ML / AI DAILY DEEP PAPER · ICML 2025

DEFAME: Turning Multimodal Fact-Checking into a Dynamic Evidence-Gathering Loop

Multimodal RAG × dynamic tool planning × temporal generalization audit

ICML 2025 · PMLR 267:5383–5417 2026-09-08 Vision and multimodality / fact-checking

CR+ improves by 34.5 pp over direct GPT-4o, but VERITE T/OOC remains 4.3 pp below AITR. Evidence coverage is the main driver; longer reasoning is not a universal remedy.

0. Verified links and evidence boundaries

These URLs were visited on 2026-09-08. Numbers come only from the ICML/PMLR paper and arXiv v4 HTML/appendices read during this run; indexes verify venues, versions, and assets. The core arXiv paper 2412.10510v4,2025‑07‑24; PMLR lists ICML 2025, pp.5383–5417. OpenReview triggers browser verification, confirming an entry but not readable evidence. Exact-title searches in Papers with Code and Semantic Scholar did not return stable core entries; this means independent records could not be verified here, not that they are absent from those indexes.

Paper / resource Conference or official page arXiv version and date Code Data / weights Project page / videos
DEFAME (core) ICML 2025 / PMLR;Official PDF 2412.10510v4,2025‑07‑24;Line-verifiable HTML Official ICML branch,Apache‑2.0 ClaimReview2024+, subject to access terms; AVeriTeC/MOCHEG/VERITE download links are in the repository Research-group project page; video not found
RAGAR FEVER 2024 / ACL Anthology 2404.12065v2,2024‑10‑31 Not public / not found Uses political text–image claims; downloadable data assets not found No project page / video found
MOCHEG SIGIR 2023 / ACM 2205.12487v3,2023‑07‑06 Official repository Repository includes data, code, and checkpoint documentation Repository serves as project page; video not found
MetaSumPerceiver ACL 2024 Main No separate arXiv version found Paper page lists no official code Uses MOCHEG multidocument evidence; separate weights not found No project page / video found
AVeriTeC NeurIPS 2023 Datasets & Benchmarks Paper page provides the official PDF; proceedings determine version date Official repository Official data page AVeriTeC 2.0 task page; video not found
SNIFFER Described by the paper as OOC detection 2403.03170, first released 2024-03-05 Official repository Model weights Official demo page; video not found

Evidence references: arXiv v4 lines 192–203 refer to the line-verifiable HTML above; Tables 3/4/5/8 use the paper's numbering. Percentage-point and relative changes are explicitly labeled recalculations from original tables; no numbers are guessed from figures.

1. Candidate pool, deduplication, and actual random selection

First read ml-report-index.mdto exclude Visual Graph Arena, Q-VDiT, DocVXQA, AVUT, LongLive, DreamGen, and adjacent topics covered in the preceding 14 days. Candidates came from ICML 2025 PMLR, ICLR 2026 OpenReview, EMNLP/ACL Anthology, and recent arXiv, with Hugging Face Daily Papers, Papers with Code, and Semantic Scholar used for discovery and cross-searches. The full list is saved as candidates_2026-09-08.tsv. Running shuf -i 1-23 -n 1returned 4, selecting DEFAME. Official text, appendices, code, and data are accessible, so no redraw was needed。

  1. Unifying 2D and 3D Vision-Language Understanding(ICML 2025)
  2. Do Vision-Language Models Really Understand Visual Language?(ICML 2025)
  3. ELITE: Enhanced Language-Image Toxicity Evaluation for Safety(ICML 2025)
  4. DEFAME: Dynamic Evidence-based FAct-checking with Multimodal Experts(ICML 2025)
  5. Improving Zero-Shot Adversarial Robustness in Vision-Language Models(ICML 2025)
  6. Multimodal Time-Aligned Shared Token Recommender(ICML 2025)
  7. CoreMatching: Co-adaptive Token and Neuron Pruning for VLMs(ICML 2025)
  8. Agent Reviewers: Domain-specific Multimodal Agents with Shared Memory(ICML 2025)
  9. Empowering World Models with Reflection for Embodied Understanding(ICML 2025)
  10. video-SALMONN-o1: Reasoning-enhanced Audio-visual LLM(ICML 2025)
  11. The Hidden Life of Tokens: Reducing Hallucination via Visual Information Steering(ICML 2025)
  12. Compositional Condition Question Answering in Tabular Understanding(ICML 2025)
  13. Orthus: Autoregressive Interleaved Image-Text Generation(ICML 2025)
  14. Be Confident: Uncovering Overfitting in MLLM Multi-Task Tuning(ICML 2025)
  15. Training Vision-Language Process Reward Models for Test-Time Scaling(ICLR 2026)
  16. Multi-modal Data Mixtures for Vision-Language Model Training(ICLR 2026)
  17. RobustVLA: Robustness of Vision-Language-Action Models(ICLR 2026)
  18. VSTAT: Benchmarking Visual State Tracking(arXiv 2026)
  19. HAVEN: Hierarchically Aligned Multimodal Benchmark(arXiv 2026)
  20. MVU-Eval: Towards Multi-Video Understanding Evaluation(arXiv 2025)
  21. Video-MMLU(arXiv 2025)
  22. MT-Video-Bench(arXiv 2025)
  23. MMIU: Multimodal Multi-image Understanding(ICLR 2025)

