SAAG: Structured Agent Assessment and Grounding

arXiv cs.AI Papers

Summary

SAAG proposes a cascaded diagnostic framework for evaluating LLM agent function calling by decomposing evaluation into registry conformance, structural completeness, and argument grounding stages, enabling interpretable diagnostics and iterative self-repair. Experiments with sub-4B models show improved argument precision and reduced value hallucination compared to single-pass evaluation.

arXiv:2607.18245v1 Announce Type: new Abstract: Exact-match evaluation of agent-calling obscures qualitatively different failure modes: a model may select the right function yet hallucinate argument values, or satisfy a schema while choosing a agent for the wrong reason. Existing benchmarks collapse these distinctions into a single binary score, leaving practitioners unable to diagnose where agent calls fail. We propose SAAG a cascaded diagnostic framework that decomposes agent-calling evaluation into three sequential stages: registry conformance, structural completeness, and argument grounding, each producing interpretable stage-specific diagnostics. These diagnostics additionally enable iterative self-repair: on prediction failure, the stage-specific signal guides targeted correction without leaking ground-truth values. We evaluate this framework on a controlled benchmark derived from Glaive's function-calling dataset across registry sizes of 5, 10, and 15 agents using three local sub-4B-parameter models. Structured feedback consistently improves argument precision and reduces value hallucination relative to single-pass inference and uninformative binary feedback, while end-to-end F1 gains are modest and model-dependent. These results suggest that stage-decomposed diagnostic evaluation is a necessary lens for understanding and improving agent-calling reliability across model families and registry scales.
Original Article
View Cached Full Text

Cached at: 07/22/26, 08:19 AM

# SAAG: Structured Agent Assessment and Grounding
Source: [https://arxiv.org/html/2607.18245](https://arxiv.org/html/2607.18245)
Ritvik Garimella1,Vedant Khandelwal1,Anvi Kohli1,Amit Sheth1,2

1Artificial Intelligence Institute, University of South Carolina 2Indian AI Research Organization Correspondence:[ritvikg@sc\.edu](https://arxiv.org/html/2607.18245v1/mailto:[email protected])

###### Abstract

Exact\-match evaluation of agent\-calling obscures qualitatively different failure modes: a model may select the right function yet hallucinate argument values, or satisfy a schema while choosing a agent for the wrong reason\. Existing benchmarks collapse these distinctions into a single binary score, leaving practitioners unable to diagnose*where*agent calls fail\. We proposeSAAGa cascaded diagnostic framework that decomposes agent\-calling evaluation into three sequential stages: registry conformance, structural completeness, and argument grounding, each producing interpretable stage\-specific diagnostics\. These diagnostics additionally enable iterative self\-repair: on prediction failure, the stage\-specific signal guides targeted correction without leaking ground\-truth values\. We evaluate this framework on a controlled benchmark derived from Glaive’s function\-calling dataset across registry sizes of 5, 10, and 15 agents using three local sub\-4B\-parameter models\. Structured feedback consistently improves argument precision and reduces value hallucination relative to single\-pass inference and uninformative binary feedback, while end\-to\-end F1 gains are modest and model\-dependent\. These results suggest that stage\-decomposed diagnostic evaluation is a necessary lens for understanding and improving agent\-calling reliability across model families and registry scales\.

SAAG: Structured Agent Assessment and Grounding

Ritvik Garimella1, Vedant Khandelwal1, Anvi Kohli1, Amit Sheth1,21Artificial Intelligence Institute, University of South Carolina2Indian AI Research OrganizationCorrespondence:[ritvikg@sc\.edu](https://arxiv.org/html/2607.18245v1/mailto:[email protected])

## 1Introduction

Function calling has become the operational interface for LLMs to interact with APIs, search systems, and external software\. The central evaluation question is no longer whether a model can emit valid JSON, but whether it can choose the*right*tool for the*right*reason\. A model may produce syntactically correct calls yet fail in deployment by selecting a tool whose capability does not match the request, or by supplying arguments that are not grounded in the user’s actual query\. Such failures are silent but costly: the call passes format checks while remaining operationally wrong\.

Recent works: API\-Bank, ToolLLM, Gorilla, APIBench, and BFCL, has established strong baselines for tool use and API invocation\(Liet al\.,[2023](https://arxiv.org/html/2607.18245#bib.bib15); Qinet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib16); Patilet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib17),[2025](https://arxiv.org/html/2607.18245#bib.bib18)\)\. Yet the dominant evaluation paradigm still centres on*formal correctness*: whether the model emitted a registered function name, whether calls are executable, or whether execution succeeds end\-to\-end\. These metrics do not answer the more critical question:*did the model select the tool because it correctly understood its capabilities?*Existing evaluations are strong at measuring conformance but weaker at isolating*where and why*a tool call fails\. Recent work on tool hallucination confirms this concern: Reliability Alignment distinguishes tool selection hallucination from tool usage hallucination\(Xuet al\.,[2025](https://arxiv.org/html/2607.18245#bib.bib19)\), and ToolBeHonest shows that even frontier models struggle when tool availability and task solvability are systematically varied\(Zhanget al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib20)\)\. Valid tool calls are not sufficient evidence of grounded tool understanding\.

A second limitation lies in evaluation granularity\. A call can fail because the model hallucinated a function name, omitted a required argument, introduced a spurious parameter, or invented an unsupported argument value\. Existing benchmarks collapse these qualitatively different failure modes into a single score, leaving practitioners unable to identify whether a model failed at function selection, schema compliance, or argument grounding\. This conflation obscures both diagnosis and targeted improvement\.

We proposeSAAG\(StructuredAgentAssessment andGrounding\), a cascaded diagnostic framework that decomposes tool calling into three sequential stages:*registry conformance*\(is the function name in the registry?\),*structural completeness*\(do the arguments satisfy the schema?\), and*argument grounding*\(are argument values supported by the query?\)\. Each stage produces interpretable, stage\-specific metrics that can be applied to any tool\-calling system independently of any correction strategy\. As one instantiation of these diagnostics, we additionally implement a cascaded correction loop that returns minimal structured feedback on failure without leaking ground truth\. This toolkit acts as a sub\-module of the larger multi\-agent orchestration framework DYNO\(Garimellaet al\.,[2026](https://arxiv.org/html/2607.18245#bib.bib1)\)with evaluations scheme inspired from conceptualization in C3ANShethet al\.\([2025](https://arxiv.org/html/2607.18245#bib.bib2)\)\.

