Skip to the article
Duplex World benchmark

Can voice agents help you get through the day?

13 August 2026

DuplexWorld puts speech-to-speech agents through six worlds of an ordinary day and scores what happened three separate ways. Across 3,825 conversations, the three capabilities turn out not to travel together.

A snow globe holding six worlds of an ordinary day: a bank, a clinic, an insured house, a delivery truck, an aeroplane, and a pedestrian walking a street with a map.

One voice agent, one simulated caller, one world, and three questions asked of the same run: did the task get done, how did the conversation go, and how did it sound.

Five of the worlds are institutional telephone lines. The sixth, Pathfinding, is a city, and it keeps moving whether or not anyone is talking.

6worlds, 11 conversation types
156scenarios authored, 144 scored
3,825conversations, 387 simulated hours
0.490best pooled Pass@1, of 1.000
0.266best Pass³, all three of three
17.1%of spoken credentials misheard
01 Motivation

We are not measuring the day

Speech-to-speech agents answer customer-care lines and walk people around unfamiliar cities. Each of those is a conversation with nuanced dynamics and analytical demands at once, held against muffled speech, background noise and an emotionally diverse range of callers. Existing benchmarks are shaped as tests of tool calling against a database, which leaves both of those unmeasured.

One result before the design. The system that most reliably ignores distractions, selectivity 0.977 pooled and the best in every single world, completes 0.011 of the tasks it is given. A leaderboard built on turn-taking and selectivity would rank it near the top, and the two systems that sound best are not the two that complete most.

02 Related work

Three separate rooms

Verifiable outcomes. τ-bench introduced database-state grading and Passᵏ, the probability that all k runs of a scenario succeed; τ²-bench added a dual-control telecom domain and reported an 18 to 25 point Pass@1 drop when the agent must guide rather than act. Both asked the right question, does the world end up in the right state, of text agents.

Conversational dynamics. Full-Duplex-Bench defined automatic turn-taking metrics, its successors added overlap handling and a live examiner, Talking Turns judged against human conversation, and HumDial released dual-channel human dialogues. Today's commercial systems have largely grown past these, and our results sharpen the point rather than retire it: dynamics metrics alone are winnable by silence.

Grounded voice agents. τ-Voice (278 tasks), EVA-Bench (213 scenarios), Full-Duplex-Bench v3 and the interruption suites EchoChain and IHBench put stronger agents on verifiable tasks. In every one of them the agent actuates, a record system adjudicates, and nothing happens between utterances. DuplexWorld spans that setting and a navigation world under one harness, and it is hard even for this generation: the best any system reached in any single world is Pass@1 0.674, and 0.533 in the world that moves on its own clock.

Benchmarkfull duplexdynamicsagentic tasknaturalnessreliability Passᵏsim. valid.harness sens.nav. world
τ-bench2024
τ²-bench2025
Full-Duplex-Bench v1, v22025
Talking Turns2025
HumDial2026
EchoChain2026
IHBench2026
Full-Duplex-Bench v32026
τ-Voice2026
EVA-Bench2026
DuplexWorldours
What each benchmark measures. Columns two to four are the three metric pillars. Reliability is a multi-run repeatability metric, Passᵏ. Sim. valid. is automated validation of the user simulator. Harness sens. is a quantified account of how much the harness configuration moves the score.
03 The benchmark

Six worlds, one harness, no composite

The agent perceives only audio and tool returns and emits only audio and tool calls. The terminal state is then scored against a gold state authored with the scenario, so success is a property of the world rather than of the transcript.

Five worlds share one premise and differ on what decides correctness

A caller reaches an institution's telephone line after self-service has already refused them. The agent owns the call, may not route away, and does not get the governing clause corpus in its prompt, so knowing when to look something up is itself under test. Several regimes are enforced in the tool surface rather than in prompt: Banking contains no tool that would make an employee hear a one-time code aloud.