2. Motivation: why looking at an image and directly judging truth is insufficient

Real-world fact-checking is not static classification. Claims may combine text, photographs, screenshots, or composite images, while evidence is scattered across web text and images. About 80% of professionally fact-checked claims are multimodal(introduction, arXiv v4 lines 75–79). Existing automated systems are largely text-based; many visual approaches reduce images to captions or rely on parametric memory, failing to handle both multimodal claims and external multimodal evidence (lines 79–82). This creates three problems: events after the knowledge cutoff require new evidence; explanations without sources cannot be audited; and one-shot retrieval cannot pursue follow-up questions.

Old benchmarks can create false reassurance. AVeriTeC ends in 2021-12, VERITE spans 2001-01 to 2023-01, and MOCHEG ends in 2022-05, whereas the tested GPT-4o has a 2023-10 knowledge cutoff. Public fact-check pages may have entered pretraining (Appendix A, lines 418–433). ClaimReview2024+ therefore contains300 English claims from articles dated 2023-11-01 through 2025-01-18, comprising 160 text-only and140 text–image claims. Labels are Refuted 129, Supported 89, Misleading 61, and NEI 21 (§4, lines 165–174). New articles can revisit older events, as the authors acknowledge, so this is not a guarantee of unseen events, but is closer to temporal out-of-distribution evaluation than pre-cutoff static sets.

Table 3 provides direct evidence: GPT-4o scores on older AVeriTeC/MOCHEG/VERITE-T/F are 62.1/53.7/78.7, but ClaimReview2024+ falls to 35.2and CoT falls further to 31.4, versus DEFAME's 70.5/59.2/83.9/69.7(arXiv v4 lines 192–203). Reasoning capability and access to current evidence are separate variables; for new events, evidence gathering matters more than generating additional reasoning steps.

3. Argument: from a static classifier to an evidence process with a stopping rule

The paper does not introduce a new visual encoder; it integrates fact-checking subtasks into a dynamic loop. One MLLM, four external tool types, and a growing fact-check report form the system. Every call sees the current report and stage instructions (§3, lines 127–132). The report serves as working memory, an evidence ledger, and material for the final explanation.

The six stages are:

  1. Plan: Generate actions for missing information, recording completed actions to avoid repetition. Tools are Web Search, Image Search, Reverse Image Search (RIS), and Geolocation.
  2. Execute: Web/Image Search each retrieve the top 3 pages; RIS retrieves up to 3 pages containing the input image; GeoCLIP proposes countries. Web results are restricted to dates preceding the claim and major fact-checking sites are excluded to reduce answer leakage (lines 133–153).
  3. Summarize: Extract relevant text, images, and URLs; results that contribute nothing return NONE, compressing long pages into the report (lines 154–156).
  4. Develop: Reason step by step over the claim and summarized evidence, explicitly identifying gaps (lines 157–159).
  5. Judge: Output a dataset label. NEI returns to Plan; stop at a determinate label or after at most 3 iterations (lines 160–161).
  6. Justify: Condense the full report into a short explanation with hyperlinks, rather than presenting the entire investigation trace to users (lines 162–164).

Four assumptions matter: top-ranked search results provide sufficient recall; the MLLM identifies relevant evidence and resists webpage prompt injection; errors across planning, summarization, reasoning, and judging do not reinforce themselves; and NEI reliably signals whether retrieval should continue. The dynamic loop improves coverage and auditability but extends reproducibility dependencies from a fixed model to indexes, APIs, web states, scrapers, and date filters.

