01The problem
AI agents now carry out long, multi-step tasks on their own and return finished work. That work is often partly wrong. When it is, the person receiving it has to judge how much of it can still be used, and then act: keep it, repair the faulty part, salvage the usable portion, or throw it away and start again.
The general form of the problem is recoverability judgement for dependent AI-generated artifacts: work whose components rest on one another, so that a fault at one point invalidates an unknown amount of what follows. Marketing campaigns are the experimental instance, chosen for recruitment feasibility and because briefs give unambiguous compliance criteria. The abstraction is the dependency structure, not the domain.
This differs from the problem that most human–AI research examines. Foundational reliance work usually operationalises the decision as accepting or rejecting AI advice [1,2,3], though newer work also examines reliance across intermediate steps in multi-step workflows [10]. Here there is no advice and no step to accept. There is a finished artifact, and a judgement about how far the damage spreads and whether what remains is worth keeping.
Getting it wrong is costly in two opposite directions. Keeping ruined work wastes effort on something that cannot be fixed; discarding recoverable work throws away hours of usable output. Many agent interfaces expose execution logs or traces [5,6,7] and leave the person to work it out from there.
02What is known, and what is not
- During execution. Zhou et al. [4] model when a user should be asked to confirm an agent’s work mid-task; Chen et al. [9] compare four ways of supervising an agent while it runs.
- Checking what an agent did. Grunde-McLaughlin et al. [5] tested trace displays for finding agent errors: their design helped people find errors faster and feel more confident, without improving final accuracy. They raised the possibility that process-focused presentation supplies context while also justifying overreliance — the closest existing statement of the mechanism examined here, offered as a possibility rather than a tested claim. HANSEL [6] extracts interactive evidence from web-agent trajectories and supports resuming from a prior successful state; AgentTrace [7] proposes an interface for auditing what an agent touched and changed.
- After failure. Agent-side reversibility has been formalised, with a rollback taxonomy benchmarked against full restart [11]. Developers already review agent work after the fact [8]. REX [12] studies automated repair and explanation of robot failures. Khanna et al. [13] show that explaining a failure’s history changes how successfully people resolve it.
- Choosing a recovery strategy. Robotics has gone furthest. REPAIR-Bench [15] predicts which communicative recovery strategy a user would prefer; Genua et al. [16] allocate failures to operators; Banerjee et al. [17] use a module graph, calibrated uncertainty and estimated query cost to decide what to ask a person and when, minimising a weighted sum of query cost and task cost.
Recovery choice, dependency-graph representations and expected-cost allocation are therefore not novel in themselves, and the contribution is not a system for recovering partial agent work. What remains is narrower: once a completed digital artifact is known to contain a fault, how do people judge what is still recoverable, and what does the handback interface do to that judgement? Direct behavioural evidence appears limited on this specific decision — particularly where downstream invalidation and the enacted cost of each option are independently controlled. That is a qualified claim from a targeted search, not proof of absence; a fuller search precedes publication.
03Two constructs, kept separate
“Recoverability” is used to mean two different things, and the design depends on separating them.
Structural recoverability
How much of the artifact survives the fault. A property of the artifact and its dependency graph — what the dependency view displays.
Economic recoverability
Whether what survives is worth keeping, given effort, quality weights and the restart alternative — what the task-loss function scores.
They come apart. An artifact can be structurally almost intact and still not worth repairing; one with wide dependency reach can be worth repairing when restart is expensive. The interface does not manipulate structural recoverability — that is fixed by the artifact’s dependency graph. It manipulates the visibility of structural-impact information.
Manipulated
Visibility of dependency structure
Measured
Perceived structural recoverability
Enacted
Recovery decision
Evaluated against
Economic recoverability, scored by the task-loss benchmark
Perceived structural recoverability is measured with items that ask only how much of the work survives the fault; a separate item captures perceived economic recoverability. Keeping them apart is what lets the analysis distinguish “the display changed what people thought survived” from “the display changed what people thought was worth doing”.