The Banking world, drawn as a snow globe.
Banking financial-crime statute 0.326 best Pass@1, Voice Think Fast Translating a symptom into an operation when several plausible, sympathetically framed requests are reporting-threshold tripwires.
The Logistics world, drawn as a snow globe.
Logistics contract topology over physical goods 0.533 best Pass@1, Realtime-2.1 Deciding who is entitled to redirect goods the agent can move in the record but cannot see.
The Healthcare world, drawn as a snow globe.
Healthcare lawful disclosure 0.519 best Pass@1, Voice Think Fast Refusing without leaking in the act of refusing. A fully verified caller may be entitled to nothing.
The Insurance world, drawn as a snow globe.
Insurance institutional rules forbidding adjudication 0.556 best Pass@1, Voice Think Fast Taking first notice of a loss the agent is structurally forbidden from deciding.
The Travel world, drawn as a snow globe.
Travel the platform's own limited remit 0.674 best Pass@1, Realtime-2.1 Doing nothing, correctly. The modal right answer is a factual correction or a refusal held with nowhere to escalate to.
The Pathfinding world, drawn as a snow globe.
Pathfinding perceptual grounding 0.533 best Pass@1, Voice Think Fast Grounding an instruction against a heading neither party can state.

All six worlds carry one volatility stressor: the world can change with no notification, discoverable only by re-querying. The world changes (a record moves mid-call, a closure appears on the route), the user's intent changes (the caller revises a premise, a second destination surfaces), or the user's execution diverges (the caller misacts, the walker takes the wrong turn). Each demands a different repair, and prior interruption work varies only intent.

Eleven conversation shapes, nine of them in every enterprise world

Every scenario instantiates one of eleven conversation types: a domain-independent shape, filled in by the world's premise, records and risk tiers. Nine run in every enterprise world, three scenarios each. In all of them the caller never names the operation; they describe a symptom, and inferring what is being asked for is part of the task.

Single intent

One request, one resolution path. The control condition.

CallerI need to move my flight to the Thursday.

AgentFound the booking. Thursday 14:05, same fare class. Shall I move it?

Multi intent

Several requests, resolvable in more than one order, with at least one dependency.

CallerAdd my new address, and send the replacement card there.

AgentAddress first, then the card, or it ships to the old one.

Policy refusal

A well-formed request that must be refused. Correctness is a property of what is withheld.

CallerJust tell me what the adjuster decided.

AgentI am not able to share or influence that decision. I can log your account of the loss.

Record disambiguation

More than one record matches what the caller said; acting before disambiguating is the failure.

CallerThe claim for the Tuesday visit.

AgentThere are two Tuesday visits on this policy. Which provider was it?

Identity verification

Authority must be established first, and a failed check must not leak that the record exists.

CallerIs there an account under that number?

AgentI am not able to confirm anything before verification. Could I take your date of birth?

Guided procedure

The effectors move to the user: the agent instructs, waits, and must trust an unverifiable report.

AgentHold the button until the light turns amber, then tell me what you see.

CallerIt is amber now.

Mid-call correction

The caller revises a premise after the agent has begun acting on it.

CallerSorry, not the Milan one. The Rome one.

AgentStopping the Milan change. Reopening the Rome booking now.

Suspension

The call is interrupted and resumed across a gap the agent must hold state over.

CallerHold on, someone is at the door.

AgentOf course. I still have the shipment open and nothing has been sent.

Narrative intake

A long unstructured account from which the agent must extract, confirm and file the facts.

CallerIt was raining, I was on the ring road, and the car ahead just stopped.

AgentSo: rear-end, ring road, wet road. Any injuries to record?

All nine run in every one of the five enterprise worlds, three scenarios each, and the excerpt under each name is from a scored call rather than an illustration. Two more shapes arise only in the navigation world:

Rerouting

Closures missing from the map seal every visible route, so a belief formed from a tool result expires silently.

All-day assistance

A second goal emerges on arrival at the first; the test is staying useful over a long horizon.