4. Formalization and executable pseudocode

Let the text space be T, image space I, multimodal sequence space M=(T∪I)*, and label space Y. DEFAME is:

F: M → M × Y,       F(c) = (R_out, y_out)                         (1)

where input claim c may interleave text and images, andR_out is the full report. An iteration composes five stages (Appendix F, lines 520–553):

(R^(i+1), y^(i+1)) := F_iter(R^i)
F_iter := S5 ∘ S4 ∘ S3 ∘ S2 ∘ S1                               (2)

A_i = S1(R^i)                             # Plan actions
E_i = { τ(a) | a ∈ A_i }                  # Execute tools and collect evidence
R1^i = σ(E_i, R^i)                        # Append contextual summaries
R2^i = S4(R1^i)                           # Develop evidence-based reasoning
(R3^i, y^i) = S5(R2^i)                    # Intermediate verdict

The stopping time is:

i* = min { i ≤ N | y^i ≠ NEI or i = N },    N = 3
y_out = y^(i*)
R_out = S6(R^(i*))                                                (3)

This reveals a subtle issue: the stopping criterion is y≠NEI , but confidence in Supported/Refuted/Misleadingis not explicitly modeled. A premature Supported decision based on a superficially matching image can therefore stop the loop. Failure analysis indeed finds such cases (§5.7, lines 282–285; Appendix O, lines 706–710).

procedure DEFAME(claim c, max_rounds = 3):
    R ← init_report(c)
    for round in 1..max_rounds:
        A ← MLLM.plan(c, R, unused_tools_and_queries)
        E ← parallel_execute(A)           # web/image/RIS/geolocation
        E ← filter_by_date_and_domain(E)
        S ← MLLM.summarize_relevant(E, R) # irrelevant → NONE
        R ← append(R, A, S, URLs, images)
        R ← MLLM.develop(c, R)
        y ← MLLM.judge(c, R, label_rules)
        if y != NEI: break
    j ← MLLM.justify(c, R, y, require_hyperlinks=True)
    return (R + j, y)

5. Key mechanisms and engineering details

Module Paper configuration Expected contribution Engineering dependencies / risks
Web Search Serper/Google, top three pages; AVeriTeC instead uses 5-NN over its KB Find current or long-tail textual evidence Ranking drift, localization, paid API; removing Web Search on MOCHEG 59.2→42.0
Image Search Google Image Search, up to three source pages Find relevant images, charts, and visual context Similar images need not show the same event; copyright and hotlinks are unstable
RIS Google Vision API, up to three pages containing the same image Trace provenance, first appearance, and reuse context Removing RIS changes VERITE T/F by 83.9→73.7, the largest tool-specific loss on that dataset
Geolocation GeoCLIP; local tools supported by 4×A100-80GB in the paper Add location priors An example incorrectly suggests Poland/Czechia, corrected by other evidence; this is soft evidence, not a judge
Scraper Firecrawl, extended to scrape images within pages Preserve original text–image ordering Access restrictions, JavaScript, long pages, and robots rules cause systematic missing evidence; supported domains also exclude video platforms
Multimodal context Interleaved text/images; at most 32 images per page; truncate beyond context capacity Avoid information loss from captioning before reasoning No separate ablations of truncation, image ordering, or visual-token budgets
Backbone GPT-4o, GPT-4o mini, LLaVA-OneVision 7B, Llama 4 Scout; temperature 0.01, top-p 0.9 Replaceable modules Large backbone gaps in Table 2: CR+ 69.7 vs 32.6–48.8
Report memory Store actions, summaries, images, links, and reasoning each round Support multihop reasoning and auditing The same MLLM creates and consumes summaries, allowing early omissions to become later facts
Label rules Dataset-specific Extra Rules in Plan/Judge Adapt definitions of OOC, Misleading, C/CP, and other labels Not configuration-free across datasets; rule writing may inject priors

The public ICML branch provides Docker/manual installation,config/icml_experiments, batch scripts, and four paid/free API types. CPU-only execution requires no local LLM and a disabled geolocator. Reproduction also needs OpenAI, Serper, Google Vision, and Firecrawl/Hugging Face credentials, some paid (ICML-branch README, accessed lines 274–334). These define reproducibility more accurately than code availability alone.

6. Datasets, labels, and metrics

Dataset Evaluated subset Modalities / labels Metric Caveats
AVeriTeC dev 500:Refuted 305、Supported 122、NEI 35、C/CP 38 Text claims; four classes Accuracy Retrieval uses a complementary KB with about 1,000 distractors rather than the open Web, fetching five items per query (lines 178–181)
MOCHEG test 1,689/2,001 With final rulings: 667 Refuted, 522 NEI, 500 Supported Text claims + text/image evidence; three classes Accuracy = micro‑F1 The appendix proves their equivalence for single-label multiclass classification (lines 631–645); ground truth can become outdated
VERITE After removing 13 incomplete samples 1,001:338 True、325 OOC、338 Miscaptioned Text–image claims; binary subsets T/OOC、T/MC、T/F Accuracy False claims are constructed in two ways; merged T/F cannot isolate OOC versus mismatched-caption performance
ClaimReview2024+ 300: 160 text-only, 140 text–image Supported/Refuted/Misleading/NEI Four-class accuracy Imbalanced labels; one doctoral researcher resolved ambiguity and a second annotator checked it, without κ. The current HF page notes replacement by VeriTaS

Accuracy enables uniform comparison, but CR+'s 129/89/61/21 imbalance means 69.7% cannot substitute for macro-F1, per-class recall, or calibration. Confusion matrices are provided without all per-class numbers tabulated in the text; this report does not estimate them from images.

