Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents
AI assistants would rather double-check facts than ask you a question, even when asking is the right call
Researchers built MCB, a benchmark that tests whether an LLM agent correctly decides to permanently remember, use only once, re-verify, or ask the user about information it picks up during conversation. Testing Claude and Qwen models, they found both families were far more willing to verify facts against the world than to ask users to resolve ambiguity. Prompting tricks improved accuracy or reduced bad memory storage, but the failure to ask users when needed persisted across the board.
METAL MEDIA explanatory visual
AI assistants would rather double-check facts than ask you a question, even when asking is the right call
- 01The team released MCB, a 140-scenario benchmark forcing models to choose among persist, ephemeral use, verify, or clarify-with-user for information encountered mid-conversation.
- 02Two independent non-author annotators labeled the data with 97.1% agreement and a Cohen's kappa (inter-rater agreement score) of 0.962, giving the gold labels credibility.
- 03A bare Qwen model asked the user zero times out of 12 genuinely ambiguous cases, while correctly re-verifying 12 of 18 cases involving facts that could change over time.
- 04Adding a few example demonstrations (few-shot prompting) raised Qwen's accuracy from 0.557 to 0.771, but its recall for spotting clarification-needed cases stayed stuck at 0.333.
- 05A five-rule policy prompt cut erroneous permanent-memory storage from 0.243 to 0.100 of all items, though it didn't produce a statistically clear accuracy improvement.
What they did
- The team released MCB, a 140-scenario benchmark forcing models to choose among persist, ephemeral use, verify, or clarify-with-user for information encountered mid-conversation.
- Two independent non-author annotators labeled the data with 97.1% agreement and a Cohen's kappa (inter-rater agreement score) of 0.962, giving the gold labels credibility.
- A bare Qwen model asked the user zero times out of 12 genuinely ambiguous cases, while correctly re-verifying 12 of 18 cases involving facts that could change over time.
- Adding a few example demonstrations (few-shot prompting) raised Qwen's accuracy from 0.557 to 0.771, but its recall for spotting clarification-needed cases stayed stuck at 0.333.
- A five-rule policy prompt cut erroneous permanent-memory storage from 0.243 to 0.100 of all items, though it didn't produce a statistically clear accuracy improvement.
- Agreement between a model's stated answer and its actual tool-call choice (e.g., memory_write vs. ask_user) was only 57% for each Claude model and 23% for Qwen, showing stated decisions don't reliably predict real actions.
| Benchmark | Recall/reuse | Storage gate | Ask user | Check world | Structured action |
|---|---|---|---|---|---|
| LongMemEval / LoCoMo [12, 4] | ✓ | – | – | – | – |
| MemBench [9] | ✓ | – | – | – | – |
| PerMemBench [3] | ✓ | ✓ | – | – | – |
| CLAMBER [17] | – | – | ✓ | – | – |
| Mem2ActBench [8] | ✓ | – | – | – | ✓ |
| MCB (ours) | – | ✓ | ✓ | ✓ | ✓ |
| Acquire / candidate update | Later reuse | Gold | Boundary cue |
|---|---|---|---|
| “I always prefer dark mode.” | Configure a new workspace | Persist | Explicitly durable and reusable preference |
| “Use APA for this report.” | Prepare an unrelated report | Ephemeral | Scope is limited to one artifact |
| “Restaurant X is open tonight.” | Rely on it one month later | Verify | The world state can change |
| “Make it like last time.” | Several prior artifacts fit | Clarify | Only the user can resolve the referent |
| System | Condition | Accuracy [95% CI] | Macro-F1 | OM↓ | Clar.↑ | Ver.↑ |
|---|---|---|---|---|---|---|
| Always Persist | – | .257 [.157,.371] | .102 | .743 | .000 | .000 |
| Majority Action | – | .314 [.214,.429] | .120 | .000 | .000 | .000 |
| Keyword | – | .257 [.157,.371] | .228 | .071 | .833 | .056 |
| Category oracle | – | .800 [.700,.900] | .792 | .071 | .667 | .889 |
| Claude Haiku 4.5 | bare | .629 [.514,.743] | .615 | .029 | .500 | .944 |
| policy | .857 [.771,.929] | .846 | .014 | .750 | .944 | |
| few-shot | .757 [.643,.857] | .732 | .057 | .500 | .944 | |
| Claude Sonnet 4.6 | bare | .814 [.714,.900] | .790 | .057 | .500 | .889 |
| policy | .843 [.757,.929] | .831 | .014 | .667 | 1.000 | |
| few-shot | .814 [.729,.900] | .796 | .043 | .583 | .944 | |
| Qwen3.5-9B | bare | .557 [.443,.671] | .450 | .243 | .000 | .667 |
| policy | .629 [.514,.743] | .542 | .100 | .083 | .944 | |