Pathfinding answers the same question perceptually

A voice copilot must walk a pedestrian, one street corner at a time, to a named entrance on a synthetic 8 by 8 grid of Midtown streets. The walker holds their real junction and heading but knows nothing of the grid; the copilot holds the map, an approximate GPS and a write-only probe for what it believes, but cannot see the street.

The Pathfinding world: the released tool surface, 14 calls

Fourteen calls, and the two constraints that make the world hard. Nine are executed by the walker, five by the agent. Read the red box: those two lines are the whole difficulty of the world.

The Pathfinding world, drawn to scale

5thMadisonParkLexington3rd2nd1stUN PlazaE 49thE 48thE 47thE 46thE 45thE 44thE 43rdE 42ndGRAND CENTRALTERMINALUNITED NATIONSHEADQUARTERSone block east is 274 m; one block north is 81 m
Drag to pan, scroll to zoom, hover a building for its name
Every building the world contains, from the file the harness reads. All 240 of them, plus all 105 walkable pavement segments and all 64 junctions: nothing selected, nothing omitted. Shading is building height, 16 m to 132 m. The two superblocks, Grand Central Terminal and the United Nations, swallow 7 of the 112 edges a full lattice would carry, which is what makes naive rectilinear reasoning fail. Proportions are the real ones: a block east is 274 m against 81 m north, so the cheap direction and the expensive direction are not the same. Lot depth is the one liberty taken, drawn at half scale so the two frontages of a block sit back to back rather than overlapping as the stored figures do.

It is also the only world that moves on its own clock: state changes through the walker's physical actions, so it can change while both parties are silent, and an utterance planned at tick t can be wrong by the time it lands at tick t plus k.

The three shapes navigation elicits

Single intent

One request, one resolution path: a base route of five blocks and two turns, nothing closed. The control condition.

Rerouting

Four closures absent from the copilot's map seal every route it can see. Exactly one seven-block route survives, and querying early returns nothing, so a belief formed from a tool result expires silently.

All-day assistance

Two legs of five and six blocks. The second destination is revealed only on arrival at the first, so the test is staying with the walker, and useful, over a long horizon.

Single intent is shared with the five enterprise worlds. Rerouting and all-day assistance arise only here, and every Pathfinding episode is structurally a guided procedure with one of the three layered on top. Three scenarios each, nine in all. Enlarge any panel for the geometry.

One harness, held fixed across all six worlds

Simulated time advances in 200 ms ticks, so model latency never shifts an event's position and tool results land on the next tick. A text model writes the caller's words, ElevenLabs speaks them through a persona pinned per scenario, and on the realistic channel a second model decides twice a second whether to interrupt or backchannel. Both channels are telephone audio, G.711 µ-law at 8 kHz. Turn-taking control sits entirely on the user side, and the agent is never told any threshold.

Twelve metrics, three pillars, and no composite

Conversational dynamics

TTTurn-taking

Scores every floor transfer's offset on an on-time curve chosen by the transfer's kind. A single unanswered user turn zeroes the conversation. Ported from EVA-Bench, including its unanswered-turn rule, and the one metric in the suite where silence is penalised rather than rewarded.

CPConversation progression

One topic-free judge pass over the transcript, scoring unnecessary tool calls, information loss, redundancy and question quality.

SELSelectivity

The fraction of injected distractor events correctly ignored, scored against gold labels written at injection time.

Agentic capability

GSGoal state

A canonical hash of the record store against a gold replay; in Pathfinding, the walker's final junction and side of street against the destination.

Pass@1 · Pass³Task reward

The reward multiplies exactly the binary factors each scenario names: goal state, a gold-action match, and where what is said or refused is the point, a judged assertion. Pass@1 is the mean single-run reward; Pass³ is τ-bench's Passᵏ at k = 3, the probability that all three of three runs pass.

ϱ⁺ · π⁻Effort

Measured against each task's own reference workload: the ideal tool-call count in the enterprise worlds, the optimal block count in Pathfinding. The under-effort share cannot be won by silence, because it is signed against the workload.