7. Complete main-results matrices

Table 3 contains four datasets and six comparable metrics, not five benchmarks × six methods. The sparse original matrix is preserved; — indicates evaluation omitted because code was unavailable or settings incompatible.* denotes values derived in the original paper from existing results; bold marks column-wise best.

Method AVeriTeC Acc MOCHEG Acc VERITE T/OOC VERITE T/MC VERITE T/F CR+ Acc
CFR 60.0 — — — — —
DeBERTa 65.6 — — — — —
LVLM4FV — 45.1 — — — —
MetaSumPerceiver — 48.6 — — — —
CHASMA — — 74.4* 59.3* 52.1 —
AITR — — 82.7 51.8 58.0* —
GPT‑4o 62.1±0.4 53.7±0.4 70.4±1.4 72.0±0.8 78.7±0.8 35.2±0.9
GPT‑4o CoT 61.0±0.4 49.7±0.3 74.1±0.9 76.5±0.4 80.0±0.6 31.4±4.5
DEFAME 70.5±0.6 59.2±0.4 78.4±1.0 83.3±1.1 83.9±0.5 69.7±2.5

Source: core Table 3, arXiv v4 lines 192–204. The final three rows are means ± standard deviations over three runs. Recalculation against the strongest non-DEFAME competitor in each column:

Column Strongest competitor DEFAME difference Relative change Conclusion
AVeriTeC DeBERTa 65.6 +4.9 pp +7.47% New state of the art
MOCHEG GPT-4o 53.7 (previous specialized SOTA 48.6) +5.5 pp +10.24% Against previous SOTA only: +10.6 pp / +21.81%
VERITE T/OOC AITR 82.7 −4.3 pp −5.20% Not state of the art
VERITE T/MC GPT‑4o CoT 76.5 +6.8 pp +8.89% Clear benefit
VERITE T/F GPT‑4o CoT 80.0 +3.9 pp +4.88% +25.9 pp over previous specialized SOTA AITR
CR+ GPT‑4o 35.2 +34.5 pp +98.01% Largest credible gain, pointing to retrieval rather than parametric memory

The claim of surpassing all methods on all three old benchmarks needs qualification. DEFAME leads AVeriTeC, MOCHEG, VERITE T/MC, and T/F, but not VERITE T/OOC. It is better described asstrongest overall across tasks, with pronounced temporal generalization benefitsrather than first in every column.

External evidence helps most on temporally shifted ClaimReview2024+

Accuracy of the same GPT-4o used directly versus within DEFAME; VERITE uses T/F. All vertical values are accuracy (%).

GPT‑4o directDEFAME
Direct GPT-4o versus DEFAME accuracy across four datasetsAVeriTeC: 62.1 versus 70.5; MOCHEG: 53.7 versus 59.2; VERITE True/False: 78.7 versus 83.9; ClaimReview2024+: 35.2 versus 69.7. 0255075100 AVeriTeC MOCHEG VERITE T/F CR+ Accuracy(%)
Source: core Table 3, arXiv v4 lines 192–203. Hover over or keyboard-focus bars for exact values; the main-results table supplies complete equivalent data.

8. Backbone replacement: modular does not mean backbone-independent

DEFAME backbone AVeriTeC MOCHEG VERITE T/F CR+
GPT‑4o 70.5 59.2 83.9 69.7
GPT‑4o mini 68.8 55.5 67.1 47.7
LLaVA‑OneVision 7B 49.3 42.1 59.3 32.6
Llama 4 Scout 67.0 55.0 72.3 48.8

Source: Table 2, lines 185–191. Replacing GPT-4o with Llama 4 reduces CR+ by 20.9 pp(−30.0%)and VERITE by 11.6 pp(−13.8%); LLaVA-1V reduces CR+ by 37.1 pp(−53.2%). LLaVA often fails to format actions correctly, reducing actual tool calls (lines 205–208; Appendix C, lines 473–474). Plug-and-play is an interface property, not performance equivalence; structured-instruction compliance is itself an experimental variable.

