ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation
summary
The gist
The gist The proposed framework, ARTIS, decouples exploration from commitment by enabling test-time exploration through simulated interactions prior to realworld execution.
In short
ARTIS is a framework that improves agent reliability by decoupling exploration from commitment during test-time scaling. It enables agents to explore multiple simulated action attempts before committing to a real execution. A key innovation is a risk-aware simulator trained on failure data, which focuses on high-impact errors, leading to substantial gains in agent performance across various benchmarks.
Key concepts
- ARTIS
- Agentic Risk-Aware Test-Time Scaling via Iterative Simulation. This framework allows agents to repeatedly simulate and refine candidate action plans before executing them in the real world. It specifically targets action-level correctness, unlike traditional methods that only focus on final answer accuracy.
- Iterative Simulation Loop
- The core process where an agent generates multiple simulated attempts (either sequentially or in parallel), evaluates their outcomes, and refines its plan based on these simulations. This loop allows the agent to explore a wider action space safely, improving reliability before any irreversible real-world actions are taken.
- Risk-Aware Tool Simulator
- A specialized simulator designed to predict high-impact failures rather than just average accuracy. It uses failure-driven data generation and rebalanced training to emphasize rare but critical error modes, ensuring the simulation accurately models dangerous tool interactions.
Terminology used across episodes
This episode discusses
- ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation · Paper Radio
- Self-Improving LLM Agents at Test-Time
- tau squared-Bench: Evaluating Conversational Agents in a Dual-Control Environment
- Web Agents with World Models: Learning and Leveraging Environment Dynamics in Web Navigation
- On the Role of Feedback in Test-Time Scaling of Agentic AI Workflows
- Test-Time Adaptation for LLM Agents via Environment Interaction
- ACEBench: Who Wins the Match Point in Tool Usage?
- Facilitating Multi-turn Function Calling for LLMs via Compositional Instruction Tuning
- TUMIX: Multi-Agent Test-Time Scaling with Tool-Use Mixture
- rStar-Math: Small LLMs Can Master Math Reasoning with Self-Evolved Deep Thinking
- World Modelling Improves Language Model Agents
- Towards a Science of Scaling Agent Systems
- The Tool Decathlon: Benchmarking Language Agents for Diverse, Realistic, and Long-Horizon Task Execution
- API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs
- From Word to World: Can Large Language Models be Implicit Text-based World Models?
- Large Language Model Agent: A Survey on Methodology, Applications and Challenges
- MCP-Universe: Benchmarking Large Language Models with Real-World Model Context Protocol Servers
- LiveMCPBench: Can Agents Navigate an Ocean of MCP Tools?
- APIGen-MT: Agentic Pipeline for Multi-Turn Data Generation via Simulated Agent-Human Interplay
- ToolDial: Multi-turn Dialogue Generation Method for Tool-Augmented Language Models
- Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameters
The paper
ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation · Read on arXiv
Xingshan Zeng, Lingzhi Wang, Weiwen Liu, Liangyou Li, Yasheng Wang, Lifeng Shang, Xin Jiang, Qun Liu
Harbin Institute of Technology
Current test-time scaling (TTS) techniques enhance large language model (LLM) performance by allocating additional computation at inference time, yet they remain insufficient for agentic settings, where actions directly interact with external environments and their effects can be irreversible and costly. We propose ARTIS, Agentic Risk-Aware Test-Time Scaling via Iterative Simulation, a framework that decouples exploration from commitment by enabling test-time exploration through simulated interactions prior to real-world execution. This design allows extending inference-time computation to improve action-level reliability and robustness without incurring environmental risk. We further show that naive LLM-based simulators struggle to capture rare but high-impact failure modes, substantially limiting their effectiveness for agentic decision making. To address this limitation, we introduce a risk-aware tool simulator that emphasizes fidelity on failure-inducing actions via targeted data generation and rebalanced training. Experiments on multi-turn and multi-step agentic benchmarks demonstrate that iterative simulation substantially improves agent reliability, and that risk-aware simulation is essential for consistently realizing these gains across models and tasks.
Transcript
Introduction to the show: ident: AI Radio. Generated commentary on the latest Artificial Intelligence papers.
Tom: Today's paper: "ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation".
Jane: The gist The proposed framework, ARTIS, decouples exploration from commitment by enabling test-time exploration through simulated interactions prior to realworld execution.
Tom: First, who's behind it and why it matters.
