Papers
Topics
Authors
Recent
Search
2000 character limit reached

LoopArena: Benchmarking Models as Runtime Controllers for Loop Engineering

Published 28 Aug 2026 in cs.AI | (2608.28281v1)

Abstract: Loop Engineering is emerging as a practice for organizing development work around coding agents. Instead of writing each prompt by hand, practitioners design loops that monitor progress, assign work, run checks, and decide what the agent should do next. Even with a capable coding agent, a loop may trust a stale progress note, skip needed verification, spend its budget in the wrong direction, or stop before the task is safe to submit. Yet the final outcome of one end-to-end run cannot tell whether success or failure reflects the loop's guidance or the coding agent's ability to carry out the task. We introduce LoopArena, a benchmark for evaluating how well one model can guide a separate coding agent through a long-running task. The model under evaluation is the \textbf{Controller}: after each coding round, it receives a structured summary of the run and instructs a separate, fixed coding agent, the \textbf{Worker}, on what to do or verify next, or decides whether to stop. LoopArena evaluates this ability in three complementary settings that differ in execution scope and cost. Type I scores next-step Loop Contract selection through execution-validated questions without running the Worker at evaluation time. Type II executes repeated control over a selected slice of a full task, while Type III evaluates the paired full task from its original state. On full tasks, the best observed Strict Success Rate is \textbf{24.69\%}, leaving substantial room for improvement in long-horizon loop control. Across Controllers, the paired reduction in estimated inference cost averages \textbf{64.4\%}, and Type II produces a similar ordering under the main Core criterion (Spearman's (ρ=\textbf{0.9747})). We release the benchmark data and evaluation code at https://github.com/AMAP-ML/LoopArena .

Summary

  • The paper introduces a benchmark LoopArena to isolate model Controllers-in runtime scenarios.

LoopArena isolates a component that is usually confounded with the coding agent itself: the model responsible for managing an ongoing execution loop. In conventional repository-level coding benchmarks, the evaluated object is an integrated model–harness system whose final repository state reflects the Worker model, prompt protocol, tool interface, state management, and termination policy. “LoopArena: Benchmarking Models as Runtime Controllers for Loop Engineering” (2608.28281) instead fixes the coding Worker and execution environment while varying a separate Controller. The benchmark therefore treats runtime loop control as an independently measurable capability.

Evaluation object and harness design

The benchmark uses a two-agent architecture. The Worker performs repository exploration, code modification, command execution, testing, and other tool-mediated operations within the inner loop. The Controller operates in an outer loop: after each Worker segment, it determines whether the Worker should advance, verify, or stop, and, when continuing, specifies a bounded next assignment.

The Controller does not access the repository directly. At every handoff, a temporary Reporter receives a copy of the Worker conversation and read-only workspace access. It produces a structured summary covering task context, completed work and current state, verification evidence, and unresolved issues. The harness converts this report and the cited Worker turns into an Evidence Packet. The Controller consumes the Packet and its own persistent decision history, then emits a validated Loop Contract. The harness renders a continuing Contract as the next Worker instruction without another model call.

This information boundary is central to the paper’s causal interpretation. The Controller cannot compensate for weak coding performance by editing files or running tests itself; its influence is restricted to selecting and specifying subsequent Worker segments. Conversely, the Worker, tools, evaluator, execution budget, Reporter configuration, and control schema remain fixed across Controller comparisons.

Figure 1

Figure 1: LoopArena separates the Worker’s repository interaction from the Controller’s runtime supervision through a Reporter-generated Evidence Packet and a structured Loop Contract.

The design distinguishes adaptive control from persistent goal repetition through two reference policies. No control gives the Worker the task once and lets it operate autonomously. Fixed control repeatedly instructs the Worker to continue toward the original goal without inspecting current evidence. The latter is particularly useful because it tests whether apparent benefits of supervision arise merely from repeated goal restatement rather than state-dependent intervention.

Three evaluation settings

LoopArena provides three evaluation granularities with different execution costs. Type I evaluates an isolated control decision. Type II evaluates repeated control over a selected task slice from an intermediate workspace. Type III evaluates the complete repository task from its original state.

Figure 2

Figure 2: Type III evaluates complete tasks, Type II evaluates paired intermediate task slices, and Type I evaluates frozen control decisions through replay-validated four-way selection.

Type I contains 90 questions derived from restorable control points in Controller-guided trajectories: 40 from SlopCodeBench and 50 from BeyondSWE. Each question presents an Evidence Packet and four complete candidate Loop Contracts. The candidates are replayed from the same restored state under two predeclared matched schedules. A candidate is accepted as correct only if it is the unique winner under both schedules, using downstream success and, when necessary, downstream control-cycle and Worker-turn counts. Items with unstable or non-unique winners are rejected.

This construction avoids treating the originally recorded Contract as an oracle. The recorded decision is merely one candidate; downstream executable consequences determine the label. Once the benchmark is frozen, evaluating a new Controller requires only one four-way response and no Worker execution. Type I consequently measures decision quality at low marginal cost, although it does not measure the Controller’s ability to maintain coherent behavior across a complete trajectory.