9. Layered ablations: evidence coverage matters more than extra reasoning

Variant MOCHEG Δ VERITE T/F Δ CR+ Δ
DEFAME 59.2 — 83.9 — 69.7 —
w/o Geolocation 58.3 −0.9 80.6 −3.3 65.7 −4.0
w/o Reverse Search 58.2 −1.0 73.7 −10.2 64.0 −5.7
w/o Image Search 57.8 −1.4 81.4 −2.5 63.7 −6.0
w/o Web Search 42.0 −17.2 81.8 −2.1 59.7 −10.0
Single Turn 47.7 −11.5 82.8 −1.1 63.3 −6.4
w/o Planning 58.7 −0.5 83.0 −0.9 68.0 −1.7
w/o Develop 57.4 −1.8 83.8 −0.1 67.0 −2.7
Unimodal Develop 56.1 −3.1 82.0 −1.9 65.7 −4.0

Source: Table 4, lines 228–262; Δ recalculated here. Task dependence is clear: MOCHEG/CR+ are most sensitive to Web Search, while visual-mismatch VERITE is most sensitive to RIS. Multiple rounds improve MOCHEG over a single turn by 11.5 pp(+24.1%)but VERITE by only 1.1 pp(+1.33%). Follow-up value depends on missing external facts, not a general superiority of looping.

Develop contributes only 0.1 ppon VERITE, far below RIS's 10.2 pp. This challenges attributing most gains to longer reasoning. A better attribution is:Evidence identifiability provided by the right tools > intermediate natural-language reasoning. Ablation tables lack standard deviations and may use one run, however, so differences of 0.1–1.0 pp should not be treated as robust.

10. Hyperparameter sensitivity, cost, and transitions

The paper fixes temperature at 0.01、top‑p 0.9, images per page at most 32 , rounds at most 3 , and search results per action at most 3 (five for AVeriTeC). No grids cover temperature, top-p, iterations, retrieval k, the 32-image cap, context truncation, or confidence thresholds. Robustness and statistical hyperparameter transitions therefore remain unknown.

Only two structural transitions are observable. First, modality: RIS contributes 10.2 ppon VERITE but only 1.0/5.7 pp on MOCHEG/CR+, whereas Web Search contributes 17.2 ppon MOCHEG. Second, backbone: LLaVA-1V action-format failures reduce search counts to 0.9/claim. Faster execution reflects missed tool calls, not more efficient reasoning.

Variant Time / claim LLM cost, cents Search cost, cents Queries / claim Input tokens Output tokens
DEFAME GPT‑4o 4:14 13 <1 2.2 48K 921
GPT‑4o mini 3:13 <1 <1 3.1 54K 1300
LLaVA‑1V 1:23 — <1 0.9 14K 794
Llama 4 18:02 — <1 2.8 21K 1325
w/o Planning 5:11 14 <1 5.2 70K 1100
GPT‑4o direct 0:06 <1 0 0 2.2K 67
GPT‑4o CoT 0:09 <1 0 0 2.3K 177

Source: Appendix Table 5, lines 455–475. VERITE timing is approximate and highly variable due to shared hardware. Full DEFAME is about 42.3×slower than direct GPT-4o (254s/6s), with about 21.8×as many input tokens and at least roughly an order of magnitude greater LLM API cost, in exchange for VERITE T/F +5.2 pp. Removing Planning increases queries from 2.2 to 5.2 (+136.4%), input tokens from 48K to 70K (+45.8%), and still lowers accuracy by 0.5–1.7 pp. Planning's main value is cost control rather than a large standalone accuracy gain.

11. Statistical significance and explanation quality

Main results report three-run means ± SD for DEFAME, GPT-4o, and GPT-4o CoT, but no paired per-example tests, confidence intervals, or multiple-comparison corrections. CR+'s +34.5 pp is large relative to SDs, while significance of VERITE T/F's +3.9 pp over CoT on paired examples is unreported and cannot be inferred from SDs alone.

Human evaluation covers 36 claims and 185 ratings: 154 for DEFAME, 31 for CoT, with at least five per claim. All participants have higher education. A Mann–Whitney U test for completeness yieldsp≈9.1×10^-9, favoring DEFAME; consistency does not differ significantly (§5.6, lines 268–281; Appendix L, lines 683–688). The 154:31 imbalance, missing effect sizes, rater counts/agreement, and lack of separation between link presence and actual support mean this establishes preferred completeness, not faithful citations.

Automatic explanation metrics are mixed. Table 8 gives DEFAME ROUGE-L/BLEU/BERTScore of 18.72/3.20/85.89and, with one style example, 25.37/7.31/87.42, relative gains of +35.5%/+128.4%/+1.78%. Yet one-shot BLEU remains below an untuned baseline's 7.38 and BERTScore below MetaSumPerceiver's 88.10. The authors attribute large shifts mainly to n-gram/wording sensitivity rather than sudden explanatory improvement (Appendix M, lines 691–701).

