KDD Workshop on Evaluation and
Trustworthiness of Agentic AI

KDD 2026

August 09, 2026, Jeju, Korea. Held in conjunction with KDD'26, International Convention Center Jeju (ICC Jeju), Room 201A


Welcome to KDD Workshop on Evaluation and Trustworthiness of Agentic AI 2026!

This workshop advances evaluation and trustworthiness methodologies for agentic AI systems across their full deployment lifecycle, with particular emphasis on real-time post-market monitoring, model evolution, and production governance. As autonomous agents increasingly perform multi-step reasoning, planning, and action in open-ended real-world settings, traditional pre-deployment benchmarks and static evaluation frameworks prove insufficient.

We address core challenges including stochastic agent behavior, absence of ground truth, evolving user contexts, API-driven model updates, and lack of standardized metrics and audit practices. This workshop aims to foster interdisciplinary collaboration by bringing together researchers, industry practitioners, and policymakers to develop advanced evaluation techniques and governance frameworks for agentic AI systems that can be safely and reliably deployed in production.

Contact: kdd-ws-agentic-eval@amazon.com

Call for Contributions

This workshop focuses on the unique challenges of evaluating and ensuring trustworthiness of agentic AI systems throughout their deployment lifecycle. As large language models and autonomous agents are increasingly deployed in real-world, open-ended settings, we need new methods and frameworks that go beyond traditional pre-deployment benchmarks. Topics of interest include (but are not limited to):

  • Real-Time Post-Market Monitoring: Continuous evaluation of deployed agentic systems, including drift detection, anomaly identification, performance degradation tracking, and monitoring under evolving user populations and contexts.
  • Agentic AI Evaluation: Assessing autonomy, multi-step reasoning, planning and tool use, goal alignment, adaptability, emergent failure modes, and multi-agent orchestration in dynamic environments.
  • Model Evolution and API Risk: Evaluation methods for detecting regressions, capability shifts, and safety risks introduced by model updates, version changes, and upstream dependency modifications.
  • Trustworthiness and Safety: Evaluation of reliability, bias and fairness, privacy, misuse resistance, robustness to distribution shift, explainability of agent actions, and safety guarantees.
  • Benchmarking, Metrics, and Standardization: Agent-centric benchmarks, LLM-as-judge methods, standardized metrics and logging protocols, evaluation frameworks for compound AI systems, and best practices for production monitoring.
  • Lifecycle and Governance Frameworks: End-to-end evaluation spanning pre-training, fine-tuning, deployment, and post-market phases, including auditability, liability attribution, regulatory compliance, and alignment with emerging AI governance standards.
  • User-Centric and Cross-Modal Assessment: Human-centered evaluation, trust calibration, human-in-the-loop systems, and assessment of agent behavior across text, image, audio, video, and multimodal inputs.
  • Industrial and Public-Sector Applications: Case studies of real-world deployments, enterprise-scale monitoring systems, sector-specific requirements (healthcare, finance, customer service), and scalable evaluation infrastructure for agentic AI.

Keynote Speakers

Jian Pei

Jian Pei

Arthur S. Pearse Distinguished Professor of Computer Science at Duke University; Amazon Scholar

Title: Beyond the Single Turn: Decomposing Evaluation for Multi-Party, Long-Horizon Agentic AI

Abstract: Imagine an AI agent that joins a year‑long software development project—navigating heated debates between engineers, remembering who approved which design revision, and drafting a reply that sounds like the quiet backend expert, not the outspoken product lead. Today, no evaluation framework can tell us whether such an agent actually works, because our metrics were built for simpler worlds: two‑person chats, single‑reference answers, and static facts retrieved from clean paragraphs. This talk will tear open the black box of multi‑party conversation with MPCEval, a benchmark that asks three separate questions—who should speak next, what should they say, and does the content fit the speaker?—revealing that human conversations are not a gold standard, that models shine in surprisingly different ways, and that collapsing everything into one number is a recipe for deception. Then we will step into EverMemBench, a year‑long simulated enterprise where memory systems must piece together fragmented evidence across groups, track decisions that get revised and superseded, and infer unspoken traits like communication style. The results are humbling: even the best models stumble over cross‑group attribution, fail to understand "completed" versus "archived" as semantic states, and cannot retrieve a person's casual, emoji‑laced voice even when they have all the facts. Together, these findings point to a new path forward—where evaluation stops pretending that longer contexts or bigger retrieval lists are enough, and instead embraces the messy, distributed, time‑aware, and socially grounded reality of how humans actually collaborate. This is not just about better benchmarks; it is about reimagining what we mean by "intelligence" in agentic AI.

