Is a refund check worth the extra call?
A guard might block every unsafe refund and every legitimate one as well. For a request such as “check the order and refund it if it has not shipped,” measure false approvals, blocked legitimate calls and added latency before enforcing the check. The refund guard comparison includes 160 synthetic cases, splits, label rationales, offline behavior checks and measured JEV/Qwen results inagentscope-examples/jev/benchmarks/tool-guard. Its CLI differs from the general benchmarks below; follow its README. The guard guide summarizes the results.
Choose what to measure
- Decision: Compare tool relevance, classifications, reviews, routing labels or compaction recommendations against independent labels.
- Execution: Did a denial prevent dispatch? Did an allowed call run exactly once, with a matching result? Did work stop after cancellation?
- Task: Measure answer correctness, evidence recall, retention of key facts, task success and total latency.
Fixed inputs and runnable benchmarks
The examples provide synthetic inputs for learning the formats and running comparisons. For business acceptance, add independent labels and difficult cases representative of your traffic.
These programs replay decision inputs rather than full production tasks. Gold labels are used only for scoring and are never sent to the backend. Source data is in
agentscope-examples/jev/src/test/resources/jev.
Run a baseline and compare the same cases
SetJEV_CP using the example build instructions. For trace evaluation:
--baseline. Only the trace program provides the --offline synthetic decision mode shown here. Choose an output path that does not exist so a previous report is not overwritten.
Enable a live backend explicitly and choose the endpoint and model:
TYPESAFE_API_KEY; Qwen reads DASHSCOPE_API_KEY. Set QWEN_ENDPOINT to the full Chat Completions compatible endpoint for your account’s region. For other benchmarks, substitute the class and input path from the table, keeping the argument order. Live calls incur usage; offline runs do not read credentials.