This is not claimed to be the only pathway. A dependency display also reduces uncertainty, changes how complex the task looks, may reveal a repair route and redirects attention. Khanna et al. [13] found that resolution success depends on both failure type and explanation content, and that more information does not uniformly help. Villavicencio et al. [18] show that how uncertainty is represented changes agreement, confidence and external verification behaviour, so a display is not a neutral disclosure. Perceived complexity, diagnostic confidence and time-to-diagnosis are therefore measured too, and mediation is treated as explanatory rather than conclusive.
04Hypotheses
H1
Confirmatory
Showing dependency structure reduces retention error: keeping the artifact unchanged when the task-loss function favours an active recovery action. Contingent on the pilot gates; a failed gate means redesign, not reclassification after seeing data.
H2a
Exploratory
Showing dependency structure also increases discard error: restarting when the benchmark favoured a preserving action (continue, repair or salvage).
H2b
Exploratory, process
Showing dependency structure reduces independent-evidence inspection: interaction with material outside the handback display that could disconfirm the agent’s work. The measure records verification opportunity, not verification itself.
RQ3
Exploratory
Does the effect of dependency information vary by dependency-reach level? It may help where damage is hard to trace, and harm where visible damage looks worse than it is — competing alternatives, not predictions.
H4
Exploratory
Cost information reduces unnecessary abandonment relative to dependency information alone. Excluded from the confirmatory contrast.
H1 and H2a predict effects in opposite directions on different errors. That is the central claim: structural transparency may not be straightforwardly good. Grunde-McLaughlin et al. [5] and Villavicencio et al. [18] both report substantial behavioural shifts with no improvement in accuracy; in each, a single outcome measure would have reported “no effect” while the interface changed what people did.
H2b is motivated by Villavicencio et al. [18], whose node-link display reduced external verification without increasing agreement. That study concerns uncertainty granularity in advice rather than downstream damage in an artifact: it plausibly motivates H2b, but does not establish that a dependency display causes premature restart. H2a is a genuine open question.
05Method
Participants work in a functional prototype, reviewing marketing campaigns built by an AI agent. Each artifact contains one fault at a known point. Choices are carried out, not clicked:
- Continue as-is — submit the artifact unchanged. Near-zero effort; quality shortfall proportional to the fault’s downstream reach. Submission is explicit and final, so it is a deliberate choice, not a default.
- Repair — fix the faulty content within the intact artifact, then submit.
- Salvage — build a new artifact using only unaffected components, then submit.
- Restart — re-run the agent, wait, and submit the new output.
All four end in a submitted artifact scored on the same terms. Quality is defined from the task specification, not from the strategy set: compliance with the brief’s stated requirements and correctness of the required components. Total volume is not a quality criterion — a shorter artifact that satisfies the brief is as good as a longer one. Repair and salvage must be experienced as genuinely different actions, and pilot interviews check that they are.
1Execution log
The baseline: what current agent products show.
2Dependency view
Adds which outputs depend on the faulty step. No ranking, no recommendation.
3Dependency view + cost
Adds estimated effort for all four strategies. Exploratory (H4).
The dependency view shows which outputs depend on the faulty step. It does not compute recoverability, rank strategies or recommend one — if it simply supplied the answer, the study would only show that people choose better when told the answer.
≈ 0% depends
≈ 25% depends
≈ 50% depends
≈ 75% depends
Each participant meets all four reach levels, with two scenario families per level so that reach is not entangled with one campaign’s idiosyncrasies. Scenario family enters the model as a random effect, with leave-one-family-out robustness reported. Reach order is randomised per participant, and outcome scores are withheld until the end of the session so the four decisions stay comparable.
06The benchmark, built first
Before any interface is designed, the full matrix of dependency-reach level × strategy is written out: expected effort, expected quality shortfall and the loss-minimising action for each cell. For each scenario and strategy:
task loss = weffort · elapsed effort + wquality · quality shortfall against the brief
Both terms come from a pre-experimental calibration, and the weights are the same ones in the points rule participants can consult throughout the session. The benchmark is a counterfactual fixed in advance — calculated for all four strategies before anyone’s choices are seen, and using calibration-derived effort rather than each participant’s own time, so that slow repairers are not scored as benchmark-incongruent simply for being slow. Choices that depart from it are described as benchmark-incongruent, never as “wrong”.
