条规则的策略提示将错误的永久记忆存储比例从0.243降到0.100,不过整体准确率的提升在统计上并不显著。
- 模型口头给出的答案与其实际调用的工具(如memory_write、ask_user等)之间的一致率,在两个Claude模型上均为57%,在Qwen上仅为23%,说明模型嘴上说的和实际做的可能并不一致。
| Benchmark | Recall/reuse | Storage gate | Ask user | Check world | Structured action |
|---|---|---|---|---|---|
| LongMemEval / LoCoMo [12, 4] | ✓ | – | – | – | – |
| MemBench [9] | ✓ | – | – | – | – |
| PerMemBench [3] | ✓ | ✓ | – | – | – |
| CLAMBER [17] | – | – | ✓ | – | – |
| Mem2ActBench [8] | ✓ | – | – | – | ✓ |
| MCB (ours) | – | ✓ | ✓ | ✓ | ✓ |
| Acquire / candidate update | Later reuse | Gold | Boundary cue |
|---|---|---|---|
| “I always prefer dark mode.” | Configure a new workspace | Persist | Explicitly durable and reusable preference |
| “Use APA for this report.” | Prepare an unrelated report | Ephemeral | Scope is limited to one artifact |
| “Restaurant X is open tonight.” | Rely on it one month later | Verify | The world state can change |
| “Make it like last time.” | Several prior artifacts fit | Clarify | Only the user can resolve the referent |
| System | Condition | Accuracy [95% CI] | Macro-F1 | OM↓ | Clar.↑ | Ver.↑ |
|---|---|---|---|---|---|---|
| Always Persist | – | .257 [.157,.371] | .102 | .743 | .000 | .000 |
| Majority Action | – | .314 [.214,.429] | .120 | .000 | .000 | .000 |
| Keyword | – | .257 [.157,.371] | .228 | .071 | .833 | .056 |
| Category oracle | – | .800 [.700,.900] | .792 | .071 | .667 | .889 |
| Claude Haiku 4.5 | bare | .629 [.514,.743] | .615 | .029 | .500 | .944 |
| policy | .857 [.771,.929] | .846 | .014 | .750 | .944 | |
| few-shot | .757 [.643,.857] | .732 | .057 | .500 | .944 | |
| Claude Sonnet 4.6 | bare | .814 [.714,.900] | .790 | .057 | .500 | .889 |
| policy | .843 [.757,.929] | .831 | .014 | .667 | 1.000 | |
| few-shot | .814 [.729,.900] | .796 | .043 | .583 | .944 | |
| Qwen3.5-9B | bare | .557 [.443,.671] | .450 | .243 | .000 | .667 |
| policy | .629 [.514,.743] | .542 | .100 | .083 | .944 | |
| few-shot | .771 [.671,.871] | .726 | .129 | .333 | .833 | |
| Claude Haiku 4.5 | act | .514 [.400,.629] | .456 | .143 | .583 | .778 |
| Claude Sonnet 4.6 | act | .529 [.414,.643] | .531 | .100 | .500 | .556 |
| Qwen3.5-9B | act | .343 [.243,.457] | .236 | .057 | .083 | .056 |
| Comparison | Δ [95% CI] | pH |
|---|---|---|
| Haiku policy–bare | +.229 [.114,.343] | .002 |
| Haiku few-shot–bare | +.129 [.043,.214] | .047 |
| Sonnet policy–bare | +.029 [-.086,.143] | 1.000 |
| Sonnet few-shot–bare | +.000 [-.100,.100] | 1.000 |
| Qwen policy–bare | +.071 [-.014,.157] | .539 |
| Qwen few-shot–bare | +.214 [.114,.329] | .002 |
| Qwen policy–bare (OM) | -.143 | .038 |
| Sonnet act–bare | -.286 [-.414,-.143] | <.001 |
| Qwen act–bare | -.214 [-.386,-.029] | .047 |
为什么重要
如果个人化AI助手错误地把信息永久记住,后续行为可能被悄悄带偏,因此判断何时该记住、何时该询问用户,是打造安全个性化AI的核心能力。这项研究表明,只评估模型口头给出的答案是不够的,还必须检验这些决定被转化为实际工具调用后是否依然可靠。
本文术语
- LLM智能体 · 基于大语言模型、能记住对话历史并调用工具完成任务的程序
- 科恩卡帕系数 · 衡量两名评分者之间一致程度是否超出偶然水平的统计指标
- 少样本提示 · 预先给模型看几个示例答案,引导其按照期望格式和方式作答
- 过度记忆 · 把本不该保存的信息错误地永久存储下来的问题
- McNemar检验 · 比较同一批数据在两种条件下对错变化情况的统计显著性检验方法
论文原文摘要(英文)
Persistent memory can personalize an LLM agent, but an incorrect durable update can silently distort future behavior. We study the memory-clarification boundary: whether interaction-derived information should be persisted, used only in the current context, re-verified, or clarified with the user. MCB contains 140 primary scenarios, split into 70 development and 70 held-out items, plus a separate 70-item contrast set. It evaluates both action labels and structured tool-call selection. Two non-authors independently label the 70 held-out primary and 70 contrast items (97.1% agreement, Cohen's kappa = 0.962); a blind third resolves four disagreements, replacing eight author labels by non-author majority. Across Claude and Qwen, models verify changing facts more reliably than they ask users to resolve ambiguity. Bare Qwen asks on 0/12 clarification items while verifying 12/18 freshness items. Few-shot prompting raises accuracy from 0.557 to 0.771 (paired delta = +0.214, Holm-adjusted exact McNemar p_H = 0.002), yet clarification recall remains 0.333. The policy prompt reduces erroneous persistence from 0.243 to 0.100 (p_H = 0.038), although its accuracy gain is not significant. Label-tool agreement is 57% for each Claude model and 23% for Qwen; Qwen accuracy falls from 0.557 to 0.343 (p_H = 0.047). Memory evaluation must test both stated decisions and tool-call choices.
在 arXiv 阅读最新论文
- SWE-bench Science: Can Coding Agents Resolve Engineering Tasks in Science?让AI编程助手去修复真实科学软件,连最强的那个也有一半以上任务没做对
- When Saying No Makes Better Videos: Designing Dual Gatekeeping for Pedagogically Grounded AI Content Creation会说'不行'的AI才能做出更好的教学视频
- LoRA-GA$^2$: Low Rank Adaptation with Multi-step Gradient Adaptive Alignment在正式微调前先偷看几步训练的梯度,让LoRA的初始化更聪明
- TESTNAV: Pareto-Guided Search for Compositional Robustness Testing测试AI模型面对多种叠加干扰时不必穷举所有组合,也能找出真正危险的失败案例
- Natural Language Code Retrieval for 1C:Enterprise: An Open Benchmark and Efficient Bi-Encoder首个用俄语提问就能搜索1C企业软件代码的公开基准和专用AI模型问世
- FlashPrefill V2: Block-Sparse Prefill Attention for Long-Context LLM Serving把稀疏注意力从论文原型变成能真正上线服务的加速方案
- NepOOC-M: Bilingual Nepali-English Benchmark and Comparative Analysis of Multimodal Architectures for OOC Detection尼泊尔语假新闻检测:只看文字就能追平图文结合模型
- Robust Incomplete Multimodal Sentiment Analysis via Iterative Proxy Correction文本信息缺失或损坏时,这个AI不靠一次性猜测,而是反复修正猜测结果,从而更准确地判断情绪