Question Answering on MuSiQue (EM, ASR)
38Exact Match (EM)Clean (No Attack)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Clean (No Attack)Framework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 38 | — | |
| PARADOXFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 36 | 6 | |
| PARADOXFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 35 | 11 | |
| Clean (No Attack)Framework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 32 | — | |
| Fake CompletionFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 30 | 1 | |
| NaiveFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 28 | 17 | |
| PARADOXFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 28 | 5 | |
| NaiveFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 26 | 6 | |
| Clean (No Attack)Framework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 23 | — | |
| IgnoreFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 22 | 17 | |
| IgnoreFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 22 | 4 | |
| NaiveFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 21 | 1 | |
| PoisonedRAGFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 20 | 4 | |
| CombinedFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 19 | 4 | |
| TopicFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 19 | 1 | |
| IgnoreFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 19 | 1 | |
| CombinedFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 19 | 0 | |
| NaiveFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 18 | 31 | |
| Fake CompletionFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 18 | 18 | |
| PARADOXFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 18 | 7 | |
| Clean (No Attack)Framework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 17 | — | |
| TopicFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 17 | 2 | |
| IgnoreFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 16 | 21 | |
| CombinedFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 16 | 2 | |
| Fake CompletionFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 16 | 1 | |
| TopicFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 14 | 1 | |
| PoisonedRAGFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 13 | 10 | |
| Fake CompletionFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 12 | 61 | |
| CombinedFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 9 | 46 | |
| TopicFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 8 | 24 | |
| KidnapRAGFramework=ReAct, LLM Backbone=Qwen2.5-32B-Inst2026.07 | 8 | 66 | |
| PoisonedRAGFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 8 | 5 | |
| PoisonedRAGFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 8 | 7 | |
| KidnapRAGFramework=WebThinker, LLM Backbone=DeepSeek-32B2026.07 | 8 | 53 | |
| KidnapRAGFramework=WebThinker, LLM Backbone=QwQ-32B2026.07 | 7 | 57 | |
| KidnapRAGFramework=ReAct, LLM Backbone=Llama-3.3-70B-Inst2026.07 | 1 | 78 |