Ningyuan Li, Haiyang Shen, Mugeng Liu, Yudong Han, Zhuofan Shi, Sixiong Xie, Yun Ma
Recent advances in large language models and tool-using agents have expanded the range of benchmarked web tasks. Yet an important class of specialized retrieval tasks remains undercharacterized. On many specialized data-retrieval websites, answer-bearing evidence becomes accessible only after establishing the correct site-specific retrieval state through filters, views, hierarchies, or scopes. We term this capability state-gated retrieval (SGR). We introduce SGR-Bench, a benchmark for this setting containing 100 expert-curated tasks spanning six source families and 12 public data ecosystems. Each task requires discovering the appropriate website and configuring its site-specific retrieval state to produce a structured answer. SGR-Bench pairs constraint-guided and goal-oriented formulations of the same underlying problems, enabling controlled comparisons between explicit and implicit guidance for state-gated retrieval. We evaluate eight CLI-based agentic LLM systems and three commercial search-agent products. On SGR-Bench, the strongest system reaches only 66.18% item-level F1, while row-level F1 remains much lower. A manual audit of 156 analyzable failed CLI trajectories shows why: agents often reach a relevant web source, but establish the wrong site-specific retrieval state. Retrieval-scope drift (37.2%) and criterion mismatch (27.6%) dominate, whereas final answer composition accounts for only 10.3%. The dataset and single-case evaluation instructions are available at https://huggingface.co/datasets/PKUAIWeb/SGR-BENCH.
SGR-Bench introduces the concept of state-gated retrieval (SGR) — the requirement that agents not only discover the correct website but configure its internal retrieval state (filters, hierarchies, scopes, views) before answer-bearing evidence becomes accessible. This is a well-motivated conceptual contribution that identifies a genuine gap between existing search-agent benchmarks (which focus on source discovery and cross-page aggregation) and web-navigation benchmarks (which emphasize action grounding and task execution). The benchmark consists of 100 expert-curated tasks across 12 public data ecosystems and 6 source families, with a distinctive paired design offering both constraint-guided and goal-oriented formulations of each task. The paper evaluates 8 CLI-based agentic LLM systems and 3 commercial search products, finding that the best system achieves only 66.18% item-level F1, with the dominant failure mode being incorrect state configuration rather than source discovery or answer formatting.
The data curation pipeline is thorough and well-documented: four stages (candidate website curation, task design protocol, task construction, candidate filtering/validation) with six explicit design requirements (domain specificity, long-tail grounding, answer uniqueness, ground-truth stability, shortcut resistance, logical dependency). The multi-round expert validation process — including adversarial shortcut probing — is commendable for a benchmark paper.
However, several methodological concerns arise:
Immediate impact: SGR-Bench fills a genuine evaluation gap. As LLM-based agents increasingly attempt complex professional information retrieval, understanding their ability to configure specialized interfaces is practically important. Domains like regulatory compliance, environmental monitoring, and scholarly research all demand this capability.
Broader influence: The conceptual framing of "state-gated retrieval" could influence how the community thinks about agent evaluation more generally — shifting attention from whether agents can *find* information to whether they can *configure access* to information. The error taxonomy (retrieval-scope drift, criterion mismatch, intent rewriting, etc.) provides actionable diagnostic categories that could guide agent development.
Limitations on impact: The benchmark's modest scale and specialized focus may limit adoption compared to larger-scale benchmarks. The requirement for manual canonicalization in evaluation reduces scalability. The reliance on public websites means tasks may become invalid as sites change, requiring ongoing maintenance.
This work is highly timely. The rapid deployment of agentic search systems (OpenAI Deep Research, Gemini Deep Research, Google AI Mode) creates urgent need for benchmarks that go beyond simple QA. The finding that agents fail primarily at state configuration rather than source discovery is a valuable insight for the current development cycle. The benchmark addresses a real bottleneck: as agents get better at finding websites, the next challenge is interacting with those websites' specialized interfaces correctly.
The finding that low-cardinality tasks (1-2 rows) are actually harder than medium-cardinality tasks is counterintuitive and interesting — it reflects that difficulty stems from state-configuration complexity rather than output volume. The Item-F1 vs. Row-F1 gap as a diagnostic signal for retrieval-state preservation is a clever evaluation insight. The paper would benefit from a longitudinal study of ground-truth stability and from exploring whether fine-tuning on SGR-specific training data could close the performance gap.
Generated May 22, 2026
Paper 1 introduces a novel cognitive framework (VeriTrace) that addresses a fundamental flaw in deep research agents—implicit error propagation—via explicit regulatory feedback loops. By advancing the core architecture of agentic reasoning rather than just benchmarking specific failures like Paper 2, it offers broad, model-agnostic utility across complex AI tasks. This methodological innovation in agent design is highly timely and likely to drive substantial downstream applications and theoretical advancements in autonomous research.