Type II begins from a prepared intermediate workspace and evaluates one coherent development stage. Its evaluator checks cumulative requirements through that stage. Type III evaluates the paired task from its original state, including initial investigation, implementation, verification, recovery, and termination. The pairing permits direct comparison of a lower-cost task-slice evaluation with its full-task counterpart.

Benchmark composition and metrics

The executable settings contain 27 paired task instances: 11 from SlopCodeBench and 16 from BeyondSWE. Every policy is evaluated with three independent runs per task. The primary executable metric is Strict Success Rate, which counts a run as successful only when it passes the frozen evaluator and satisfies the execution protocol. Type I uses Contract Accuracy, with malformed, missing, multiple, or otherwise unparsable responses counted as incorrect.

Inference cost is estimated from recorded input and output tokens using frozen public list prices and a no-cache assumption. Controller-guided costs include Worker, Reporter, and Controller calls; no-control and fixed-control costs include Worker calls. Repository execution, evaluator computation, storage, and other infrastructure costs are excluded. The reported dollar values should therefore be interpreted as standardized model-inference estimates rather than realized deployment expenditure.

The benchmark compares five Controllers—Qwen3.7-Plus, DeepSeek-V4-Flash-0731, GLM 5.2, GPT-5.5, and Claude Opus 4.8—while using Qwen3.7-Plus as the shared Worker and Reporter configuration. This setup makes the principal comparison a Controller comparison, but it also means that the findings are conditional on the selected Worker and harness interface.

Main results

The full-task results show that runtime loop control remains difficult. Type III Strict Success Rate ranges from 16.05% to 24.69% across the five Controllers. GPT-5.5 obtains the highest score at 24.69%, followed by Qwen3.7-Plus at 23.46%, Claude Opus 4.8 at 20.99%, DeepSeek-V4-Flash-0731 at 19.75%, and GLM 5.2 at 16.05%.

Policy Type II SSR Type II cost/run Type III SSR Type III cost/run
No control 39.51% $1.04 | 18.52% |$2.01
Fixed control 46.91% $1.08 | 18.52% |$5.58
Qwen3.7-Plus 48.15% $4.30 | 23.46% |$6.89
DeepSeek-V4-Flash-0731 45.68% $2.10 | 19.75% |$10.24
GLM 5.2 37.04% $1.63 | 16.05% |$4.86
GPT-5.5 51.85% $5.00 | 24.69% |$18.84
Claude Opus 4.8 48.15% $5.87 | 20.99% |$16.82

The comparison between fixed and no control is especially informative. On Type II, fixed control improves success from 39.51% to 46.91%. On Type III, however, both policies achieve exactly 18.52%. Repeatedly restating the original goal helps on bounded task slices but provides no full-task benefit over unguided execution. The implication is that long-horizon control requires adaptation to changing execution evidence rather than persistent restatement of a static objective. The result should not be interpreted as showing that all fixed-control policies are ineffective: it concerns the deterministic policy and protocol specified by LoopArena.

Controller-guided policies generally improve over the references on Type III. Four of the five Controllers exceed the 18.52% reference score, although the absolute success rates remain low. The improvement is not attributable solely to additional compute: fixed control costs $5.58 per full-task run while no control costs$2.01, yet their success rates are identical. Controller-guided execution also incurs substantial overhead from longer Worker trajectories and Reporter and Controller calls. For example, GPT-5.5 reaches 288.90 Worker turns and 13.46 control cycles on average, with an estimated total cost of $18.84 per run. Its higher success rate is therefore accompanied by a large resource increase.