#### Scope\.

Our study focuses on*single\-tool selection from a fixed registry*: a controlled yet important step, setting the foundation for multi\-agent orchestration\. We evaluate three sub\-4B models across registry sizes of 5, 10, and 15 agents, comparing three feedback regimes: direct inference, binary\-feedback iteration, and fullSAAGstructured feedback\. We do not claim to address multi\-agent orchestration, dynamic agent discovery, or real agent execution; our goal is to isolate the diagnostic question:when agent registries become confusable, can stage\-decomposed diagnostic metrics expose where and why agent calls fail, and can structured feedback act on those diagnostics to improve reliability?

#### Contributions

1. 1\.We introduceSAAG’s eight intrinsic grounding metrics that act as a diagnostic measure that characterizes agent\-calling failures at a granular level\.
2. 2\.We demonstrate an application of the diagnostics as a cascaded correction loop across three local small model families\.

![Refer to caption](https://arxiv.org/html/2607.18245v1/x1.png)Figure 1:The SAAG framework\.\(A\) Overview of the cascaded evaluation pipeline: a tool\-calling model’s prediction passes sequentially through Registry Conformance \(Stage 1\), Structural Completeness \(Stage 2\), and Argument Grounding \(Stage 3\), each producing interpretable metrics and a targeted correction signalψk\\psi\_\{k\}on failure\. Ground truth \(extrinsicevaluation\) is assessed only after all stages pass\. \(B\) A worked example illustrating four correction iterations \(d=1d=1–44\): the model first hallucinates a function name \(FNEM=0\), then produces drifted and spurious parameters, then introduces a numeric hallucination, before arriving at a fully grounded, schema\-conformant call atd=4d=4\.

## 2Structured Agent Assessment and Grounding

SAAG decomposes tool\-calling evaluation into three sequential quality gates: Registry Conformance \(§[2\.1](https://arxiv.org/html/2607.18245#S2.SS1)\), Structural Completeness \(§[2\.2](https://arxiv.org/html/2607.18245#S2.SS2)\), and Argument Grounding \(§[2\.3](https://arxiv.org/html/2607.18245#S2.SS3)\)\. The cascade is strict: evaluation halts at the first failing stage, ensuring that downstream metrics are computed only on predictions that satisfy upstream obligations\. A structured correctionψk\\psi\_\{k\}is returned to the model at each failure, enabling iterative self\-repair without leaking ground\-truth values\. An important consequence of this design is that intrinsic metrics from later stages are*stage\-conditional diagnostics*: they characterise the quality of predictions that already passed earlier gates, and should not be interpreted as unconditional population statistics\. We return to this point when reporting results\.

### 2\.1Registry Conformance

The first obligation is that the predicted function namey^name\\hat\{y\}\_\{\\text\{name\}\}corresponds to a registered tool\. Letℛ\\mathcal\{R\}denote the set of all function names in the system prompt\. We define theFunction Name Exact Match\(FNEM\) as:

F​N​E​M​\(y^name,ℛ\)=\{−1if​y^name=∅0if​y^name∉ℛ1if​y^name∈ℛFNEM\(\\hat\{y\}\_\{\\text\{name\}\},\\,\\mathcal\{R\}\)=\\begin\{cases\}\-1&\\text\{if \}\\hat\{y\}\_\{\\text\{name\}\}=\\varnothing\\\\ 0&\\text\{if \}\\hat\{y\}\_\{\\text\{name\}\}\\notin\\mathcal\{R\}\\\\ 1&\\text\{if \}\\hat\{y\}\_\{\\text\{name\}\}\\in\\mathcal\{R\}\\end\{cases\}\(1\)
The three cases distinguish complete parse failure \(−1\-1\), registry mismatch \(0\), and conformance \(11\)\. When FNEM=0=0, we compute aNearest Candidate Score\(NCS\) to quantify drift from the closest valid name:

NCS​\(y^name,ℛ\)\\displaystyle\\text\{NCS\}\(\\hat\{y\}\_\{\\text\{name\}\},\\mathcal\{R\}\)=maxc∈𝒞\[0\.6WRatio\(y^name,c\)\\displaystyle=\\max\_\{c\\in\\mathcal\{C\}\}\\Big\[6\\,\\text\{WRatio\}\(\\hat\{y\}\_\{\\text\{name\}\},c\)\(2\)\+0\.4Jaccard\(y^name,c\)\]\.\\displaystyle\\quad\+4\\,\\text\{Jaccard\}\(\\hat\{y\}\_\{\\text\{name\}\},c\)\\Big\]\.
where𝒞⊆ℛ\\mathcal\{C\}\\subseteq\\mathcal\{R\}are candidates sharing at least one trigram withy^name\\hat\{y\}\_\{\\text\{name\}\}, WRatio is the weighted partial ratio from RapidFuzz\(Bachmann,[2025](https://arxiv.org/html/2607.18245#bib.bib5)\)\(normalised to\[0,1\]\[0,1\]\), and Jaccard is computed over whitespace\-tokenised lowercased strings\. The reason to use0\.60\.6as weightage for WRatio as it better captures approximate string similarity under minor variations in comparison to Jaccard that provides complementary token\-level overlap\.What this catches:hallucinated or misspelled function names\. A high NCS with FNEM=0=0indicates a recoverable misspelling; a low NCS indicates fabrication\.What this cannot capture:whether the*correct*registry name actually corresponds to the tool best suited for the query\. If FNEM=1=1, Stage 1 passes; otherwise the correctionψ1\\psi\_\{1\}identifies whether the name was absent or unrecognised and embeds the nearest registry match to guide revision without revealing ground truth\. Fix templates are provided in Appendix[D](https://arxiv.org/html/2607.18245#A4)\.

### 2\.2Structural Completeness

Given a conformant function name, the second obligation is that the predicted argument setPPsatisfies the function’s schema\. LetAreqA\_\{\\text\{req\}\}andAallA\_\{\\text\{all\}\}denote the required and admissible parameter sets respectively\. We measure structural completeness along three axes\.

#### Required Parameter Recall \(RPR\)

measures coverage of mandatory arguments:

RPR=\|Areq∩P\|\|Areq\|\\text\{RPR\}=\\frac\{\|A\_\{\\text\{req\}\}\\cap P\|\}\{\|A\_\{\\text\{req\}\}\|\}\(3\)RPR<1<1is a hard failure: missing required parameters will cause execution to fail regardless of value correctness\.