12. Contributions, reusable designs, and transfer potential

Contribution 1: retain multimodal evidence throughout the investigation loop. Where RAGAR converts images to descriptions, DEFAME preserves interleaved text/images in claims, retrieved pages, reports, and subsequent reasoning, enabling direct comparison of RIS/geolocation results with the original image.

Contribution 2: adapt depth through NEI. Static pipelines follow the same path regardless of difficulty. DEFAME continues only when evidence is insufficient; planning reduces queries from a static 5.2 to 2.2 while improving accuracy.

Contribution 3: isolate retrieval value with temporal evaluation. CR+ is imperfect, but exposes direct GPT-4o's 35.2 accuracy despite stronger old-benchmark scores, making external evidence's role clearer than another old-benchmark SOTA claim.

Reusable designs: An append-only report state; action deduplication; explicit rejection of irrelevant results; retrieval bounded by claim timestamps; tools saved alongside clickable sources; and separation of lengthy investigation traces from concise explanations. These transfer to medical evidence review, incident investigation, product compliance, and scientific-literature auditing.

Transfer boundaries: Medical/legal applications need source hierarchies and conflict resolution rather than trusting search rankings. Video verification needs transcripts, keyframes, and provenance timelines. Multilingual systems need cross-language retrieval/translation tests, and real-time systems need budget-aware stopping and human escalation for high-risk cases.

13. Related work: problem and technical lineage

RAGAR(FEVER 2024)

Problem addressed: CoRAG/ToRAG uses MLLMs to ask sequential subquestions about political text–image claims; RAGAR reports weighted F1 of 0.85, exceeding baseline reasoning by 0.14(RAGAR arXiv abstract, accessed).Remaining gap: Images are verbalized first, retrieval is text-only, and the focus is politics.DEFAME's response: Retain original images, add image search/RIS/geolocation, and evaluate four substantially different benchmarks.Transferred design: Recursive follow-up determined by prior evidence becomes the NEI→Plan loop.

MOCHEG(SIGIR 2023)

Problem addressed: It first integrates retrieval, three-class fact-checking, and explanation generation in an end-to-end multimodal benchmark. The final version contains 15,601 claims, 33,880 textual evidence passages, and 12,112 evidence images (MOCHEG arXiv v3 abstract).Remaining gap: Its baseline is a trained, segmented pipeline with relatively fixed sources; explanation metrics are sensitive to surface overlap.DEFAME's response: Replace trained submodules with a zero-shot MLLM and dynamic tools, producing linked reports.Transferred design: DEFAME expands MOCHEG's retrieval–verification–explanation structure into six stages with iteration.

MetaSumPerceiver(ACL 2024 Main)

Problem addressed: Summarize multidocument text/image evidence specifically for each claim, reducing manual reading.Remaining gap: It relies on supplied evidence sets rather than open-world investigation, with MOCHEG verification accuracy of 48.6(DEFAME Table 3).DEFAME's response: Summarize after every retrieval and feed summaries into the next planning round.Transferred design: Evidence compression before judgment is retained, but summarization becomes a recurrent state-update operator σ(E,R)。

AVeriTeC(NeurIPS 2023 D&B)

Problem addressed: Provides 4,568 real claims from 50 organizations, with source-linked QA pairs describing evidence chains (official proceedings abstract).Remaining gap: Text-only, static, and earlier than modern MLLM cutoffs; development-set KB noise differs from the open Web.DEFAME's response: Validate text capability on its KB while adding CR+ for temporally shifted multimodal claims.Transferred design: AVeriTeC's four-label taxonomy and view of evidence as answerable gaps influence Judge rules and InFact adaptation.

SNIFFER(2024)

Problem addressed: Two-stage instruction tuning improves entity alignment and explanation of OOC differences; model weights are public.Remaining gap: Primarily parametric recognition/explanation, without open-domain multihop evidence chains.DEFAME's response: Retrieve provenance, location, and time through tools rather than training a specialized visual model.Transferred design: SNIFFER emphasizes that superficial text–image agreement does not establish shared context. DEFAME assigns this need to RIS and evidence reports.