Type II substantially reduces evaluation cost. Across Controllers, the paired reduction relative to Type III averages 64.4%. The reduction preserves the closed-loop interaction and evaluator-based scoring; it arises from starting at a prepared intermediate state and evaluating only one task slice. Under the main SCBench Core criterion, the Type II and Type III Controller rankings have Spearman correlation $\rho=0.9747.NostrictlyorderedControllerpairreversesitsordering,althoughonepairistiedinonecomparison.ForthisControllerpanelandscoringcriterion,theresultsupportsTypeIIasalower−costproxyforcomparativeevaluation,whileTypeIIIremainsnecessaryformeasuringcomplete−taskperformance.</p><p>Theproxyclaimissensitivetotheevaluatordefinition.WhenSCBenchusesallchecksratherthantheCorechecks,theTypeII–TypeIIIrankcorrelationfallsto0.1481;underanall−non−errorcriterionitbecomes−0.2962.Thus,<strong>thestrong0.9747correlationisnotacriterion−independentpropertyoftaskslicing</strong>.ItdependsmateriallyonthemainCorescoringruleandshouldnotbegeneralizedtoarbitraryevaluatorconstructions.</p><p>TypeIproducesadifferentviewofControllercompetence.ContractAccuracyrangesfrom72.22<p>Thelow−costsettingalsorevealssubstantialdifferencesinevaluationexpense.For90questions,estimatedcostrangesfrom. No strictly ordered Controller pair reverses its ordering, although one pair is tied in one comparison. For this Controller panel and scoring criterion, the result supports Type II as a lower-cost proxy for comparative evaluation, while Type III remains necessary for measuring complete-task performance.</p> <p>The proxy claim is sensitive to the evaluator definition. When SCBench uses all checks rather than the Core checks, the Type II–Type III rank correlation falls to 0.1481; under an all-non-error criterion it becomes -0.2962. Thus, <strong>the strong 0.9747 correlation is not a criterion-independent property of task slicing</strong>. It depends materially on the main Core scoring rule and should not be generalized to arbitrary evaluator constructions.</p> <p>Type I produces a different view of Controller competence. Contract Accuracy ranges from 72.22% to 87.78%, with GPT-5.5 highest at 87.78% and Qwen3.7-Plus lowest at 72.22%. All 450 responses across the five Controllers parse successfully, yielding a 0% Invalid Rate. GPT-5.5 answers 79 of 90 questions correctly; DeepSeek-V4-Flash-0731 answers 70, Claude Opus 4.8 answers 69, and GLM 5.2 answers 67.</p> <p>The low-cost setting also reveals substantial differences in evaluation expense. For 90 questions, estimated cost ranges from 0.31 for DeepSeek-V4-Flash-0731 to$13.68 for Claude Opus 4.8. GPT-5.5 reaches the highest accuracy at $9.43. Deterministic shortcuts perform poorly: majority answer position achieves 31.11%, uniform choice 25.00%, shortest candidate 23.33%, and lexical overlap 18.89%. Since all candidate contracts share the same action label within each question, action-only selection is equivalent to uniform choice. These results indicate that Type I requires integrating the Packet evidence with the candidate instruction rather than exploiting the tested surface statistics.

Execution behavior and failure modes

The resource measurements show that Controller-guided runs are not simply more frequent supervisory interventions layered onto otherwise identical trajectories. Type II Controller runs average between 51.38 and 80.12 Worker turns and between 3.04 and 4.19 control cycles. Type III runs average between 139.81 and 288.90 Worker turns and between 8.60 and 13.46 control cycles. Long-horizon operation therefore expands both the inner-loop execution and the number of outer-loop decisions.

The study also records protocol failures caused by excessively long Controller outputs. Among 1,614 Controller calls in the reported DeepSeek and GLM diagnostic subset, 162 reach the 20,480-token output limit. GLM 5.2 is particularly affected: 18.70% of its Type II Controller calls and 20.39% of its Type III calls reach the limit. At the evaluation level, 54.76% of GLM Type II evaluations and 75.93% of GLM Type III evaluations contain at least one such call. These events count as protocol failures, so the measured success rate reflects both runtime supervision quality and compliance with the structured Contract interface.

Run-to-run variability is also nontrivial. For GPT-5.5 on Type III, only three of 27 tasks succeed in all three repeats, while 17 succeed in none, four in one, and three in two. Qwen3.7-Plus succeeds on all three repeats for only three tasks as well. Consequently, aggregate Strict Success Rate is estimated from a small task panel with appreciable stochastic variation. The three-repeat design provides some indication of stability but does not eliminate uncertainty in task-level comparisons.

Source-specific results suggest that aggregate scores conceal heterogeneous behavior. GPT-5.5 achieves 24 of 33 successful Type II SCBench runs and 18 of 48 BeyondSWE runs, while GLM 5.2 achieves 8 of 33 and 22 of 48, respectively. On Type III, GLM 5.2 succeeds on 13 of 48 BeyondSWE runs but none of 33 SCBench runs. The Controller ranking is therefore dependent on the mixture of long-horizon iterative tasks and broader software-engineering tasks represented in the benchmark.

Relation to existing evaluation paradigms

LoopArena differs from final-state coding benchmarks such as SWE-bench and long-horizon coding evaluations because it does not score the complete coding stack as a single object. It also differs from process benchmarks that label individual tool-use steps or critiques without executing their downstream consequences. Type I resembles process-level decision evaluation, but its labels are established through replayed execution rather than annotation alone. Types II and III then reconnect those decisions to executable outcomes.

The benchmark is also distinct from evaluations that compare complete harnesses. In such settings, improvements may result from changes to context management, tool design, state representation, model assignment, termination logic, or loop structure. LoopArena fixes these factors and evaluates only the model occupying the Controller role. This controlled decomposition makes attribution clearer, but it narrows external validity: a Controller that performs well under LoopArena’s Evidence Packet and Contract schema may not perform similarly under a different harness.

The design is related to manager–worker and auditor–executor systems, as well as to process and outcome supervision. Its specific contribution is to make the runtime supervisor itself the controlled evaluation target while retaining a downstream coding executor and machine-verifiable task evaluator. This permits three linked measurements: isolated decision correctness, task-slice control, and full-task control.

Limitations and open questions

The benchmark is restricted to repository-level coding tasks and one Controller–Worker organization. The Worker is fixed to Qwen3.7-Plus, and the Reporter uses the same configuration, so the reported Controller rankings may depend on the compatibility between those models and the prescribed information interface. The paper does not establish whether the same rankings hold with weaker, stronger, heterogeneous, or multi-agent Workers.

