# Models & Agents Agent reliability benchmarks just exposed the gap between occasional success and consistent stateful execution in real business workflows. What You Need to Know: Thinkingbox introduces a sandbox and 507-workflow benchmark across retail, insurance, and IT support domains that measures end-to-end state transitions rather than isolated tool calls. Several arXiv papers released today examine attention allocation, KV-cache reuse, and multi-agent hypothesis generation. Builders should watch how these evaluation and efficiency techniques affect long-running agent deployments this week. DEPTH OVER BREADTH (news items) Top Story Microsoft released Thinkingbox, a sandbox and benchmark for agents operating in stateful business workflows. The benchmark contains 507 policy-conditioned workflows spanning retail, hospitality, auto insurance, neobank IT, and consulting support, each evaluated by executable checks on terminal backend state rather than surface-level tool calls or responses. The strongest model reached 65.36% pass@1 but only 25.25% pass^20, showing that many failures produce clean terminations and valid state changes yet still miss required outcomes. This directly tests multi-turn information gathering, policy adherence, and persistent state transitions that current agent benchmarks largely ignore. Teams building production agents should examine the released repository to see where their current evaluation harnesses fall short on these dimensions. Source: arxiv.org Model Updates Asymmetric Attention Heads: Structured Head-Wise Context Allocation for Transformer Attention — arXiv The paper introduces Asymmetric Attention Heads that assign different causal context windows to individual attention heads or groups instead of giving every head the full span. In 4096-token experiments several variants achieved lower validation loss than standard full attention while preserving the flat multi-head output interface. The approach groups heads by feature statistics and uses hierarchical allocation, with Attention Coverage Ratio reported as a diagnostic. Builders working on long-context models should test whether per-head window assignment improves quality at fixed compute budgets. Source: arxiv.org Compliance, Capability, and Conflict: Benchmarking Multimodal LLMs under System Messages — arXiv VSysBench evaluates 16 MLLMs on system-message constraints across 5 main categories and 22 sub-categories, scoring both constraint compliance and answer correctness via Joint Satisfaction Rate. Imposing system messages substantially reduced base task accuracy for all models, with open-weight models showing sharp compliance drops under user conflict while top proprietary models remained stable. Vision-grounded constraints proved hardest across every model tested. Developers deploying MLLMs with strict system prompts should add this benchmark to their evaluation suite. Source: arxiv.org FlashPrefill V2: Block-Sparse Prefill Attention for Long-Context LLM Serving — arXiv FlashPrefill V2 adds a mean correction term to suppress approximation error at high sparsity, redesigns the sparse operator with PackGQA and warp specialization, and supports paged KV cache plus continuous batching. On NVIDIA H20 GPUs it delivered up to 47.26× speedup over FlashAttention-2 at 128K context under FP8 and 30.49× against an FA3/4-aligned dense baseline. The implementation is positioned for integration into frameworks such as SGLang. Teams serving long-context workloads should benchmark the FP8 path on their hardware. Source: arxiv.org SWE-bench Science: Can Coding Agents Resolve Engineering Tasks in Science? — arXiv The new benchmark contains 119 tasks from 98 GitHub repositories across 20 scientific domains, split into Issue-driven, Expert-exploratory, and Engineering-integration paradigms. Claude Code with Opus-5 (max) achieved below 50% pass@1, with four recurring failure modes identified: deficits in scientific knowledge, misguided exploration, incomplete repair coverage, and failures to generalize beyond observed cases. An ablation showed that well-grounded scientific guidance can improve both performance and token efficiency while poorly aligned guidance induces anchoring. Scientific software teams should incorporate the benchmark when testing coding agents. Source: arxiv.org PersonalBench: Measuring the Authorship Gap in LLM Personalization — arXiv PersonalBench evaluates inference-time personalization across 50 authors and 1,000 generations using LUAR, LLM-as-judge, and stylometrics. All tested methods produced author-differentiated output (LUAR AUC 0.918) yet remained below the human cross-author similarity floor, with the model’s own fingerprint dominating. Methods were statistically indistinguishable on LUAR despite differences on the LLM judge. Developers building personalized writing tools should add this benchmark to quantify how close outputs actually come to target authors. Source: arxiv.org