Research

Four new AI papers: UI agents waver, judge bias, code robustness

5 min read

TL;DR Too Long; Didn’t read

Four new arXiv preprints from the past 24 to 48 hours show how strongly seemingly neutral test conditions distort measured AI performance: most notably, merely changing the observation space cuts a UI agent's success rate from 83.1 to 48.9 percent. A second paper shows that purely cosmetic code rewrites can cost coding agents up to 6.7 percentage points in success rate. A third study finds that a self- or other-label alone is enough to systematically bias AI judge models. A fourth investigation shows that human-level entity tracking already appears in language models with 410 million parameters.

A magnifying glass shows four excerpts from a stack of academic papers: a hesitant mouse pointer over a grid of controls, a scale with a self-label on one side, a disassembled code block with visible gears, and a small glowing figure reaching the same height as a larger one. Image generated with GPT Image 2

Key takeaways

  • UI agents fluctuate by more than 30 percentage points in success rate depending on the observation space; GPT-5 mini drops from 83.1 to 48.9 percent.
  • Semantics-preserving code rewrites lower coding agents' success rate by up to 6.7 percentage points, with no consistent robustness ranking across agent scaffolds.
  • When AI judges see only a self- or other-label, they rate their own selections higher and others' lower - with no model named at all.
  • Human-level entity tracking appears in language models starting at 410 million parameters; larger models clearly exceed human performance.

Today’s selection from arXiv’s new submissions of the past 24 to 48 hours connects four questions that rarely come up together: how reliably AI agents operate graphical user interfaces, how robust coding agents stay against purely cosmetic code changes, how easily AI judge models can be swayed by nothing more than authorship labels, and at what model size language models master a core piece of language understanding. The selection was curated for substance and spread: each paper offers a traceable method with solid numbers in the abstract, and no two papers cover the same subfield.

ComponentBench: UI agents don’t fail at the goal, they fail at the observation

Tianchen Guan, Xinlei Lin, Royce Cheng-Yue, Xiangjun Wang, and Shuyan Zhou introduce ComponentBench, a benchmark for so-called computer-use agents - AI systems that operate web interfaces the way humans do, via mouse clicks and keyboard input. Rather than testing either long workflows or isolated click targets as prior benchmarks did, ComponentBench breaks the task down into 2,910 programmatically verified interactions spanning 97 common UI component types (such as toggle sets or dropdown menus), paired with cleaned human reference trajectories. Across seven tested models - including GPT-5.4, Gemini 3 Flash, and UI-TARS-1.5-7B - the authors report that changing only the observation and action space, with the same model held fixed, shifts task success by more than 30 percentage points: GPT-5 mini fell from 83.1 percent with access to the accessibility tree (a structured description of the interface built for assistive technologies) to 48.9 percent when restricted to raw screen coordinates. Even the fastest configuration took 3.7 times as long as the human reference. This matters because it shows that capability comparisons between AI agents often reveal more about the chosen interface than about the underlying model.

A Jagged Frontier: cosmetic code changes destabilize coding agents

A team led by Hasan Najib Mahmud, Shreya Gupta, and Isha Chaudhary examines, with A Jagged Frontier, how stable AI coding agents stay when the surrounding codebase is rewritten in a purely cosmetic way - through different control-flow phrasing, injected dead code, or renamed identifiers, without changing what the code does. The team tested two agent scaffolds (mini-SWE agent and OpenCode), each paired with four frontier models including Claude Opus 4.5, on tasks from SWE-bench Verified and SWE-bench Pro. The authors report a resolve-rate drop of up to 6.7 percentage points in the most affected configurations, with statistically significant degradation in 6 of 16 tested combinations of model, scaffold, and dataset; which model proves most robust depends heavily on the scaffold used, and the simpler mini-SWE agent held up better overall than OpenCode. A previous report already showed that OpenAI itself classifies roughly 30 percent of SWE-bench Pro tasks as flawed - this new work adds that even correct tasks can yield unstable measurements once only the surrounding code changes, not its meaning. This matters because leaderboard rankings for coding agents may depend more on the luck of the test codebase than previously assumed.

