Infrastructure
What Are AI Production Traces, and Why Do They Matter?
A production trace is the record of an AI doing real work. Why traces reveal what benchmarks miss, how they become training tasks, and what rights and privacy limits apply.
In this article
When an AI system does real work for a real person, it leaves a trail. There is the request, the context it was given, the tools it called, the steps it took, the corrections the user made, and the result. That record is what people in the field have started calling a production trace. It is a different kind of data from a static question and answer, and it is increasingly seen as one of the most valuable raw materials for improving AI agents. This article explains what traces are, how they can become training and evaluation tasks, and what must be true for them to be used responsibly.
Why a final answer is not enough
A finished piece of work hides almost everything that made it hard. It does not show the requirement that changed halfway through, the wrong turn that was corrected, the policy the agent had to respect, or the question the user asked after seeing the first draft. Those are exactly the details a model most needs to learn to handle. A trace keeps the sequence: what was asked, what was tried, what went wrong, what was corrected.
Evidence that real tasks make better tests
Benchmarks built from real work show the idea at small scale. SWE-bench took 2,294 problems from real GitHub issues and pull requests across 12 popular Python repositories and asked models to edit a codebase to resolve each issue. Resolving them often required understanding and coordinating changes across multiple functions and files [1]. Mind2Web gathered more than 2,000 open-ended tasks from 137 real websites across 31 domains, with crowdsourced action sequences [2]. WebArena built a realistic, reproducible environment of functional websites [3]. τ-bench goes a step further and puts a simulated user in the loop, scoring whether a conversation ends with the database in the right state, and measuring reliability across repeated trials; it found that strong agents succeeded on fewer than half of the tasks and were inconsistent [4].
In each case, grounding the test in real tasks exposes gaps that cleaner, synthetic questions do not.
From trace to task: the hard part
A trace is not automatically a training example, and a training example is not automatically a reusable environment. Turning a trace into something a model can learn from involves several steps. The following is the process as we describe it at HUTE, and is a description of method.
- Select. Most sessions are repetitive. The valuable ones show a model failing, a user correcting it, a requirement changing, or an expert doing something unusual.
- Recover the goal. What did the user actually want? Which constraints were stated, and which emerged later?
- Rebuild the starting state. Recreate what the system had at the beginning: documents, tools, policies, simulated counterparts, with sensitive details removed but the reasoning problem intact.
- Write the check. Define how success is judged. Where code can decide, build a verifier; where it is a matter of judgement, such as tone or consent, write an expert rubric and record disagreement.
- Test the check. Try to break it. A verifier a model can fool teaches the wrong lesson.
- Hold out and measure. Keep separate test tasks, and measure whether training on the new tasks improves performance on them. This is what makes the data worth anything.
The same ideas underlie reinforcement learning with verifiable rewards, in which a check, not a human ranking, supplies the training signal [5], and the use of trained verifiers to select among a model's candidate solutions [6].
What makes social traces different
For software tasks, a test suite can often decide success. For tasks involving people, such as scheduling among several parties, supporting a customer, mediating a disagreement or making an introduction, success depends partly on judgement: was the tone right, was a boundary respected, did the other party feel heard? The public literature on turning socially rich traces into reliable tasks is thin, and we say so in Research Report 003. Our approach is to combine verifiers for what is checkable with expert rubrics for what is not.
Rights and privacy come first
Traces are records of real people doing real things, which makes them sensitive.
- Ownership and permission. A company that owns a product does not thereby own its users' private content. Use for training or evaluation needs a lawful basis and agreement covering the purpose. In the EU, for instance, consent must be freely given, specific, informed and unambiguous [7].
- Re-identification. De-identified data can often be re-identified. A study of mobility data found that a few spatio-temporal points could single out most individuals [8], and a generative model estimated that 15 demographic attributes could re-identify the great majority of Americans in a heavily incomplete dataset [9].
- Memorisation. Language models can reproduce training text, including personal information, when attacked [10].
- Provenance. The AI data ecosystem has been found to have inconsistent documentation of licences and a shrinking commons of freely permitted web data [11, 12].
So any trace pipeline needs written agreements, data minimisation, redaction with an awareness of its limits, access controls, a provenance record for every item, and a willingness to exclude whole categories where safe use cannot be shown.
What HUTE does and does not do with traces
HUTE's Intelligence Infrastructure is designed to work with authorised traces from partners who have the right to share them, and with purpose-built, expert-authored scenarios where real traces are too private. It is not designed to use private HUMAN conversations, contacts, location or memories, and those are never training data without separate, explicit consent. Read the commitments on our Responsible AI page.
For the economics and ethics of the people behind this data, see human expertise, training data, and the economics of AI development. For how traces connect to training methods, see reinforcement learning for socially intelligent agents.
References
- Jimenez, C. E., Yang, J., Wettig, A., Yao, S., Pei, K., et al. (2024). SWE-bench: Can Language Models Resolve Real-World GitHub Issues?. ICLR 2024. arXiv:2310.06770. arxiv.org/abs/2310.06770
- Deng, X., Gu, Y., Zheng, B., Chen, S., Stevens, S., et al. (2023). Mind2Web: Towards a Generalist Agent for the Web. NeurIPS 2023. arXiv:2306.06070. arxiv.org/abs/2306.06070
- Zhou, S., Xu, F. F., Zhu, H., Zhou, X., Lo, R., et al. (2024). WebArena: A Realistic Web Environment for Building Autonomous Agents. ICLR 2024. arXiv:2307.13854. arxiv.org/abs/2307.13854
- Yao, S., Shinn, N., Razavi, P. & Narasimhan, K. (2024). $τ$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains. arXiv:2406.12045. arxiv.org/abs/2406.12045
- Lambert, N., Morrison, J., Pyatkin, V., Huang, S., Ivison, H., et al. (2024). Tulu 3: Pushing Frontiers in Open Language Model Post-Training. arXiv:2411.15124. arxiv.org/abs/2411.15124
- Cobbe, K., Kosaraju, V., Bavarian, M., Chen, M., Jun, H., et al. (2021). Training Verifiers to Solve Math Word Problems. arXiv:2110.14168. arxiv.org/abs/2110.14168
- European Union (2016). Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation). Official Journal of the European Union. eur-lex.europa.eu/eli/reg/2016/679/oj
- de Montjoye, Y. A., Hidalgo, C. A., Verleysen, M. & Blondel, V. D. (2013). Unique in the Crowd: The privacy bounds of human mobility. Scientific Reports, 3(1). doi.org/10.1038/srep01376
- Rocher, L., Hendrickx, J. M. & de Montjoye, Y. A. (2019). Estimating the success of re-identifications in incomplete datasets using generative models. Nature Communications, 10(1). doi.org/10.1038/s41467-019-10933-3
- Carlini, N., Tramer, F., Wallace, E., Jagielski, M., Herbert-Voss, A., et al. (2021). Extracting Training Data from Large Language Models. USENIX Security 2021. arXiv:2012.07805. arxiv.org/abs/2012.07805
- Longpre, S., Mahari, R., Chen, A., Obeng-Marnu, N., Sileo, D., et al. (2023). The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AI. arXiv:2310.16787. arxiv.org/abs/2310.16787
- Longpre, S., Mahari, R., Lee, A., Lund, C., Oderinwale, H., et al. (2024). Consent in Crisis: The Rapid Decline of the AI Data Commons. arXiv:2407.14933. arxiv.org/abs/2407.14933