- Restart effort is instrumented from the re-run process itself: triggering it, the wait, the stated failure probability, and handling whatever comes back. A failed re-run returns a degraded output rather than nothing.
- Repair and salvage effort come from a small calibration sample (10–15 people) completing a counterbalanced subset of tasks.
- Continue as-is has no repair or rebuild component; its cost is submission time plus the quality lost by keeping the defect.
- Quality is scored by three independent raters, blind to condition and strategy, against a written rubric of brief compliance and component correctness, applied to a fixed subset of representative artifacts rather than to every strategy × reach × scenario combination. Inter-rater agreement is reported against a pre-registered threshold; failing it means the rubric is revised before the experiment, not adjudicated afterwards. Disagreements resolve by median.
The criterion is ordinal, not precise: the benchmark needs the identity of the best strategy to hold across the whole plausible parameter range, not an exact cost. A pre-registered sensitivity analysis varies effort, quality and loss weights. A scenario counts as a clear-separation scenario, and can enter the confirmatory contrast, only if its optimal strategy beats the second-best by a pre-registered minimum loss gap and stays optimal throughout. Unstable cells are discarded, not rescued. The matrix must also show every strategy winning somewhere — otherwise participants face three real options and a decoy.
The scenario set, loss matrix, benchmark-optimal actions and retained clear-separation cells are all frozen and pre-registered before main-study data collection begins.
07Participants
Roughly 120 people (40 per interface condition), each completing four scenarios in a session of about 35 minutes, recruited without payment through professional community channels. The final N is set by power simulation.
Inclusion: independently performed marketing-related activities within the past three years — professionally or for a personal or project purpose — involving creation, editing, evaluation or management of marketing content or campaigns. The judgement under study is largely structural, and the brief supplies the ground truth, so participants need enough competence to assess an artifact against a brief rather than deep marketing craft. Four safeguards keep that breadth from becoming a confound:
- Competence is verified, not self-reported, by a short screener.
- Experience is a pre-registered covariate: recency, frequency, context and campaign scale.
- A minimum proportion of professionally experienced participants is pre-registered.
- Experience is an exploratory covariate, not a separate benchmark; retained scenarios must keep the same optimal strategy across effort values spanning fast and slow performers.
After each scenario, participants write one or two sentences explaining their choice. Rationales come from the whole sample, are coded inductively against categories derived from the mechanism, and explain departures from the benchmark rather than adjudicate whether an effect exists.
08Analysis
The endpoint hierarchy is fixed in advance:
- Sole primary confirmatory endpoint: retention-error probability (H1), by interface condition.
- Primary descriptive outcome: probability of choosing the loss-minimising strategy.
- Pre-registered exploratory: discard error (H2a), independent-evidence inspection (H2b), the reach interaction (RQ3), cost information (H4) and all mediation.
- Retention error
- Chose continue as-is when the benchmark favoured repair, salvage or restart.
- Discard error
- Chose restart when the benchmark favoured continue, repair or salvage.
- Expected regret
- The chosen strategy’s pre-specified loss minus the lowest loss available. Also catches costly choices neither named error covers, such as repairing when salvage was optimal.
The confirmatory estimand: the marginal difference in probability of retention error between the dependency-view and execution-log conditions, among clear-separation scenarios in which the benchmark favours an active recovery action, averaged over dependency-reach levels. It is estimated with a mixed-effects logistic regression — interface (two arms) as the fixed effect of interest, dependency reach as a four-level categorical factor, participant and scenario family as random effects. The cost condition stays out of the confirmatory contrast. Four decisions each from about 120 people are not 480 independent observations, and the power simulation models the within-participant correlation explicitly.
Scope control. The protected core, without which the thesis fails: stimulus calibration, the controlled artifact task with enacted strategies, the H1 contrast, and expected regret. If build, calibration or recruitment overrun, the droppable items go in a fixed order: rationale coding, abandonment-point modelling, participant-priority robustness, mediation, and H2b’s inspection logs.