Xiangliang Zhang

Xiangliang Zhang

Leonard C. Bettex Collegiate Professor of Computer Science, Department of Computer Science and Engineering, University of Notre Dame

Title: Trustworthiness of Capable Agents: Understanding Emergent Failure Modes in Agentic AI

Abstract: As agentic AI systems become increasingly capable, trustworthiness is not only about preventing obviously harmful actions. A more subtle challenge appears when agents operate in imperfect environments, where rewards are only rough proxies for real goals, task instructions are incomplete, or multiple agents interact under shared and competing incentives. In these settings, agents may not simply fail because they are weak; instead, they may optimize too well against imperfect objectives, finding loopholes, manipulating feedback, or appearing successful while violating the intended goal. This talk discusses emergent failure modes in agentic AI from both individual-agent and multi-agent perspectives. It first examines how strategic-looking behaviors can arise unintentionally through post-training and fine-tuning, leading to loophole exploitation. It then focuses on multi-agent systems, where failures can emerge from interactions among otherwise capable agents. These include incentive exploitation and strategic manipulation, such as collusion-like coordination or information withholding; collective-cognition failures, such as conformity, herding, and over-deference to authority; and adaptive governance failures, where agents fail to clarify ambiguity, resolve conflict, reallocate roles, or revise outdated plans.

Industry Keynote Speakers

Jun (Luke) Huan

Jun (Luke) Huan

Sr. Principal Scientist, AWS AI Labs

Title: Harness Evaluation and Optimization in Coding Agents

Abstract: Modern AI agents are only as good as the harness that sits between the model and its tools: the software layer that translates a model's reasoning into concrete actions and reflects execution outcomes back to the model. As models grow more capable, the performance bottleneck shifts away from reasoning and toward this interface, where a persistent "intent–execution gap" emerges. In this talk, we present our recent work on harness development and evaluation for coding agents. We show that minimizing this intent–execution gap, with no task-specific tuning, is sufficient to reach state-of-the-art results across diverse agentic benchmarks. We conclude by introducing the Simple Strands Agent (SSA), a lightweight, fully open-sourced single-agent harness that puts these principles into practice.

Bio: Dr. Jun (Luke) Huan is a Sr. Principal Scientist at AWS AI Labs. Dr. Huan works on AI and Data Science. He has published more than 200 peer-reviewed papers in leading conferences and journals. He was a recipient of the NSF Faculty Early Career Development Award in 2009. His group won several best paper awards from leading international conferences. Before joining AWS, he worked at various places including Baidu Research, US National Science Foundation, and University of Kansas.

Thu Le

Thu Le

Founding Data Scientist, Arena Intelligence (arena.ai)

Title: Agent Arena: Causal Evaluation of AI Agents from Millions of Real-World Interactions

Abstract: Arena Intelligence (arena.ai, formerly lmarena.ai) operates one of the largest open platforms for LLM and agent evaluation. The platform's Chatbot Arena has collected 82M+ pairwise human preference votes across hundreds of models and is widely cited as a de facto community benchmark for language model quality. Arena's evaluation services are used by major frontier AI labs for model development. Beyond evaluation, Arena has built a full-fledged agentic platform complete with tool integration, coding sandboxes, web browsing, and image generation, where real users interact with AI agents to produce their best work, from full-stack applications to financial research pipelines. This production platform serves as the precursor for agentic evaluation: by observing how people actually delegate, steer, and iterate with agents on real tasks, we generate the rich trace data that powers our methodology. Agent Arena, launched in June 2026, is among the first large-scale real-world agentic evaluation benchmarks grounded in real-life signals: evaluating AI agents performing genuine multi-step work (40M+ lines of code written per week, 2M+ tool calls per week, 160K+ tasks per week across diverse domains) rather than curated benchmark tasks with known answers. The causal tracing methodology underpinning Agent Arena derives rankings from randomized, real-world trace data using techniques from causal inference, representing a new paradigm for agent evaluation. The platform is backed by ongoing research and is developed in close collaboration with the academic community.

Bio: Thu Le is a Founding Data Scientist at Arena Intelligence (arena.ai), where she leads the data science efforts powering Arena's model evaluation platform — including the Chatbot Arena and Agent Arena leaderboards. Specializing in causal inference and A/B testing methodology, Thu brings over a decade of experimentation expertise that translates naturally to the challenge of evaluating agentic AI systems in production. Her work at Arena spans causal treatment effect estimation for model ranking, user quality frameworks, and production analytics at scale. Prior to Arena, Thu was a Senior Staff Data Scientist at Lyft, where she headed R&D for the Experimentation Platform and architected the Market Management AI platform using LLMs. Before that, she was a Tech Lead at Airbnb, where she pioneered the effort to redesign Smart Pricing, and a Senior Data Scientist at Meta, where she helped build Smart Authentication. Thu holds a PhD in Statistics and an MS in Computer Sciences from the University of Wisconsin–Madison.