Nonlinear technical evolution

                                                  ┌─ AVeriTeC: real claims + QA evidence ─┐
FEVER-style text checking ┤                                     ├─ InFact/DEFAME labels and evidence formats
                         └─ Planning-based LLM fact-checking ───┘

Text–image consistency ─ SNIFFER: OOC tuning ────────────────────┐
                                                               ├─ DEFAME: original images + RIS + GeoCLIP
MOCHEG: retrieve→verify→explain ─ MetaSum: multidocument summaries ┤       │
                                                               │       ├─ CR+: temporal evaluation
RAG / Agents ─ RAGAR: recursive CoRAG/ToRAG questions ──────────┘       │
                                                                       └─ 2026 dynamic benchmarks / multi-agent systems

Drivers and turning points: The first shift is from text–image similarity to externally verifiable evidence; the second, from fixed evidence bundles to the open Web; the third, from static benchmarks vulnerable to pretraining contamination to dynamically updated evaluation. DEFAME sits between the second and third: retrieval is dynamic, but CR+ remains a one-time snapshot.

Work Original images retained Multimodal evidence retrieval Multiround planning Sourced explanations Specialized training Temporal design
MOCHEG baseline ✓ Fixed corpus ✗ Generate ruling ✓ ✗
MetaSumPerceiver ✓ Evidence already supplied ✗ Summary ✓ ✗
SNIFFER ✓ ✗ ✗ Explanation ✓ ✗
RAGAR Images converted to text Primarily text ✓ ✓ No ✗
DEFAME ✓ ✓ ✓ ✓ No CR+

14. Limitations acknowledged by the paper

  1. External-evidence credibility: Search results may leak answers, be biased, or be unreliable. The system relies on diversity and search-engine ranking, without external source ratings (§6, arXiv v4 lines 286–290).
  2. System stability: Access restrictions, long documents, and scraping failures cause variation; open MLLMs are sensitive to prompt formatting, and small changes may break action outputs (§6, line 291).
  3. Hallucinations and human-evaluation scale: MLLM hallucinations need further study. Human evaluation covers only 36 claims and cannot span all failure modes (§6, line 292; Appendix L, line 688).

15. Independent critique: evidence and implications

  1. [Attribution validity] Full DEFAME simultaneously changes retrieval, visual input, iteration depth, report memory, and prompt length. Single-component removal in Table 4, without compute-matched combinations, cannot attribute CR+'s +34.5 pp solely to multimodal evidence. Web-only, RIS-only, token-matched single-turn, and independent-judge factorial controls are needed.
  2. [Universal SOTA wording] Table 3 gives VERITE T/OOC of 78.4, below AITR's 82.7. Surpassing all previous methods can therefore describe overall cross-benchmark capability, not winning every column.
  3. [Stopping rule] Stopping requires only y≠NEI, and failure analysis finds premature Supported decisions after matching similar images. Label identity substitutes for confidence; stopping should instead consider evidence coverage, source independence, and calibrated probability.
  4. [Self-confirmation bias] One MLLM summarizes, reasons, and judges, while later stages see its compressed report. Early omissions or misreadings become accepted facts. Independent evidence-entailment models or cross-model audits should interrupt this feedback.
  5. [Search-ecosystem bias] The system excludes domains including Snopes and YouTube, yet an Appendix O shark-image case is verifiable only there. Anti-leakage rules systematically create missing evidence. Leakage detection should consider evaluation time and page content, rather than excluding entire domains.
  6. [Labels and data quality] Of 20 inspected VERITE errors, the authors find 3 suspected mislabels (15% of that small sample); MOCHEG ground truth can also change over time. Point accuracy mixes model errors with benchmark aging. Dynamic verification should provide both claim-time and evaluation-time verdicts.
  7. [Statistical completeness] Three main-result runs, no ablation SDs, and no paired tests cannot establish stable component rankings from 0.1–1.0 pp Develop/Planning/Geo differences. Freeze retrieval snapshots and apply multiseed bootstrap or McNemar tests.
  8. [Human evaluation and citation faithfulness] Significance concerns completeness only; DEFAME's 154 ratings and CoT's 31 are imbalanced, and entailment between citations and adjacent sentences is not tested. Thus, p≈9.1×10^-9 does not establish citation faithfulness. Sentence-level citation precision/recall and blinded source-quality assessment are needed.

16. Open challenges: actionable head-to-head experiments

Theory

  • Stopping theory: Compare DEFAME's NEI→continue with evidence-coverage thresholds, Bayesian posterior entropy, and conformal abstention, using identical retrieval snapshots and at most three rounds. Report accuracy, NEI calibration, mean rounds, and error costs to test NEI as an optimal-stopping surrogate.
  • Evidence independence: Compare the original with source-cluster deduplication and causal provenance graphs. Duplicate a story 1/3/10 times under synthetic contamination and measure verdict flips, testing whether multiple sources merely repeat one release.
  • Temporal semantics: Compare one verdict with dual claim-time/evaluation-time verdicts on time-sensitive MOCHEG and dynamic VeriTaS cases, separating model mistakes from world changes.