#### Parameter Drift Score \(PDS\)

captures whether out\-of\-schema predictions are recoverable misspellings rather than hallucinated arguments\. For each parameterp∈P∖Aallp\\in P\\setminus A\_\{\\text\{all\}\}:

PDS​\(p,Aall\)=maxa∈Aall⁡WRatio​\(p,a\)/100\\text\{PDS\}\(p,\\,A\_\{\\text\{all\}\}\)=\\max\_\{a\\in A\_\{\\text\{all\}\}\}\\;\\text\{WRatio\}\(p,\\,a\)\\;/\\;100\(4\)A parameter is classified asdriftedifPDS≥0\.8\\text\{PDS\}\\geq 0\.8and its nearest match is not already present as an exact prediction, and asspuriousotherwise\. Drifted parameters receive a targeted spelling fix; spurious ones are flagged for removal\.

#### Spurious Parameter Rate \(SPR\)

measures the proportion of predicted arguments with no recoverable schema grounding:

SPR=\|\{p∈P∖Aall:PDS​\(p,Aall\)<0\.8\}\|\|P\|\\text\{SPR\}=\\frac\{\\big\|\\\{p\\in P\\setminus A\_\{\\text\{all\}\}:\\text\{PDS\}\(p,A\_\{\\text\{all\}\}\)<0\.8\\\}\\big\|\}\{\|P\|\}\(5\)

#### Stage 2 pass criterion\.

The stage passes if and only if RPR=1=1and SPR=0=0\. Separately, drifted parameters \(PDS≥0\.8\\text\{PDS\}\\geq 0\.8\) always trigger a targeted correction regardless of the formal pass/fail outcome, because unresolved drift propagates into downstream grounding failures even when the required parameters are all present\. The correctionψ2\\psi\_\{2\}is stratified by failure type: missing required parameters, spurious inclusions, and drifted spellings each produce distinct guidance\.What this catches:schema violations, missing, misspelled, and fabricated parameters\.What this cannot capture:whether*correct*parameter names carry appropriate values\.

### 2\.3Argument Value Grounding

The third obligation is that argument values are faithfully grounded in the user queryQQ\. Unlike the previous stages, grounding is continuous: a model may produce a paraphrase, a near\-miss, or an outright hallucination\.

#### Argument Value Exact Match \(AVEM\)

measures the rate at which predicted values appear verbatim inQQ:

AVEM=\|\{i:ExactMatch​\(vi,Q\)=1\}\|\|P\|\\text\{AVEM\}=\\frac\{\\big\|\\\{i:\\text\{ExactMatch\}\(v\_\{i\},Q\)=1\\\}\\big\|\}\{\|P\|\}\(6\)The check is type\-aware: string values are matched case\-insensitively at word boundaries; numeric values must match a floating\-point token inQQ; list values require all elements to satisfy the condition individually\. Exact match is the*only*grounding check applied to numeric arguments, there is no partial\-credit fallback\.

#### Query\-Supported Lexical Overlap \(QSLO\)

measures lexical proximity exclusively for string arguments that fail exact match\. Let𝒮=\{i:type​\(vi\)=string∧ExactMatch​\(vi,Q\)=0\}\\mathcal\{S\}=\\\{i:\\text\{type\}\(v\_\{i\}\)=\\text\{string\}\\wedge\\text\{ExactMatch\}\(v\_\{i\},Q\)=0\\\}\. Then:

QSLO=1\|𝒮\|​∑i∈𝒮PartialRatio​\(vi,Q\)/100\\text\{QSLO\}=\\frac\{1\}\{\|\\mathcal\{S\}\|\}\\sum\_\{i\\in\\mathcal\{S\}\}\\text\{PartialRatio\}\(v\_\{i\},\\,Q\)\\;/\\;100\(7\)where PartialRatio scores the best contiguous alignment ofviv\_\{i\}withinQQvia RapidFuzz\(Bachmann,[2025](https://arxiv.org/html/2607.18245#bib.bib5)\)\. This is a*lexical*overlap measure, not a semantic similarity score; it captures whether argument values are extractable substrings of the query, not whether they are semantically equivalent\.What this catches:paraphrased or truncated query spans\.What this cannot capture:semantically valid values that use entirely different surface forms than the query\.

#### Value Hallucination Rate \(VHR\)

aggregates per\-argument hallucination:

h​\(vi,Q\)=\{0,EM​\(vi,Q\)=1,1−PR​\(vi,Q\)100,str​\(vi\),1,num​\(vi\)∧HN​\(Q\)excluded,otherwise\.h\(v\_\{i\},Q\)=\\begin\{cases\}0,&\\mathrm\{EM\}\(v\_\{i\},Q\)=1,\\\\ 1\-\\frac\{\\mathrm\{PR\}\(v\_\{i\},Q\)\}\{100\},&\\mathrm\{str\}\(v\_\{i\}\),\\\\ 1,&\\mathrm\{num\}\(v\_\{i\}\)\\wedge\\mathrm\{HN\}\(Q\)\\\\ \\text\{excluded\},&\\text\{otherwise\.\}\\end\{cases\}\(8\)
Here,EM\\mathrm\{EM\}denotesExactMatch,PR\\mathrm\{PR\}denotesPartialRatio, andHN\\mathrm\{HN\}denotesHasNumbers\. We usestr​\(⋅\)\\mathrm\{str\}\(\\cdot\)andnum​\(⋅\)\\mathrm\{num\}\(\\cdot\)to indicate string and numeric types, respectively\.

The final case covers arguments for which no grounding context exists in the query \(e\.g\., a ticker symbol inferred from a company name\)\. These are treated asassumedand excluded from the pass/fail decision, since penalising them would conflate hallucination with legitimate model inference\. The pass criterion is defined over the contextual subset𝒢=\{i:type​\(vi\)=string\}∪\{i:type​\(vi\)=numeric∧HasNumbers​\(Q\)\}\\mathcal\{G\}=\\\{i:\\text\{type\}\(v\_\{i\}\)=\\text\{string\}\\\}\\cup\\\{i:\\text\{type\}\(v\_\{i\}\)=\\text\{numeric\}\\wedge\\text\{HasNumbers\}\(Q\)\\\}:

VHRctx=∑i∈𝒢h​\(vi,Q\)=0\\text\{VHR\}\_\{\\text\{ctx\}\}=\\sum\_\{i\\in\\mathcal\{G\}\}h\(v\_\{i\},Q\)=0\(9\)A non\-zeroVHRctx\\text\{VHR\}\_\{\\text\{ctx\}\}produces the correctionψ3\\psi\_\{3\}, stratified by failure type: numeric mismatches, hard\-drifted strings \(PartialRatio<0\.6\\text\{PartialRatio\}<0\.6\), and soft\-drifted strings each receive distinct correction language\.