SCHEDULE

August 09, 2026 (Afternoon 1-5PM)

International Convention Center Jeju (ICC Jeju), Room 201A

Full Program & Room Assignments | Conference Schedule & Food/Beverage

Time Duration Session
1:00 – 1:05 PM 5 min Opening Remarks
1:05 – 1:35 PM 30 min Industry Keynote 1: Thu Le – "Agent Arena: Causal Evaluation of AI Agents from Millions of Real-World Interactions"
1:35 – 1:55 PM 20 min Oral Paper Presentations - Session 1
  • Kai Han – "Evaluating Admissibility in Agentic Systems"
  • Luyao Zhang (Duke Kunshan University) – "Beyond a Single Score: Evaluating Agentic AI Across Energy, Quantum Computing, and Finance"
1:55 – 2:25 PM 30 min Industry Keynote 2: Jun (Luke) Huan – "Harness Evaluation and Optimization in Coding Agents"
2:25 – 3:05 PM 40 min Oral Paper Presentations - Session 2
  • Jie Zhou (Amazon) – "Trustworthy LLM-Based Rule Learning for Auditable Agentic Decision-Making"
  • Keqin Zhang – "Beyond Leaderboards: Protocol Cards for Trustworthy Coding-Agent Evaluation"
  • Bruce Xu – "Evaluating Silent Model Evolution in Agentic AI: How Low-Bit Inference Changes VLM Capability and Safety"
  • Mian Zhang – "ReflexBench: Evaluating Observer-Participant Failures and Counterfactual Trustworthiness in Agentic AI"
3:00 – 3:30 PM 30 min ☕ Coffee Break & Poster Session (Poster location: ICC 1 - 3F between Halla and Samda Hall)
3:30 – 4:15 PM 45 min Keynote 1: Jian Pei – "Beyond the Single Turn: Decomposing Evaluation for Multi-Party, Long-Horizon Agentic AI"
4:15 – 5:00 PM 45 min Keynote 2: Xiangliang Zhang – "Trustworthiness of Capable Agents: Understanding Emergent Failure Modes in Agentic AI"
5:00 – 5:05 PM 5 min Closing Remarks

