Language / 语言

Agent Research:从问题到证据的阅读地图

Jul 2026 · Auto Research / RL Environments / Agentic RL / RSI

这不是一份“谁最好”的排行榜,而是一张研究导航图。Agent 系统的名字常常相似,实际问题却不同:有的问能否改进外部研究工件,有的问能否在环境中持续学习,有的问如何把真实 harness 接进 RL,有的问是否真的跨代改进了改进机制。先把问题分开,引用、实验和结论才不会彼此借力过度。

使用规则:每个链接只为表中对应的一格提供证据。论文、项目文档、预印本和研究计划不是同一种来源;“可运行”也不是“已证实有效”。截至 2026-07-11,文中未发布的内部项目都只按研究方向和验收标准描述,不按已取得的结果描述。

1. 先选问题,再选证据

真正的问题 优先读什么 最直接能支持的结论 不应顺手推出的结论
能否提出可泛化、可扩展的 ML 方法? MLS-Bench 方法候选可被要求在受控设置和尺度上验证 通过若干任务等于开放式科学发现
能否在固定预算中持续改进正确但次优的工件? AutoLabautoresearch repo 诊断、编辑、运行实验并保留 best-so-far 是可评测闭环 外部工件变好等于 agent 或模型发生 RSI
能否在长程环境反馈中表现出学习曲线? EdgeBench 可以定义并测量运行内的环境学习轨迹 曲线提高等于基础模型权重被更新,或等于通用研究能力
能否完成可验证的 terminal / 科学工作流? Terminal-Bench 2.0TB3 状态页Terminal-Bench Science 端到端最终状态可用程序测试 终态通过等于提出新假说或完成开放式科学
如何让任务、容器、verifier 与 rollout 有清晰契约? Harbor task docsSForge 工作区与判题器可以分离,任务接口可版本化 有容器或 verifier 就自动没有 reward hacking
如何控制 web / computer agent 的动作与证据? BrowserGymBrowser UseOpenAI Computer Use 浏览器和通用计算机是不同的观测、动作和隔离接口 一次点击、截图或 DOM 匹配必然代表服务器端任务完成
如何在真实 harness 上训练 agent? PolarAgent LightningDeepSeekMath / GRPO token 轨迹、归因接口和优化目标可以被明确设计 coding harness 的正向结果自动迁移到 GUI / browser RL
何时可以讨论 RSI? Gödel MachineDarwin Gödel MachineReusable Holdout “跨代、独立评测、等资源”的主张可被形式化和推翻 一次 self-edit 或局部涨分就是递归自我改进

2. 四条阅读路径

A. Auto Research:研究工件,而不是“AI 科学家”标签

先读 MLS-Bench,理解“新方法”为什么需要跨设置和尺度的证据;再读 AutoLab,观察固定墙钟预算下的持久工件优化;最后读 EdgeBench,区分最终分数和运行过程中的学习曲线。三者的共同点是可执行反馈,区别在于主张对象:方法泛化工件优化闭环环境内学习速度

因此 Frontier Auto Research(之后可扩展为 ART)的目标不应是重复某个 benchmark 的分数,而应是:围绕一个明确研究问题,产出经受独立复现实验、成本账本和新鲜验证的结果,最终足以支撑顶会论文的因果性主张。它现在是研究范围与验收标准,不是已经发布的 benchmark 或“自动发表”能力。

B. RL Environment:先冻结什么,才谈学习什么

Terminal-Bench 2.0 把终态验证放进 realistic terminal workflow;TB3 与 Terminal-Bench Science 是仍在发展的项目,应该按其正式状态与贡献规则阅读,而不能把目标任务量当作已发布结果。Harbor 则提供 task、environment、agent、verifier / reward 和 rollout 的接口语言。SForge 的 work / judge 分离是一个值得研究的 isolation pattern,不是“隔离已经彻底解决”的证明。

