Back to Rankings

Computation, Not Memory: Chain-of-Thought and State Tracking in LLM Agents

Pedram Mouseli, Massieh Moayedi

Oct 19, 2026arXiv:2610.25760v1
cs.LGcs.AIcs.CL
Share
Scorecard· 16/16
6.0/10 impact

Carefully controlled, honestly scoped study that cleanly separates generation from retention of CoT in an agent, but the toy environment, two same-family models and partly expected findings limit its reach.

Abstract

Language-model agents often reason before they act, and the value of monitoring that reasoning depends on how it relates to their actions. We ask how an agent's actions depend on its reasoning when the correct action depends on a changing state. In a small file-system task, background events announce which file's lock has been toggled but not its new value. The agent therefore has to reconstruct the current locks from its history before it can move files safely. With Qwen3-8B and Qwen3.5-9B, we separate two roles of reasoning: generating it before each action, and retaining earlier reasoning in the prompt. Most of the reduction in lock-violating commands comes from reasoning written at the moment of action. Retaining earlier reasoning adds little to rule-following, although it helps one model complete the task. The benefit depends on what the reasoning says. Filler text, reasoning written for another history and an accurate table of the state do not reproduce it. When we give the agent reasoning written for a history that differs in one lock value, the agent acts on that reasoning even against its own history. Without reasoning, linear probes recover the state from the model's activations about as well as a text classifier recovers it from the transcript. However, decoding accuracy does not predict which interventions change the agent's actions. In this setting, the benefit of reasoning for rule-following comes mainly from generating it at each step. The state that can be decoded without reasoning is a limited guide to how the agent acts.

AI Impact Assessments

(1 model)

Core Contribution

The paper asks what role chain-of-thought (CoT) plays for an LLM agent that must track a changing state. It uses a small file-system task in which background events toggle file locks without announcing the new value, so the agent must infer the current lock state from its history. It separates two roles of reasoning: *generating* reasoning at the moment of action, and *retaining* earlier reasoning in the prompt (CoT as computation versus CoT as memory). The main findings, on Qwen3-8B and Qwen3.5-9B:

  • Most of the reduction in lock-violating commands (22.8% to about 2% for Qwen3-8B) comes from reasoning generated at the current step. Retaining earlier reasoning adds little to rule-following (0.5 pp, CI includes 0) but does help Qwen3.5-9B complete the task, mainly by getting the goal file locked.
  • Content matters. Length-matched filler, reasoning from another history, and an oracle state table do not reproduce the benefit.
  • Actions follow the reasoning in context. Reasoning written for a history that differs in one lock value drives the agent to move a file its own history shows is locked (43/114 and 41/104 pairs).
  • Without reasoning, linear probes decode state about as well as TF-IDF on the transcript. The best logistic-regression probe direction recovers ≈0.02 of the patching effect, while mean-difference directions recover most of it. A state question and the direct action depend on different positions.
  • The significance is mainly conceptual: it separates computation from memory in agent CoT, and it argues that decodable state is a weak guide to what drives action.

    Methodological Rigor

    The design is careful for a small-scale study.

  • Rollout conditions cross generation and persistence, and the full history stays in the prompt. A symbolic replay verifies the ground truth.
  • Fixed-history arms (own, filler, foreign, oracle table) and counterfactual pairs give controlled causal tests. The swap includes a 2×2 of history by reasoning, and the targeted edit has a case-change control.
  • Statistics are well handled: episode-level cluster bootstrap, paired sign-flip tests, a ratio bound on retention versus generation effects, and honest caveats about multiple comparisons.
  • Checks include a replication run with a different token budget, model scale from 0.6B to 14B, 16-turn episodes, a goal swap, a base-model and plain-text format control, and task-avoidance checks.
  • Patching uses separately estimated directions, random-direction controls, and a matched-prefix experiment that removes confounds. The authors cite the known interpretability illusions for subspace patching.
  • Weaknesses:

  • Fixed-history arms have very small event counts (about 20–50 attempts per arm, with a few violations in the own-reasoning arm).
  • The generation contrast compares two interfaces and does not hold compute fixed. The authors acknowledge this and so cannot claim that serial computation is the cause.
  • The oracle-table result is confounded by a change in policy (more moves, fewer stats).
  • Transplanted reasoning is out-of-distribution.
  • The counterfactual pairs use a static fact, so they do not test toggle tracking itself, which is the paper's motivating setting.
  • The plain-text base-model results are muddied by format effects.
  • Selection filters on the original agent's action.
  • Potential Impact

    The findings bear on CoT monitorability, agent memory and context management, and probing-versus-causal interpretability.

  • Practical implication: for Qwen-style agents, discarding earlier thinking blocks costs little in rule-following. This supports the default template design and informs context-pruning decisions.
  • Safety implication: agents act on the reasoning in context, even against their own history. This suggests that reasoning traces causally matter and that tampered or corrupted traces can cause violations. That is relevant to monitoring and to injection attacks.
  • Methodological implication: the probe-versus-patching dissociation reinforces existing caution (Hewitt and Liang; Makelov; Marks and Tegmark) with a new agentic setting. It is not a new finding in itself.
  • Impact is limited by the toy environment (three files, eight turns), two models from one family, and a single task type. Most individual findings are in line with expectations, and the generation-versus-retention result is plausible given the Qwen chat templates. The influence is therefore likely moderate. It is most useful as a clean experimental template and as a data point for the CoT-monitoring and mechanistic-interpretability communities.

    Timeliness

    The paper is highly timely. CoT monitorability (Korbak et al.; Baker et al.), the faithfulness debate, and agent memory management are all active areas. The paper offers a concrete empirical decomposition with an inexpensive, replicable setup (single GPU, about 34 GPU-hours total). The conclusion that decodability is a poor guide to causal use is a relevant caution for activation-based monitoring proposals.

    Strengths

  • Clear, well-posed questions with matched interventions and honest scoping.
  • Multiple converging controls (filler, foreign, oracle, swap, edit) that close off obvious alternative explanations.
  • A thorough appendix with robustness checks, code released, and a verified environment.
  • Calibrated claims, for example refusing to conclude that retention has no effect.
  • Limitations

  • Small toy environment and narrow model coverage (Qwen family only, 8–9B).
  • The mechanism of how reasoning computes the state is not identified; the interpretability section concerns the direct, no-reasoning action rather than the reasoning-mediated one.
  • The patching analyses apply to static facts, not tracked toggles.
  • Several effects rest on small counts.
  • No test of whether a monitor could actually detect violations from unmodified traces.
  • The abstract's claim that the benefit comes "mainly from generating it at each step" may be partly an artifact of full history being available; the authors flag this.
  • Findings partly confirm existing expectations (probe accuracy does not imply use; CoT content matters).
  • Overall

    This is a solid, careful, modest-scope empirical study. It is likely to be cited in discussions of CoT monitorability and agent context design, but unlikely to be a field-defining contribution.

    Rating:6/ 10
    Significance 5.5Rigor 7.5Novelty 5.5Clarity 7.5

    Generated Oct 20, 2026

    Comparison History (0)

    No comparisons yet.