Agents' Last Doubt: Knowing When to Act and When to Step Back in Tool-Using Agents
Organizations: Iowa State University · University of Notre Dame · Rutgers University · Liquid AI ·
Abstract
Tool-using LLM agents repeatedly face decision points under uncertainty, choosing between autonomous action, additional information gathering, and human escalation. These decisions require balancing task success against interaction cost and the risk of irreversible errors. Learning to make these trade-offs is challenging because existing interaction trajectories record only the outcomes of actions taken, leaving the consequences of alternative actions unobserved. To address this gap, we construct a counterfactual dataset containing 3,115 action outcomes from 1,036 decision points in ToolSandbox. At each decision point, we execute each legal action and evaluate its downstream outcomes based on task completion, interaction cost, and irreversible errors. Using this dataset, we train SURE-Act, a controller that selects actions for a frozen backbone agent at inference time. Our experiments show that learning to rank alternative actions improves offline action-selection utility by 0.0309 over a regression-only baseline. We further show that adding SURE-Act enables end-to-end gains of up to 0.0575 in ToolSandbox's Overall Score with the Qwen3-4B agent. Moreover, SURE-Act outperforms adapted decision rules from SAGE-Agent and Calibrate-Then-Act by 0.1506 and 0.1438, respectively. This work establishes the first counterfactual dataset for ToolSandbox and provides actionable insights into decision-making under uncertainty for tool-using agents.
Figures & tables
| Method | Frozen | Executed | Declines | Signal |
|---|---|---|---|---|
| Value-of-information clarify | ✓ | ✓ | prior | |
| Budgeted env. queries | ✓ | ✓ | budget | |
| Calibrate then act | ✓ | ✓ | threshold | |
| Abstention and escalation | ✓ | ✓ | heuristic | |
| Uncertainty-shaped RL | reward | |||
| Replay for blame | ✓ | ✓ | branches |
| Meta-action | Records | Success | Cost | Critical |
|---|---|---|---|---|
| ask the user | 1028 | 0.441 | 0.396 | 0.043 |
| search, read only | 1008 | 0.574 | 0.356 | 0.048 |
| act reversibly | 861 | 0.564 | 0.364 | 0.034 |
| commit irreversibly | 218 | 0.471 | 0.373 | 0.037 |
| all | 3115 |
| Population | Gain | Better | Floor |
|---|---|---|---|
| Development pool, 8B | +0.0344 0.0082 | 20/22 | +0.0068 |
| Unseen families, 8B | +0.0216 0.0093 | 18/21 | +0.0011 |
| Unseen families, 4B | +0.0575 0.0095 | 20/22 | -0.0012 |
| Unseen families, 14B | +0.0252 0.0101 | 17/20 | +0.0013 |
| Rule | score | vs agent | better | rate | ours over it |
|---|---|---|---|---|---|
| SURE-Act | 0.451 | +0.0299 0.0104 | 17/22 | 0.1917 | |
| SAGE-Agent | 0.300 | -0.1224 0.0142 | 1/22 | 1.0000 | +0.1506 22/22 |
| Calibrate-Then-Act | 0.307 | -0.1152 0.0143 | 0/22 | 1.0000 | +0.1438 21/22 |
| agent run twice | 0.418 | -0.0051 0.0033 | 11/22 | 0.0000 |
| Rule | Rate | Turns | Cost |
|---|---|---|---|
| SURE-Act | 0.192 | +0.133 | -0.068 |
| SAGE-Agent | 1.000 | +0.543 | +0.080 |
| Calibrate-Then-Act | 1.000 | +0.492 | +0.077 |
| agent run twice | 0.000 | -0.004 | -0.000 |
| Rate | Turns | Gain | Interval | Better | |
| development | |||||
| 2 | 0.089 | -0.091 | +0.0376 | [+0.0148, +0.0605] | 17/21 |
| 3 (ours) | 0.192 | +0.281 | +0.0358 | [+0.0163, +0.0553] | 19/21 |
| 4 | 0.308 | +0.677 | +0.0353 | [+0.0165, +0.0542] | 19/21 |
| 5 | 0.439 | +1.064 | +0.0119 | [-0.0107, +0.0344] | 12/21 |
| floor | 0.000 | -0.008 | -0.0008 | [-0.0080, +0.0065] | 11/21 |
| selector | gain | better on |
|---|---|---|
| SURE-Act | +0.0092 0.0016 | 93/120 |
| cost-aware verbalised | +0.0024 0.0019 | 71/120 |
| multi-signal gate | +0.0023 0.0019 | 78/120 |
| prompted, plain | -0.0016 0.0021 | 57/120 |
| prompted, cost-aware | -0.0028 0.0025 | 58/120 |
| cost-aware entropy | -0.0057 0.0015 | 35/120 |
Appendix figures & tables9 assets
Supplementary material from the paper’s appendix.
Appendix
| Setting | Value |
|---|---|
| Encoder | Qwen/Qwen3-1.7B |
| Epochs | 4 |
| Batch size | 8 |
| Sequence length | 1,024 |
| Learning rate | |
| Utility weight | 1 |
| Change | Paired difference | |
|---|---|---|
| Design choices | ||
| within-checkpoint ranking term | +0.0309 0.0028 | 330 |
| three outcome heads over a scalar | +0.0082 0.0016 | 312 |
| Insensitive to | ||
| a larger encoder | +0.0067 0.0035 | 85 |
| batch size | -0.0028 0.0034 | 90 |
| gain | better on | ||
|---|---|---|---|
| over best fixed action | +0.0092 0.0016 | 93/120 | 0.0001 |
| SURE-Act vs cost-aware verbalised | +0.0068 0.0023 | 80/120 | 0.0003 |
| SURE-Act vs best prompted | +0.0107 0.0022 | 86/120 | 0.0001 |
Tool-Using Agents
Tool-using agents plan and act through external tools, APIs, software interfaces, and environments to complete tasks beyond language generation.
See all 277 papers