对 ClawBench V2 或 WebsiteBench 这样的网页环境,最小可报告单位不是“有一个 browser sandbox”,而是:初始后端状态如何重置、哪些动作会在提交前被拦截、网络和账号权限是什么、哪些工件由 agent 写入、哪些证据由独立 sidecar 收集,以及 verifier 是否处于候选策略无写权限的域中。这里的设计还应把 ClawBench 的记录与控制思路和浏览器 / 计算机接口的差异分开报告。

C. Agentic RL:训练接口也是系统的一部分

先读 DeepSeekMath 了解 GRPO 的目标层,再读 Agent Lightning 的执行与训练解耦、轨迹归因接口,随后读 Polar 如何在兼容模型 API 的原生 harness 上记录 token-faithful trajectory。最后读 AgentTrek,把 GUI trajectory synthesis 放在 offline data 的位置,而不是把它误当成 online RL。

这条路径对 ClawBench V2 的 RL 研究意味着:PPO、GRPO 或任何其他算法都只是其中一层。正向结果还必须固定 rollout harness、可见状态、动作权限、reward-to-loss 映射、独立 evaluator、训练 / 验证 / 测试切分,以及 token、GPU、API 与墙钟成本。一个 harbor-native task 或一个 synthetic trajectory corpus 本身都不构成正向 RL 结论。

D. RSI:候选能修改,接纳门不能被候选控制

从 I. J. Good 的条件性推理和 Gödel Machine 的形式模型开始,再读 Darwin Gödel Machine 和 Red Queen Gödel Machine 这类受限经验系统。随后回到 Reusable Holdout 与 reward tampering evidence:不断用同一个 evaluator 选择版本会过拟合,而候选一旦能影响奖励通道,分数本身就成了攻击面。

RewardHarness → RSIBench → OpenRSI 的合理研究方向,是把这条边界变成任务契约:候选只能在预声明 editable surface 上提出修改;development、acceptance 和最终 held-out 评测分开;grader、隐藏任务、预算账本和上线决定不由候选写入。它是一份可被证伪的协议草案,不是对“已实现强 RSI”的宣告。

3. 让项目差异变成可检验的设计

工作方向 核心对象 需要的最小正向证据 不能以什么替代
Frontier Auto Research / ART 一项外部研究问题与可发表的实证结论 冻结 evaluator、强基线、重复运行、held-out transfer、资源与失败账本 同一开发指标上的局部最好结果
ClawBench V2 自托管 web RL environment 的安全控制与训练接口 state reset、逐步 action interception、独立 verifier、split-isolated reward、RL 前后同预算比较 浏览器容器、单一 judge 或更多 synthetic 数据
RewardHarness → RSIBench / OpenRSI 多代候选修改与独立 acceptance gate change manifest、候选/判题权限隔离、回退、密封新任务与跨代曲线 自修改一次、可见集涨分或候选自评
WebsiteBench 真实网页工作流上的可验证评测 完整任务、明确 postcondition、可重置状态和失败证据 成功截图、URL 匹配或仅自然语言自报

这张表刻意没有“最佳模型”一栏。项目比较首先应比较 任务分布、执行接口、隐藏信息、reward、资源预算、是否训练、评价切分;脱离这些条件比较分数,会把环境差异误写成模型差异。

4. 一个可复用的引用与报告协议

每个研究笔记或博客结论应带上以下标签:

  1. 来源类型:经典理论、同行评审 / 预印本、官方项目文档、代码实现,或未来工作提案。
  2. 对象:外部 artifact、policy、harness、environment、verifier、evaluator,还是改进这些对象的机制。
  3. 证据形态:定理、受控实验、运行接口、任务规范,还是设计建议。
  4. 边界:模型、任务、harness、预算、数据 / split、版本和访问权限。
  5. 推翻条件:什么观察会让结论变弱或失效,例如换 verifier、换任务分布、同预算重跑后增益消失,或发现 evaluator 可被污染。

