Agent Self-Attribution Errors
Agent Claims It Will Perform Actions Beyond Its Capabilities
44 patterns for this goal
Voice agents fail at conversation flow because dialog management in voice has to solve real-time turn-taking, persona consistency, structured data capture, and business-logic compliance simultaneously, and a failure in any one layer — a mistimed interruption, a leaked internal system name, a multi-field question, an ignored “busy” signal — breaks the illusion of a coherent conversation partner. Conversation flow is the largest failure surface in voice AI because it is not one problem but at least seven: audio-level turn mechanics, agent persona and identity integrity, call lifecycle transparency, data capture mechanics, flow and compliance logic, adaptive responsiveness, and content pacing — each with its own root cause and its own fix.
The 44 conversation-flow patterns share a recurring root cause: an agent optimized to complete a plan (a script, a turn-taking heuristic, a fixed silence threshold, a list of things to say) rather than to continuously reconcile that plan against what is actually happening in the conversation. Turn-taking failures happen because a silence timer doesn’t check whether the sentence was semantically complete. Flow-compliance failures happen because the agent advances to the next scripted step without validating prerequisites. Data-capture failures happen because the agent waits for a complete record instead of saving incrementally. Responsiveness failures happen because the agent generates its next line before checking whether the caller just asked a question it needs to answer first. The fix pattern that recurs across nearly every one of the 44 files is the same: insert an explicit check — a classifier, a state-machine gate, a validation step — between “caller said X” and “agent’s planned next action,” so the plan can be preempted, corrected, or delayed rather than executed blindly.
Conversation flow sits at the intersection of real-time audio mechanics (turn-taking, latency, silence handling — problems that don’t exist in text chatbots) and business-logic dialog management (step sequencing, data capture, compliance, scope boundaries — problems that exist in any structured conversation, voice or text). Both problem classes are large on their own; conversation flow is where they combine, which is why it accounts for 44 of the repository’s speech-and-audio patterns versus 6-8 for the other three goals.
Ten patterns — barge-in, end-of-turn detection, interruption mishandling, turn-taking errors, silence misinterpretation, backchannel timing, response latency, slow-tool silence, opening timing mismatch, and prompt-bloat latency — are governed by audio pipeline mechanics (VAD, endpointing, TTS streaming). The remaining patterns are dialog-logic problems that would also occur in a text-based multi-turn agent, just without the millisecond stakes.
For some patterns, yes and the fix is well-documented — negative-banlist-priming and prompt-bloat-latency are pure prompt-design anti-patterns with a straightforward rewrite. For most others — turn-taking, slot extraction, qualification-flow sequencing, scope boundaries — the documented mitigation is architectural: a state machine, a validation gate, or a classifier layer sitting between the caller’s utterance and the agent’s next response, not a prompt tweak alone.
The agent executing its next planned action (a script step, a silence-based turn transition, a scripted question) without first checking whether the caller’s most recent input changes what that next action should be — whether that input is an interruption, a question, a hesitation, an implicit correction, or an override signal like “I’m driving.”
Conversation flow assumes speech has already been captured (audio-handling) and transcribed (speech-recognition) — its failures are about what the agent does with a correctly or approximately-correctly recognized utterance: when to respond, what to say, what data to extract, and which business rule to apply. A garbled transcript from a speech-recognition failure can still trigger a conversation-flow failure (e.g., wrong intent classification), but the two are different bugs with different fixes.
| Pattern | Mechanism |
|---|---|
| Agent Self Attribution Errors | Agent uses first-person “I’ll send/schedule” language for actions it doesn’t actually perform, creating false accountability |
| AI Disclosure Failures | Agent denies, evades, or over-explains when directly asked “are you AI/a bot?” |
| Backchannel Timing Errors | Acknowledgment cues (“uh-huh,” “right”) land mid-sentence or miss the emotional register of what was said |
| Emotional Expression Overuse | Laughter and exclamations fire on nearly every turn regardless of genuine trigger, reading as manic |
| Graceless Call Ending | Calls end abruptly, add content after goodbye, or loop through multiple false endings |
| Hesitation Mishandling | Uncertain responses (“maybe,” “let me think”) get re-pitched instead of offered a low-pressure option |
| Identity Manipulation | Agent can be jailbroken into a different persona or prompt disclosure via “dev mode”/roleplay claims |
| Incremental Capture Failures | Data is saved only at conversation end, losing everything captured so far on a mid-call disconnect |
| Internal Process Leakage | Agent reveals CRM fields, routing logic, or internal tool/team names to the caller |
| Language Barrier Failures | An unsupported language or heavy dialect produces garbage ASR with no negotiation or handoff path |
| Monologue Without Engagement | Five or more items or steps delivered in one breath without a pause for engagement checks |
| Multilingual Code-Switching Failures | Agent fails to detect or maintain the caller’s chosen language consistently across turns |
| Negative Banlist Priming | Long “never say X” lists prime the model to output the exact banned phrases under output pressure |
| Opening Timing Mismatch | Scripted opening ignores the caller’s greeting, tone, or “who is this” question |
| Outcome Classification Errors | Call outcomes (qualified/callback/DNC) get assigned without required fields or contradict captured data |
| Premature Call Ending | Brief silence, an interruption, or a confused fragment gets misread as a goodbye signal |