Naturalness

FAIFaithfulness

One judge pass over the transcript with the agent's instructions, role and tool schemas. Five binary dimensions scored as their minimum.

DNSMOS · UTMOS · NISQAMOS predictors

Three no-reference mean-opinion-score predictors run over the isolated agent channel.

The harness elicits more than the suite scores: backchannel placement, the prosody of overlap and whether a mid-utterance revision is fluent are all elicited and none is scored. A system could be graceless at every overlap and lose nothing on the agentic pillar. That is why the pillars are never composed into one number, and why what follows is a table rather than a ranking.

04 Results

Three capabilities, one table, and they do not travel together

SystemAgentic capabilityConversational dynamicsNaturalness
GSPass@1Pass@3Pass³TTCPSELFAIDNSMOSUTMOSNISQA
Voice Think Fast0.779±.0310.490±.0390.694±.0680.266±.0570.635±.0151.814±.0510.630±.0241.880±.0523.127±.0073.687±.0103.093±.009
Realtime-2.10.619±.0370.433±.0350.659±.0680.212±.0480.653±.0181.543±.0480.414±.0242.025±.0573.350±.0044.095±.0103.600±.010
3.1-Flash-Live0.726±.0290.398±.0390.639±.0730.165±.0540.388±.0121.511±.0430.742±.0241.720±.0513.378±.0083.402±.0103.477±.012
Realtime-2.1-mini0.405±.0380.188±.0280.358±.0650.056±.0280.521±.0251.307±.0410.468±.0231.631±.0543.334±.0094.022±.0333.611±.022
2 Sonic0.263±.0280.011±.0070.019±.0190.006±.0090.566±.0211.019±.0120.977±.0061.635±.0543.172±.0152.556±.0172.562±.017
The suite, pooled over the six worlds, realistic channel. n = 135 conversations per enterprise cell and 45 per Pathfinding cell. Subscripts are 95% bootstrap half-widths. CP and FAI are on 1 to 3 and the MOS predictors on 1 to 5; everything else is on 0 to 1. Best per column in magenta. The effort pair is reported separately and is not in this table.

The agentic pillar orders the five cleanly, Grok Voice Think Fast 1.0 at Pass@1 0.490 down to Nova 2 Sonic at 0.011. The four above Nova 2 Sonic are the engaged systems throughout; Nova 2 Sonic is the disengaged one.

Reaching the right state is not doing the task

Read the first column against the second. Across the 25 enterprise cells the mean gap between the goal-state check and the reward is +0.255, and every cell is positive. A do-nothing agent passes goal state wherever the gold terminal state equals the seeded state, so a benchmark that headlines goal state is partly reporting how many of its tasks are no-ops. The reward is lost in the remaining conjuncts: acting through the sanctioned sequence, and saying what was done.

The pillars dissociate

Agentic Pass@1 Dynamics TT Naturalness DNSMOS Voice Think Fast 0.490 0.635 3.127 Realtime-2.1 0.433 0.653 3.350 3.1-Flash-Live 0.398 0.388 3.378 Realtime-2.1-mini 0.188 0.521 3.334 2 Sonic 0.011 0.566 3.172
Each system's rank on one metric from each pillar, with lines connecting the same system across the three. The crossings are the finding.

GPT-Realtime-2.1 holds the best turn-taking at 0.653 and Grok the best conversation progression at 1.814 on a 1 to 3 scale, while Gemini-3.1-Flash-Live is third on the reward and last on turn-taking at 0.388. The mechanism is worth stating plainly: tool calls introduce silence, silence is scored as a timing failure, and any composite that gates on timing penalises acting. That gives a mechanism for EVA-Bench's finding that no system exceeds 0.5 on both accuracy and experience.

Nova 2 Sonic is the sharpest dissociation: the best selectivity in every world beside an agentic column of near-zeros. All five sit within a quarter point on DNSMOS, and the two leaders on UTMOS and NISQA, GPT-Realtime-2.1 and its mini, differ by a factor of 2.3 on the reward.

