Emerging Trends in AI Agent Evaluation
1Princeton University 2Stanford University 3UK AI Security Institute 4Brookings Institution 5UC Berkeley 6Institute for Advanced Study
*Corresponding authors: {felix_chen, rabanser, arvindn}@princeton.edu, sayashk@berkeley.edu
Overview
The how, what, and who of agent evaluation
Questions of interest for evaluation of AI agents today no longer implicate models alone, but rather expand to the larger systems around them, consisting of scaffolds (also referred to as “agent harnesses”), tools, testing environments, and user interfaces. As a result, long-standing concerns may manifest differently for agents than they did for models, and previous assumptions may not hold.
Model evaluation and agent evaluation
Model evaluation grades a single response against a reference answer. Agent evaluation covers a system of model, scaffold, and tools that acts in an environment over many steps, sometimes with a human stepping in. Instead of a reference answer, the grader uses tests, a rubric, or an LLM judge to check the trajectory (the process), the final state (the result), or both.
Swipe sideways to see the whole diagram.
Parts 1–3
The 33 trends
We structure our overall findings in three parts: the how, what, and who, of evals. While several trends straddle multiple categories, our goal is to locate them alongside relevant trends expanding upon similar themes. Our selection of trends is opinionated and the selection of citations within each trend is illustrative—neither is intended to be comprehensive.
Which trends apply to your work?
Answer any of the questions. Trends that match your answers stay open and the others are folded. Trends that match two or more answers are marked “start here”.
Part 1 How
Improved evaluation science and methods
Methods and concerns in Part 1
Part 2 What
Expanding the research agenda for evaluation
Three layers of evaluation
The shading runs from automation (left) to augmentation (right).
Part 3 Who
The evolving evaluator ecosystem
Timeline of the evaluator ecosystem
Select an event to read more. Filter by type of actor.
Benchmark saturation
Responses to saturation
- Scrutinize the benchmark’s validity
- Build a harder successor benchmark
- Refresh the task set with new content
- Keep the tasks that still discriminate
- Reuse it for metrics beyond accuracy
Where contamination can enter an agent evaluation
also present in model evaluation
additional surfaces for agents
Test equating for a dynamic benchmark
Kinds of validity
Each kind of validity concerns a different link between a score and a claim.
Accuracy and cost
An agent is on the Pareto frontier if no other agent is both cheaper and more accurate.
pass@k and pass∧k
pass@k counts a task if any of k runs succeeds. pass∧k counts it only if all k runs succeed.
Attributing a change in performance
The environment and budget are fixed. If the model and the scaffold both change, you cannot tell which one caused a difference. A full factorial design separates the two and tests their interaction.
Cost of an experiment
Cost = configurations × tasks × runs per task × API cost per run. The configurations come from the design in 1e. Change them there, or edit the numbers here.
The paper reports that one full run of MirrorCode costs about $50,000 in API credits for one model. Engineering and maintenance cost extra.
A log excerpt
The outcome is scored as a success. Open the log to see what the agent did.
Task
Reproduce the results table from the repository.
Outcome
Scored as success
Task-completion time horizon
The time horizon is the task length, in human expert time, at which an agent is predicted to succeed with a given reliability.
Trends 2a–2d
Human-agent interaction
Settings for evaluating human-agent interaction
Three layers of evidence for economic evaluation
- 1. Capabilitieswhat agents can do on economically relevant tasksGDPval, APEX-agents, Remote Labor Index
- 2. Usagehow agents are actually used in work todayAnthropic Economic Index, AI and Economy Atlas
- 3. Impacteffects of agent usage on work and institutionsAI Economic Indicators, Causal Studies
Behavior that can undermine an evaluation
Gaming the evaluation
requires no knowledge of the evaluator’s intent
- Specification gaming
- satisfying the stated evaluation without following its intent
- Reward hacking
- optimizing the metric at the expense of the underlying phenomenon of interest
Evaluation awareness
the agent identifies that it is in an evaluation, and then modifies its behavior:
- Scheming
- covertly pursuing misaligned goals while hiding capabilities and objectives
- Sandbagging
- intentional underperformance in an evaluation
- Alignment faking
- selective compliance during training to prevent alterations
Attacks on the evaluation environment
Agents often get access to external tools and resources during an evaluation. This opens paths to shortcuts and cheating. Select an attack to see its path.
Channels of influence between labs and evaluators
Influence goes in both directions.
developers
Fields whose expertise can shape agent evaluation
The selection is illustrative, not exhaustive.
Conclusion
There is a clear window now to bring in new participants, methods, and ideas for agent evaluations, and to meet the pressing need for rigorous evidence in a fast moving space.
Takeaways
All takeaways
The best practices, research directions, and practical considerations from every trend.
Terms
Definitions
References
All references
About
SAgE Science of Agent Evaluation
The SAgE group at Princeton University works on advancing the systematic study and evaluation of agents.
Corresponding authors
Citation
@misc{chen2026emerging,
title = {Emerging Trends in AI Agent Evaluation},
author = {Chen, Felix and Rabanser, Stephan and Kirgis, Peter and Nadgir, Nitya and Bommasani, Rishi and Dubois, Magda and Tabassi, Elham and Ududec, Cozmin and Reuel, Anka and Koyejo, Sanmi and Kapoor, Sayash and Narayanan, Arvind},
year = {2026}
}