### 2\.4Cascaded Correction Loop

The three stages are evaluated sequentially\. The cascade halts at the first failing stagekk, and its structured fixψk\\psi\_\{k\}is appended to the conversation as a user turn:

y^\(t\+1\)=ℳ​\(H\(t\)∘ψk\)\\hat\{y\}^\{\(t\+1\)\}=\\mathcal\{M\}\\\!\\left\(H^\{\(t\)\}\\circ\\psi\_\{k\}\\right\)\(10\)whereH\(d\)H^\{\(d\)\}is the conversation history at iterationdd\. The loop repeats up toDmax=15D\_\{\\text\{max\}\}=15iterations and terminates early on a full pass\. Each fixψk\\psi\_\{k\}is*templated and deterministic*: given the same failure mode and metric values, the same correction string is produced, ensuring reproducibility\. The full set of fix templates is given in Appendix[D](https://arxiv.org/html/2607.18245#A4)\.

## 3Experimental Setup

We evaluate whether cascaded diagnostic feedback improves tool\-calling reliability in sub\-4B\-parameter models when \(a\) model families change, \(b\) registry scale increases, and \(c\) feedback specificity varies\.

#### Dataset construction\.

We construct a controlled benchmark from the Glaive function\-calling dataset\(Glaive AI,[2023](https://arxiv.org/html/2607.18245#bib.bib26)\)\. From the original corpus, we retain only rows that require exactly one tool call and for which the system prompt can be standardised to expose functions as JSON schema blocks with typed parameters and explicit required fields\. Rows with malformed schemas, multi\-call sequences, or ambiguous ground truth are excluded\. After filtering, 3,000 queries form the evaluation set\. For each query, registry scale is controlled by retaining the ground\-truth function and samplingS−1S\-1distractors*uniformly at random*from the remaining function pool to reachS∈\{5,10,15\}S\\in\\\{5,10,15\\\}functions per prompt\. Distractors are not curated for semantic confusability; they are random draws, meaning that registry difficulty comes from scale, not from adversarial similarity\. The same 3,000 queries are reused across all registry scales so that performance differences reflect registry complexity alone\.

#### Models\.

We evaluate three models: Llama 3\.2:3B\(Grattafioriet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib7)\), Ministral 3B\(Liuet al\.,[2026](https://arxiv.org/html/2607.18245#bib.bib8)\), and Granite 3\.1:3B\(Mishraet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib9)\)\. All inferences are run locally via Ollama at temperatureτ=0\\tau=0, with no fine\-tuning; every condition is a pure inference\-time intervention\. This selection spans three distinct families, testing whether SAAG’s feedback generalises across architectural and training differences\.

#### Feedback modes\.

Three conditions are compared \(Table[1](https://arxiv.org/html/2607.18245#S3.T1)\):Direct pass: a single inference pass with no correction loop, providing a zero\-feedback baseline of out\-of\-the\-box capability\.Binary feedback: the correction loop is active, but each stage failure returns a fixed uninformative signal \(‘‘No’’\) without diagnostic content\. This serves as an*ablation*to isolate the effect of iterative re\-prompting from the information content of the feedback; it is not intended as a representative real\-world baseline\.Structured feedback \(SAAG\): the full cascaded diagnostic framework from §[2](https://arxiv.org/html/2607.18245#S2), where each failing stage returns a stage\-stratified correctionψk\\psi\_\{k\}targeted to the specific failure mode\. Direct pass uses a single attempt \(D=1D=1\)\. Binary feedback and SAAG both operate under a maximum ofDmax=15D\_\{\\text\{max\}\}=15iterations, bounding cost fairly across loop\-enabled conditions\.

#### Definitions\.

Solve rateis the fraction of the 3,000 queries for which the model produces a prediction that passes all three SAAG stages and matches the ground\-truth function name*within the iteration budget*\. For direct pass, this is identical to single\-pass accuracy; for loop\-enabled modes, it captures whether the loop eventually recovers a correct call\.

#### Metric classes\.

We report two classes of metrics\.Intrinsic metricsare the eight SAAG diagnostics from §[2](https://arxiv.org/html/2607.18245#S2), aggregated across rows to characterise grounding quality per stage\. Because the cascade is strict, intrinsic metrics from later stages are conditioned on passing earlier stages and should be interpreted as stage\-conditional diagnostics, not unconditional population statistics\.Extrinsic metrics\(name accuracy, argument precision, recall, F1\) are computed against ground truth for all rows and serve as end\-to\-end validity checks\.

#### Uncertainty\.

All±\\pmvalues in Tables[2](https://arxiv.org/html/2607.18245#S4.T2)–[3](https://arxiv.org/html/2607.18245#S4.T3)are standard deviations across the three registry scales \(S∈\{5,10,15\}S\\in\\\{5,10,15\\\}\), reflecting variability due to registry complexity rather than sampling noise\.

Table 1:Experimental conditions\. All three modes are evaluated across three models and three registry scales \(S∈\{5,10,15\}S\\in\\\{5,10,15\\\}\), yielding 27 conditions on 3,000 queries each\. Binary feedback is an ablation isolating the effect of iteration from feedback content; it is not a strong external baseline\. CS \- Correction Signal

## 4Results

We report intrinsic grounding diagnostics \(Table[3](https://arxiv.org/html/2607.18245#S4.T3)\) and extrinsic correctness metrics \(Table[2](https://arxiv.org/html/2607.18245#S4.T2)\), both averaged across registry scalesS∈\{5,10,15\}S\\in\\\{5,10,15\\\}\. Intrinsic metrics are the primary lens; extrinsic results serve as an end\-to\-end validity check\. Per\-scale breakdowns are in Appendix[E](https://arxiv.org/html/2607.18245#A5)\.

#### Argument grounding is the dominant failure mode\.

Across all models and conditions, name accuracy is near ceiling while argument accuracy lags substantially\. This persistent gap confirms argument grounding as the primary bottleneck\. Conflating these failure modes into a single outcome metric, as standard exact\-match benchmarks do, obscures where models most need improvement\.

#### Precision improves consistently; F1 gains are mixed\.

In agent\-call grounding, a hallucinated argument value causes silent downstream failures, whereas a missing argument is at least detectable\. Precision is therefore the more meaningful signal in this setting\. SAAG improves argument precision for all three models and solve rate improves substantially across all models \(Table[2](https://arxiv.org/html/2607.18245#S4.T2)\), with the largest gain for LLaMA \(0\.615→0\.8020\.615\\to 0\.802\)\. End\-to\-end F1, however, tells a more nuanced story: SAAG improves F1 for LLaMA \(0\.527→0\.5330\.527\\to 0\.533\) but slightly decreases it for Ministral and Granite, driven by recall loss\. This is consistent with an overcorrection effect in reasoning models: both Ministral 3 and Granite 4 are reasoning\-oriented models, and iterative feedback loops can cause them to revise initially correct predictions, a behaviour documented for Ministral 3Liuet al\.\([2026](https://arxiv.org/html/2607.18245#bib.bib8)\)and similarly observed for Granite 4\.