Agent & Tool Developments ReCache: Efficient KV Cache Reuse and Compression for Tool-Augmented LLM Agents — arXiv ReCache caches resource representations independently using resource-wise attention that removes cross-resource interactions and produces composition-invariant KV blocks. On a benchmark assembled from seven public tool-use datasets it matched dense invocation performance (82.3% vs 82.4% Inv-F1) while delivering a 3.655× time-to-first-token speedup and reducing allocated KV-tensor memory by 92.43%. The framework also accelerates attention by 1.423× and supports resource-disjoint test cases. Agent developers facing repeated tool-schema encoding should evaluate the released implementation. Source: arxiv.org Your agent doesn't crash when it goes off the rails. It just keeps billing you — r/MachineLearning The post introduces DriftGuard, an open-source detector that measures relevance and self-drift against an agent’s own history using bag-of-words by default. It fires only after the breach holds across 25 consecutive windows, achieving zero false alarms on 600-step healthy runs while detecting derailment at step 228 in a 400-step trace. The package has no dependencies, runs offline on Python 3.10+, and is available at the linked GitHub repository. Teams running long agent loops should integrate the detector to halt drifting executions early. Source: reddit.com Asia faces scam ‘epidemic’ threat as gangs exploit agentic AI, analyst warns — South China Morning Post Analysts warn that agentic AI is lowering barriers for organized crime groups running large-scale scams across Asia. The report highlights how autonomous agents can handle multi-step social-engineering campaigns at scale with reduced human oversight. Security teams monitoring agent deployments should review current guardrail coverage against these emerging misuse patterns. Source: scmp.com Practical & Community SynFlow: A Multidimensional Diachronic Semantic Analysis Toolkit — arXiv SynFlow converts linguistic observations into period-specific distributions and applies a shared workflow across dependency co-occurrences, morphological features, constructional patterns, and Frame Semantics. It supports multiple distance measures, value-level decomposition, statistical testing, and incremental clustering. A case study on the German adjective “viral” demonstrates how a single semantic shift appears across syntactic, lexical, and morphological dimensions. Researchers tracking lexical change should test the open-source toolkit on their corpora. Source: arxiv.org Generating Diverse Personas for User Simulators to Test Interview Dialogue Systems — arXiv The method uses a large language model to automatically generate personas with added communication-style personality traits, increasing utterance variation in user simulators. Experiments showed the approach produces greater behavioral diversity than manually crafted personas while reducing labor. Dialogue-system developers should adopt the technique when scaling test coverage beyond small hand-written persona sets. Source: arxiv.org Forking Fast: Efficiently Estimating Uncertainty Dynamics in Text Generation — arXiv The work shows that uncertainty dynamics in LLM reasoning chains converge to stable patterns once enough rollouts are collected, allowing a statistical smoothing model to approximate high-sample results from lower-sample data. This reduces the computational cost of resampling-based uncertainty analysis. Teams analyzing reasoning-chain variability should examine the smoothing approach to lower their sampling budget. Source: arxiv.org Under the Hood: Block-Sparse Prefill Attention Everyone talks about sparse attention as if it is simply “turning off” some tokens. In practice it is a sequence of decisions about pattern discovery, error correction, memory layout, and integration with existing inference stacks. FlashPrefill V2 first discovers a sparse pattern on the fly, then applies a mean correction term that keeps approximation error manageable even at extreme sparsity levels. The operator is then rewritten with PackGQA memory access, warp specialization, and ping-pong pipelining so it aligns with FlashAttention-3/4 kernels and supports FP8. These changes deliver 30×+ speedups at 128K context on H20 GPUs while preserving nearly identical task performance. The practical engineering takeaway is that teams should first validate the mean-correction term on their workload before investing in custom kernel integration; without it, quality degrades faster than the latency savings justify. Things to Try This Week • Run Thinkingbox workflows on your current agent setup to measure pass^20 rather than pass@1 and identify where state-transition failures occur. • Test ReCache on repeated tool-schema workloads to quantify KV-cache memory reduction and time-to-first-token gains. • Add VSysBench to multimodal evaluation pipelines to check how system-message constrain
