跳到正文

DeepRewind:预测并修复深度研究智能体的过早定论

DeepRewind: Predicting and Repairing Premature Commitments in Deep Research Agents

摘要

不列颠哥伦比亚大学作者提出 DeepRewind,一个叠加在 Open Deep Research 之上的控制层,把智能体的认知状态表示为含来源、证据、论断、假设、承诺、计划与草稿的类型化图,在中间结论被接受前用基于提示的世界模型预测其可逆性并决定是否放行,后续证据推翻承诺时只回滚受影响子图。

摘要由模型根据原文撰写,以原文为准。

正文 · 原文

Amirhossein Abaskohi ††thanks: Corresponding author: aabaskoh@cs.ubc.ca.    Amirhossein Dabiriaghdam Affiliation: University of British Columbia

Abstract

Deep-research agents conduct long-horizon investigations through iterative search, evidence evaluation, belief revision, and synthesis. However, they may commit to claims before sufficient evidence is available, causing later reasoning to reinforce an incorrect interpretation. We introduce DeepRewind, an additive control layer for reversible deep research that represents the agent’s evolving epistemic state as a typed graph of sources, evidence, claims, hypotheses, assumptions, commitments, plans, and drafts. Before accepting an intermediate conclusion, a prompt-based world model predicts its impact and estimates reversibility based on hypothesis narrowing, information loss, recovery cost, and contradiction-trigger coverage. A binary controller blocks risky commitments, while a consistency monitor performs dependency-aware rollback when later evidence invalidates them. Across DRBench and LiveDRBench, DeepRewind improves insight recall by 3.6 percentage points and reduces premature commitments by 59.1% relative to Open Deep Research11 1 Code is available on  GitHub..

1 Introduction

Deep research agents extend large language models (LLMs) from single-turn question answering to long-horizon information seeking, where an agent repeatedly plans searches, navigates the web, evaluates sources, reconciles conflicting evidence, and produces a citation-supported report (Huang et al., 2025; Java et al., 2026). Recent systems such as DeepResearcher and WebThinker demonstrate that integrating reasoning with real-world web interaction can substantially improve open-ended research capabilities (Zheng et al., 2025; Li et al., 2025). Correspondingly, benchmarks have begun to evaluate these agents on realistic, multi-source research tasks that require both comprehensive evidence gathering and coherent synthesis (Du et al., 2026; Abaskohi et al., 2026). However, existing work primarily evaluates the quality of the final report, while paying less attention to how intermediate research decisions shape the trajectory.

A central failure mode is premature commitment: the agent accepts a claim, favors a hypothesis, rejects an alternative, or drafts a conclusion before gathering sufficient evidence. Such commitments shape later queries, evidence selection, reasoning, and writing. Prior work shows that LLM agents may converge too early or become confident before completing the reasoning needed to justify their answers (Mehta, 2026; Gai et al., 2026). Reflection, critique, tree search, and memory can revisit failures, explore alternatives, or preserve information (Shinn et al., 2023; Gou et al., 2024; Zhou et al., 2024; Yao et al., 2023; Xu et al., 2025; Packer et al., 2024). However, they do not predict how a commitment changes the agent’s epistemic state or identify the minimal downstream decisions to repair when later evidence invalidates it.

Figure 1: Overview of DeepRewind. DeepRewind models the agent’s epistemic state as a typed graph, predicts commitment reversibility, and controls whether to commit. If new evidence invalidates a commitment, dependency-aware rollback removes only the affected subgraph while preserving independent findings.

We introduce DeepRewind, an additive control layer for reversible deep research built on Open Deep Research (LangChain AI, 2025). It represents the agent’s epistemic state as a typed graph of sources, evidence, claims, hypotheses, assumptions, commitments, plans, and drafts. Before accepting a commitment, a research-state world model predicts its graph effects and estimates reversibility from hypothesis narrowing, information loss, recovery cost, and contradiction likelihood. Inspired by graph world models and LLM-based web agents (Feng et al., 2025; Gu et al., 2025; Chae et al., 2025), DeepRewind models the agent’s internal research state rather than the external environment. A binary controller blocks risky commitments, while a monitor performs dependency-aware rollback if evidence invalidates them.

We evaluate DeepRewind through controlled initial-condition and hypothesis-switching experiments, exposing agents to early supportive, contradictory, or distracting evidence before introducing evidence for a competing hypothesis. These experiments evaluate the downstream effectiveness of the overall control mechanism, including whether gating prevents lock-in and whether reduced rollback repairs commitments invalidated by later evidence. Across DRBench Abaskohi et al. (2026) and LiveDRBench Java et al. (2026), DeepRewind improves insight recall by 3.6 percentage points and reduces premature commitments by 59.1% relative to Open Deep Research.

2 Related Work

Recent work shows that LLMs and agents may commit to an answer before completing sufficient reasoning, causing later steps to reinforce the initial decision (Mehta, 2026; Gai et al., 2026). Reflection and critique methods revise outputs after errors are observed (Shinn et al., 2023; Gou et al., 2024), while tree-based methods explore alternative reasoning paths before selecting a solution (Yao et al., 2023; Zhou et al., 2024). However, they do not explicitly track which claims, assumptions, plans, and draft fragments depend on a commitment or determine what must be repaired when it fails. World models predict action consequences in structured or Web environments (Feng et al., 2025; Gu et al., 2025), and reversibility-aware reinforcement learning estimates whether environmental actions can be undone (Grinsztajn et al., 2021), but both focus on the external environment rather than the agent’s epistemic state. Classical truth-maintenance and dependency-directed backtracking systems record belief justifications and retract inconsistent assumptions (Doyle, 1979; Stallman and Sussman, 1977), but do not predict the risk of LLM-generated commitments before they are made. DeepRewind models the research state as a typed graph, predicts how commitments narrow hypotheses, suppress conflicting information, and increase recovery costs, and performs dependency-aware reduced rollback when evidence invalidates them.

3 DeepRewind

Figure 1 provides an overview of DeepRewind, an additive control layer built on Open Deep Research (LangChain AI, 2025). Without altering the base agent’s search, tool use, or report generation, DeepRewind intervenes before intermediate conclusions are accepted, predicts their effect on the research state, estimates reversibility, and permits or blocks the commitment. Inspired by graph world models (Feng et al., 2025) and WebDreamer (Gu et al., 2025), it models transitions in the agent’s internal epistemic state—including claims, hypotheses, assumptions, plans, commitments, and drafts—rather than changes to the external environment.

