Benchmark scores license claims about the capabilities being evaluated. We audit the inference licensed by an evaluation protocol, rather than the predictive model alone. Using procedural action anticipation as a controlled case study, we study a broader evaluation-validity failure mode: a protocol can remain temporally causal and free of classical target leakage while still supplying a privileged intermediate representation. The failure is not merely optimistic accuracy, but a mismatch between the capability claimed and the construct actually measured. On Breakfast, matched recognizer-history and GT-history regimes score 30.3% and 62.3% (Delta_PH(R_BA) = +32.0, 95% Student-t interval [+24.1, +39.8]). A fixed-checkpoint 2 x 2 intervention isolates a +14.6-point test-time oracle contrast; a matched no-video provenance probe yields a +26.8-point gap; and a boundary-independent query/history control retains a +19.4-point gap. We refer to this discrepancy as a privileged-information gap, defined relative to a specified non-oracle recovery pipeline, and propose a reusable four-condition audit. Across five evaluation settings the gap is heterogeneous; a standard 50 Salads long-term-anticipation re-implementation provides cautious support beyond the audit-specific next-action construction.
Figures & tables
Figure 1: Four-condition audit. Video only measures the primary modality; recognizer history adds recoverable symbolic context; GT history supplies the same semantic variable from an oracle source; and the context-only probe removes the observation-window visual input. Blue denotes non-oracle inputs; red denotes the privileged oracle input.
Condition
Act.@1
Act.@5
Verb@1
Video only
21.7±2.7
54.3±2.3
36.3±1.3
Recognizer history, boundary-free
26.3±0.9
—
—
Recognizer history, boundary-aware
30.3±3.1
67.7±1.5
44.1±1.5
GT transcript (oracle)
62.3±2.6
89.8±1.7
68.1±2.1
Context-only (oracle context)
58.8±2.0
85.4±1.4
63.1±2.8
Table 1: Primary four-condition Breakfast audit (mean ± std over 4 splits). The boundary-aware recognizer defines the primary matched non-oracle regime; the stricter boundary-free row is shown separately because it changes the history-recovery pipeline R .
Separates oracle provenance from context predictability.
Boundary-independent query/history
28.1±1.9
47.5±1.8
+19.4[+16.4,+22.4]
Removes annotated boundaries from query scheduling and recovered history.
Table 2: Key Breakfast controls. Each row addresses a different alternative explanation. The no-video provenance probe is separately retrained, so its oracle-context score ( 59.2 ) need not equal the main context-only baseline ( 58.8 ).
Figure 2: Train–test provenance intervention. Holding the recognizer-trained checkpoint fixed yields a +14.6 test-time oracle contrast ( [+11.0,+18.3] ); the off-diagonal cells expose the provenance interaction.
Dataset
Window-rec.
BFR
BA
GT
Breakfast
44.4±1.2
26.3±0.9
30.3±3.1
62.3
50 Salads
74.7±0.7
43.2±4.3
46.0±3.5
53.7
GTEA
99.6±0.1
66.2±2.7
70.2±4.2
74.2
Table 3: Boundary information in history recovery. Window-recognition accuracy measures the past-window labeler itself; BFR and BA are downstream anticipation Top-1 with boundary-free and boundary-aware recovered histories.
Setting
Recognizer
GT
ΔPH
95% split-level interval
Scope
Breakfast
30.3±3.1
62.3±2.6
+32.0
[+24.1,+39.8]
primary audit
50 Salads
46.0±3.5
53.7±2.4
+7.7
[+5.4,+9.9]
next-action audit setting
GTEA †
70.2±4.2
74.2±3.8
+4.0
[+1.4,+6.6]
diagnostic next-action
Assembly101 †
18.9±4.4
19.4±3.9
+0.4
[−3.4,+4.2]
diagnostic next-action
EPIC-100 †‡
14.7
15.0
+0.3
—
diagnostic, n=1
Table 4: Cross-setting scope test. GTEA, Assembly101, and EPIC-100 ( † ) use diagnostic next-action settings rather than the datasets’ standard anticipation benchmarks. EPIC-100 ( ‡ ) is a single-run low-accuracy diagnostic.
