Thinking Outside the Box: Can Language Models Rely on External Guidance Selectively?
Summary
The paper introduces Box² Bench to measure whether language models can selectively rely on external guidance, finding that capable models remain vulnerable to misleading workflows, and shows that counterfactual SFT plus RL trained only on bad workflows can teach models to resist unreliable guidance and better exploit helpful ones.
View Cached Full Text
Cached at: 10/01/26, 04:20 AM
Paper page - Thinking Outside the Box: Can Language Models Rely on External Guidance Selectively?
Source: https://huggingface.co/papers/2609.39578

https://huggingface.co/papers/2609.39578#thinking-outside-the-box-can-language-models-rely-on-external-guidance-selectivelyThinking Outside the Box: Can Language Models Rely on External Guidance Selectively?
Language model agents increasingly rely on human designed workflows to solve complex tasks. Good workflows can substantially improve performance by providing useful intermediate steps and structure.
But what happens when the workflow is worse than the model itself?
As models become more capable, blindly following external guidance can become a limitation rather than an advantage. A strong agent should benefit from useful guidance while being able to override guidance when it becomes unreliable.
We call this abilitythinking outside the box.
https://huggingface.co/papers/2609.39578#measuring-selective-relianceMeasuring Selective Reliance
To study this behavior, we introduceBox² Bench.
The idea is simple: we keep themodel and task fixed, but vary the reliability of the workflow. We compare how the same model performs with no workflow, a helpful workflow, and a misleading workflow.
This lets us separate two abilities that are usually mixed together:
Can the model use good guidance? And can it resist bad guidance?
Across models and tasks, we find a consistent pattern. Reliable workflows often improve performance, but misleading workflows can still substantially hurt it. Even capable models remain sensitive to unreliable external guidance.
https://huggingface.co/papers/2609.39578#learning-to-think-outside-the-boxLearning to Think Outside the Box
We next ask whether selective reliance can be learned.
We train two open weight models using onlybad workflows, while reserving good workflows for evaluation.
Counterfactual supervised fine tuning makes models substantially more robust to misleading guidance. Outcome based reinforcement learning can further shift their behavior toward making greater use of helpful workflows.
Importantly, the models never see good workflows during training. Their improvement therefore suggests that training can shape a more general strategy for deciding how much to trust external guidance.
https://huggingface.co/papers/2609.39578#beyond-workflowsBeyond Workflows
This behavior is not limited to workflows.
Models trained in our setting also improve when interacting with other forms of fallible external information. We observe betterpeer correctionin multi agent reasoning and greater robustness tocorrupted memory.
These results point to a broader capability: agents need not only to use external information, but also to regulate their reliance on it.
https://huggingface.co/papers/2609.39578#toward-more-reliable-agentsToward More Reliable Agents
Most agent evaluations ask whether a task was solved.
Box² Bench asks an additional question:
Does the model know when to listen?
As agents increasingly operate with workflows, memories, tools, and other agents, selective reliance on fallible external information may become an important dimension of reliability that task performance alone does not capture.
Sometimes the best use of a box is knowing when to step outside it.
Similar Articles
Do Language Models Know Their Own Constraints?
The paper explores if language models can articulate constraints they've learned through fine-tuning. It discovers that behavioral compliance improves but explicit reporting diminishes.
Thinking in a Low-Resource Language: What SFT Builds, What RL Fixes, What Accuracy Cannot See
This paper studies supervised fine-tuning and reinforcement learning for reasoning in low-resource languages, revealing that accuracy benchmarks are noisy while SFT builds language-specific reasoning and RL fixes format and leakage issues.
Thinking in a Low-Resource Language: What SFT Builds, What RL Fixes, What Accuracy Cannot See
This paper investigates fine-tuning MoE models to reason in Greek, revealing that accuracy metrics are noisy, while supervised fine-tuning and reinforcement learning improve language-specific reasoning and fix behavioral defects, with proposed evaluation instruments.
Learning What to Learn: Stage-Specific Data Sets for SFT-then-RL in Small Language Model Reasoning
This paper proposes a difficulty-aware SFT-then-RL framework for training small language models (≤3B parameters) on reasoning tasks, arguing that data difficulty should be strategically aligned with the distinct roles of SFT (learning new skills) and RL (consolidating partial skills). The authors introduce a Bridge mechanism for hard SFT samples and Critique Fine-Tuning for RL failures, showing consistent improvements across five reasoning benchmarks.
When Explanations Betray Backdoors: Black-Box Auditing for Language Model Classifiers
This paper introduces Groundedness Drift, a score for black-box auditing of language model classifiers to detect backdoors using clean calibration data and explanatory outputs. It demonstrates higher detection performance across multiple attack families and datasets.