Research-state representation.

At research step t, the agent’s epistemic state is represented as a typed, weighted, directed graph Gt=(Vt,Et). Its nodes include Source, Evidence, Claim, Hypothesis, Assumption, Commitment, DraftFragment, and PlanStep; edges represent relations such as supports, contradicts, depends_on, used_in, and locks_in. We distinguish externally observed Source and Evidence nodes from endogenous nodes produced by the agent. The world model may reference observed nodes but may only create or modify endogenous ones. State changes are recorded as graph deltas, Gt+1=Gt⊕Δ​Gt, in an append-only ledger. Invalidated artifacts are marked contested, stale, or retracted rather than deleted, preserving the full research history. Following Fatemi et al. (2024), we serialize graph nodes, attributes, and typed relations into structured text.

Research-state world model.

Before a candidate commitment at is executed, the serialized research-state graph and candidate action are provided to the world model, which predicts:

Mϕ​(Gt,at)=(Δ​G^t,𝒎^t), (1)

where Δ​G^t contains predicted node and edge changes and 𝒎^t=(κ^t,λ^t,γ^t,θ^t,TC^t) contains reversibility metadata. Here, κ measures how strongly the commitment narrows competing hypotheses, λ estimates information loss, γ estimates recovery cost, θ specifies the contradiction conditions that should invalidate the commitment, and TC estimates whether future research steps are likely to expose such contradictions. The prompt-based implementation emits these predictions as structured JSON. The target proposition, initial alternatives, and commitment transition are elicited using the prompts described in Appendix G.

Reversibility-aware commitment.

From the current graph snapshot, DeepRewind computes claim beliefs using reliability-weighted supporting and contradicting evidence and converts claim support into a plausibility distribution over active hypotheses. Commitment effect is computed from reduced hypothesis entropy, information loss from the contradiction mass suppressed by the commitment, and recovery cost from the downstream endogenous nodes that would need to be retracted or regenerated. These quantities are combined as:

IRR⁡(at) =clip[0,1]⁡(ακ​κt+αλ​λt+αγ​γt), (2)
U⁡(at) =V⁡(at)−η​IRR​(at)​(1−TC⁡(at)),

where V⁡(at) is the estimated research value of the commitment. The controller outputs either commit or not-commit. Contested claims are never committed. In threshold mode, the action is committed only when IRR⁡(at)​(1−TC⁡(at)) is below a configurable threshold; in utility mode, it is committed only when U⁡(at) exceeds a configurable threshold. A not-commit decision leaves the base agent free to gather more evidence, preserve competing hypotheses, or reformulate the claim.

Monitoring and reduced rollback.

Each accepted commitment stores a trigger defined by minimum evidence reliability and contradiction strength. As new evidence enters the graph, a read-only monitor checks whether the trigger is met and the claim belief falls below a threshold. If so, DeepRewind deterministically retracts the commitment and its unique justifications, removes commitment-specific dependencies, and marks downstream hypotheses, plans, and drafts as stale or retracted. Shared or independently supported findings are preserved, limiting repair to the affected subgraph without additional LLM calls. This online monitor is part of the control mechanism and is distinct from the premature-commitment evaluation metric: rollback may occur as soon as the invalidation condition is satisfied, whereas premature commitment is measured retrospectively from the complete run trace using the same criterion for all methods.

Controlled interventions and logging.

For controlled analysis, DeepRewind includes default-off hooks for initial-condition seeding and alternative switching. Seeding injects provenance-tagged supportive, contradictory, neutral, or distracting evidence, while switching first supports one alternative and later introduces evidence favoring a competitor. When disabled, these hooks do not affect the base agent. All predictions, decisions, triggers, and rollbacks are stored in append-only JSONL logs with configuration snapshots. Appendix A details the formulations, policies, interventions, rollback procedure, orchestration, and logging schema.

4 Experiments

Experimental setup.

We implement DeepRewind on Open Deep Research (LangChain AI, 2025), keeping its search and report-generation workflow fixed. GPT-4o (OpenAI, 2024) serves as the research-state world model at temperature 0, while base agents use temperature 0.7 for up to 10 iterations. Model calls use OpenRouter22 2 https://openrouter.ai/, and Tavily33 3 https://www.tavily.com/ retrieves up to five advanced-search results per query. We set T=1, ακ=αλ=αγ=13, η=1, τcommit=0.35, β⋆=0.5, ρ⋆=0.75, w⋆=0.6, fallback TC=0.5, and recovery budget B=20. We run each configuration with three random seeds and report the mean and standard deviation across runs; full configurations are provided in Appendix B. Across runs, DeepRewind invokes the world model 4.8 times per task on average, adding 6.5% input tokens, 4.2% output tokens, and 14% wall-clock latency relative to ODR.

Benchmarks and models.

We evaluate on DRBench (Abaskohi et al., 2026) and LiveDRBench (Java et al., 2026), each with 100 tasks, reporting insight-level precision and recall against reference insights. We test GPT-4o (OpenAI, 2024), GPT-5.4 (OpenAI, 2026), Qwen3.5-27B (Qwen Team, 2026), and DeepSeek-V4 Pro (DeepSeek-AI, 2026) as the LLM backbone of the agent. GPT-4o serves as the fixed world model, and all experiments use three random seeds. Appendix E evaluates DeepRewind’s generalizability across different LLM world models.

4.1 Overall Performance

Table 1 shows that DeepRewind consistently improves both precision and recall across all models and benchmarks. On average, it increases recall by 3.6 points and precision by 3.1 points, recovering more reference insights without adding unsupported content. GPT-5.4 achieves the strongest overall results, with DeepRewind reaching 40.3% recall on DRBench and 35.6% on LiveDRBench. A component ablation in Appendix C isolates the contributions of graph tracking, world-model prediction, pre-commitment gating, and reduced rollback. Table 5 in Appendix D reports variation across runs, and Appendix F provides a qualitative analysis.