| Prompt Bloat Latency | Oversized system prompts reloaded every turn add time-to-first-token that surfaces as audible dead air |
| Rapport Absence | Personal or emotional comments from the caller go unacknowledged as the script continues unchanged |
| Script Compliance Drift | Model elaborates, softens, or varies required exact phrases, banned words, or stated boundaries |
| Slot Extraction Errors | Implicit confirmations, hesitant permissions, and mid-conversation corrections get mis-captured into structured fields |
| Slow Tool Silence | Agent goes silent during tool/API execution with no acknowledgment, reading to callers as a dropped call |
| Spoken Form Failures | Numbers, dates, currency, and addresses get read in written form instead of natural spoken form |
| Tool Description Failures | Vague or empty tool descriptions cause the wrong tool to be selected or malformed parameters to be passed |
| Unnatural Conversational Style | Overly formal or overly enthusiastic phrasing reads as scripted or salesy rather than conversational |
| Unnecessary Data Collection | Agent requests personal fields (name, email) beyond what the task actually requires |
| Verbosity Despite Brevity Instructions | Responses exceed explicit word- and duration-count limits by multiples despite direct instruction |
| Wrong Number / Wrong Person Handling | Agent fails to detect or gracefully exit when an outbound call reaches an unintended recipient |
| Text Prompt Voice Failure | Markdown, lists, and text-chatbot phrasing leak into spoken TTS output in cascaded (non-voice-native) pipelines |
| Barge-In Failures | User cannot interrupt agent speech due to half-duplex audio design or missing TTS cancellation |
| End-of-Turn Detection | Silence-only endpointing misreads compound sentences and enumerated lists as a finished turn |
| Interruption Mishandling | Corrections (“no, I said…”) aren’t recognized, are partially captured, or don’t update dialog state |
| Multi-Turn Context Loss | Pronouns and ordinal references (“the second one,” “book it”) aren’t resolved across conversation turns |
| Response Latency Issues | Cumulative ASR/LLM/TTS pipeline delay exceeds the roughly 500ms conversational expectation |
| Silence Misinterpretation | Fixed silence thresholds can’t distinguish a thinking pause from end-of-turn or a task-related lookup |
| Turn-Taking Errors | Agent and caller speak over each other from missed prosodic turn-completion cues |
| Multi-Field Collection Overload | Asking for multiple data fields in one turn drops first-try success from 92% to 48% |
| Scope Boundary Violations | Agent fabricates plausible-sounding answers to questions outside its approved knowledge scope |
| Unauthorized Commitments | Agent promises things outside its authority — no spam, delivery dates, data-handling guarantees |
| Override Signal Failures | “Busy,” “driving,” or “stop” signals fail to halt the agent’s scripted flow |
| Intent Boundary Confusion | Adjacent intents (not-interested vs. do-not-contact, busy vs. decline) get misclassified |
| Qualification Flow Violations | Required steps get skipped, combined, or reordered, or the call closes with fields still missing |
| Unverified Data Usage | Caller-stated names or CRM data get used or addressed without verifying the right person answered |
| Vague Consent Exploitation | Ambiguous responses (“fine,” “whatever,” silence) get recorded as explicit consent |
| Response Adaptation Failure | Agent continues its planned script instead of addressing a question, concern, or condition just raised |
Total: 44 patterns
Agent Claims It Will Perform Actions Beyond Its Capabilities
Agent Mishandles Questions About Being AI/Bot
Agent's Acknowledgment Cues ("uh-huh", "right") Occur at Wrong Moments
User Cannot Interrupt Agent's Speech
Agent Overuses Laughter, Exclamation Marks, and Emotional Cues
Agent Can't Reliably Detect When User Has Finished Speaking
Call Ends Awkwardly Without Natural Closure
Agent Pressures Hesitant Callers Instead of Providing Low-Friction Options
Agent Can Be Manipulated Into Adopting Different Personas or Revealing Prompt
Agent Waits Until All Fields Collected Before Saving Data
Similar Intents Misclassified Due to Overlapping Definitions
Agent Reveals Backend Operations, Routing Logic, or Internal Details
Agent Doesn't Properly Handle User Corrections and Interruptions
Agent Cannot Communicate Due to Unsupported or Incomprehensible Language
Agent Delivers Long Feature Lists or Information Without Pausing for Engagement
Agent Asks for Multiple Data Fields in a Single Turn
Agent Loses Context Across Conversation Turns
Agent Fails to Match or Maintain Caller's Language Choice
Long "Never Say X" Lists Inadvertently Prime the Model to Output Banned Content
Agent Opening Doesn't Account for Caller's Greeting State
Call Outcomes Incorrectly Classified, Affecting Follow-up Actions
Agent Fails to Detect or Respond to Conversation-Stopping Signals
Agent Ends Call When Caller Pauses, Interrupts, or Shows Confusion
Oversized System Prompts Cause Dead Air Due to Time-to-First-Token Delays
Agent Skips Required Steps or Asks Questions Out of Sequence
Agent Fails to React to Caller's Personal Comments or Emotional Cues
Agent Continues Planned Flow Instead of Adapting to Caller's Response
Agent Takes Too Long to Respond
Agent Answers Questions or Provides Information Outside Approved Knowledge
Agent Deviates from Required Phrases, Boundaries, or Conversation Structure
Agent Incorrectly Interprets Pauses and Silence
Critical Information Extracted Incorrectly or Inconsistently
Agent Goes Silent During Tool Execution Without Acknowledgment
Numbers, Dates, and Formatted Text Not Converted to Spoken Form
System Prompts Designed for Text Chatbots Fail in Voice Conversations
Vague or Poor Tool Descriptions Cause Wrong Tool Calls or Bad Parameters
Agent and User Speak Over Each Other
Agent Makes Promises Outside Allowed Scope (No Spam, Follow-up Guarantees, Delivery Promises)
Agent Sounds Robotic, Scripted, or Inauthentically Enthusiastic
Agent Requests Personal Information Beyond What's Needed
Agent Uses Caller-Provided Information Without Verification
Agent Accepts Ambiguous or Passive Consent as Full Permission
Agent Produces Long Responses Despite Explicit Length Constraints
Agent Fails to Detect or Handle When Call Reaches Unintended Recipient