The benchmark also contains only 27 paired executable tasks and three repeats per task. The strong Type II–Type III correlation is observed for five Controllers under the Core scoring criterion, but the sensitivity analysis demonstrates that the correlation can collapse or reverse under alternative SCBench criteria. The evidence therefore supports a conditional cost-reduction result rather than a general guarantee that task slices preserve full-task rankings.

Type I avoids marginal Worker execution but requires substantial one-time construction cost, including replaying all four candidates under two schedules. Its labels are operationally grounded in success and downstream resource usage, yet the winner rule imposes a particular preference ordering: success dominates, followed by control cycles and Worker turns. Different deployment objectives could select a different Contract among multiple successful candidates. The paper leaves open how robust Type I rankings are to alternative replay seeds, winner definitions, candidate-generation procedures, and Controller interfaces.

Finally, protocol compliance is part of the score. Output-limit exhaustion and invalid Contracts count as failures, which is defensible for an executable system but conflates supervisory judgment with interface reliability. Separating these failure modes could clarify whether a model failed to choose an appropriate next action, failed to express it in the required schema, or generated an excessively long response.

Conclusion

LoopArena establishes a benchmark in which runtime loop control is evaluated independently of the coding Worker. Its Type I, Type II, and Type III settings measure control decisions, task-slice supervision, and complete-task management at progressively higher execution cost. The results show high Type I decision accuracy but low full-task success, with the best Type III Strict Success Rate reaching only 24.69%. Fixed goal repetition improves bounded slices but does not improve complete-task success over no control, supporting the paper’s central distinction between persistent objectives and adaptive supervision.

The paired Type II setting reduces estimated inference cost by an average of 64.4% and reproduces Type III Controller ordering under the main Core criterion with $1.08 | 18.52% |$0, although this relationship is highly sensitive to scoring rules. The benchmark consequently provides a useful controlled framework for studying model-based runtime supervision while leaving open how its conclusions transfer across Workers, harness interfaces, evaluator criteria, and non-coding environments.

Paper to Video (Beta)

No one has generated a video about this paper yet.

Whiteboard

No one has generated a whiteboard explanation for this paper yet.

Explain it Like I'm 14

1. What is the paper about?

The paper introduces LoopArena, a test for measuring how well an AI model can manage another AI model that writes code.

Imagine a team project with two people:

  • The Worker is the programmer. It explores files, writes code, runs tests, and fixes problems.
  • The Controller is the manager. It watches the Worker’s progress and decides what the Worker should do next.

Most coding tests ask whether one AI can finish a programming task. LoopArena asks a different question:

Can an AI manager guide a coding AI successfully through a long and complicated task?

This is called runtime loop control. The “loop” is the repeated cycle of working, checking progress, giving new instructions, and working again.

2. What questions does the research ask?

The researchers mainly want to find out:

  1. Can AI models make good decisions about what a coding agent should do next?
  2. Does guidance from a Controller help the Worker complete more coding tasks?
  3. Is adaptive guidance better than simply repeating the original goal?
  4. Can shorter and cheaper tests give similar results to full, long coding tasks?
  5. Which AI models are best at being Controllers?

The Controller might decide that the Worker should:

  • continue implementing a feature,
  • check whether the code really works,
  • fix a newly discovered problem,
  • investigate something more carefully, or
  • stop because the task is complete.

This matters because a coding agent can sometimes think it is finished when it has only solved one small part of the problem.

3. How did the researchers test this?

The Controller–Worker setup

LoopArena uses a fixed coding model as the Worker. In the experiments, the Worker was Qwen3.7-Plus.

Different AI models were then tested as Controllers, including:

  • Qwen3.7-Plus
  • DeepSeek-V4-Flash-0731
  • GLM 5.2
  • GPT-5.5
  • Claude Opus 4.8

Keeping the Worker the same is important. It is like testing different football coaches while giving each coach the same team. This helps show whether differences come from the Controller rather than from the programmer.

The Worker can use coding tools, inspect the repository, change files, and run tests. The Controller cannot directly change the code. Instead, it receives a carefully prepared summary of what has happened and sends back instructions for the next part of the work.

The Reporter and Evidence Packet

After each Worker round, a temporary Reporter examines the Worker’s conversation and the workspace. It creates a summary containing:

  • what the task requires,
  • what the Worker has already done,
  • what tests or other evidence are available, and
  • what problems remain.

This summary is called an Evidence Packet. It is similar to a progress report given to a manager.

The Controller reads this packet and creates a Loop Contract. This contract says either:

  • what the Worker should do next and when to report back, or
  • that the Worker should stop.

The Controller therefore has to make decisions based on evidence rather than guessing.

Three types of tests

LoopArena has three testing levels:

Test type What it measures Simple explanation
Type I One control decision Can the Controller choose the best next instruction from four choices?
Type II A task slice Can it guide the Worker through one important stage of a larger task?
Type III A full task Can it manage the entire long coding project?

