Behavior Beyond Text: Evaluating Refusal Transfer Failure in LLM Agents
arXiv:2610.28982v1 Announce Type: new Abstract: While large language models are increasingly deployed as tool-calling agents, their safety evaluations still focus primarily on their ability to refuse harmful requests in text. We investigate whether the refusal behavior in text transfers to tool use. We construct a benchmark of 2,304 prompts across four domains, consisting of matched triplets that present the same harmful or benign request in text-only, standard tool-enabled, and adversarially fr
Read original source
Source record
Research analysis
Research claim
Paper identifier: 2610.28982. Source account: arXiv:2610.28982v1 Announce Type: new Abstract: While large language models are increasingly deployed as tool-calling agents, their safety evaluations still focus primarily on their ability to refuse harmful requests in text. We investigate whether the refusal behavior in text transfers to tool use. We construct a benchmark of 2,304 prompts across four domains, consisting of matched triplets that present the same harmful or benign request in text-only, standard tool-enabled, and adversarially fr
Evaluation record
Recent records to compare: “Paper: Nubank cuts AI agent update cycles from 3 weeks to under 5 days” (Hacker News, Nov 6, 2026); “Cognitive Bias Signatures in Search-Equipped LLM Agents: A Stage-Resolved Analysis” (arXiv, Nov 5, 2026). Shared themes are navigation hints; they have not been verified as the same need or independent corroboration.
What the result supports
Interpret results only for the reported model version, task, data and inference budget. Community votes, downloads or a benchmark position do not establish reliability in a different workflow.
Validity gaps
Check sample selection, baseline configuration, uncertainty, contamination risk, negative results and access to code or weights. No reproduction by WeWorkBuddy is recorded here.
Verification plan
Read the paper or model card and its evaluation appendix. Reproduce one bounded result against the stated baseline, then test a representative user task and record where the conclusion fails.