09Pilot gates
H1 is confirmatory only if the pilot meets criteria fixed in advance. These gate whether the study proceeds; they are not labels applied to results afterwards.
- A1
Comprehension gain
Dependency-view participants must exceed execution-log participants on a dependency-comprehension check by a pre-registered margin.
- A2
Equivalence on non-target channels
Perceived defect severity and perceived agent competence must be statistically equivalent across interfaces, tested against pre-registered bounds with two one-sided tests.
- A3
No direct benchmark-answer disclosure
Independent reviewers confirm the dependency display carries no strategy label, ranking, recommendation, loss value, effort or quality estimate, or any cue tied to an action (A3a). Two rater groups choose a strategy from the log or the dependency view as a descriptive manipulation check (A3b); the cost condition is characterised the same way, without a pass/fail criterion (A3c).
- A4
Usable baseline
The execution log must be plausible and workable, not a straw man: log-condition participants must be able to locate the fault and reach all necessary materials.
- A5
Strategy distinctness
Pilot interviews must show participants can articulate why repair differs from salvage.
- A6
Dependency reach check
The four reach levels must be perceived as intended, without changing perceived agent competence or fault seriousness.
- A7
Elicitation reactivity
Pre- versus post-choice priority elicitation is randomised in the pilot; if timing changes behaviour, that is reported and post-choice elicitation is used throughout.
10Contributions
- A behavioural account of recoverability judgement for dependent artifacts: how people decide what is worth saving from defective agent work, and where those judgements depart from measured cost.
- Evidence on a trade-off for which direct behavioural evidence appears limited: whether structural transparency reduces unsafe retention at the price of unnecessary abandonment.
- A design implication for comparable handback tasks, if results support it — show structural impact when a recovery decision is required, but pair it with cost information so visible damage does not push people into premature restarts. Scoped to one domain and a fixed restart delay.
- A calibrated loss function and open stimuli, with parameters measured rather than assumed.
The study is informative if H1 fails. A dependency view that improves comprehension without changing loss-relevant decisions, or shifts attention without improving choice, would join earlier findings [5,18] that more structured interface information need not improve final performance.
Where this leads. Three follow-ups are implied by what this design holds fixed: vary restart cost, to test whether the recoverability boundary moves with the price of abandonment; vary the artifact domain — code and analytical work have different dependency topologies; and vary graph reliability, since in deployment a dependency graph would be reconstructed from an agent trace and would be imperfect.
11Limitations
- Marketing is the experimental setting. Whether the findings hold for code, analysis or documents is an open question this study does not settle.
- Participants do not lose money from a poor decision; consequence comes from doing the work themselves and having outcomes scored and reported back.
- Restart delay is fixed rather than varied; varying it would change which strategy minimises loss, and is the natural next study.
- The display may shift economic judgement directly, not only through what people believe survives; mediation is therefore reported as explanatory rather than causal.
- The dependency graph comes from the artifact’s known structure and has no omissions or false edges. How people respond to unreliable structural information is a separate question.
- The inclusion criterion admits a range of marketing experience, guarded by the screener and the experience covariate; the design can examine, but is not powered to settle, differences by expertise.
12Timeline
Six months. The platform build is the shortest item because the artifacts are pre-generated: no agent runs during sessions, only an instrumented review-and-enact environment. The binding constraint is weeks 9–16 — roughly 120 unpaid participants at 35 minutes each, about fifteen completions a week.
- Weeks 1–4Now
Build
Build the environment and three interfaces; scenario families, fault design, first task-loss matrix.
- Weeks 5–8
Calibrate and pre-register
Stimulus calibration and validation; pilot gates; recruitment check; freeze and pre-register.
- Weeks 9–16
Main experiment
Roughly 120 participants, about fifteen completed sessions a week.
- Weeks 17–20
Analysis
Confirmatory and exploratory analysis, including coding of written rationales.