Bidirectional judgment bias: one label is enough to tilt AI judges

Songeun Chae, Min Kim, Donghoon Jung, Seojin Choi, and Seohyon Jung investigate, with their study on self- and other-labels, whether so-called LLM judges - language models used as automatic reviewers of other AI outputs - genuinely favor their own outputs (self-preference), or whether that effect is really just style and quality getting conflated. To separate the two, the authors had ten language models evaluate not generated text but style-neutral narrative-constraint selections that still carry a recoverable, model-specific signature. Under blind evaluation, self-preference largely disappeared once selection quality and evaluator severity were controlled for - it vanished on three of four rubric dimensions and even reversed on the fourth. But when judges were shown, at matched quality, plain “self” or “other” labels without any model being named, they inflated scores for self-labeled selections and deflated scores for other-labeled ones. A previous digest entry already showed that AI judge models can be talked into flipping their verdict in up to 91 percent of cases under targeted persuasion - this new work shows that mere authorship labeling, with no persuasive content at all, is enough to systematically distort a judgment. This matters because LLM judges increasingly decide on training-data selection, product approvals, and automated evaluations, settings where provenance metadata is often available alongside the content.

Entity tracking: human level already at 410 million parameters

Karolina Drożdż and Micha Heilbron investigate, with their study on entity tracking, how well language models and humans can track where things are in a narrative and how they change, even when that is never stated explicitly - a core component of language comprehension. Unlike earlier, artificial test tasks, the authors used naturalistic narrative texts of varying complexity and pitted both language models and 48 human participants against them. In humans, tracking performance degraded specifically with narrative complexity, not with raw text length. In language models, human-level performance was already present at 410 million parameters - well below the much larger, code-specialized models that prior work had identified for this threshold - and larger contemporary models clearly exceeded human performance from there. This matters because it suggests that a central building block of language understanding emerges at far smaller, cheaper-to-run model scales than previously thought, rather than only in the largest systems.

All four papers are preprints that have not been independently peer-reviewed - the reported numbers come from the respective author teams’ own experiments and have not yet been externally replicated. That caveat applies especially to the self- and other-label study, whose finding so far rests on just ten tested models and one narrowly defined task type, and to the entity-tracking paper, whose human comparison draws on only 48 participants. Whether these findings hold up across more models, tasks, and independent replications remains to be seen.

Frequently asked questions

Have these four papers been peer-reviewed yet?

No, all four are currently unreviewed arXiv preprints whose numbers come from the respective author teams' own experiments and have not yet gone through peer review.

Is code or data available for the methods presented?

None of the four abstracts make an explicit commitment to releasing full code or datasets. ComponentBench describes a scalable evaluation pipeline but does not promise an open-source release in its abstract.

What is an accessibility tree, and why does it make such a big difference for UI agents?

An accessibility tree is a structured, textual description of a user interface, originally meant for screen readers and other assistive technologies - it names elements like buttons or text fields explicitly instead of representing them only as pixels. According to ComponentBench, this structured access alone lets a model reach markedly higher success rates than raw screen coordinates, because it can identify elements directly instead of having to visually estimate their position.

What does self-preference mean for AI judge models, and why is it hard to measure?

Self-preference is a language model's tendency to rate its own outputs more favorably than other models' outputs. It is hard to measure because writing style and actual quality are difficult to separate in generated text - the new study sidesteps this by having models evaluate style-neutral selection decisions instead of generated text, and by testing authorship labels separately from the models' actual identities.

Sources (4)
  1. ComponentBench: Diagnosing Component-Level Failures in UI Agents
  2. A Jagged Frontier: Evaluating Robustness of Code Agents to Semantics-Preserving Transformations
  3. Self- and Other-Labels Induce Bidirectional Bias in LLM Judges
  4. Entity tracking emerges in sub-billion parameter language models and exceeds human performance in naturalistic narratives

Your AI update for the work week

Once a week, the most important AI news – plus one practical tip to try right away. No spam, unsubscribe anytime.

← Back to the blog