| few-shot | .771 [.671,.871] | .726 | .129 | .333 | .833 | |
| Claude Haiku 4.5 | act | .514 [.400,.629] | .456 | .143 | .583 | .778 |
| Claude Sonnet 4.6 | act | .529 [.414,.643] | .531 | .100 | .500 | .556 |
| Qwen3.5-9B | act | .343 [.243,.457] | .236 | .057 | .083 | .056 |
| Comparison | Δ [95% CI] | pH |
|---|---|---|
| Haiku policy–bare | +.229 [.114,.343] | .002 |
| Haiku few-shot–bare | +.129 [.043,.214] | .047 |
| Sonnet policy–bare | +.029 [-.086,.143] | 1.000 |
| Sonnet few-shot–bare | +.000 [-.100,.100] | 1.000 |
| Qwen policy–bare | +.071 [-.014,.157] | .539 |
| Qwen few-shot–bare | +.214 [.114,.329] | .002 |
| Qwen policy–bare (OM) | -.143 | .038 |
| Sonnet act–bare | -.286 [-.414,-.143] | <.001 |
| Qwen act–bare | -.214 [-.386,-.029] | .047 |
Why it matters
If a personal AI assistant silently commits a wrong permanent memory, its future behavior can quietly go off track, so knowing when to remember versus when to ask is central to building safe personalized AI. This work shows that evaluating only a model's stated answer misses real failures that surface once that answer is translated into an actual tool call.
Terms in this paper
- LLM agent · A large-language-model-based program that retains conversation history and uses tools to complete tasks
- Cohen's kappa · A statistic measuring how much two raters agree beyond what chance would predict
- few-shot prompting · Giving a model a few example answers upfront to guide its response format and behavior
- over-memory · The error of permanently storing information that should not have been kept
- McNemar test · A statistical test comparing correct/incorrect outcomes on the same items across two conditions
Original abstract (English)
Persistent memory can personalize an LLM agent, but an incorrect durable update can silently distort future behavior. We study the memory-clarification boundary: whether interaction-derived information should be persisted, used only in the current context, re-verified, or clarified with the user. MCB contains 140 primary scenarios, split into 70 development and 70 held-out items, plus a separate 70-item contrast set. It evaluates both action labels and structured tool-call selection. Two non-authors independently label the 70 held-out primary and 70 contrast items (97.1% agreement, Cohen's kappa = 0.962); a blind third resolves four disagreements, replacing eight author labels by non-author majority. Across Claude and Qwen, models verify changing facts more reliably than they ask users to resolve ambiguity. Bare Qwen asks on 0/12 clarification items while verifying 12/18 freshness items. Few-shot prompting raises accuracy from 0.557 to 0.771 (paired delta = +0.214, Holm-adjusted exact McNemar p_H = 0.002), yet clarification recall remains 0.333. The policy prompt reduces erroneous persistence from 0.243 to 0.100 (p_H = 0.038), although its accuracy gain is not significant. Label-tool agreement is 57% for each Claude model and 23% for Qwen; Qwen accuracy falls from 0.557 to 0.343 (p_H = 0.047). Memory evaluation must test both stated decisions and tool-call choices.
Read on arXivLatest papers
- SWE-bench Science: Can Coding Agents Resolve Engineering Tasks in Science?AI coding agents were tested on fixing real scientific software, and even the best one failed more than half the time
- FlashPrefill V2: Block-Sparse Prefill Attention for Long-Context LLM ServingMaking sparse attention fast enough and accurate enough for real LLM serving, not just papers
- PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM AgentsMaking customer-service AI agents follow the whole procedure, not just avoid one bad action
- EXIMO: VLM Guided Exploration of VLA PoliciesTeaching a robot new chores without human teleoperation, by letting a chatty AI supervise it
- EnvHarness: Awakening Static Worlds for Agent LearningInstead of building new training worlds from scratch, this work adds a plug-in layer that reshapes existing ones around each agent's actual weaknesses
- Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the ModelCompanies that rent AI instead of owning it can only do half of AI safety oversight
- PersonalBench: Measuring the Authorship Gap in LLM PersonalizationAI can be prompted to write 'like someone,' but its own voice never fully disappears
- Automated Summarization of Financial News Using Large Language Models and Retrieval-Augmented Generation: An Early Empirical Study (Fall 2023)Testing AI summaries of stock news, the simple approach beat the trendy retrieval-based one