Fail Loudly: An Auditable Runtime for Agentic Data Analysis
Organizations: Independent Researcher · Purdue University
Abstract
Large language models (LLMs) have enabled data-science agents to automate multi-step analyses over heterogeneous files. However, incorrect choices regarding data sources, scope, or statistical definitions often lead to silent errors: computations execute successfully but produce plausible yet incorrect outputs that fail to answer the intended question. To mitigate this, we present RADAR, an auditable runtime that makes an agent's analytical choices inspectable and supports their revision through execution feedback. RADAR operates through three core mechanisms. First, an evidence-preserving exploration module retrieves task-relevant content while retaining source locations and observation coverage. Next, the runtime uses typed operators to record the agent's declared inputs, operation arguments, and resulting observations. Finally, runtime validation checks proposed operations against these observations. When a conflict is detected, the runtime rejects the operation or provides diagnostic feedback, allowing the agent to revise its choices before errors propagate. This design enables agents to fail loudly while leaving semantic interpretation to the LLM. On KramaBench, RADAR achieves overall scores of 0.723 with full source retrieval and 0.747 with gold sources supplied, corresponding to relative gains of 35.9% and 28.8% over the strongest baselines. Beyond KramaBench, RADAR achieves relative performance gains of 14.0% on DA-Code and 59.3% on DABStep, demonstrating its applicability across diverse agentic data-analysis workflows.
Figures & tables
| Operator type | Main arguments | Function and runtime observations |
|---|---|---|
| Discover | query , excluded | Retrieve sources by semantic query or path pattern; return paths. |
| Bash | command | Inspect files with shell commands; record output and exit status. |
| Scan | file | Load a table; record provenance, schema, row count, and preview. |
| UnionScan | files , source_column | Union by column name; record source labels and table metadata. |
| Probe | table , columns | Inspect columns; report value frequencies, ranges, and null rates. |
| Query | sql , inputs , output | Run SQL; record result schema, row count, and visible records. |
| Domains | Resource use | |||||||||
| System | Models | Archaeology | Astronomy | Biomedical | Environment | Legal | Wildfire | Overall | Cost ($) | Latency (s) |
| Full Input (source retrieval from the complete data lake) | ||||||||||
| Human | 0.583 | 0.700 | 1.000 | 0.769 | 0.867 | 0.662 | 0.768 | – | – | |
| DS-Guru | DeepSeek V4-Flash | 0.000 | 0.083 | 0.000 | 0.150 | 0.200 | 0.305 | 0.158 | 1.27 | 49 |
| smolagents DR | 0.417 | 0.250 | 0.556 | 0.533 | 0.533 | 0.746 | 0.532 | 6.38 | 636 | |
| AutoGen | 0.417 | 0.250 | 0.111 | 0.333 | 0.500 | 0.380 | 0.372 | 3.16 | 183 | |
| System | Data Wrangling | ML | EDA | Easy | Medium | Hard | Overall | Completion |
|---|---|---|---|---|---|---|---|---|
| DS-Guru | 16.5 | 34.6 | 16.5 | 27.5 | 18.5 | 17.3 | 20.1 | 70.8 |
| smolagents DR | 29.2 | 44.8 | 39.6 | 53.8 | 36.6 | 28.7 | 38.5 | 91.6 |
| AutoGen | 31.4 | 41.8 | 35.2 | 46.8 | 33.7 | 30.7 | 35.8 | 86.6 |
| Data Interpreter | 21.0 | 24.5 | 32.6 | 36.8 | 26.9 | 25.3 | 28.6 | 84.8 |
| DA-Agent | 33.9 | 51.5 | 44.3 | 55.4 | 42.1 | 36.3 | 43.6 | 90.0 |
| DS-STAR | 33.6 | 58.8 | 46.6 | 61.4 | 42.6 | 42.2 | 46.4 | 96.8 |
Runtime Enforcement for AI Agents
Runtime enforcement for AI agents checks and constrains actions as they execute, helping prevent unsafe or unauthorized effects.
See all 276 papers