VeriCUA: Learning Proactive Verification for Reliable GUI Agent Rewards
Organizations: Southwest Jiaotong University · Tsinghua University · University of Electronic Science and Technology of China · National University of Singapore ·
Abstract
Reinforcement learning for computer-use agents increasingly relies on proactive reward agents that interact with the post-execution GUI environment to verify what recorded screenshots cannot reveal. The reliability of such verification hinges on two coupled decisions: what to check and when to stop. Existing methods leave these decisions to prompted foundation models. However, neither scaling up the model nor providing few-shot examples reliably improves verification: prompted Judges ranging from 4B to GPT-5.4 all plateau at 68%-70% macro-average agreement. This is because the value of a check depends on the environment rather than the task alone, and becomes apparent only through execution. Learning from execution is itself constrained, as the Actor's terminal state cannot be faithfully replicated during training, allowing only one verification attempt per state. We introduce VeriCUA, a proactive reward agent that learns its verification strategy from these single attempts. A trainable Judge decides what to check and when to stop, while a frozen Probe executes the checks in the live environment. Online reinforcement learning optimizes the Judge for both verdict correctness and efficient Probe use, with returns normalized across terminal states. Trained only on OSWorld and evaluated without further training on MobileWorld and WebArena-Verified, VeriCUA achieves the highest reward agreement across all three benchmarks and lies on the agreement-cost Pareto frontier among proactive verifiers. It surpasses few-shot GPT-5.4 by 5.36 points with 47.6%-59.8% fewer Probe tokens, and even a 1B VeriCUA exceeds every prompted Judge. As the reward for Actor RL, it raises task success by 3.21 points overall and 5.40 points on held-out multi-application tasks. These results identify the verification strategy, not verifier scale, as the key to reliable GUI rewards.
Figures & tables
| Verifier | Mode | OSWorld desktop | MobileWorld mobile | WebArena-V web | Macro Avg. all envs. |
|---|---|---|---|---|---|
| GPT-5.4 | proprietary reference | ||||
| Prompted VeriCUA | Prompted | 81.88 | 64.00 | 58.50 | 68.13 |
| + few-shot | Prompted | 81.40 | 66.25 | 58.50 | 68.72 |
| Kimi-K2.6 | proprietary reference | ||||
| Prompted VeriCUA | Prompted | 75.85 | 74.00 | 59.00 | 69.62 |
| + few-shot | Prompted | 77.05 | 70.25 | 58.50 | 68.60 |
| Reward source | All | ID | OOD | |
|---|---|---|---|---|
| None (initial policy) | 43.93 | 53.40 | 17.57 | – |
| ZeroGUI | 45.36 | 54.37 | 20.27 | |
| VeriCUA (prompted) | 45.71 | 54.85 | 20.27 | |
| VeriCUA (trained) | 47.14 | 55.83 | 22.97 |
Appendix figures & tables9 assets
Supplementary material from the paper’s appendix.
Appendix
| Behavioral proxy | GPT-5.4 | VeriCUA -4B | |
|---|---|---|---|
| Direct-evidence probes (%) | 47.6 | 61.9 | |
| Aimless scroll and wait (%) | 16.2 | 5.5 | |
| Repeated targets (%) | 19.8 | 13.6 | |
| Dead-end probes (%) | 25.4 | 21.7 |
| Probe | Agreement (%) | 95% CI |
|---|---|---|
| Holo3.1-35B-A3B | ||
| Holo3.1-9B | ||
| Holo3.1-4B |
| Benchmark | Probe |
|---|---|
| OSWorld | Holo3.1-35B-A3B |
| MobileWorld | GUI-Owl-1.5-32B-Think |
| WebArena-Verified | Holo3.1-35B-A3B |
| Setting | Value |
|---|---|
| Judge backbones | Qwen3-VL-2B-Thinking; Qwen3-VL-4B-Thinking; MiniCPM-V-4.6-Thinking |
| Teacher supervision | Kimi-K2.6 Judge traces |
| Training examples | Approximately |
| Random seed | |
| Fine-tuning scope | Full SFT; frozen vision tower and multimodal projector; trainable language model |
| Target masking | Current assistant turn only; previous turns used as context |
| Setting | Value |
|---|---|
| Trainable Judge backbones | Qwen3-VL-2B-Thinking; Qwen3-VL-4B-Thinking; MiniCPM-V-4.6-Thinking |
| Initialization | Rejection-sampled SFT |
| Training set | OSWorld ( tasks) |
| Fixed Actor pool | EvoCUA-32B; Qwen3-VL-4B-Thinking; Holo3.1-35B-A3B; Qwen3.6-27B |
| Fixed Probe | Holo3.1-35B-A3B |
| Verification budget | At most Probe rounds and GUI steps per round |
| Setting | Value |
|---|---|
| Actor model | Qwen3-VL-4B-Thinking |
| Training set | OSWorld ( single-application tasks) |
| Interaction | Screenshot observations, PyAutoGUI actions, -step horizon |
| GRPO batch | tasks rollouts |
| Advantage estimator | GRPO |
| PPO clipping |
| Outcome | Probe used | Reward |
|---|---|---|
| Correct | No | |
| Correct | Yes | |
| Incorrect | No | |
| Incorrect | Yes | |
| Unresolved or invalid | – |
| Behavioral metric | Prompted | Trained | |
|---|---|---|---|
| Probe attempt rate (%) | 5.70 | 4.28 | |
| Failed Probe dispatch (%) | 16.6 | 3.2 | |
| Unresolved uncertain (%) | 1.9 | 0.4 | — |
| False-negative rate (%) | 10.0 | 4.6 | |
| Agreement with executable evaluator (%) | 77.8 | 81.4 |
AI Agent Reliability
AI agent reliability studies whether tool-using systems act correctly, consistently, safely, and recoverably across changing tasks and environments.
See all 338 papers