Type I is the cheapest. Researchers already tested the four possible instructions during benchmark construction, so a new Controller only needs to choose one. The Worker does not need to run again.

Type II starts in the middle of a project and tests one stage. This is shorter and cheaper than testing the whole project.

Type III starts from the beginning and tests the complete task, including investigation, coding, testing, fixing, and deciding when to stop.

The tasks came from two existing coding benchmarks: SCBench and BeyondSWE. Altogether, the benchmark included:

  • 90 Type I questions,
  • 27 Type II task slices, and
  • 27 Type III full tasks.

Comparison methods

The researchers also tested two simple reference strategies:

  • No control: the Worker receives the task and works alone.
  • Fixed control: the system repeats the original task goal after every round but does not adapt its instructions to the Worker’s progress.

These comparisons show whether intelligent, changing guidance is actually useful.

How success was measured

A task counted as successful only if it passed the required automatic tests. The main measures were:

  • Contract Accuracy: how often the Controller chose the correct next contract in Type I.
  • Strict Success Rate: the percentage of complete runs that passed all required checks.
  • Estimated cost: how much model usage each run required.

The researchers also compared the rankings from Type II and Type III using Spearman’s rank correlation. In everyday language, this checks whether the cheaper, shorter test ranks the Controllers in almost the same order as the full test.

4. What did the researchers find?

Full coding tasks are still very difficult

On the full Type III tasks, the best Controller achieved a Strict Success Rate of 24.69%. This means that fewer than one in four complete runs passed all the required checks.

The Controller results were:

Controller Type I accuracy Type II success Type III success
Qwen3.7-Plus 72.22% 48.15% 23.46%
DeepSeek-V4-Flash-0731 77.78% 45.68% 19.75%
GLM 5.2 74.44% 37.04% 16.05%
GPT-5.5 87.78% 51.85% 24.69%
Claude Opus 4.8 76.67% 48.15% 20.99%

These results show that making good decisions at individual moments does not automatically mean that the model can manage an entire long project successfully.

Repeating the goal is not enough

On the shorter Type II tasks, fixed control improved success from 39.51% with no control to 46.91%.

However, on the full Type III tasks, fixed control achieved 18.52%, exactly the same as no control.

This suggests that simply repeating “keep working on the original task” may help during a short stage, but it is not enough for a long project. A good Controller must notice what is happening and change its advice. For example, it may need to switch from writing code to testing code, repairing a mistake, or stopping at the right time.

Shorter tests can save a lot of money

Type II cost about 64.4% less than Type III on average. This is a major saving because the Worker does not need to complete the entire long project.

Even more importantly, Type II produced almost the same ranking of Controller models as Type III. The reported correlation was 0.9747, which is very high.

In simple terms, the shorter test usually agreed about which Controllers were better and which were worse. This means Type II could be useful for quickly comparing models before running expensive full-task evaluations.

Individual decisions can be tested cheaply

In Type I, Controller accuracy ranged from 72.22% to 87.78%. GPT-5.5 performed best with 87.78% accuracy.

The models were also much better than simple shortcuts, such as always choosing the same answer or selecting the longest candidate. Every model gave a valid answer, so the invalid-answer rate was 0%.

This shows that Type I is measuring actual decision-making rather than merely rewarding an easy trick.

5. Why is this research important?

LoopArena focuses on a part of AI coding that is often overlooked: managing the process, not just producing code.

A coding agent working on a long task needs more than programming ability. It must also:

  • understand what has already been completed,
  • notice when evidence is weak,
  • choose useful tests,
  • recover from mistakes,
  • avoid stopping too early, and
  • know when the work is truly finished.

The paper shows that this management skill is difficult. Even strong AI models struggled on full tasks, and repeating the original goal did not solve the problem.

The benchmark could help researchers build better AI systems by showing whether a model is good at guiding another model. It may also reduce research costs because Type I and Type II provide cheaper ways to study Controller behavior.

Conclusion

LoopArena is a benchmark for testing AI managers of coding agents. It separates the AI that writes the code from the AI that decides what should happen next.

The main lesson is that successful long-term coding requires adaptive guidance. A Controller must respond to the Worker’s changing situation instead of repeating the same instruction again and again.

The research suggests that:

  • full software projects remain challenging for AI,
  • shorter task-slice tests can be much cheaper while giving similar model rankings, and
  • studying individual control decisions can help researchers understand why an AI coding system succeeds or fails.

In the future, this idea could be extended beyond coding to other tasks where one AI agent supervises another, such as research, data analysis, or planning complex projects.