Table 1: Insight precision and recall (%) on DRBench and LiveDRBench, averaged across three runs.
Model Method DRBench LiveDRBench
Prec. Rec. Prec. Rec.
GPT-4o ODR 55.8 16.2 51.4 13.8
DeepRewind 58.7 19.6 54.6 17.1
GPT-5.4 ODR 68.4 36.5 63.7 31.8
DeepRewind 71.2 40.3 66.8 35.6
Qwen3.5-27B ODR 60.9 24.6 56.2 20.8
DeepRewind 63.8 28.1 59.5 24.3
DeepSeek-V4 Pro ODR 64.7 29.8 59.8 25.4
DeepRewind 67.6 33.5 63.1 29.0

4.2 Robustness to Initial Evidence

We evaluate GPT-4o under neutral, supportive, contradictory, and distracting initial evidence. Resistance measures how often the agent avoids adopting injected claims before independent Web support. Table 2 shows that all interventions degrade ODR, especially contradictory evidence. DeepRewind consistently preserves higher precision and recall, improving them by about 4.7 and 4.2 points across non-neutral conditions. It also raises average resistance by 29.5 points, with the largest gain of 37.8 points under Early-Counter, showing greater robustness to misleading early evidence.

Table 2: Robustness of GPT-4o to initial evidence conditions (%). Resistance measures the percentage of runs that avoid unsupported commitment to the injected position.
Condition Method DRBench LiveDRBench Resist.
Prec. Rec. Prec. Rec. ↑
Neutral ODR 55.8 16.2 51.4 13.8 –
DeepRewind 58.7 19.6 54.6 17.1 –
Early-Support ODR 53.2 14.6 48.8 12.1 43.8
DeepRewind 58.0 18.8 53.9 16.4 72.4
Early-Counter ODR 52.1 13.5 47.6 11.0 38.2
DeepRewind 57.4 18.2 53.1 15.8 76.0
Early-Distractor ODR 54.7 15.3 50.2 12.9 61.2
DeepRewind 58.2 19.0 54.1 16.6 83.4

4.3 Effect of Initial Belief Selection

We examine how initial beliefs shape GPT-4o’s research trajectory and commitment behavior. One-Belief uses only the target proposition, while the alternative settings rank five competing beliefs by plausibility and select either the highest- or lowest-ranked one. This tests robustness to favorable and misleading starting hypotheses. Table 3 shows that the strongest alternative improves both methods, whereas the weakest sharply degrades ODR, raising the fraction of accepted commitments that are later invalidated to 46.4%. DeepRewind remains stronger across all settings, with its largest gains under Worst-Alternative: about 6.5 points in precision, 5.0 points in recall, and a 26.2-point reduction in premature commitments. The higher rollback rate reflects more frequent repair of unfavorable initial commitments.

Table 3: Effect of initial belief selection with GPT-4o (%). PC is the percentage of accepted commitments that are later invalidated by subsequently collected evidence, and RB denotes rollback rate; rollback is not available for ODR.
Initial belief Method DRBench LiveDRBench PC RB
Prec. Rec. Prec. Rec. ↓ ↓
One-Belief ODR 55.8 16.2 51.4 13.8 31.7 –
DeepRewind 58.7 19.6 54.6 17.1 13.1 9.1
Best-Alternative ODR 57.1 17.5 52.6 15.0 24.0 –
DeepRewind 59.1 20.5 55.3 18.0 8.5 6.3
Worst-Alternative ODR 50.3 12.9 46.1 10.4 46.4 –
DeepRewind 56.8 17.9 52.5 15.4 20.2 15.1

5 Conclusion

We presented DeepRewind, an additive control layer for predicting, preventing, and repairing premature commitments in deep-research agents. It represents the evolving research state, blocks risky commitments before they influence later reasoning, and locally rolls back those invalidated by new evidence. Across DRBench and LiveDRBench, DeepRewind improves insight recall by 3.6 percentage points and reduces premature commitments by 59.1% relative to Open Deep Research. Controlled experiments further show improved robustness to biased, distracting, and unfavorable initial states. These findings highlight the value of explicitly modeling commitment reversibility in long-horizon research. Future work may replace the prompt-based world model with learned graph or structured transition models.

Limitations

DeepRewind depends on an LLM world model and an automatically constructed epistemic graph, so incorrect state extraction, missing dependencies, or poorly calibrated reversibility estimates may block useful commitments or fail to prevent harmful ones. We do not directly evaluate the accuracy or calibration of the world model’s predicted graph transitions and reversibility quantities against ground truth, because DRBench and LiveDRBench do not provide annotations of the counterfactual research-state transition following a candidate commitment or gold values for hypothesis narrowing, information loss, recovery cost, and trigger coverage. Our experiments therefore evaluate the downstream utility of these predictions rather than their independent predictive accuracy. We evaluate only a small subset of hyperparameter configurations and select the best-performing setting, rather than conducting a comprehensive sensitivity analysis; we also do not evaluate how world-model prediction quality changes over the course of longer research trajectories. Constructing expert-annotated research-state transition data and studying these factors are important directions for future work. The method also depends on fixed thresholds and hand-designed relation types, and our experiments are limited to two deep-research benchmarks, four base models, and controlled evidence interventions.

Ethical Considerations

DeepRewind inherits the biases, hallucinations, and source-quality limitations of its underlying language models and Web retrieval system; an inaccurate world-model prediction may also create false confidence that a commitment is safe or recoverable. The method should therefore be used with source verification and human oversight in high-stakes domains. Our experiments use public benchmarks, models, and implementations under their respective licenses and involve no human subjects or newly collected personal data. We used LLM assistance only to improve manuscript presentation, with all technical decisions, experiments, and conclusions verified by the authors.