Accepted Papers

ID Paper Title Paper Poster
6 MADS-CPS: A Machine-Checkable Run-Level Evaluation Contract for Trustworthy Agentic Cyber-Physical Workflows PDF
7 On Recursive Resolution: Scalable Ground Truth for Self-Improving AI Systems PDF Poster
9 ReflexBench: Evaluating Observer-Participant Failures and Counterfactual Trustworthiness in Agentic AI PDF Poster
10 Evaluating Admissibility in Agentic Systems: Semantic Governance and a High-Consequence Benchmark PDF Poster
11 StableEval Arena: A Cost-Aware Agentic Benchmark for Stablecoin Price Stability Prediction PDF Poster
12 Quantum Circuit Vision: Cost-Aware Evaluation of Visual AI Agents for Quantum Code Generation PDF Poster
13 Beyond the Final Answer: Evaluating the Reasoning Trajectories of Tool-Augmented Agents PDF
15 MacCode Lab: A Reproducible Single-Machine Harness for Execution-Guided Code Agents, and When Repair Actually Helps PDF Poster
16 FinContextBench: Monitoring Contextual Autonomy Drift in Personal Financial LLM Agents PDF
19 Comparative Analysis of Agent Evaluation Frameworks: Stability, Detection, and Discovery in Enterprise Analytics Agents PDF Poster
20 Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety PDF
21 Numerical Format as a Post-Deployment Risk Surface: A Joint Capability–Safety Audit of FP4 Vision–Language Models PDF
24 Evaluating Governed LLM-Driven ML Experimentation: Lifecycle, Provenance, and Failure Metrics PDF Poster
25 SolarChain-Eval: A Physics-Constrained Benchmark for Trustworthy Economic Agents in Decentralized Energy Markets PDF Poster
26 Beyond Leaderboards: Protocol Cards for Trustworthy Coding-Agent Evaluation PDF
27 PRISM: Prompt-Refined In-Context System Modeling for Financial Retrieval PDF Poster
33 DutyFormer: Neural-Symbolic Prediction of Silent Obligation Omissions in AI-Agent Process Traces PDF
34 Verifying Agents in Rubric-Graded Environments PDF
35 A Framework for Evaluating Agentic Skills at Scale PDF
36 NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms PDF
39 Equilibrium-Level Harm in Multi-Agent AI Systems: Why Individual Evaluation Fails PDF Poster
42 PCBWorld: A Benchmark Environment for Engine-Grounded PCB Design Automation PDF
48 Construct Validity Failures in Agentic AI Benchmarks: An Empirical Audit PDF Poster
49 When Consensus Is Not Correctness: Diversity Collapse and Manufactured Overconfidence in Multi-Agent LLM Debate PDF
52 Emergent, Steered, or Neither? A Validity Audit of the MoltBook Agent Society PDF Poster
56 Reason Less, Verify More: Deterministic Gates Recover a Silent Policy-Violation Failure Mode in Tool-Using LLM Agents PDF Poster
57 Confidence-Aware Multi-Agent Orchestration for Evaluating Multimodal Rule Compliance PDF
58 ACID-Bench: Auditing Transactional Reliability in State-Changing Tool Agents PDF Poster
60 How Much Coordination Gain Is Real? A Paired Noise-Floor Protocol for Multi-Agent LLM Benchmarks PDF Poster
62 Selecting LLM Judges for Agent Evaluation Pipelines: Accuracy Masking and Review-Burden Tradeoffs PDF Poster
66 Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents PDF Poster
67 Diagnostic Knowledge Graphs: Automated Benchmark Construction and Deterministic Evaluation for Multi-Step Reasoning Agents PDF Poster
71 Clustering-based Prompt Optimization for LLM Evaluation PDF
72 Trustworthy LLM-Based Rule Learning for Auditable Agentic Decision-Making PDF
73 Adaptive Decentralized Multi-LLM Orchestration with Accelerated Consensus-Based SPSA PDF
74 The Scaffold Effect in Coding Agents: Harness Choice as a Hidden Variable in Coding-Agent Evaluation PDF Poster
76 IFCMemoryBench: Evaluating Long-Term Memory of LLM-Based Agents in BIM Information Retrieval PDF
78 Auditing Construct Validity in Agentic Decision Support with Sports Analytics Case Study PDF Poster
79 Autoresearch for Marketplace Catalogs: From Legacy Forms to AI-Native Matching PDF
82 Evaluating Enterprise Analytics Agents: An End-to-End, Trace-Backed Methodology PDF
86 Cross-Layer Misalignment Detection in Agent Skills: A Progressive Loading-Aware Contrastive Learning Approach PDF
89 When Should Active RAG Retrieve? A Budget-Aware Evaluation of Utility, Calibration, and Cost PDF
90 Phantom Guardrails: When Self-Improving Agent Harnesses Fix Failures That Never Happened PDF
91 A Fraud-Detection-Inspired Framework for LLM Agents Security PDF Poster
92 How Many Tasks Are Enough for Agent Benchmark Decisions? A Replay Analysis of Public LLM Agent Benchmarks PDF
95 Outcome Is Not Enough: Trace-Based Lifecycle Evaluation for Trustworthy Agentic Economic Systems PDF
97 When Aggregate Alignment Misleads: Auditing Agentic Policy Repair Without Per-State Expert Actions PDF

Submission Guidelines

  • Please ensure your paper submission is anonymous.
  • The accepted papers will be posted on the workshop website but will not be included in the KDD proceedings.
  • Paper submissions are limited to 9 pages, excluding references, must be in PDF and use ACM Conference Proceeding templates.
  • Additional supplemental material focused on reproducibility can be provided. Proofs, pseudo-code, and code may also be included in the supplement, which has no explicit page limit. The supplement format could be either single column or double column. The paper should be self-contained, since reviewers are not required to read the supplement.
  • The Word template guideline can be found here: link
  • The Latex/overleaf template guideline can be found here: link
  • A paper should be submitted in PDF format through OpenReview at the following link: OpenReview Submission Portal

Camera-Ready & Poster Submission Guidelines

Special Day/Workshop Posters

  • Each board is vertical oriented; 965mm x 1,698mm (3.16 ft x 5.5 ft).
  • Each face of the board will fit (1) poster; (2) posters total per board.
  • Each paper will have 3 ft wide by 3.5 ft tall space for their poster.
  • Authors can decide on the size and design their poster, as they see fit (landscape or vertical), as long as it fits within that space.
  • KDD will provide push pins for each board.
  • The boards will be labeled for each Special Day/Workshop for attendees to easily locate.

Special Day/Workshop Setup/Teardown

  • All poster sessions will be held in ICC 1 - 3F between Halla and Samda Hall.
  • After the workshop/special day ends, presenters should remove their posters. Any posters left in the ICC may be discarded.
Poster Setup Layout

Organizers



Sadid Hasan

Sadid Hasan
Microsoft

George Karypis

George Karypis
Amazon & UMN