Eval-Data Mismatch
Tests do not represent production inputs.
15 patterns for this goal
Agents skip or perform inadequate verification of their own outputs, leaving errors undetected — verification is absent (no check at all), shallow (checking only format not correctness), or biased (agent verifies its own work and finds no errors, even when a second opinion would catch them). These failures are architectural: the problem isn’t model capability, it’s the absence of verification in the deployment pipeline or verification logic that lacks sufficient independence and depth.
Across all 15 patterns, the single most reliable mitigation is mandatory, multi-layered verification: (1) require every state-changing action to have a verification step before reporting success (not self-verification, but via independent tool or readback); (2) require high-stakes outputs to pass multiple verification methods (format + business logic + human review sample); (3) verify the verifier itself against test cases to catch verifier hallucination. Cases where verification is mandatory and multi-layered consistently catch errors that single-layer verification misses. The second universal mitigation is comprehensive test methodology — if testing covers only happy paths, failures in edge cases and long-horizon scenarios won’t surface until production.
Output accuracy covers generation of false outputs (hallucination, bias). Verification covers detection of false outputs. An agent can hallucinate, and verification is the safeguard that catches it. If accuracy is the generation problem, verification is the detection problem.
Confidence scores don’t correlate with accuracy — a model can be highly confident when wrong. Verification requires checking against external ground truth or business logic, not relying on internal confidence. A model confident on false output still produces false output.
More test cases help, but if test methodology is flawed (happy path only, no adversarial cases, no ground truth comparison), more cases don’t fix the problem — they just test the wrong thing. The fix is to diversify test methodology: happy paths + edge cases + adversarial inputs + long-horizon scenarios + ground truth comparison.
No-verification (no check at all) and self-verification-bias (agent checks its own work and finds no errors) are highest-priority because they’re silent and allow errors to propagate. Happy-path-only-evals is next because it trains on wrong distribution and misses real-world failures.
| Pattern | Mechanism |
|---|---|
| Eval Data Mismatch | Evaluation data doesn’t match production data; agent tested on one distribution, deployed on another |
| Happy Path Only Evals | Testing covers only success cases; edge cases, error conditions, adversarial inputs untested |
| Metric Gaming | Agent optimizes for evaluation metric rather than business goal; high metric score masks misalignment with actual value |
| No Adversarial Testing | Verification doesn’t test malformed, tricky, or adversarial inputs; agent fails on edge cases |
| No Business KPI Validation | Verification checks technical metrics but not business impact; improvement in metrics doesn’t translate to business value |
| No Ground Truth Comparison | Output not compared against authoritative ground truth; verification passes but output is still wrong |
| No Human Review Trigger | High-stakes output not routed to human review; no mechanism to flag uncertain or risky decisions |
| No Long Horizon Evaluation | Testing covers single steps; multi-step outcomes, compounding errors, long-term consequences untested |
| No Regression Testing | No regression suite; previously-working functionality breaks silently on model or system updates |
| No Verification | No verification step at all; state-changing actions ship without checking that action succeeded |
| Over-Trusting Confidence Score | Verification relies solely on model confidence; high confidence treated as equivalent to correctness |
| Self Verification Bias | Agent verifies its own work and finds no errors; independent verification catches errors self-check missed |
| Surface Level Validation | Verification checks format (schema, field presence) but not correctness (value accuracy, business logic) |
| Verifier Hallucination | Verification component itself hallucinates; reports correct output even when output is wrong |
| Wrong Verifier | Verification checks irrelevant criteria; verifier doesn’t match task requirements or business goal |
Total: 15 patterns
Tests do not represent production inputs.
Edge cases are missing from tests.
Agent learns to satisfy eval wording instead of real behavior.
Prompt injection/malformed input/tool errors not tested.
Output looks correct but harms CSAT, conversion, compliance, or cost.
Agent does not compare against source, database, or expected result.
Agent cannot identify when to escalate.
Multi-step degradation is missed.
Fixing one case breaks another.
Agent does not check output/action correctness.
Agent treats model/OCR confidence as correctness.
Same model judges its own flawed output.
Checks formatting but not semantic correctness.
Evaluator invents reasons to pass/fail.
Agent uses weak checks for a high-risk task.