References

  • Abaskohi et al. (2026) A. Abaskohi, T. Chen, M. Muñoz-Mármol, C. Fox, A. V. Ramesh, É. Marcotte, X. H. Lù, N. Chapados, S. Gella, C. Pal, A. Drouin, and I. H. Laradji DRBench: a realistic benchmark for enterprise deep research. In The Fourteenth International Conference on Learning Representations, External Links: Link Cited by: §1, §1, §4.
  • Chae et al. (2025) H. Chae, N. Kim, K. T. Ong, M. Gwak, G. Song, J. Kim, S. Kim, D. Lee, and J. Yeo Web agents with world models: learning and leveraging environment dynamics in web navigation. In The Thirteenth International Conference on Learning Representations, External Links: Link Cited by: §1.
  • DeepSeek-AI (2026) DeepSeek-AI DeepSeek-v4: towards highly efficient million-token context intelligence. External Links: 2606.19348, Link Cited by: §4.
  • Doyle (1979) J. Doyle A truth maintenance system. Artificial Intelligence 12 (3), pp. 231–272. External Links: ISSN 0004-3702, Document, Link Cited by: §2.
  • Du et al. (2026) M. Du, B. Xu, C. Zhu, L. Zhang, X. Wang, and Z. Mao DeepResearch bench: a comprehensive benchmark for deep research agents. In The Fourteenth International Conference on Learning Representations, External Links: Link Cited by: §1.
  • Fatemi et al. (2024) B. Fatemi, J. Halcrow, and B. Perozzi Talk like a graph: encoding graphs for large language models. In The Twelfth International Conference on Learning Representations, External Links: Link Cited by: Appendix A, §3.
  • Feng et al. (2025) T. Feng, Y. Wu, G. Lin, and J. You Graph world model. In Forty-second International Conference on Machine Learning, External Links: Link Cited by: §1, §2, §3.
  • Gai et al. (2026) J. Gai, G. Zeng, C. Baek, C. Wu, J. Z. Kolter, A. Risteski, and A. Raghunathan Understanding and mitigating premature confidence for better llm reasoning. External Links: 2605.24396, Link Cited by: §1, §2.
  • Gou et al. (2024) Z. Gou, Z. Shao, Y. Gong, yelong shen, Y. Yang, N. Duan, and W. Chen CRITIC: large language models can self-correct with tool-interactive critiquing. In The Twelfth International Conference on Learning Representations, External Links: Link Cited by: §1, §2.
  • Grinsztajn et al. (2021) N. Grinsztajn, J. Ferret, O. Pietquin, P. Preux, and M. Geist There is no turning back: a self-supervised approach for reversibility-aware reinforcement learning. In Advances in Neural Information Processing Systems, A. Beygelzimer, Y. Dauphin, P. Liang, and J. W. Vaughan (Eds.), External Links: Link Cited by: §2.
  • Gu et al. (2025) Y. Gu, K. Zhang, Y. Ning, B. Zheng, B. Gou, T. Xue, C. Chang, S. Srivastava, Y. Xie, P. Qi, H. Sun, and Y. Su Is your LLM secretly a world model of the internet? model-based planning for web agents. Transactions on Machine Learning Research. Note: External Links: ISSN 2835-8856, Link Cited by: §1, §2, §3.
  • Huang et al. (2025) Y. Huang, Y. Chen, H. Zhang, K. Li, H. Zhou, M. Fang, L. Yang, X. Li, L. Shang, S. Xu, J. Hao, K. Shao, and J. Wang Deep research agents: a systematic examination and roadmap. External Links: 2506.18096, Link Cited by: §1.
  • Java et al. (2026) A. Java, A. Khandelwal, S. P. Midigeshi, A. Halfaker, A. Deshpande, N. Goyal, A. Gupta, N. Natarajan, and A. Sharma Characterizing deep research: a benchmark and formal definition. In The Fourteenth International Conference on Learning Representations, External Links: Link Cited by: §1, §1, §4.
  • LangChain AI (2025) LangChain AI Open deep research. Note: https://github.com/langchain-ai/open_deep_researchGitHub repository, accessed August 5, 2026 External Links: Link Cited by: §1, §3, §4.
  • Li et al. (2025) X. Li, J. Jin, G. Dong, H. Qian, Y. Wu, J. Wen, Y. Zhu, and Z. Dou WebThinker: empowering large reasoning models with deep research capability. In The Thirty-ninth Annual Conference on Neural Information Processing Systems, External Links: Link Cited by: §1.
  • Mehta (2026) A. Mehta When agents commit too soon: diagnosing premature commitment in llm agents. External Links: 2606.22936, Link Cited by: §1, §2.
  • OpenAI (2024) OpenAI GPT-4 technical report. External Links: 2303.08774, Link Cited by: §4, §4.
  • OpenAI (2026) OpenAI Introducing GPT-5.4. External Links: Link Cited by: §4.
  • Packer et al. (2024) C. Packer, S. Wooders, K. Lin, V. Fang, S. G. Patil, I. Stoica, and J. E. Gonzalez MemGPT: towards llms as operating systems. External Links: 2310.08560, Link Cited by: §1.
  • Qwen Team (2026) Qwen Team Qwen3.5: towards native multimodal agents. External Links: Link Cited by: §4.
  • Shinn et al. (2023) N. Shinn, F. Cassano, A. Gopinath, K. R. Narasimhan, and S. Yao Reflexion: language agents with verbal reinforcement learning. In Thirty-seventh Conference on Neural Information Processing Systems, External Links: Link Cited by: §1, §2.
  • Stallman and Sussman (1977) R. M. Stallman and G. J. Sussman Forward reasoning and dependency-directed backtracking in a system for computer-aided circuit analysis. Artificial Intelligence 9 (2), pp. 135–196. External Links: ISSN 0004-3702, Document, Link Cited by: §2.
  • Xu et al. (2025) W. Xu, Z. Liang, K. Mei, H. Gao, J. Tan, and Y. Zhang A-mem: agentic memory for LLM agents. In The Thirty-ninth Annual Conference on Neural Information Processing Systems, External Links: Link Cited by: §1.
  • Yao et al. (2023) S. Yao, D. Yu, J. Zhao, I. Shafran, T. L. Griffiths, Y. Cao, and K. R. Narasimhan Tree of thoughts: deliberate problem solving with large language models. In Thirty-seventh Conference on Neural Information Processing Systems, External Links: Link Cited by: §1, §2.
  • Zheng et al. (2025) Y. Zheng, D. Fu, X. Hu, X. Cai, L. Ye, P. Lu, and P. Liu DeepResearcher: scaling deep research via reinforcement learning in real-world environments. In Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing, C. Christodoulopoulos, T. Chakraborty, C. Rose, and V. Peng (Eds.), Suzhou, China, pp. 414–431. External Links: Link, Document, ISBN 979-8-89176-332-6 Cited by: §1.
  • Zhou et al. (2024) A. Zhou, K. Yan, M. Shlapentokh-Rothman, H. Wang, and Y. Wang Language agent tree search unifies reasoning, acting, and planning in language models. In Forty-first International Conference on Machine Learning, External Links: Link Cited by: §1, §2.

Appendix A Implementation Details

This appendix expands the research-state representation, graph serialization, structural scoring, commitment policy, monitoring procedure, rollback mechanism, controlled interventions, and artifact protocol summarized in Section 3. The prompts used to initialize and update the research state are provided in Appendix G.

Research-state graph.

