{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2606-02449","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","arxiv_id":"2606.02449","date":"2026-06-01","proceeding":null,"authors":["Xinhao Song","Su Su","Sirui Song","Hongliang Wu","Wen Shen","Zhihua Wei","Gongshen Liu","Linfeng Zhang","Dongrui Liu"],"abstract":"Multimodal agents are increasingly expected to operate interfaces on behalf of users, raising a central deployment question: can they truly substitute for humans in workflows that services deliberately protect against automation? CAPTCHA verification makes this question concrete. It is not merely a visual puzzle, but a human-verification boundary placed before account creation, content access, form submission, and other protected actions. We introduce \\textbf{Humanity's Last Line of Verification (HLL)}, a controlled benchmark that uses interactive CAPTCHA verification to evaluate whether agents can cross this boundary through grounded, human-like interaction rather than recognition alone. HLL covers diverse CAPTCHA interactions and exposes agents to controlled realism stressors, including cluttered webpages, harder task variants, and trace-conditioned validation of the solving process. We evaluate eight frontier multimodal agents in a closed-loop GUI environment. The results show that current agents remain brittle at this human-substitution boundary: performance varies sharply across verification types, degrades under realistic interface conditions, and drops further when correct answers must be supported by valid action traces. By exposing gaps in localization, action calibration, state tracking, and process consistency, HLL provides a concrete testbed for measuring how close multimodal agents are to acting as human substitutes in protected real-world workflows. Our code is available at https://github.com/XinhaoS0101/HLL","url_abs":"https://arxiv.org/abs/2606.02449","url_pdf":"https://arxiv.org/pdf/2606.02449","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2606.02449","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2606.02449"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/XinhaoS0101/HLL","reach":null}],"summary":{"ran_draft_wrong":6,"unverified":2},"by_repo_kind":{"found_in_text":{"samples":8,"ran":6,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"0051ad0815d2e18a","entry":"_build_email_register_theme","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0051ad0815d2e18a"}},{"code_sha256_prefix":"5e8a244308b5d860","entry":"_build_search_theme","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5e8a244308b5d860"}},{"code_sha256_prefix":"7c1501902190a300","entry":"_build_shopping_theme","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7c1501902190a300"}},{"code_sha256_prefix":"97f7031f4b91b613","entry":"_build_social_theme","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"97f7031f4b91b613"}},{"code_sha256_prefix":"8e0801333c66a21a","entry":"_generate_random_text","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8e0801333c66a21a"}},{"code_sha256_prefix":"48462b0e6be457f4","entry":"_sample_items","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"48462b0e6be457f4"}},{"code_sha256_prefix":"c73c460068519daa","entry":"CaptchaResult","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c73c460068519daa"}},{"code_sha256_prefix":"45e706e0c85759e3","entry":"DistractionMixin","repo":"XinhaoS0101/HLL","repo_kind":"found_in_text","path":"web/captcha/distraction_layer.py","file_url":"https://github.com/XinhaoS0101/HLL/blob/HEAD/web/captcha/distraction_layer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"45e706e0c85759e3"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.LG","source":"arxiv_2026.jsonl"},"syntology_extracted_results":{"kind":"leaderboard_placements","source":"Syntology's leaderboard-shaped extractor over the paper's own arXiv-HTML tables: a model pointed at a cell, the number was read from that cell and checked against the board's metric, dataset, split and scale, and an independent check accepted the entry; not reviewed by the paper's authors or the archive's editors","extractor_model":"global.anthropic.claude-sonnet-4-5-20250929-v1:0","verifier_model":null,"prompt_sha":"fa63d4bb9d755694","coverage":{"sentence":"Syntology has checked 6,264 of the 9,581 papers on this site that are newer than the archive; results from the others appear after they are checked.","papers_newer_than_archive":9581,"papers_checked":6264},"entries":[],"not_placed":{"boards":0,"rejected_by_independent_check":0,"refused_by_a_rule":0,"check_did_not_answer":0,"proposed_without_a_cell":0,"declined_by_site":0}}}