- Weeks 21–24
Writing
Thesis write-up, including the calibrated loss function and the stimuli.
13References
- [1]Raees, et al. (2026). Do People Appropriately Rely on AI-Advice? An Analytical Review of HCI Research on Human-AI Decision-Making. CHI '26. doi.org/10.1145/3772318.3791467
- [2]Buçinca, Z., Malaya, M. B., & Gajos, K. Z. (2021). To Trust or to Think: Cognitive Forcing Functions Can Reduce Overreliance on AI in AI-assisted Decision-making. PACM HCI, 5(CSCW1), Article 188. doi.org/10.1145/3449287
- [3]Bansal, G., Wu, T., Zhou, J., Fok, R., Nushi, B., Kamar, E., Ribeiro, M. T., & Weld, D. S. (2021). Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performance. CHI '21.
- [4]Zhou, J., Roy, A., Gupta, S., Weitekamp, D., & MacLellan, C. J. (2026). When Should Users Check? Modeling Confirmation Frequency in Multi-Step Agentic AI Tasks. CHI '26. doi.org/10.1145/3772318.3790655
- [5]Grunde-McLaughlin, M., et al. (2026). Overseeing Agents Without Constant Oversight: Challenges and Opportunities. arXiv:2602.16844. arxiv.org/abs/2602.16844
- [6]Zhang, & Nam. (2026). HANSEL: Extracting Breadcrumbs from Web Agent Trajectories for Interactive Verification. arXiv:2606.18671. arxiv.org/abs/2606.18671
- [7]"What Did It Actually Do?": Understanding Risk Awareness and Traceability for Computer-Use Agents (AgentTrace). (2026). arXiv:2603.28551. arxiv.org/abs/2603.28551
- [8]Dhanorkar, S., et al. (2026). Human oversight of agentic systems in practice. FAccT '26. arXiv:2606.05391. arxiv.org/abs/2606.05391
- [9]Chen, et al. (2026). Comparing Human Oversight Strategies for Computer-Use Agents. arXiv:2604.04918. arxiv.org/abs/2604.04918
- [10]He, G., et al. (2025). Fine-Grained Appropriate Reliance: Human-AI Collaboration with a Multi-Step Transparent Decision Workflow for Complex Task Decomposition. arXiv:2501.10909. arxiv.org/abs/2501.10909
- [11]Zhai, Z., et al. (2026). Revisable by Design: A Theory of Streaming LLM Agent Execution. arXiv:2604.23283. arxiv.org/abs/2604.23283
- [12]Lee, Praveena, & Mutlu. (2024). REX: Designing User Experience for Automated Repair and Explanation of Robot Failures.
- [13]Khanna, et al. (2023). Effects of Explanation Levels on Failure Resolution in Prolonged Human-Robot Collaboration.
- [14]Sheridan, T. B., & Parasuraman, R. (2000). Human versus automation in responding to failures: An expected-value analysis. Human Factors.
- [15]Pioldi, G., Batra, Y., Ibrayeva, A., Bai, Y., Maruur, P., Ekpo, P., & Taylor, A. (2026). REPAIR-Bench: A Benchmark for Robot Error Perception And Interaction Recovery. arXiv:2606.29937. arxiv.org/abs/2606.29937
- [16]Genua, L. M., Boguslavskii, N., & Li, Z. (2026). Human-in-the-Loop Failure Recovery with Adaptive Task Allocation. arXiv:2602.03603. arxiv.org/abs/2602.03603
- [17]Banerjee, R., Palempalli, K., Yang, B., Fang, J., Abdullah, A., Silver, T., Dean, S., & Bhattacharjee, T. (2026). A Human-in-the-Loop Confidence-Aware Failure Recovery Framework for Modular Robot Policies. HRI '26. doi.org/10.1145/3757279.3788668
- [18]Villavicencio, M., Pan, S., & Wang, Q. (2026). Not All Uncertainty Is Equal: How Uncertainty Granularity Shapes Human Verification in LLM-Assisted Decision Making. FAccT '26. doi.org/10.1145/3805689.3812329