β=.1
β=.2
β=.3
β=.5
ΔPH
+2.0
+5.2
+3.8
+2.4
95% CI (per video)
[−3.6,+7.5]
[+0.5,+9.8]
[+0.4,+7.1]
[+0.3,+4.4]
95% CI (per split)
[−8.3,+12.3]
[−4.0,+14.3]
[−2.5,+10.0]
[−1.5,+6.2]
Table 5: Standard 50 Salads LTA re-implementation. Point gaps are GT minus recognizer MoC. The supplement reports the corresponding condition means and full protocol details.
Figure 3: Estimator-relative sensitivity on Breakfast. Left: history-dose response. Right: recognizer-history performance as controlled history noise decreases. The second panel directly demonstrates that improving recovery changes the matched non-oracle score and therefore the measured ΔPH(R) .
Figure 4: Breakfast decomposition. The latest action alone captures a large fraction of the context-only gain; exact ordering adds comparatively little.
Evidence
What it addresses
Fixed checkpoint: +14.6
Not only a consequence of training under cleaner history.
Matched regimes: +32.0
Primary estimator-relative audit gap.
No-video provenance: +26.8
Not merely “context is predictive.”
Boundary-independent: +19.4
Annotated query/history boundaries are not sufficient.
Table 6: Evidence hierarchy. Each control targets a different rival explanation.
Appendix figures & tables17 assets
Supplementary material from the paper’s appendix.
Appendix
Work
Observed-past source
Relevance
Uncertainty-aware anticipation Abu Farha and Gall [2019]
Clean/GT and recognized observations
Separates clean and inferred observed actions.
Cycle-consistent anticipation Abu Farha et al. [2020]
Visual features
Motivates direct video-to-future prediction rather than fixed transcripts.
AntGPT Zhao et al. [2024]
Symbolic actions derived from observations
Uses semantic action sequences as context.
AAG Benavent-Lledo et al. [2025]
GT, recognizer-, or VLM-derived history
Makes history provenance a first-order modeling choice.
Appendix
Table 7: Examples of observed-past representations in prior work.
Figure 5: Task definition. The model observes only the procedural prefix available before prediction time. Future frames and the target label are never model inputs.
Figure 6: Operationalization of the estimator-relative privileged-information gap. The matched oracle-history and recovered-history regimes share task, architecture family, targets, visual construction, optimization, and training budget, while history provenance differs.
Table 10: Boundary-independent query and history-recovery control (Breakfast, 4 splits). Queries start at feature-frame 64 and repeat every 60 feature frames; the visual window is 32 feature frames, and the boundary-free history recognizer uses 16-feature-frame windows with stride 8.
Dataset
Window-recog.
BFR
BA
Drop
GT
Breakfast
44.4±1.2
26.3±0.9
30.3±3.1
−4.0
62.3
50 Salads
74.7±0.7
43.2±4.3
46.0±3.5
−2.8
53.7
GTEA
99.6±0.1
66.2±2.7
70.2±4.2
−4.0
74.2
Appendix
Table 11: Boundary-free versus boundary-aware history recognition.
History length H
0
1
2
4
8
GT history
23.8
51.0
61.9
60.0
60.6
Recognizer history
23.8
27.4
29.2
32.2
31.0
Appendix
Table 12: History-length dose response on Breakfast.
Dataset
Backbone
#cls
Video
Rec.(BA)
Rec.(BFR)
GT
ΔPHBA
ΔPHBFR
Breakfast
I3D
47
21.7
30.3±3.1
26.3±0.9
62.3±2.6
+32.0
+36.0
50 Salads
I3D
19
40.7
46.0±3.5
43.2±4.3
53.7±2.4
+7.7
+10.5
GTEA †
I3D
11
67.3
70.2±4.2
66.2±2.7
74.2±3.8
+4.0
+8.0
Assembly101 †
TSM
86
21.3
18.9±4.4
—
19.4±3.9
+0.4
—
EPIC-100 †‡
TSN
331
14.4
14.7
—
15.0
+0.3
—
Appendix
Table 13: Full cross-setting audit. The 50 Salads row is the next-action audit setting; the standard long-term-anticipation re-implementation is reported separately below.