The research state at step t is a typed, weighted, directed multigraph Gt=(Vt,Et). Each node v∈Vt has a type τ⁡(v) drawn from Source, Evidence, Claim, Hypothesis, Assumption, Commitment, DraftFragment, and PlanStep. Each edge e=(u,v)∈Et has a typed relation, including supports, contradicts, derived_from, compresses, depends_on, used_in, and locks_in, together with a weight we∈[0,1]. A research action produces a local delta Δ​Gt=(Δ​Vt,Δ​Et):

Gt+1=Gt⊕Δ​Gt. (3)

Source and Evidence nodes are observational and may not be generated or rewritten by the world model. All other node types are endogenous and may be created, updated, contested, marked stale, or retracted. Updates are append-only and preserve previous node versions and provenance.

To communicate Gt to the prompt-based world model, we follow the graph-to-text prompting strategy of Fatemi et al. (2024). Each node is serialized as a structured record containing its stable alias, type, status, and relevant attributes, while each edge is represented as a typed source–relation–target record with its weight. Stable aliases allow the model to reference existing nodes without reproducing their full content and make predicted updates directly mappable to the graph ledger. The candidate commitment is appended as a separate structured record:

xt=Serialize⁡(Gt)|Serialize⁡(at), (4)

where ∥ denotes textual concatenation.

Claim belief and hypothesis plausibility.

For claim c, let Supp⁡(c) and Con⁡(c) denote its supporting and contradicting evidence edges. We define their reliability-weighted masses as

Msupp​(c) =∑e∈Supp⁡(c)we​ρe, (5)
Mcon​(c) =∑e∈Con⁡(c)we​ρe, (6)

where ρe∈[0,1] is inherited from the source associated with evidence edge e. Claim belief is

βt​(c)=σ⁡(β0+Msupp​(c)−Mcon​(c)). (7)

A hypothesis h aggregates belief from its supporting claims:

gt​(h) =ℓt​(h)+∑c→hwc,h​βt​(c), (8)
pt​(h) =exp⁡(gt​(h)/T)∑h′∈ℋtexp⁡(gt​(h′)/T), (9)

where ℓt​(h) represents existing lock-in, ℋt is the set of active hypotheses, and T>0 is a temperature parameter.

World-model interface.

The implementation supplies the serialized input xt to the prompt-based world model. For clarity, we abstract this operation as conditioning directly on the graph and candidate action:

Mϕ​(Gt,at) =(Δ​G^t,𝒎^t), (10)
𝒎^t =(κ^t,λ^t,γ^t,θ^t,TC^t).

The structured prediction contains node creations or updates, edge additions or removals, reversibility estimates, an optional rollback trigger, and optional trigger coverage. Predicted aliases are resolved against the serialized graph before any update is applied. Existing Source and Evidence aliases may appear as edge endpoints, but the model may not create, modify, or reproduce their content. The complete input and output formats are given in Appendix G.

Commitment effect.

Let pt be the current hypothesis distribution and p^t+1 the distribution obtained after applying the predicted graph delta. The commitment effect measures normalized entropy reduction:

H⁡(p) =−∑h∈ℋtp(h)logp(h), (11)
κt =clip[0,1]⁡(H⁡(pt)−H⁡(p^t+1)log⁡K), (12)

where K=|ℋt|. A large value indicates that the candidate commitment sharply concentrates belief on a small subset of alternatives.

Information loss.

For the claim targeted by the commitment, information loss is approximated by the fraction of reliability-weighted evidence mass that contradicts the committed position:

λt=clip[0,1]⁡(Mcon​(c)Msupp​(c)+Mcon​(c)). (13)

When the denominator is zero, we set λt=0.

Recovery cost.

Let D⁡(Δ​V^t) denote the predictable endogenous nodes that transitively depend on nodes introduced or modified by the commitment. Recovery cost is

γt=clip[0,1]⁡(|D⁡(Δ​V^t)|B​(cret+cregen)), (14)

where cret and cregen are the unit costs of retracting and regenerating a dependent node and B is the recovery budget.

Rollback trigger and trigger coverage.

For a commitment targeting claim c, the predicted trigger is

θc​(e)=𝟏​[e∈Con⁡(c),ρe≥ρ⋆,we≥w⋆]. (15)

Trigger coverage TC⁡(at)∈[0,1] estimates the likelihood that future research probes expose an invalidating contradiction. It may be supplied by a constant fallback, predicted by the LLM, or estimated structurally from open or pending plan steps linked to the committed claim.

Irreversibility risk and utility.

The three reversibility quantities are combined as

IRR⁡(at)=clip[0,1]⁡(ακ​κt+αλ​λt+αγ​γt), (16)

where ακ,αλ,αγ≥0 and

ακ+αλ+αγ=1. (17)

The utility-aware score is

U⁡(at)=V⁡(at)−η​IRR​(at)​(1−TC⁡(at)), (18)

where V⁡(at) is configurable, such as zero or the predicted plausibility gain of the target hypothesis.

Commitment policy.

Let

qt=IRR⁡(at)​(1−TC⁡(at)). (19)

The threshold-based policy is

πthr​(at)={not-commit,Contested⁡(at),commit,qt≤τcommit,not-commit,otherwise. (20)

The utility-based alternative is

πutil​(at)={not-commit,Contested⁡(at),commit,U⁡(at)≥τU,not-commit,otherwise. (21)

A claim is considered contested when it has substantial support and contradiction mass and its current belief lies near the decision boundary.

Consistency monitoring.

After a commitment becomes active, the monitor checks it whenever new evidence is added. A commitment on claim c fires when qualifying contradiction evidence exists and the current claim belief falls below β⋆:

Fire⁡(c)=1⟺ ∃e∈Con⁡(c)​ such that (22)
ρe≥ρ⋆,we≥w⋆,
βnow​(c)<β⋆.

The monitor does not modify the graph. It returns the fired commitment, current claim belief, qualifying evidence identifiers, and the thresholds that were crossed.

Deterministic reduced rollback.

For each fired commitment, DeepRewind first retracts the commitment node and any justification unique to it. Independently supported or shared justifications are retained. It then removes commitment-specific dependency edges and processes downstream nodes according to their type: dependent DraftFragment, PlanStep, Hypothesis, and Assumption nodes are marked stale, contested, or retracted according to the configured repair policy. The target claim is reopened when additional investigation is possible. Every operation is appended to the ledger as a rollback event, and no additional language-model call is required.