#### Structured feedback consistently reduces hallucination\.

The most reliable gain from structured feedback \(SAAG\) is reduced argument value hallucination\. VHR decreases under SAAG for every model: from0\.3360\.336to0\.3110\.311for LLaMA, from0\.2770\.277to0\.1660\.166for Ministral \(a 40% reduction\), and from0\.2780\.278to0\.2590\.259for Granite\. AVEM improves correspondingly, with the largest gain for Ministral \(0\.658→0\.7860\.658\\to 0\.786\)\. Binary feedback, by contrast, occasionallyincreasesVHR \(Granite:0\.278→0\.2880\.278\\to 0\.288\), suggesting that for reasoning enabled models, correction signals introduce spurious drift rather than fix grounding errors\.

#### SAAG converges faster than binary feedback\.

Structured feedback converges within 2\-3 iterations across all registry scales \(Figure[4](https://arxiv.org/html/2607.18245#S4.F4)\), reaching a higher ceiling than binary feedback at every depth i\.e\., consuming less overall time\. This confirms that*content*based diagnostic correction drives grounding recovery quicker than pure iterative looping\.

Table 2:Extrinsic metrics averaged across registry scalesS∈\{5,10,15\}S\\in\\\{5,10,15\\\};±\\pmvalues are standard deviations across scales\. Higher is better for all metrics \(↑\\uparrow\)\. SAAG improves precision for all models but F1 gains are mixed: LLaMA improves, while Ministral and Granite show slight decreases due to recall loss from overcorrection\. Per\-scale breakdowns in Appendix[E](https://arxiv.org/html/2607.18245#A5)\.![Refer to caption](https://arxiv.org/html/2607.18245v1/figures/fig1_solve_rate_combined.png)Figure 2:Solve rate \(%\) across registry depths \(d = 5, 10, 15\) for three models under Single\-Pass, Binary Feedback, and Structured Feedback conditions\. Ministral 3 consistently leads across all settings, while LLaMA 3\.2 degrades most sharply with increasing depth\. Structured Feedback provides the greatest gains and most stable performance as registry size scales\.![Refer to caption](https://arxiv.org/html/2607.18245v1/figures/fig6_cumulative_solve_combined.png)Figure 3:Cumulative solve rate \(%\) over up to 15 attempts across registry depths \(d = 5, 10, 15\) for Granite 4, LLaMA 3\.2, and Ministral 3 under Binary and Structured Feedback, with Single\-Pass as the dotted baseline\. All models converge within the first 2–3 attempts, with Structured Feedback improving more with attempts than Binary Feedback across all depths\. Lower registry depths converge faster compared to higher depths indicating that more complexity in registry requires more attempts to solve\.![Refer to caption](https://arxiv.org/html/2607.18245v1/figures/solve_rate.png)Figure 4:Solve rate \(%\) across feedback modes \(Single\-Pass, Binary, Structured\) at registry depths d = 5, 10, 15 for Granite 4, LLaMA 3\.2, and Ministral 3\. All models improve substantially from Single\-Pass to Binary Feedback, with LLaMA 3\.2 showing the largest gains\. Ministral 3 remains stable from Binary to Structured Feedback, while Granite 4 drops notably at d = 5, suggesting it is more sensitive to feedback at shallower depths due to reasoning enabled\.Table 3:Intrinsic grounding diagnostics averaged across registry scalesS∈\{5,10,15\}S\\in\\\{5,10,15\\\};±\\pmvalues are standard deviations across scales\. These are*stage\-conditional*metrics: later\-stage values are computed only on predictions that passed earlier stages\. NCS and PDS are omitted from the main table as they are near\-constant across conditions; full values including per\-scale breakdowns are in Appendix[E](https://arxiv.org/html/2607.18245#A5)\.

## 5Related Work

#### Tool\-calling evaluation and benchmarks\.

Recent benchmarks such as API\-Bank\(Liet al\.,[2023](https://arxiv.org/html/2607.18245#bib.bib15)\), ToolLLM\(Qinet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib16)\), Gorilla\(Patilet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib17)\), and BFCL\(Patilet al\.,[2025](https://arxiv.org/html/2607.18245#bib.bib18)\)have established standardized protocols for evaluating tool use in large language models\. While effective for measuring overall performance, these benchmarks predominantly focus on format correctness or end\-to\-end execution success, often conflating distinct failure modes into a single aggregate metric\. As a result, they provide limited diagnostic insight into where and why failures occur\. ToolBeHonest\(Zhanget al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib20)\)advances this direction by introducing a structured, multi\-level diagnostic framework that decomposes tool use into solvability detection, solution planning, and missing\-tool analysis, while also evaluating robustness under hallucination\-inducing scenarios such as missing or constrained tools\. However, its scope is limited to evaluation\. In contrast, SAAG extends this paradigm beyond diagnosis by not only identifying stage\-specific failure modes but also leveraging them to drive an inference\-time, iterative self\-repair process that actively corrects tool\-calling errors\.

#### Tool hallucination\.

Tool hallucination has emerged as a critical challenge in reliable tool use\. Reliability Alignment\(Xuet al\.,[2025](https://arxiv.org/html/2607.18245#bib.bib19)\)distinguishes between*tool selection hallucination*and*tool usage hallucination*, highlighting the need for stage\-aware analysis of model behavior\. Prior approaches address these issues through additional training signals, such as process\-level reward models\(Qianet al\.,[2025](https://arxiv.org/html/2607.18245#bib.bib30)\)or self\-reflection and feedback mechanisms\(Mastermanet al\.,[2024](https://arxiv.org/html/2607.18245#bib.bib32)\)\. In contrast, SAAG operates entirely at inference time, leveraging deterministic and templated feedback without requiring auxiliary models or retraining, thereby offering a lightweight yet effective alternative\.

#### Iterative correction\.

Frameworks such as ReAct\([Yaoet al\.,](https://arxiv.org/html/2607.18245#bib.bib23)\)and related reasoning\-and\-acting paradigms improve tool use through iterative interaction, enabling models to refine their outputs over multiple steps\. However, the feedback signals in these approaches are typically coarse and undifferentiated\. In this work, we explicitly disentangle the role of iteration from the quality of feedback through a binary feedback ablation, and ground our correction signals in deterministic, rule\-based templates derived from intrinsic stage metrics rather than a secondary LLM functioning as judge\.