Paper 2 addresses a fundamental problem in knowledge representation and reasoning (complex query answering over knowledge graphs) with a novel algorithmic framework (NS3) that tackles the combinatorial explosion of multi-variable queries. It introduces both a method and a benchmark for joint ranking, filling a clear methodological gap. Paper 1, while practically useful, is primarily a benchmark contribution for evaluating search agents on a specific task type (state-gated retrieval), with more limited theoretical depth and narrower methodological novelty. Paper 2's contributions to scalable reasoning over KGs have broader applicability across AI subfields.
Paper 2 addresses a critical and highly topical issue in AI safety—protecting LLMs against harmful fine-tuning. By providing gradient-level theoretical analysis and an efficient, adapter-based practical framework (Buffer-and-Reinforce), it offers significant advancements in secure Fine-tuning-as-a-Service. While Paper 1 introduces a valuable benchmark for web agents, Paper 2's focus on fundamental LLM safety alignment gives it broader implications and higher potential for widespread adoption across the AI industry.
Paper 2 likely has higher impact due to timeliness and breadth: benchmarking LLM search agents is a fast-moving, widely relevant area spanning NLP, IR, HCI, and agent evaluation. SGR-Bench introduces a clear new problem characterization (state-gated retrieval), a public dataset, and comparative results plus failure taxonomy—assets that commonly become community standards and drive follow-on work. Paper 1 is novel and rigorous for executable AI governance, but its impact may be narrower (semantic-web/assurance communities) and adoption-dependent on complex ontologies and regulatory formalization.
Paper 2 likely has higher near-term scientific impact: it introduces a concrete, reusable benchmark (SGR-Bench) targeting an under-measured capability in agentic web retrieval, provides curated tasks, controlled task formulations, and broad evaluations with failure-mode analysis—assets that can directly drive measurable progress and become a community standard. Its applications span search, agents, and evaluation, with strong timeliness for LLM tool-use. Paper 1 is novel and potentially influential conceptually for IS/governance, but as a proposition-based theory its impact depends on later empirical validation and adoption.
Paper 1 presents a novel architecture (PCSP) that solves a significant practical problem—scalable persona-conditioned NPC control—with strong empirical results across multiple settings including commercial game engine deployment. It combines RL, LLM embeddings, and contrastive learning in a principled way with thorough ablations. The 22x inference speedup over LLM baselines and demonstrated scalability to hundreds of agents addresses a real industry need. Paper 2 introduces a useful benchmark for state-gated retrieval but is more narrowly diagnostic, characterizing current agent failures rather than proposing a transformative solution. Paper 1's methodological contributions and cross-domain applicability suggest broader impact.
Paper 2 is more likely to have higher scientific impact: it proposes a generally applicable inference-time control mechanism (step-level rubric guidance) that can transfer across tasks, models, and agent architectures, and introduces a novel list-wise rank-correlation training objective for rubric generation. This has broad relevance to LLM agent reliability and tool use, with clear real-world applicability in any multi-step research/workflow agent. Paper 1 is a valuable benchmark and taxonomy for state-gated retrieval, but its impact is narrower (evaluation-focused, limited task set) and less directly a new method for improving agents.
Paper 2 addresses a fundamental challenge in LLM post-training—internalizing privileged context without degrading general capabilities—proposing a novel distillation method (EDGE-OPD). This has broad implications for model alignment, personalization, and reasoning transfer across the AI field. While Paper 1 introduces a valuable and specific benchmark for web agents, Paper 2's methodological innovation in foundational model training techniques offers a higher potential for widespread adoption and transformative impact across various LLM development pipelines.
SGR-Bench introduces a novel, well-defined problem formulation (state-gated retrieval) that identifies a systematic gap in current web agent benchmarks. It provides rigorous evaluation of 11 systems with detailed failure analysis, revealing that agents struggle not with finding sources but with configuring retrieval states—a fundamental insight for the agent/IR community. The benchmark spans diverse data ecosystems and offers controlled experimental conditions. Paper 2, while competent, addresses a more incremental improvement in story illustration with a training-free prompting framework, which has narrower impact and less methodological novelty for the broader AI research community.
Paper 2 has higher potential impact due to its timeliness and high-stakes real-world applicability: it introduces an evaluation framework targeting LLM misalignment in armed-conflict contexts, where failures can directly affect journalism, humanitarian action, and public safety. Its cross-disciplinary relevance (AI alignment, HCI, policy, ethics, conflict studies) broadens impact beyond ML benchmarking. While Paper 1 is a solid, novel benchmark for state-gated retrieval with clear utility for agent evaluation, it is more niche and primarily advances tool-agent benchmarking rather than addressing an urgent societal risk domain.