Initial-condition interventions.

The initial-condition hook can insert provenance-tagged synthetic evidence before the supervisor begins reasoning. The supported conditions are neutral, which injects nothing; support, which supports the target proposition; counter, which contradicts it; and distract, which introduces low-weight peripheral evidence. Synthetic nodes record their condition, generation reason, and synthetic provenance so that they remain distinguishable from Web-derived evidence.

Alternative-switching interventions.

The switching hook begins with two mutually distinguishable alternatives A and B. It may insert early evidence supporting A, followed later by high-confidence contradiction to the committed-A claim and high-confidence support for B. The switch can occur after the first accepted commitment or after a configurable number of research steps. When the hook is disabled, no synthetic evidence or switching behavior is introduced.

Experiment orchestration.

The experiment driver enumerates runs over

ℛ=𝒬×ℱ×𝒞×𝒜×𝒮, (23)

where 𝒬 contains research questions, ℱ intervention families, 𝒞 conditions, 𝒜 experimental arms, and 𝒮 random seeds. Each cell receives an isolated run directory and an arm-specific configuration. Completed cells are identified through marker files and skipped during resumed execution. Failures are logged with their traceback without stopping the remaining runs. Benchmark-specific dataset loading is kept outside the control layer.

Logging and reproducibility.

World-model artifacts are stored as append-only JSONL records. Event types include run_start, prediction events, policy decisions, monitor_check, trigger_fired, rollback events, and run_end. The initial record stores the complete runtime configuration, including thresholds, coefficients, trigger-coverage mode, rollback policy, and intervention flags. Reproducibility is further supported through deterministic rollback planning, isolated run directories, manifest tracking, completion markers, and default-off intervention hooks.

Appendix B Experimental Details

This appendix provides the model, agent, retrieval, control, evaluation, and reproducibility configurations used in Section 4.

Model configuration.

All language-model requests are routed through OpenRouter using the canonical identifiers openai/gpt-4o, openai/gpt-5.4, qwen/qwen3.5-27b, and deepseek/deepseek-v4-pro. The base research models use temperature 0.7, top-p 1.0, and a shared input-context limit of 128,000 tokens. Intermediate research generations are limited to 4,096 output tokens, while final report generation is limited to 16,384 tokens. For models exposing an explicit reasoning-effort parameter, we use the medium setting; otherwise, we retain the provider default. We use the default balanced OpenRouter routing policy, allow provider-level retries, and do not permit fallback to a different model. Each failed model call is retried at most three times with exponential backoff of 2, 4, and 8 seconds.

GPT-4o is used as the research-state world model in every experiment. We set its temperature to 0, top-p to 1, and maximum output length to 4,096 tokens. Structured JSON output is requested whenever supported by the provider. Invalid JSON responses are repaired through one deterministic parsing pass and, if parsing still fails, the prediction call is repeated up to two times. A candidate commitment is rejected when no valid prediction is obtained after these attempts.

Open Deep Research configuration.

We retain the standard supervisor–researcher organization of Open Deep Research and apply the same configuration to all base models. Each run permits at most 10 supervisor iterations, at most 3 concurrent research units, and at most 5 Web searches per research unit. Each research unit receives the complete research brief and the findings accumulated at the time it is invoked. Research terminates when the supervisor emits its completion decision or exhausts the iteration budget. The final report is generated from all accepted findings and active research-state artifacts. The baseline and DeepRewind conditions use identical prompts, iteration budgets, search tools, and report-generation limits; only the graph instrumentation and commitment-control operations differ.

Web retrieval.

Web search is performed through Tavily with search_depth=advanced, topic=general, max_results=5, include_answer=false, and include_raw_content=true. We retain up to three relevant text chunks from each returned page and cap the extracted content supplied to the agent at 8,000 characters per source. No fixed domain allowlist or blocklist is applied. Duplicate URLs are removed within each run, but the same source may be retrieved by different experimental conditions. Search failures are retried twice before the corresponding query is recorded as unsuccessful.

DeepRewind configuration.

The primary experiments use the threshold-based commitment policy. We set the hypothesis-softmax temperature to T=1, the reversibility weights to ακ=αλ=αγ=13, the risk penalty to η=1, and the commitment threshold to τcommit=0.35. Trigger coverage is taken from the world-model prediction when available and otherwise defaults to TC=0.5. We set the claim-belief trigger to β⋆=0.5, minimum source reliability to ρ⋆=0.75, and minimum contradiction-edge weight to w⋆=0.6. A claim is treated as contested when both its support and contradiction masses are at least 0.3 and βt​(c)∈[0.4,0.6].

The recovery budget is B=20, with unit retraction and regeneration costs cret=1 and cregen=2. During rollback, unique commitment justifications are retracted, independently supported nodes are preserved, and downstream draft fragments and plan steps are marked stale rather than deleted. The utility-policy ablation uses

V⁡(at)=max⁡(0,p^t+1​(h⋆)−pt​(h⋆)), (24)

where h⋆ is the target hypothesis, and commits when U⁡(at)≥τU with τU=0.

Compared conditions.

We evaluate six conditions under identical research budgets. ODR is the unmodified Open Deep Research baseline. Graph-Only records the epistemic graph and transition ledger but does not invoke the world model or alter commitments. Predict-Only invokes the world model and records its risk estimates, but all candidate commitments are accepted and no rollback is performed. No-Gate accepts every candidate commitment but enables consistency monitoring and reduced rollback, isolating post-commitment repair. DeepRewind enables prediction, pre-commitment gating, monitoring, and rollback. We additionally evaluate DeepRewind-NoRollback to isolate the effect of pre-commitment gating without post-commitment repair. Results of this component ablation are reported in Appendix C.

For initial-condition experiments, supportive and contradictory synthetic evidence use reliability 0.85 and edge weight 0.8, while distracting evidence uses reliability 0.5 and edge weight 0.25. In switching experiments, early support for alternative A uses reliability 0.8 and weight 0.75; the later contradiction to A and support for B use reliability 0.95 and weight 0.9. The primary switch occurs immediately after the first accepted commitment to A. All synthetic artifacts are explicitly tagged and excluded from source-quality analyses.

Evaluation.

We use the released reference insights and official evaluation procedure for each benchmark. Let ℐ^q be the insights extracted from the generated report for task q, ℐq the reference insights, and mq the number of one-to-one matched insight pairs. We compute

Pq =mq|ℐ^q|, (25)
Rq =mq|ℐq|.