## 6Discussion

#### Summary\.

SAAG’s stage\-decomposed metrics reveal what aggregate benchmarks cannot: argument grounding is the dominant failure mode, overcorrection is a distinct and measurable phenomenon, and precision gains do not always propagate to F1\. These findings hold independently of any correction strategy with the intrinsic diagnostics characterizing model behaviour whether or not the correction loop is applied\. Where the loop \(diagnostic feedback\) is applied, the strongest signal is that*telling a model what failed*is substantially more effective than*telling it that it failed*, a finding that holds across all three model families and registry complexities\. Furthermore, the stage\-conditional design further enables actionable diagnosis\. For example: under binary feedback, Granite’s RPR improves while VHR worsens simultaneously; an indication that a single aggregate metric would simply average out and miss\. Per\-stage decomposition surfaces such contradictions directly and points to where intervention is needed\.

#### Limitations\.

Several limitations bound the scope of our findings\. Firs, our evaluation is restricted to single\-agent selection from a fixed registry; multi\-agent sequences, dynamic registries, and agent chaining introduce failure modes that SAAG does not currently address\. Second, distractors are sampled uniformly at random rather than for semantic confusability, so our registry difficulty is a lower bound on what real deployments face\. Third, the argument grounding stage relies on lexical overlap \(PartialRatio\) rather than true semantic similarity; values that are semantically correct but lexically distant from the query will be incorrectly flagged\. Fourth, the correction loop can overcorrect valid predictions, particularly for agent names, suggesting that tighter thresholds or confidence\-gated correction are needed\. Also, these overcorrections occur at a higher frequency for reasoning models such as Ministral 3 and Granite 4\. Finally, we evaluate only sub\-4B\-parameter models at inference time with no fine\-tuning; whether the diagnostic decomposition transfers to larger models or training\-time objectives remains open\.

## 7Conclusion

We presented SAAG, a diagnostic framework that decomposes agent\-calling evaluation into three sequential stages: registry conformance, structural completeness, and argument grounding, with each having interpretable, stage\-specific metrics\. These metrics constitute the primary contribution:they expose where agent calls fail i\.e\., at function selection, schema compliance, or argument grounding and at a granularitythat existing exact\-match benchmarks do not provide\.Evaluated across three sub\-4B model families and three registry scales, the cascaded correction loop consistently improves argument precision and reduces value hallucination, while also surfacing a measurable overcorrection effect in reasoning models, name selection and recall,a limitation that motivates confidence\-gated correction as a direction for future work\. The central finding is that telling a modelwhatfailed is substantially more effective than telling itthatit failed\.

## References

- Rapidfuzz/rapidfuzz: release 3\.13\.0External Links:[Document](https://dx.doi.org/10.5281/zenodo.15133267),[Link](https://doi.org/10.5281/zenodo.15133267)Cited by:[§2\.1](https://arxiv.org/html/2607.18245#S2.SS1.p5.7),[§2\.3](https://arxiv.org/html/2607.18245#S2.SS3.SSS0.Px2.p1.3)\.
- R\. Garimella, C\. Shyalika, R\. P\. K\. Mana, and A\. Sheth \(2026\)DYNO: dynamic neurosymbolic orchestrator for multi\-agent systems\.InLLM\-based Multi\-Agent Systems: Towards Responsible, Reliable, and Scalable Agentic Systems,Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p4.1)\.
- Glaive AI \(2023\)Glaive\-function\-calling\-v2\.Hugging Face\.Note:[https://huggingface\.co/datasets/glaiveai/glaive\-function\-calling\-v2](https://huggingface.co/datasets/glaiveai/glaive-function-calling-v2)Cited by:[Appendix C](https://arxiv.org/html/2607.18245#A3.p1.3),[§3](https://arxiv.org/html/2607.18245#S3.SS0.SSS0.Px1.p1.2)\.
- A\. Grattafiori, A\. Dubey, A\. Jauhri, A\. Pandey, A\. Kadian, A\. Al\-Dahle, A\. Letman, A\. Mathur, A\. Schelten, A\. Vaughan,et al\.\(2024\)The llama 3 herd of models\.arXiv preprint arXiv:2407\.21783\.Cited by:[§3](https://arxiv.org/html/2607.18245#S3.SS0.SSS0.Px2.p1.1)\.
- M\. Li, Y\. Zhao, B\. Yu, F\. Song, H\. Li, H\. Yu, Z\. Li, F\. Huang, and Y\. Li \(2023\)API\-bank: a comprehensive benchmark for tool\-augmented LLMs\.InProceedings of the 2023 Conference on Empirical Methods in Natural Language Processing,Singapore,pp\. 3102–3116\.External Links:[Document](https://dx.doi.org/10.18653/v1/2023.emnlp-main.187),[Link](https://aclanthology.org/2023.emnlp-main.187/)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px1.p1.1)\.
- A\. H\. Liu, K\. Khandelwal, S\. Subramanian, V\. Jouault, A\. Rastogi, A\. Sadé, A\. Jeffares, A\. Jiang, A\. Cahill, A\. Gavaudan,et al\.\(2026\)Ministral 3\.arXiv preprint arXiv:2601\.08584\.Cited by:[§3](https://arxiv.org/html/2607.18245#S3.SS0.SSS0.Px2.p1.1),[§4](https://arxiv.org/html/2607.18245#S4.SS0.SSS0.Px2.p1.2)\.
- T\. Masterman, S\. Besen, M\. Sawtell, and A\. Chao \(2024\)The landscape of emerging ai agent architectures for reasoning, planning, and tool calling: a survey\.External Links:2404\.11584,[Link](https://arxiv.org/abs/2404.11584)Cited by:[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px2.p1.1)\.
- M\. Mishra, M\. Stallone, G\. Zhang, Y\. Shen, A\. Prasad, A\. M\. Soria, M\. Merler, P\. Selvam, S\. Surendran, S\. Singh,et al\.\(2024\)Granite code models: a family of open foundation models for code intelligence\.arXiv preprint arXiv:2405\.04324\.Cited by:[§3](https://arxiv.org/html/2607.18245#S3.SS0.SSS0.Px2.p1.1)\.
- S\. G\. Patil, H\. Mao, F\. Yan, C\. C\. Ji, V\. Suresh, I\. Stoica, and J\. E\. Gonzalez \(2025\)The berkeley function calling leaderboard \(BFCL\): from tool use to agentic evaluation of large language models\.InProceedings of the 42nd International Conference on Machine Learning,Proceedings of Machine Learning Research, Vol\.267,pp\. 48371–48392\.External Links:[Link](https://proceedings.mlr.press/v267/patil25a.html)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px1.p1.1)\.
- S\. G\. Patil, T\. Zhang, X\. Wang, and J\. E\. Gonzalez \(2024\)Gorilla: large language model connected with massive apis\.InAdvances in Neural Information Processing Systems,Vol\.37\.External Links:[Link](https://proceedings.neurips.cc/paper_files/paper/2024/hash/e4c61f578ff07830f5c37378dd3ecb0d-Abstract-Conference.html)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px1.p1.1)\.
- C\. Qian, E\. C\. Acikgoz, Q\. He, H\. Wang, X\. Chen, D\. Hakkani\-Tür, G\. Tur, and H\. Ji \(2025\)ToolRL: reward is all tool learning needs\.External Links:2504\.13958,[Link](https://arxiv.org/abs/2504.13958)Cited by:[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px2.p1.1)\.
- Y\. Qin, S\. Liang, Y\. Ye, K\. Zhu, L\. Yan, Y\. Lu, Y\. Lin, X\. Cong, X\. Tang, B\. Qian, S\. Zhao, L\. Hong, R\. Tian, R\. Xie, J\. Zhou, M\. Gerstein, D\. Li, Z\. Liu, and M\. Sun \(2024\)ToolLLM: facilitating large language models to master 16000\+ real\-world apis\.InThe Twelfth International Conference on Learning Representations,External Links:[Link](https://openreview.net/forum?id=dHng2O0Jjr)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px1.p1.1)\.
- A\. P\. Sheth, K\. Roy, R\. Venkataramanan, V\. Nadimuthu, and C\. Shyalika \(2025\)Composite ai with custom, compact, neurosymbolic models: the emergent enterprise artificial intelligence paradigm\.IEEE Internet Computing29\(2\),pp\. 37–49\.Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p4.1)\.
- H\. Xu, Z\. Zhu, L\. Pan, Z\. Wang, S\. Zhu, D\. Ma, R\. Cao, L\. Chen, and K\. Yu \(2025\)Reducing tool hallucination via reliability alignment\.InProceedings of the 42nd International Conference on Machine Learning,Proceedings of Machine Learning Research, Vol\.267,pp\. 69992–70006\.External Links:[Link](https://proceedings.mlr.press/v267/xu25ap.html)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px2.p1.1)\.
- \[15\]S\. Yao, J\. Zhao, D\. Yu, N\. Du, I\. Shafran, K\. R\. Narasimhan, and Y\. CaoReact: synergizing reasoning and acting in language models\.InThe eleventh international conference on learning representations,Cited by:[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px3.p1.1)\.
- Y\. Zhang, J\. Chen, J\. Wang, Y\. Liu, C\. Yang, C\. Shi, X\. Zhu, Z\. Lin, H\. Wan, Y\. Yang, T\. Sakai, T\. Feng, and H\. Yamana \(2024\)ToolBeHonest: a multi\-level hallucination diagnostic benchmark for tool\-augmented large language models\.External Links:2406\.20015,[Document](https://dx.doi.org/10.48550/arXiv.2406.20015),[Link](https://arxiv.org/abs/2406.20015)Cited by:[§1](https://arxiv.org/html/2607.18245#S1.p2.1),[§5](https://arxiv.org/html/2607.18245#S5.SS0.SSS0.Px1.p1.1)\.

