每天早上一封邮件,把昨天的 AI 梳理好订阅邮件

METAL LAB

Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents

arXiv:2608.195642026-08-21

AI助手在该向你提问的时候,却更愿意自己去核实事实

研究团队构建了名为MCB的评测基准,用来检验大语言模型(LLM)智能体能否正确判断:对话中获得的信息该永久记住、仅当次使用、重新核实,还是该向用户提问确认。他们对Claude和Qwen两个模型家族进行测试,发现两者都更倾向于去核实事实,而不是在信息含糊时主动询问用户。通过提示词技巧可以提高准确率或减少错误的永久存储,但模型该问不问的问题始终没有解决。

他们做了什么

  1. 研究团队发布了包含140个场景的MCB基准,要求模型对对话中获得的信息在持久保存、临时使用、重新核实、向用户提问四种动作中做出选择。
  2. 两名非作者标注员独立标注数据,一致率达97.1%,科恩卡帕系数(衡量评分者间一致程度的统计指标)为0.962,保证了标注质量。
  3. 未加任何特殊提示的Qwen模型在12个真正含糊的场景中,一次都没有向用户提问;但在18个信息可能过时的场景中,正确核实了其中12个。
  4. 加入少量示例的提示方法(少样本提示)让Qwen的准确率从0.557提升到0.771,但其识别出需要提问场景的召回率仍停留在0.333。
  5. 一套包含五条规则的策略提示将错误的永久记忆存储比例从0.243降到0.100,不过整体准确率的提升在统计上并不显著。
  6. 模型口头给出的答案与其实际调用的工具(如memory_write、ask_user等)之间的一致率,在两个Claude模型上均为57%,在Qwen上仅为23%,说明模型嘴上说的和实际做的可能并不一致。
TABLE I: Positioning by explicit scored target. “Structured action” includes tool selection or parameterized memory operations; MCB-Act scores tool-call selection but does not execute downstream effects.
BenchmarkRecall/reuseStorage gateAsk userCheck worldStructured action
LongMemEval / LoCoMo [12, 4]
MemBench [9]
PerMemBench [3]
CLAMBER [17]
Mem2ActBench [8]
MCB (ours)
TABLE II: Illustrative MCB decisions. Each label reflects authority or commitment scope rather than a lexical topic.
Acquire / candidate updateLater reuseGoldBoundary cue
“I always prefer dark mode.”Configure a new workspacePersistExplicitly durable and reusable preference
“Use APA for this report.”Prepare an unrelated reportEphemeralScope is limited to one artifact
“Restaurant X is open tonight.”Rely on it one month laterVerifyThe world state can change
“Make it like last time.”Several prior artifacts fitClarifyOnly the user can resolve the referent
TABLE III: Held-out MCB results on non-author-adjudicated gold (n=70). Accuracy includes a bootstrap 95% CI. OM is erroneous persistence over all items; Clar. and Ver. are recalls on 12 and 18 relevant gold items. All invalid-output rates are zero. Act rows emit one tool-call object without a policy prompt.
SystemConditionAccuracy [95% CI]Macro-F1OM↓Clar.↑Ver.↑
Always Persist.257 [.157,.371].102.743.000.000
Majority Action.314 [.214,.429].120.000.000.000
Keyword.257 [.157,.371].228.071.833.056
Category oracle.800 [.700,.900].792.071.667.889
Claude Haiku 4.5bare.629 [.514,.743].615.029.500.944
policy.857 [.771,.929].846.014.750.944
few-shot.757 [.643,.857].732.057.500.944
Claude Sonnet 4.6bare.814 [.714,.900].790.057.500.889
policy.843 [.757,.929].831.014.6671.000
few-shot.814 [.729,.900].796.043.583.944
Qwen3.5-9Bbare.557 [.443,.671].450.243.000.667
policy.629 [.514,.743].542.100.083.944
few-shot.771 [.671,.871].726.129.333.833
Claude Haiku 4.5act.514 [.400,.629].456.143.583.778
Claude Sonnet 4.6act.529 [.414,.643].531.100.500.556
Qwen3.5-9Bact.343 [.243,.457].236.057.083.056
TABLE IV: Selected exact paired comparisons. Δ is accuracy unless marked OM; intervals are paired-bootstrap 95% CIs; pH is Holm-adjusted within the families defined in Sec. III-B.
ComparisonΔ [95% CI]pH
Haiku policy–bare+.229 [.114,.343].002
Haiku few-shot–bare+.129 [.043,.214].047
Sonnet policy–bare+.029 [-.086,.143]1.000
Sonnet few-shot–bare+.000 [-.100,.100]1.000
Qwen policy–bare+.071 [-.014,.157].539
Qwen few-shot–bare+.214 [.114,.329].002
Qwen policy–bare (OM)-.143.038
Sonnet act–bare-.286 [-.414,-.143]<.001
Qwen act–bare-.214 [-.386,-.029].047

为什么重要

如果个人化AI助手错误地把信息永久记住,后续行为可能被悄悄带偏,因此判断何时该记住、何时该询问用户,是打造安全个性化AI的核心能力。这项研究表明,只评估模型口头给出的答案是不够的,还必须检验这些决定被转化为实际工具调用后是否依然可靠。

本文术语

  • LLM智能体 · 基于大语言模型、能记住对话历史并调用工具完成任务的程序
  • 科恩卡帕系数 · 衡量两名评分者之间一致程度是否超出偶然水平的统计指标
  • 少样本提示 · 预先给模型看几个示例答案,引导其按照期望格式和方式作答
  • 过度记忆 · 把本不该保存的信息错误地永久存储下来的问题
  • McNemar检验 · 比较同一批数据在两种条件下对错变化情况的统计显著性检验方法

论文原文摘要(英文)

Persistent memory can personalize an LLM agent, but an incorrect durable update can silently distort future behavior. We study the memory-clarification boundary: whether interaction-derived information should be persisted, used only in the current context, re-verified, or clarified with the user. MCB contains 140 primary scenarios, split into 70 development and 70 held-out items, plus a separate 70-item contrast set. It evaluates both action labels and structured tool-call selection. Two non-authors independently label the 70 held-out primary and 70 contrast items (97.1% agreement, Cohen's kappa = 0.962); a blind third resolves four disagreements, replacing eight author labels by non-author majority. Across Claude and Qwen, models verify changing facts more reliably than they ask users to resolve ambiguity. Bare Qwen asks on 0/12 clarification items while verifying 12/18 freshness items. Few-shot prompting raises accuracy from 0.557 to 0.771 (paired delta = +0.214, Holm-adjusted exact McNemar p_H = 0.002), yet clarification recall remains 0.333. The policy prompt reduces erroneous persistence from 0.243 to 0.100 (p_H = 0.038), although its accuracy gain is not significant. Label-tool agreement is 57% for each Claude model and 23% for Qwen; Qwen accuracy falls from 0.557 to 0.343 (p_H = 0.047). Memory evaluation must test both stated decisions and tool-call choices.

作者 · Baichuan Li, Junyi Yao, Zihao Zheng

在 arXiv 阅读

最新论文

全部论文 →

METAL LAB 最新报道