Precision is set to zero when no insight is produced. We first macro-average precision and recall across the 100 tasks in each benchmark and then report the mean and standard deviation across three seeds. The evaluator receives only the generated report and reference insights and is not given the model identity or experimental condition.

We additionally report premature-commitment rate, commitment rate, blocked-commitment rate, trigger rate, rollback rate, average rollback size, and normalized recovery cost. Premature commitment is defined formally below and is evaluated from the complete run trace using the same criterion for all methods. We do not directly evaluate the accuracy of the world model’s predicted graph transitions or reversibility estimates because the benchmarks do not provide ground-truth annotations for these quantities. Instead, we evaluate their utility through downstream performance, controlled interventions, component ablations, and sensitivity to the choice of world-model LLM. Synthetic intervention evidence is included when assessing resistance to premature commitment but excluded from final insight precision and recall unless it is independently supported by retrieved Web evidence.

Premature-commitment metric.

We operationally define a premature commitment as an accepted commitment that is subsequently invalidated by evidence collected later in the same research run. For a commitment to claim c made at step t, we examine all evidence retrieved after t and mark the commitment as premature if, by the end of the run, there exists contradicting evidence satisfying ρe≥ρ⋆ and we≥w⋆, and the resulting claim belief falls below β⋆. Thus, the premature-commitment rate is

PC=#​{invalidated commitments}#​{accepted commitments}. (26)
Table 4: Component ablation of DeepRewind with GPT-4o as the deep-research agent and GPT-4o as the world model. Results are averaged across three runs. PC denotes premature-commitment rate and RB denotes rollback rate.
Method DRBench LiveDRBench PC RB
Prec. Rec. Prec. Rec. ↓ (%)
ODR 55.8 16.2 51.4 13.8 31.7 –
Graph-Only 55.9 16.3 51.5 13.9 31.5 –
Predict-Only 56.1 16.5 51.7 14.1 30.9 –
No-Gate 57.2 17.8 52.9 15.4 31.2 14.7
DeepRewind-NoRollback 58.2 19.0 54.0 16.5 14.5 –
DeepRewind 58.7 19.6 54.6 17.1 13.1 9.1

The judgment is made retrospectively at the end of each run using the full set of subsequently collected evidence, allowing the same criterion to be applied to both ODR and DeepRewind. For DeepRewind, an online rollback may occur earlier when the same invalidation condition is first satisfied, but the reported PC metric is computed independently from the final run trace. If later evidence remains mixed or ambiguous and does not satisfy both the contradiction and belief thresholds, the commitment is not counted as premature.

Randomness and failure handling.

We use seeds 13, 42, and 97. Seeds control intervention construction, alternative ordering, concurrent-research scheduling, and the API seed parameter where supported. Because hosted APIs may remain nondeterministic, all aggregate results are computed from independently executed runs rather than replayed outputs. A run is considered failed only after three retries of its terminal error. Persistent failures receive zero precision and recall and remain included in the aggregate; we also report the completion rate for each model and condition.

Logging and resource accounting.

Each run is written to an isolated directory containing its configuration, research-state ledger, world-model predictions, policy decisions, search results, monitor events, rollback records, generated report, evaluator output, and completion marker. The manifest records the benchmark, task identifier, model, condition, seed, execution status, and artifact paths. We record input, output, and reasoning-token counts when exposed by the provider, together with the number of model calls, Tavily searches, retrieved pages, research iterations, and wall-clock duration. At most four benchmark runs are executed concurrently, and completed cells are skipped when an interrupted experiment is resumed.

Appendix C Component Ablation

We isolate the contribution of each component of DeepRewind using GPT-4o as both the deep-research agent and the research-state world model. All variants use the same research budget, retrieval configuration, prompts, and evaluation procedure. Graph-Only adds only the epistemic graph and transition logging, while Predict-Only additionally invokes the world model but does not use its predictions to alter commitments. No-Gate removes pre-commitment gating while retaining consistency monitoring and reduced rollback. DeepRewind-NoRollback retains prediction and gating but disables post-commitment rollback. Full DeepRewind combines prediction, gating, monitoring, and rollback.

Table 4 isolates the roles of prediction, prevention, and repair. Graph construction and world-model prediction alone have limited effect when they do not alter the agent’s decisions. Enabling reduced rollback improves final performance by repairing commitments after contradictory evidence is observed, while pre-commitment gating provides a larger gain by preventing risky commitments from propagating through the research trajectory. Combining gating with rollback yields the strongest overall precision and recall and the lowest premature-commitment rate.

Appendix D Error Analysis

Table 5: Mean ± standard deviation for the main results across three runs.
Model Method DRBench LiveDRBench
Prec. Rec. Prec. Rec.
GPT-4o ODR 55.8±0.8 16.2±0.5 51.4±1.0 13.8±0.7
DeepRewind 58.7±0.6 19.6±0.4 54.6±0.8 17.1±0.6
GPT-5.4 ODR 68.4±0.6 36.5±0.7 63.7±0.8 31.8±0.8
DeepRewind 71.2±0.5 40.3±0.6 66.8±0.6 35.6±0.7
Qwen3.5-27B ODR 60.9±0.9 24.6±0.6 56.2±1.0 20.8±0.8
DeepRewind 63.8±0.7 28.1±0.5 59.5±0.8 24.3±0.6
DeepSeek-V4 Pro ODR 64.7±0.7 29.8±0.6 59.8±0.9 25.4±0.8
DeepRewind 67.6±0.6 33.5±0.5 63.1±0.7 29.0±0.6
Table 6: Paired statistical comparison of DeepRewind against ODR. Differences are computed per task after averaging each task across three runs. We report the mean improvement (Δ), 95% paired-bootstrap confidence interval, and Holm-adjusted two-sided p-value over the 100 benchmark tasks.
Model Benchmark Metric Δ 95% CI padj
GPT-4o DRBench Precision +2.9 [1.1, 4.7] 0.012
Recall +3.4 [1.8, 5.0] 0.004
LiveDRBench Precision +3.2 [1.2, 5.1] 0.011
Recall +3.3 [1.5, 5.2] 0.006
GPT-5.4 DRBench Precision +2.8 [1.2, 4.4] 0.009
Recall +3.8 [2.1, 5.5] 0.003
LiveDRBench Precision +3.1 [1.3, 4.9] 0.008
Recall +3.8 [1.9, 5.7] 0.004
Qwen3.5-27B DRBench Precision +2.9 [0.9, 4.8] 0.019
Recall +3.5 [1.7, 5.3] 0.006
LiveDRBench Precision +3.3 [1.0, 5.5] 0.018
Recall +3.5 [1.4, 5.6] 0.009
DeepSeek-V4 Pro DRBench Precision +2.9 [1.1, 4.7] 0.014
Recall +3.7 [1.9, 5.5] 0.005
LiveDRBench Precision +3.3 [1.1, 5.4] 0.015
Recall +3.6 [1.6, 5.6] 0.007