## Appendix AReproducibility Statement

All experiments use the following exact model identifiers via Ollama:llama3\.2:3b,ministral:3b, andgranite4:3b\. Inference is performed at temperatureτ=0\\tau=0with no system\-level sampling modifications\. The correction loop uses a maximum ofTmax=15T\_\{\\text\{max\}\}=15iterations\. All fuzzy matching thresholds are fixed: the parameter drift threshold isγpds=0\.8\\gamma\_\{\\text\{pds\}\}=0\.8; the hard\-drift boundary for Stage 3 correction is PartialRatio<0\.6<0\.6\. All fix templates \(ψ1\\psi\_\{1\},ψ2\\psi\_\{2\},ψ3\\psi\_\{3\}\) are deterministic and templated: given the same failure mode and metric values, the same correction string is produced\. The Glaive function\-calling dataset was filtered to retain only single\-call rows with well\-formed JSON schemas; distractors are sampled uniformly at random from the function pool\. Experiments were run on a single NVIDIA A100 GPU\. Detailed prompt templates and the full dataset construction pipeline will be provided in the supplementary code repository upon acceptance\.

## Appendix BEthics Statement

This work proposes a diagnostic framework for evaluating and repairing tool calls at inference time\. We note several ethical considerations\. First, while structured feedback reduces argument hallucination, it can also induce overcorrection—particularly in function name selection—and should not be deployed without monitoring for this failure mode\. Second, our evaluation is restricted to single\-tool selection from a fixed registry using synthetic queries; we do not evaluate real tool execution, multi\-agent deployment, or user\-facing applications\. Claims about deployment readiness should not be inferred from these results\. Third, the lexical grounding metric \(QSLO\) captures surface overlap, not semantic correctness; values that are semantically valid but lexically distant from the query may be incorrectly penalised\. Users of this framework should be aware of this limitation when interpreting grounding scores\.

## Appendix CDataset Construction

We construct a controlled evaluation benchmark from the Glaive function\-calling dataset\(Glaive AI,[2023](https://arxiv.org/html/2607.18245#bib.bib26)\)\. The original corpus is restructured along three axes: \(i\) we retain only rows that require a tool call; \(ii\) we standardise the system prompt to expose each function as a standalone JSON schema block with typed parameters and explicitrequiredfields; and \(iii\) we stratify the registry scale toS∈\{5,10,15\}S\\in\\\{5,10,15\\\}functions per row by retaining the ground\-truth relevant function and samplingS−1S\{\-\}1distractors uniformly from the broader function pool\. The same 3,000 queries are used across all three registry scales, so any performance difference acrossSSreflects registry complexity alone rather than query distribution shift\.

Unlike standard function\-calling benchmarks that expose only the relevant tool, our construction forces the model to perform genuine registry selection: the correct function must be identified from amongS−1S\{\-\}1structurally similar distractors whose parameter types and description phrasing overlap with the query\. AsSSgrows, the risk of name confusability and argument drift increases\. This directly probes the failure modes captured by our SAAG metrics\.

Figure[5](https://arxiv.org/html/2607.18245#A3.F5)shows a representative system prompt atS=5S\{=\}5\. AtS=10S\{=\}10andS=15S\{=\}15, five and ten further distractor blocks are appended; the query and ground truth are unchanged\. The only place ground truth is used is during the extrinsic metric calculation\.