Practical Applications

Immediate Applications

  • Software engineering: add runtime loop control to coding-agent platforms. A production harness can separate a Controller from a Worker: the Worker edits code and runs tools, while the Controller reviews structured evidence and issues bounded next-step instructions such as “implement,” “run focused tests,” “investigate the failing integration,” or “stop.” This can reduce the risk of prematurely declaring a repository complete, especially on multi-stage maintenance tasks. Dependencies: reliable workspace inspection, accurate test/evaluator signals, persistent conversation state, and safeguards preventing the Controller from authorizing unsafe code changes.
  • Software engineering: use Evidence Packets as an operational audit trail. The paper’s structured summaries—task context, completed work, verification evidence, and remaining issues, with citations to Worker actions—could be integrated into pull-request systems, incident records, or agent dashboards. Human reviewers would receive a compact explanation of what the agent believes has been completed and what remains uncertain. Dependencies: Reporter summaries must be factually grounded; read-only access and citation requirements should be preserved to reduce hallucinated progress reports.
  • AI product development: benchmark and select Controller models independently of Worker models. Organizations can hold the coding Worker, tools, execution budget, and evaluator fixed while comparing candidate Controllers. This enables a more precise procurement or model-routing decision than evaluating complete agent systems as opaque combinations of model and harness. Dependencies: Controller quality may depend on the specific Worker, task distribution, tool environment, and prompt schema; therefore, results should not be treated as universally model-specific.
  • Model evaluation: adopt Type I for low-cost regression testing. The frozen four-way Contract Selection tasks can be used in a model-release pipeline to test whether a new model correctly chooses among continuing implementation, requesting verification, recovery, or stopping. Since Type I requires no Worker execution after construction, it is suitable for frequent nightly or pre-release evaluations. Dependencies: benchmark items require execution-validated answers, careful prevention of leakage, and periodic refreshment to avoid overfitting or contamination.
  • Model evaluation: use Type II as a cost-efficient screening stage. Teams can evaluate Controllers on prepared task slices before committing resources to full Type III runs. In the reported setup, Type II reduced estimated inference cost by an average of 64.4%, while preserving a very similar Controller ordering to Type III, with ρ=0.9747\rho=0.9747 for the studied panel and criterion. Dependencies: the correlation is empirical rather than guaranteed. Type II must be recalibrated for new Worker models, domains, task distributions, and scoring criteria; full-task evaluation remains necessary for final validation.
  • Continuous integration and release management: let a Controller choose the next verification action. After an automated coding agent modifies a repository, a Controller can inspect test results and repository state and select targeted actions—unit tests, integration tests, static analysis, rollback, or human escalation—instead of repeatedly restating the original goal. This follows the finding that fixed goal repetition helped on bounded slices but did not improve full-task performance over no control. Dependencies: tests must provide meaningful coverage, stopping decisions require explicit confidence and escalation policies, and production repositories need rollback and sandboxing mechanisms.
  • Engineering management: identify control bottlenecks in long-running agent workflows. Type I accuracy and Type II/III outcomes can be analyzed by decision type, such as verification, recovery, delegation, or termination. Teams could use these results to prioritize prompt revisions, specialized Controllers, or human review at high-risk handoffs. Dependencies: the benchmark must contain sufficiently diverse examples of failure modes; accuracy on frozen candidates does not by itself establish causal improvement in production.
  • Academic research: establish a controlled baseline for loop-engineering studies. Researchers can reproduce the two-agent harness and compare controllers while fixing the Worker, tools, evaluator, budget, and interface. This provides a cleaner experimental object than comparing complete agent stacks whose differences may arise from several components simultaneously. Dependencies: reproducibility requires access to the released code and task environments, deterministic or well-controlled replay, transparent cost accounting, and independent validation of evaluators.
  • Policy and procurement: evaluate agentic software systems using outcome, cost, and control metrics together. Public-sector or enterprise buyers can require vendors to report strict task success, estimated inference cost, number of Worker turns, control cycles, invalid outputs, and performance under no-control or fixed-control baselines. This makes efficiency and runtime supervision part of acceptance testing rather than relying only on final demonstrations. Dependencies: metrics must be adapted to the buyer’s software stack and risk tolerance; benchmark performance alone cannot certify security, privacy, legal compliance, or maintainability.
  • Daily life and education: improve consumer coding assistants for bounded personal projects. A coding assistant could pause after each meaningful stage, summarize progress, ask for verification when evidence is weak, and avoid unnecessary continuation once requirements are met. This may be useful for students, hobbyist developers, and small teams working on scripts or websites. Dependencies: users need understandable summaries and easy override controls; the low full-task success rates reported in the paper indicate that autonomous use should remain supervised for consequential projects.