这让博客既能服务学习,也能服务实际研究:读者可以从来源回到原文,研究者可以从一句结论反查它需要的实验。相关的细节文章是 AutoResearchAgent Research EnvironmentsAgentic RLRSI

Agent Research: A Reading Map from Questions to Evidence

Jul 2026 · Auto Research / RL Environments / Agentic RL / RSI

This is not a leaderboard of “who is best.” It is a navigation map for research. Agent systems often have similar names while answering different questions: some improve an external research artifact, some learn through an environment over time, some connect a real harness to RL, and some claim to improve the mechanism of improvement across generations. Separate the question first, so citations, experiments, and conclusions do not borrow strength from one another.

Rule of use: each link supports only its corresponding cell in the table. Papers, project documentation, preprints, and research plans are different kinds of sources; “runnable” is not “shown to work.” As of 2026-07-11, unpublished internal projects below are described only as research directions and acceptance criteria, never as reported results.

1. Choose the Question Before the Evidence

The real question Read first What it most directly supports What it should not be used to infer
Can an agent propose ML methods that generalize and scale? MLS-Bench Candidate methods can be required to validate across controlled settings and scales Solving some tasks is open-ended scientific discovery
Can a system persistently improve a correct but suboptimal artifact under a fixed budget? AutoLab, the autoresearch repo Diagnose, edit, run experiments, and retain a best-so-far artifact as a measurable loop A better external artifact means the agent or model underwent RSI
Can an agent exhibit a learning curve under long-horizon environment feedback? EdgeBench Within-run environment-learning trajectories can be defined and measured The base-model weights changed, or the curve is general research ability
Can an agent complete verifiable terminal or scientific workflows? Terminal-Bench 2.0, TB3 status, Terminal-Bench Science End-to-end final states can be programmatically tested Passing an endpoint test means proposing a new hypothesis or doing open-ended science
How can tasks, containers, verifiers, and rollouts have a clear contract? Harbor task docs, SForge Workspaces and judges can be separated, while task interfaces are versioned A container or verifier automatically eliminates reward hacking
How should a web or computer agent’s actions and evidence be controlled? BrowserGym, Browser Use, OpenAI Computer Use Browser and general-computer agents have distinct observation, action, and isolation interfaces A click, screenshot, or DOM match necessarily means a server-side task completed
How can an agent be trained through its real harness? Polar, Agent Lightning, DeepSeekMath / GRPO Token trajectories, attribution interfaces, and optimization objectives can be designed explicitly Positive results in a coding harness automatically transfer to GUI or browser RL
When may we discuss RSI? Gödel Machine, Darwin Gödel Machine, Reusable Holdout A cross-generation, independent, equal-resource claim can be formalized and falsified One self-edit or a local score gain is recursive self-improvement

2. Four Reading Paths

A. Auto Research: Research Artifacts, Not an “AI Scientist” Label

Start with MLS-Bench to see why a “new method” needs evidence across settings and scales. Then read AutoLab for persistent artifact optimization under a fixed wall-clock budget. Finish with EdgeBench to separate a final score from a learning curve during a run. Their shared feature is executable feedback; their claim objects differ: method generalization, an artifact-optimization loop, and environment-learning speed.

Frontier Auto Research, later extensible into ART, should therefore not aim to duplicate a benchmark score. Its target is a concrete research question and an empirical claim strong enough for a top-tier paper: independent reproduction, a cost ledger, and fresh validation. At present, that is a research scope and an acceptance standard, not a released benchmark or an “automatic publication” capability.

B. RL Environments: Freeze Something Before Claiming Learning

Terminal-Bench 2.0 puts final-state verification into realistic terminal workflows. TB3 and Terminal-Bench Science are works in development and should be read according to their released status and contribution rules, not as completed task counts. Harbor supplies the interface vocabulary of task, environment, agent, verifier / reward, and rollout. SForge’s work / judge separation is an isolation pattern worth studying, not proof that isolation has been solved.