Table 5 reports the run-level variation corresponding to Table 1. The relatively small standard deviations indicate that the gains from DeepRewind are consistent across the three independently executed runs rather than being driven by a single favorable trajectory. Variation is slightly higher on LiveDRBench, where changing Web content and retrieval results introduce additional uncertainty. Because three runs provide limited statistical power on their own, we additionally perform paired task-level comparisons between DeepRewind and ODR. Table 6 reports the mean per-task improvement, 95% paired-bootstrap confidence intervals, and Holm-adjusted two-sided p-values across the 100 tasks in each benchmark.

Inspection of unsuccessful trajectories reveals three recurring error sources. First, we observe cases consistent with the world model underestimating the downstream effect of a commitment, particularly when its dependencies are only expressed implicitly in later draft fragments or plans. Second, highly reliable but incomplete evidence can produce a low predicted information-loss score, allowing the agent to commit before alternative explanations have been sufficiently explored. Third, rollback can preserve a stale dependent when that dependency is missing or incorrectly typed in the research-state graph. These failures suggest that the effectiveness of DeepRewind depends jointly on accurate reversibility prediction and sufficiently complete dependency recording.

Table 7: Ablation of the world-model LLM with GPT-4o fixed as the deep-research agent. Results are insight precision and recall (%), averaged across three runs. GPT-4o is the default world model.
World model DRBench LiveDRBench
Prec. Rec. Prec. Rec.
Qwen3.5-27B 57.8 18.8 53.7 16.2
DeepSeek-V4 Pro 58.4 19.2 54.2 16.8
GPT-4o (default) 58.7 19.6 54.6 17.1
GPT-5.4 59.2 20.1 55.1 17.7

Appendix E World-Model LLM Ablation

We examine whether DeepRewind depends on the LLM used to predict research-state transitions. The base deep-research agent is fixed to GPT-4o, and only the world-model LLM is changed. All models receive the same serialized research-state graph, commitment-prediction prompt, thresholds, and search budget. Table 7 shows that stronger world models provide modest gains, but the overall performance is stable across model choices. GPT-5.4 achieves the highest precision and recall, while the default GPT-4o world model remains within one percentage point on most metrics. This experiment evaluates downstream sensitivity to the choice of world-model LLM rather than the accuracy or calibration of individual predicted transitions.

The limited variation indicates that the gains of DeepRewind do not arise solely from using a particular world-model LLM. Although GPT-5.4 produces the strongest results, its average recall improvement over GPT-4o is only 0.6 percentage points. We therefore retain GPT-4o as the default world model in the main experiments.

Appendix F Qualitative Analysis

Figure 2 presents a compact epistemic state for the question of whether new nuclear power or large-scale renewables with storage can more reliably and cost-effectively support global net-zero electricity grids by 2050. The graph preserves the provenance of each finding while exposing the unresolved tension between two competing hypotheses. Evidence on declining renewable and storage costs supports the claim that renewables are cheaper and faster to scale, which in turn supports H1: renewables with storage should be the default global strategy. However, separate evidence indicates that dispatchable nuclear generation may improve adequacy during low-renewable periods, supporting H2: a mixed portfolio including nuclear may be more robust. The regional-dependence claim further qualifies any universal conclusion.

Figure 2: A compact epistemic research graph for a qualitative example. The candidate commitment K1 would lock the report into H1, despite remaining support for the competing hypothesis H2.

World-model prediction.

The candidate action K1 commits the report to H1 as its primary conclusion. Although H1 currently has higher plausibility than H2, the difference is not sufficiently decisive: H1 has probability of 0.62, while the alternative retains probability 0.38 and is supported by multiple high-reliability evidence nodes. The world model therefore predicts that committing to K1 would cause substantial hypothesis narrowing by prematurely suppressing H2. It also identifies non-negligible information loss because the conclusion “renewables with storage are preferred” compresses away important qualifications concerning extreme operating conditions and regional constraints. The predicted recovery cost is also elevated because K1 is directly used in the preliminary draft fragment D1; later invalidation would therefore require revising both the commitment and the text derived from it.

Recommended control decision.

Given this prediction, DeepRewind recommends deferring K1 rather than accepting it immediately. The competing hypotheses remain active, and the agent instead executes plan step P1, which searches specifically for evidence about extreme-weather reliability and long-duration storage. This plan also defines a concrete contradiction trigger for reconsidering the commitment. If the additional evidence independently supports the adequacy of renewable-storage systems, the agent can later commit to H1 with lower reversibility risk. If it instead strengthens H2, the agent can reject K1 without having propagated it further into the report.

If K1 had already been accepted, the same graph enables dependency-aware rollback. The repair procedure would retract K1, mark D1 as stale because it was derived from that commitment, and preserve the independently supported sources, evidence, claims, and competing hypothesis. Thus, the graph supports both preventive control before commitment and localized repair after contradictory evidence is observed.

Appendix G Prompts

We use three prompts to initialize and update the research-state representation. Prompt G converts the input research question into a single concise and testable target proposition whose support can be evaluated against subsequently collected evidence. Prompt G then elicits mutually distinguishable answer alternatives, forming the initial hypothesis space within which subsequent evidence and commitments are assessed. Finally, Prompt G acts as the research-state world model: given a candidate commit action, it predicts the resulting graph changes and estimates their reversibility through hypothesis narrowing, information loss, recovery cost, contradiction-trigger thresholds, and future trigger coverage.


注意转载授权 · 阅读原文

来源:arXiv 科研构思与自主科研代理 · arxiv.org

引用原文

Amirhossein Abaskohi. DeepRewind: Predicting and Repairing Premature Commitments in Deep Research Agents[EB/OL]. (2026-09-29)[访问日期]. https://arxiv.org/abs/2609.36344v1.