Long-Term Applications

  • General-purpose agent orchestration beyond coding. The Controller–Reporter–Worker pattern could be transferred to domains such as data analysis, customer support, enterprise workflow automation, scientific experimentation, and document processing. A domain-specific Worker would execute actions, while a Controller would decide whether to continue, verify, recover, or stop based on structured evidence. Dependencies: each domain needs executable or independently verifiable evaluators, domain-specific Evidence Packet schemas, safe action boundaries, and research showing that Type II-style abbreviated evaluations predict full workflows.
  • Robotics and embodied AI: deploy supervisory controllers for multi-stage tasks. A high-level Controller could direct a robot through exploration, manipulation, inspection, recovery from failed actions, and termination. For example, after a robot attempts warehouse picking, the Controller could request vision-based verification or regrasping rather than issuing the same task objective repeatedly. Dependencies: real-time latency, noisy sensors, physical safety, uncertainty calibration, and robust recovery policies are substantially more demanding than repository-level coding tasks.
  • Healthcare and laboratory automation: introduce evidence-gated workflow progression. In clinical-administrative or laboratory systems, a Controller could review structured evidence before advancing a case—for example, confirming that required records, measurements, or quality checks are present before scheduling the next procedure. The system could also escalate ambiguous cases to a human instead of stopping autonomously. Dependencies: validated domain evaluators, privacy protection, regulatory approval, auditability, human accountability, and strict separation between workflow management and clinical judgment.
  • Energy and industrial operations: adaptive supervisory control. Controllers could manage maintenance or optimization agents by switching between diagnosis, intervention, verification, and shutdown as equipment evidence changes. This is more promising than a fixed policy that merely repeats a target such as “maximize output” or “reduce downtime.” Dependencies: reliable telemetry, digital twins or safe simulators, fail-safe control, real-time guarantees, and extensive testing under rare faults and distribution shifts.
  • Finance: evidence-based multi-step case management. A Controller could supervise agents handling compliance reviews, reconciliations, or fraud-investigation workflows, deciding when additional documentation or verification is required and when a case should be escalated. The structured handoff format could support post hoc regulatory audits. Dependencies: explainability and evidence provenance must be legally sufficient; the system would require privacy controls, bias testing, deterministic escalation rules, and prohibition of unsupervised high-impact decisions.
  • Training Controllers with execution-grounded feedback. The benchmark’s replay process can generate supervision from downstream outcomes: candidate Contracts can be executed, compared by success and cost, and used to train reward models, preference models, or specialized Controllers. This could improve decisions about verification, recovery, bounded assignment length, and stopping. Dependencies: replay outcomes may be expensive to collect, evaluator imperfections can encode misleading rewards, and training on a narrow task family may produce over-specialized policies.
  • Learning adaptive stopping and escalation policies. A future Controller could estimate whether additional Worker turns are likely to produce useful progress and choose among continuation, verification, rollback, or human intervention. Such a policy could optimize a risk-sensitive objective combining task success, cost, latency, and safety rather than maximizing success alone. Dependencies: requires calibrated uncertainty estimates, representative failure data, reliable cost models, and explicit penalties for both premature stopping and wasteful continuation.
  • Multi-Worker and hierarchical agent systems. The single Worker in LoopArena could be extended to several specialized Workers—for example, implementation, testing, security review, documentation, and deployment—with a Controller assigning bounded subtasks and reconciling their evidence. This could produce agent teams for large software repositories or complex enterprise workflows. Dependencies: task decomposition, conflict resolution, shared-state consistency, communication overhead, and attribution of failures become central challenges; the current paper does not evaluate multi-Worker organizations.
  • Safety certification and governance for autonomous workflows. A standardized loop-control benchmark could become part of internal safety cases or external certification, testing whether an agent recognizes incomplete work, reacts to contradictory evidence, requests verification, and stops under uncertainty. Type I could support inexpensive screening, while Type III could support final high-assurance testing. Dependencies: coding benchmarks are not sufficient for general safety certification. Certification would require domain-specific scenarios, adversarial tests, human-factors evaluation, security testing, and evidence that benchmark behavior transfers to deployment.
  • Personal productivity systems with adaptive task management. Long-running assistants could manage projects by maintaining structured state, selecting the next actionable step, checking completed work, and asking the user for clarification only when needed. Unlike a static reminder system, the assistant would adapt its guidance as new evidence or obstacles appear. Dependencies: users must be able to inspect and correct the assistant’s state; privacy, authorization, calendar/file integration, and reliable handling of irreversible actions are necessary for safe deployment.