Subject matter moves the score as much as the system does

0.0 0.2 0.4 0.6 0.8 Pass@1, per world Voice Think Fast 0.556 0.326 Realtime-2.1 0.674 0.200 Banking 0.200 to Travel 0.674, a range of 0.474 3.1-Flash-Live 0.489 0.207 Realtime-2.1-mini 0.296 0.074 2 Sonic 0.000 to 0.037
Pass@1 for each system in each of the six worlds. The bar is the interval the system spans; each dot is one world. Hover a dot to name it.

That range, 0.474 for one system, is wider than the spread across the four engaged systems inside any single world, which peaks at 0.445. Yet the ordering barely moves. Because the five enterprise worlds share harness, metrics and configuration, that interval is a measured null: how far a voice-agent number moves when only the subject matter changes.

Reliability decays fast

0.0 0.2 0.4 0.6 0.8 1 2 3 4 5 k, number of attempts reward Pass@1 to Pass³ Voice Think Fast 0.490 to 0.266 Realtime-2.1 0.433 to 0.212 3.1-Flash-Live 0.398 to 0.165 Realtime-2.1-mini 0.188 to 0.056 2 Sonic 0.011 to 0.006 all k · Passᵏ at least one in k · Pass@k
Reliability over k attempts, pooled over the six worlds. Dashed is Pass@k, at least one pass in k. Solid is Passᵏ, all k. Retries help; repeatability does not follow.

Grok retains 54 percent of its Pass@1 at k = 3 and GPT-Realtime-2.1 49 percent, so a single-run leaderboard overstates what any system will do three times running. Successes are not independent draws: every engaged enterprise cell beats the prediction that cubing Pass@1 would give, by factors of 1.2 to 91, so failure concentrates on particular scenarios and is diagnosable rather than stochastic.

So, can they help you get through the day?

Not yet, and not for the reason a leaderboard would tell you. The best system completes 0.490 of these tasks on a single run and 0.266 three times out of three, and the system you would pick by listening is not the one that completes most. Two recommendations follow, and both are cheap: report the under-effort share beside every completion score, because it is the one process metric silence cannot win, and report the harness configuration beside every score, because it moves the numbers as much as the model does.

What the paper has that this page does not

  • How they fail. The engaged systems overwork, exceeding the ideal workload in 50 to 83 percent of enterprise conversations; the disengaged one falls short in 58 to 95. The under-effort share is the strongest process predictor in the suite at Spearman rho -0.85, while turn-taking is uncorrelated at -0.06.
  • Recognition, not reasoning, is the floor under identity verification. About one spoken credential in six is misheard, 17.1 percent pooled, and distillation roughly doubles the error inside one model family.
  • Position is easy, heading is hard. Every system places the walker on the right corner 0.93 to 1.00 of the time and gets the facing right only 0.22 to 0.93, and the gap is mostly an omission rather than a wrong answer.
  • The heaviest explorers arrive least, at rho -0.80 across the five systems. Almost nobody ends at the wrong place: 104 of 110 non-arrivals run out of clock.
  • Three harness dials move the score as much as the model does. Changing the caller model alone moves Pass@1 from 0.267 to 0.578, and at the 0.5 provider default for voice detection some synthesised personas are inaudible to the agent.
  • An honest audit of what the reward cannot see, plus the limitations: synthetic speech, English only, declarative mock tools, and 215 of 450 navigation runs ending at the step cap.

We release the scenario corpus, the annotations and the evaluation code, under CC BY 4.0 for data and MIT for code. All task data is fabricated, and every caller utterance is synthesised, so no human speech was recorded, solicited or replayed at any point.

DuplexWorld: can voice agents help you get through the day? Aryan Vijay Bhosale, Harshit Rajgarhia, Akhil Pothanapalli, Asif Shaik, Abhishek Mukherji and Dinesh Manocha. Every figure here is generated from the paper's own numbers.