Title and authors: Tom: So let's talk about the paper ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation and who came up with it. The authors are Xingshan Zeng, Lingzhi Wang, Weiwen Liu, Liangyou Li, Yasheng Wang, Lifeng Shang, Xin Jiang and Qun Liu.
Jane: It’s interesting to see the team that put this together because they are tackling the challenge of making AI agents more reliable in real-world settings where tool use is involved.
Lu: The authors set out to address two main research questions before they even introduced their method: whether agents benefit from simulation before real execution and whether current general-purpose LLMs can actually serve as good tool simulators.
Meng: That second question about the simulator quality is what caught my attention because if the simulator isn't good, the whole process falls apart, so how they figure that out is important.
Lalam: It sets up a really interesting structure for their approach, moving beyond just making the model think harder to actually testing its plans in a safer way.
The paper's summary: Tom: So what ARTIS actually does is introduce an iterative simulation loop where the agent performs multiple simulated attempts before producing one single committed execution. This happens in three stages: iterative simulation, trial summarization, and then final execution.
Jane: The key here is that the agent generates up to N candidate attempts to explore the action space, and they have two ways to do this: sequential iteration or parallel iteration.
Lu: Sequential iteration lets the agent refine its action proposals by conditioning each new attempt on all previous simulated attempts, which encourages diverse and nonredundant attempts.
Meng: Parallel iteration lets them generate multiple simulated attempts independently, which is good for efficiency and avoiding context-length growth, but they admit it might lead to redundant proposals if the underlying policy doesn't sample enough diversity.
Lalam: Before the final real execution, there's a summarization step that aggregates all those simulated outcomes into one single execution strategy or high-level recommendation before it gets sent to the agent for the real world.
The paper's improvements: Tom: Now let's talk about what they improved by introducing this framework, ARTIS. They showed that iterative simulation substantially improves agent reliability when you have a high-fidelity simulator available, and ARTIS consistently beats standard inference and conventional TTS baselines.
Jane: What’s really compelling is the risk-aware tool simulator component which is designed to emphasize high-impact error prediction over just average case accuracy.
Lu: They achieved this by using a failure-driven data generation strategy, where they collected diverse real-world tools and generated targeted tool invocations for rare errors using heterogeneous agents.
Meng: That rebalancing of training data—downweighting successful executions and upsampling samples corresponding to rare failure cases—that’s how they make the simulator decision-useful rather than just uniformly accurate.
Lalam: And before we actually execute anything, there's a summarization step that distills those simulated experiences into a concise guidance signal, which maximizes robustness while minimizing execution risk.
Conclusion: Tom: So to wrap up the paper ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation shows that this iterative simulation approach is highly effective for action-centric and environment-interactive settings. They found that sequential iteration actually achieves the strongest performance on both benchmarks.
Jane: The results are pretty strong because they show that ARTIS requires substantially fewer self-evaluation calls than Sequential Revision, which needs to perform one self-evaluation per action when N gets large, leading to significantly higher API usage and token consumption for that baseline.
Lu: Interestingly, ARTIS not only gets better performance across all N values but it also shows superior token efficiency compared to the Sequential Revision baseline.
Meng: The paper notes that the benefits aren't tied to a specific backbone architecture; the gains are there if you have a perfect simulator, though smaller or less capable models might struggle with unstable and inconsistent performance on their own.
Lalam: It really validates the necessity of both iterative simulation and risk-aware simulation for getting reliable agentic LLMs to interact with external environments through tool usage.
More episodes
- 2405.01930-OARelatedWork: A Large-Scale Dataset of Related Work Sections with Full-texts from Open Access Sources
- 2412.12478-Human-in-the-Loop Generation of Adversarial Texts: A Case Study on Tibetan Script
- 2502.01025-Knowing When to Stop: Efficient Context Processing via Latent Sufficiency Signals
- 2504.02891-Automated Survey Collection with LLM-based Conversational Agents
- 2505.17244-ReasoningShield: Safety Detection over Reasoning Traces of Large Reasoning Models
- 2505.22184-Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexicon
- 2510.10998-ABLEIST: Intersectional Disability Bias in LLM-Generated Hiring Scenarios
- 2510.13154-The Alignment Veto: How Safety Training Suppresses Cultural Knowledge in LLMs
- 2601.17898-Assessment of Generative Named Entity Recognition in the Era of Large Language Models
- 2601.18901-Self-Aware Knowledge Probing: Evaluating Language Models' Relational Knowledge through Confidence Calibration