For web environments such as ClawBench V2 or WebsiteBench, the minimum reportable unit is not “a browser sandbox.” It specifies how backend state resets; which actions are intercepted before commitment; network and account authority; which artifacts the agent writes; which evidence an independent sidecar collects; and whether the verifier lives in a domain the candidate policy cannot write. This design should report ClawBench’s recording and control ideas separately from the browser and computer interfaces.

C. Agentic RL: The Training Interface Is Part of the System

Read DeepSeekMath first for GRPO at the objective layer, then Agent Lightning for decoupling execution from training and its trajectory-attribution interface. Next, read Polar for recording token-faithful trajectories in native harnesses with compatible model APIs. Finally, read AgentTrek, placing GUI trajectory synthesis in the category of offline data rather than mistaking it for online RL.

For RL research on ClawBench V2, this means PPO, GRPO, or any other algorithm is only one layer. A positive result must also fix the rollout harness, visible state, action authority, reward-to-loss mapping, independent evaluator, train / validation / test split, and token, GPU, API, and wall-clock costs. Neither a harbor-native task nor a synthetic-trajectory corpus alone constitutes a positive RL result.

D. RSI: A Candidate May Modify; the Acceptance Gate Cannot Be Candidate-Controlled

Start with I. J. Good’s conditional argument and the formal model of Gödel Machine, then read bounded empirical systems such as Darwin Gödel Machine and the Red Queen Gödel Machine. Return next to Reusable Holdout and reward-tampering evidence: repeated selection on one evaluator can overfit, and once a candidate can affect a reward channel, the score itself is an attack surface.

The reasonable direction for RewardHarness → RSIBench → OpenRSI is to turn this boundary into a task contract. A candidate proposes changes only within a declared editable surface; development, acceptance, and final held-out evaluation are separate; graders, hidden tasks, resource ledgers, and release decisions are not candidate-writable. This is a falsifiable protocol draft, not a declaration that strong RSI has already been achieved.

3. Turn Project Differences into Testable Designs

Work direction Core object Minimum positive evidence What cannot substitute for it
Frontier Auto Research / ART An external research question and a publishable empirical claim Frozen evaluator, strong baselines, repeat runs, held-out transfer, and a resource/failure ledger A locally best result on one development metric
ClawBench V2 Safety control and a training interface for a self-hosted web RL environment State reset, step-level action interception, independent verifier, split-isolated reward, and equal-budget before/after RL comparison A browser container, a single judge, or more synthetic data
RewardHarness → RSIBench / OpenRSI Multi-generation candidate changes and an independent acceptance gate Change manifests, candidate/judge authority separation, rollback, sealed fresh tasks, and a cross-generation curve One self-modification, a visible-split gain, or candidate self-evaluation
WebsiteBench Verifiable evaluation over real web workflows Complete tasks, explicit postconditions, resettable state, and failure evidence A successful screenshot, URL match, or only natural-language self-report

This table deliberately has no “best model” column. Compare task distribution, execution interface, hidden information, reward, resource budget, training status, and evaluation split before comparing scores; without those conditions, environment differences become falsely reported as model differences.

4. A Reusable Citation and Reporting Protocol

Every research note or blog conclusion should carry these labels:

  1. Source type: classic theory, peer-reviewed paper / preprint, official project documentation, implementation, or future-work proposal.
  2. Object: external artifact, policy, harness, environment, verifier, evaluator, or the mechanism that improves them.
  3. Evidence form: theorem, controlled experiment, runtime interface, task specification, or design recommendation.
  4. Boundary: model, task, harness, budget, data / split, version, and access authority.
  5. Falsifier: what observation weakens the claim, such as changing the verifier or task distribution, a gain vanishing at equal budget, or evidence that the evaluator can be contaminated.

This makes the blog useful both for learning and for research. A reader can return from a claim to its source; a researcher can trace from a conclusion to the experiment it requires. See the companion detail posts on AutoResearch, Agent Research Environments, Agentic RL, and RSI.