Glossary

  • Agent orchestration: The coordination and management of multiple agents or agent components to accomplish a task. “This model-as-manager setting makes agent orchestration directly evaluable”
  • Autonomous execution: Operation in which an agent performs a task without ongoing external guidance. “the same Worker receives the task instruction and works autonomously to completion”
  • Benchmark compression: Reducing the cost or size of an evaluation while attempting to preserve its conclusions or rankings. “Benchmark-compression methods likewise use Kendall's τ\tau or Spearman's ρ\rho to test whether a cheaper evaluation recovers a full-benchmark ranking”
  • Closed-loop evaluation: Evaluation in which an agent’s actions produce feedback that informs subsequent actions. “Type II is a lower-cost closed-loop evaluation in its own right”
  • Control cycle: One iteration in which the system summarizes the Worker’s state, obtains a Controller decision, and either assigns further work or stops. “We refer to this sequence as one control cycle.”
  • Controller: The model responsible for deciding what another agent should do next. “the evaluated model is the Controller, while a separate Worker carries out the coding task”
  • Decontaminated evaluation: Evaluation designed to reduce the influence of training-data exposure to benchmark tasks or solutions. “SWE-rebench: An Automated Pipeline for Task Collection and Decontaminated Evaluation of Software Engineering Agents”
  • Downstream outcome: The eventual result produced by executing an earlier decision or action. “The construction focuses on tasks, intermediate states, and control decisions where plausible control choices can lead to different executable outcomes.”
  • Evidence Packet: A structured, read-only summary of task progress and supporting observations provided to the Controller. “The harness deterministically formats the Reporter's summary and the Worker's working evidence it cites into an Evidence Packet”
  • Executable evaluator: A program or evaluation procedure that runs checks on an agent-produced artifact to determine whether requirements are satisfied. “Most coding benchmarks \citep{Jimenez2023,MultiSWEBench2025} evaluate task completion by running a coding agent and scoring the resulting repository state with executable tests or task-specific evaluators.”
  • Execution-grounded learning: Learning that uses the results of actual interactions or executions as supervisory signals. “In agentic settings, execution-grounded learning further uses outcomes from tree-structured interaction rollouts and rendered interface code as supervision”
  • Execution scope: The portion of a task or workflow that is actually carried out during an evaluation. “LoopArena organizes evaluation into three complementary settings that differ in execution scope and cost.”
  • Fixed control: A non-adaptive policy that repeatedly provides the same task objective instead of responding to current execution evidence. “We additionally evaluate fixed control, a persistent-goal baseline inspired by Codex's /goal”
  • Full-task evaluation: Assessment performed on an entire task from its original starting state through completion. “Type III evaluates the corresponding full task from its original state.”
  • Harness: The software infrastructure that manages agents, tools, state, prompts, and execution flow. “Figure~\ref{fig:runtime} shows how the Controller's outer loop guides the Worker's inner loop.”
  • Inference cost: The estimated computational or monetary expense of generating model outputs during evaluation. “Estimated inference cost is the primary resource measure, with all estimates assuming no prompt caching.”
  • Intermediate workspace: A partially completed repository state used as the starting point for evaluating a task segment. “Each case begins from a prepared intermediate workspace in which the preceding work is complete”
  • Invalid Rate: The proportion of model responses that fail to provide a valid, parseable answer in the required format. “missing, multiple, out-of-range, and unparseable answers count as incorrect and are also reported in the Invalid Rate.”
  • Long-horizon task: A task requiring many sequential actions, decisions, or interaction rounds to complete. “Long-horizon and iterative benchmarks extend this setup to longer tasks or evolving requirements”
  • Loop Contract: A structured Controller output specifying the Worker’s next assignment or instructing the system to stop. “It produces a Loop Contract ci,kc_{i,k}:”
  • Loop Engineering: The design and management of iterative interaction loops around coding agents. “Loop Engineering marks a shift in how developers interact with coding agents on long-running tasks.”
  • Model-as-manager: An arrangement in which one model directs another model that performs the task. “This model-as-manager setting makes agent orchestration directly evaluable”
  • No-control baseline: A reference condition in which the Worker operates without Controller guidance after receiving the initial task. “We also report a no-control baseline in which the same Worker receives the task instruction and works autonomously to completion.”
  • Outer loop: The higher-level control process that guides and manages the Worker’s successive execution rounds. “the Controller's guidance of the overall process as the outer loop”
  • Process-oriented benchmark: A benchmark that evaluates actions, decisions, or intermediate behavior rather than only final task results. “Process-oriented benchmarks instead assess individual actions or capabilities within the coding trajectory”
  • Prompt caching: Reusing previously processed prompt information to reduce the cost or computation of subsequent model calls. “Estimated inference cost is the primary resource measure, with all estimates assuming no prompt caching.”
  • Read-only inspection: Examination of a workspace or state without permission to alter files or execute modifying operations. “The Reporter uses the same model configuration as the Worker and may inspect the workspace only through read-only tools.”
  • ReAct loop: An agent interaction pattern that alternates between reasoning and tool-mediated actions. “within each assigned segment, it follows its native ReAct loop to inspect and modify the repository”
  • Repository-level coding task: A software-engineering task involving an entire code repository rather than an isolated code fragment. “LoopArena evaluates how well a model decides what a separate coding agent should do next and guides it through long-horizon repository-level tasks”
  • Restorable control point: A recorded execution state that can be reconstructed to replay and evaluate alternative decisions. “Type I constructs execution-validated control questions at restorable points in Controller-guided trajectories”
  • Strict Success Rate: The proportion of evaluation runs that satisfy all required task checks and protocol conditions. “The Strict Success Rate is”
  • Task slice: A selected, coherent stage or subset of a larger coding task. “Type II evaluates one slice of a full coding task.”
  • Tool-use trace: A record of an agent’s sequential interactions with external tools during task execution. “as do evaluations of repository exploration and tool-use traces”
  • Trajectory: The recorded sequence of interactions, actions, and states produced during an agent’s execution. “Type I constructs execution-validated control questions at restorable points in Controller-guided trajectories.”
  • Worker: The agent that directly performs coding actions and interacts with development tools. “The Worker is the only component that can use coding tools”
  • Workspace state: The current contents and condition of the repository in which the agent is working. “Both conditions start from the same restored task state”

Open Problems

We haven't generated a list of open problems mentioned in this paper yet.

Tweets

Sign up for free to view the 6 tweets with 43 likes about this paper.