Observed history
β=.1
β=.2
β=.3
β=.5
Recognizer
7.6
6.2
4.9
4.1
GT transcript
9.5
11.3
8.7
6.5
ΔPH
+2.0
+5.2
+3.8
+2.4
95% CI (per video)
[−3.6,+7.5]
[+0.5,+9.8]
[+0.4,+7.1]
[+0.3,+4.4]
95% CI (per split)
[−8.3,+12.3]
[−4.0,+14.3]
[−2.5,+10.0]
[−1.5,+6.2]
Appendix
Table 14: 50 Salads under the standard long-term anticipation protocol (observe 20% , predict β ; MoC). Gaps are computed from unrounded paired values and may differ slightly from subtracting displayed rounded means.
Table 16: Decomposition of privileged-history signal (GT history, no observation-window video).
Probe input
Act.@1 (%)
History only
59.1±1.8
State only
46.5±2.1
History + state
59.2±2.2
Appendix
Table 17: Source of context-only probe signal on Breakfast.
Probe context
Act.@1 (%)
Recognizer context
32.5±1.7
GT context
59.2±2.5
Privileged-context gap
+26.8±2.8
95% Student- t interval
[+22.3,+31.2]
Appendix
Table 18: No-video provenance probe on Breakfast (4 splits). This is a separately retrained experiment; its GT score need not equal the main 58.8% context-only baseline.
Benchmarks can run without determining what their results license. We freeze a large evaluation collection and attempt to replay its historical claims. Most units stop because the evidence required for replay is not bound. Where replay is possible, different claims remain stable at different resolutions. We make this otherwise implicit inference step explicit and executable.
LLM benchmark scores can be precise even when the observation protocol does not identify the behavioral property they are intended to measure. In a controlled, solver-grounded setting, we formalize a protocol-level identifiability audit over a finite behavioral policy class: given policies H, observation support O, and estimand τ, we test whether O separates every pair with different τ. The audit requires zero model calls and resolves our diagnostic case: base-only observation collapses seven frozen deterministic policies into one equivalence class; full support yields seven classes and no cross-estimand collisions; every leave-one-out support retains a constructive collision witness. Empirically, both constrained-generation variants have pair-validity 1.0, yet base accuracy and selective-response fidelity diverge - 0.620 versus 0.324 across six balanced oracle-transition directions (cluster-bootstrap 95% CI [0.600, 0.642] vs. [0.304, 0.345]) - and the gap recurs on a second deterministic source (0.646 vs. 0.331). The audit also synthesizes a minimum identifying support O∗ for the frozen policy class: two cells instead of the full 36-cell tensor. This case shows how evaluation-design validity can be checked structurally before model inference and why base correctness does not determine intervention-response fidelity.
Junhao Luo, Ning Huang, Ziqi Sha +2
School of Statistics and Data Science, Southwestern University of Finance and Economics
Video understanding is increasingly performed by multi-stage LLM agents that separate temporal grounding, visual observation, and reasoning. Yet these stages are typically evaluated on different benchmarks and distributions, making it difficult to determine where hallucinations originate. We first organize existing benchmarks around these stages and show that their scores provide inconsistent diagnostic signals: stronger stage-level performance does not reliably imply lower downstream hallucination, and even benchmarks targeting the same capability can disagree. We therefore introduce a causal stage-intervention protocol that overwrites individual stages while holding the downstream task fixed. Across 60,008 runs on three video-agent architectures, we find that grounding is the dominant source of downstream error, with roughly four times the causal impact of corrupting visual observations. Successful grounding depends primarily on locating the correct region rather than precise temporal overlap, explaining why standard mIoU metrics poorly predict downstream reliability. We further find that incorrect evidence is substantially more harmful than missing evidence. Finally, auditing existing benchmarks against these interventions reveals that their scores do not reliably predict causal cascade sensitivity and can fail under distribution shift. These results motivate intervention-based, stage-aware evaluation for trustworthy video agents.