System prompt with agent scale depth as 5SYSTEM: You are a helpful assistant with access to the following functions\. Use them if required \-\{"name": "get\_definition", "description": "Get the definition of a word", "parameters": \{"type": "object", "properties": \{"word": \{"type": "string", "description": "The word to get the definition of"\}\}, "required": \["word"\]\}\}\{"name": "generate\_qr\_code", "description": "Generate a QR code for a given text", "parameters": \{"type": "object", "properties": \{"text": \{"type": "string", "description": "The text to encode"\}, "size": \{"type": "integer", "description": "QR code size in pixels"\}\}, "required": \["text"\]\}\}\{"name": "convert\_temperature", "description": "Convert temperature between units", "parameters": \{"type": "object", "properties": \{"temperature": \{"type": "number"\}, "from\_unit": \{"type": "string"\}, "to\_unit": \{"type": "string"\}\}, "required": \["temperature", "from\_unit", "to\_unit"\]\}\}\{"name": "calculate\_mortgage", "description": "Calculate monthly mortgage payments", "parameters": \{"type": "object", "properties": \{"loan\_amount": \{"type": "number"\}, "interest\_rate": \{"type": "number"\}, "loan\_term": \{"type": "integer"\}\}, "required": \["loan\_amount", "interest\_rate", "loan\_term"\]\}\}\{"name": "calculate\_tip", "description": "Calculate the tip amount based on the bill", "parameters": \{"type": "object", "properties": \{"bill\_amount": \{"type": "number"\}, "tip\_percentage": \{"type": "number"\}\}, "required": \["bill\_amount", "tip\_percentage"\]\}\}USER: What does the word ‘serendipity’ mean?GROUND TRUTH: \{"name": "get\_definition", "arguments": \{"word": "serendipity"\}\}Figure 5:System prompt atS=5S\{=\}5for a representative query\. The registry contains one relevant function \(get\_definition\) and four distractors\. AtS=10S\{=\}10andS=15S\{=\}15, five and ten further distractor blocks are appended; the query and ground truth remain identical\.
## Appendix DStructured Correction Messages

Table[4](https://arxiv.org/html/2607.18245#A4.T4)shows representative fix messagesψk\\psi\_\{k\}for each failure mode across the three stages\. All fixes are constructed programmatically from the evaluation output; no human authoring is involved\. Crucially, no fix reveals the ground\-truth function name, parameter set, or argument values, ensuring that corrections are grounded solely in the registry schema and the model’s own prediction\.

StageFailure ModeRepresentative Fix Message \(Fix Prompts\)Q1No name foundNo function name found\. Please return only the agent invocation in the exact JSON format specified in the registry\.Q1Wrong nameFunction name “\{predicted\}” not found in registry\. Please check the system prompt for the correct function names and respond with only the agent invocation in the exact JSON format specified\.Q2Missing requiredKey parameters of the agent from the registry are missing\. Please ensure the invocation includes all parameters specified for that agent in the system prompt\.Q2Spurious paramsSpurious parameters not present in the registry are included\. Please include only the parameters specified for that agent\.Q2Drifted paramsSome parameters appear misspelled and deviate slightly from the registry\. Please ensure all parameter names exactly match the schema in the system prompt\.Q3Numeric mismatchThe numeric values for\{params\}do not match what the user stated\. Use the exact numbers from the user’s request\.Q3Hard value driftThe values for\{params\}have no grounding in the user’s request\. Do not invent values\. Use only what the user explicitly stated, or omit the argument\.Q3Soft value driftThe values for\{params\}are loosely related but not exact\. Use the precise wording or value from the user’s request\.Table 4:Representative structured correction messagesψk\\psi\_\{k\}per failure mode\. Bracketed tokens \(\{predicted\}, \{params\}\) are instantiated programmatically from the evaluation output\.
## Appendix EPer\-Scale Results

Per\-scale breakdowns of intrinsic grounding metrics and extrinsic ground\-truth metrics for all three models across registry scalesS∈\{5,10,15\}S\\in\\\{5,10,15\\\}; summary tables averaged across scales are reported in the main paper \(intrinsic: Table[3](https://arxiv.org/html/2607.18245#S4.T3); extrinsic: Table[2](https://arxiv.org/html/2607.18245#S4.T2)\)\. Tables[5](https://arxiv.org/html/2607.18245#A5.T5)–[16](https://arxiv.org/html/2607.18245#A5.T16)present full per\-scale breakdowns, with each table reporting intrinsic grounding metrics \(top block\) and extrinsic correctness metrics \(bottom block\) as mean±\\pmstd over all rows at that registry scale and the respective solve rate\.

Table 5:LLaMA 3\.2 at registry scaleS=5S=5\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 6:LLaMA 3\.2 at registry scaleS=10S=10\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 7:LLaMA 3\.2 at registry scaleS=15S=15\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 8:LLaMA 3\.2 aggregated across registry scalesS=5,10,15S=5,10,15\. Values are reported as mean±\\pmsample standard deviation over the three scale\-level results\.Table 9:Ministral 3 at registry scaleS=5S=5\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 10:Ministral 3 at registry scaleS=10S=10\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 11:Ministral 3 at registry scaleS=15S=15\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 12:Ministral 3 aggregated across registry scalesS=5,10,15S=5,10,15\. Values are reported as mean±\\pmsample standard deviation over the three scale\-level results\.Table 13:Granite 4 at registry scaleS=5S=5\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 14:Granite 4 at registry scaleS=10S=10\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 15:Granite 4 at registry scaleS=15S=15\. The top panel reports intrinsic grounding metrics, while the bottom panel shows extrinsic correctness metrics across feedback conditions\. Values are reported asmean±std\\text\{mean\}\\pm\\text\{std\}over all rows at this scale; the standard deviation reflects the dispersion of row\-level scores within the\[0,1\]\[0,1\]range\. Arrows indicate directionality: higher is better \(↑\\uparrow\), lower is better \(↓\\downarrow\)\.Table 16:Granite Aggregate results acrossS=5,10,15S=5,10,15\. Values are reported as mean±\\pmsample standard deviation computed over the three iterations\.

Similar Articles

Agri-SAGE: Simulation-Grounded Multi-Agent LLM for Context-Aware Agricultural Advisory Generation

arXiv cs.AI

This paper introduces Agri-SAGE, a closed-loop framework that integrates multi-agent LLM reasoning with biophysical simulation (APSIM) to generate and validate context-aware agricultural advisories. The framework outperforms static baselines in retrospective analysis, with Tree-of-Thoughts achieving peak yields and Reflexion reducing computational cost via episodic memory.

Towards Security-Auditable LLM Agents: A Unified Graph Representation

arXiv cs.AI

This paper introduces Agent-BOM, a unified graph representation for security auditing in LLM-based agentic systems. It addresses the semantic gap in post-hoc auditing by modeling static capabilities and dynamic runtime states to detect complex attack chains like memory poisoning and tool misuse.