Engineering and applications

  • Budget-matched attribution: Cap full DEFAME, Web-only, RIS-only, static-all-tools, and single-turn systems at 48K input tokens and 254 seconds. Compare accuracy on all four datasets to distinguish tool variety, dynamic scheduling, and extra computation.
  • Retrieval-backend robustness: Compare Google/Serper, Bing, Brave, and Common Crawl snapshots with fixed dates/regions over seven days. Report evidence recall, URL survival, answer variance, and per-claim cost.
  • Security: Compare the original scraper with HTML sanitization, a prompt-injection classifier, and a sandboxed parser. Insert instructions to ignore the claim and output Supported into pages; measure attack success, clean-accuracy loss, and latency.
  • Human collaboration: Randomize 100 live claims across human-only, automatic DEFAME, and DEFAME-assisted fact-checkers. Measure minutes/claim, citation errors, final accuracy, and editing acceptance, rather than loosely comparing an entire workday with 4:14.

Emerging directions

  • Video and multiple images: Compare DEFAME plus keyframes/ASR with T²Agent and ReMMD-Agent on identical multi-image/video sets under API-cost caps. Measure provenance localization, cross-frame entity consistency, and five-way veracity instead of excluding video domains.
  • Executable small-model agents: Compare GPT-4o, Llama 4, and LLaVA-1V with grammar-constrained decoding and tool-call fine-tuning at fixed retrieval counts. Measure valid formats, useful queries, and accuracy to identify how much of the open-backbone gap comes from protocol execution rather than visual reasoning.
  • Dynamic contamination evaluation: Compare CR+ with VeriTaS and the event-novelty filter from Novel Claim or Déjà Vu? Probe parametric knowledge before measuring retrieval gains to establish actual need for external evidence, rather than assuming no contamination from publication dates.

17. Recent-work radar

  1. VeriTaS: The First Dynamic Benchmark for Multimodal Automated Fact-Checking(ACL 2026): upgrades static snapshots to a dynamic benchmark and received an Oral presentation, directly addressing future pretraining contamination of CR+.
  2. Novel Claim or Déjà Vu?(2026-07): challenges publication-after-cutoff as a guarantee of no contamination, examining event and semantic novelty. It is a necessary stress test of DEFAME's temporal claims.
  3. RW‑Post / AgentFact(CVPRW 2026): combines real-world data containing original posts, reasoning, and evidence with five agents, offering a stronger setting for cross-auditing than multiple roles prompted within one MLLM.
  4. T²Agent(AAAI 2026): combines tool use with Monte Carlo Tree Search, worth comparing with DEFAME's NEI loop under equal budgets.
  5. ReMMD(2026-06): spans 500 samples, 2,756 images, five languages, and multi-image posts, addressing DEFAME's English single-image limitation, though still small.
  6. Evidence Triangulation for Multimodal Fact-Checking in the Wild(2026-06): emphasizes triangulating real-world evidence, useful as a source-independence component rather than simply increasing search counts.
  7. RAMA(2025-07): uses retrieval-augmented multi-agent systems for multimedia misinformation; role separation offers a candidate way to interrupt DEFAME's self-confirmation bias.

18. Conclusion: key lessons and limits

The reusable contribution is three principles rather than six stage names: treat images as evidence rather than caption attachments; let evidence gaps drive tool selection; and retain investigation traces with clickable sources. Table 4 and cost results show that dynamic planning primarily provideshigher accuracy with fewer queries, while task-matched retrieval tools provide the largest performance contribution: Web Search for MOCHEG, RIS for VERITE.

The quantitative conclusion has two parts. On temporally shifted CR+, DEFAME improves over direct GPT-4o by +34.5 pp, strongly supporting retrieval as a remedy for knowledge cutoffs. Yet it does not lead every subtask: VERITE T/OOC remains below AITR by 4.3 pp. More importantly, retrieved pages are not yet validated for source independence, credibility, and sentence-level entailment. The appropriate product role is thereforean evidence-gathering and drafting assistant for fact-checkers, rather than an autonomous arbiter of truth.


Files and index notes: This report is saved with identical content in HTML, Markdown, and plain text;ml-report-index.md was updated. The single-file HTML follows Warm Editorial Report conventions with inline CSS/JS, light/dark themes, horizontally scrollable mobile tables, and keyboard-accessible tooltips. The official validator returned 0 warning. Playwright was actually invoked, but /usr/bin/chromium、/opt/pw-browsers and its cache contain no Chromium executable, producing executable doesn't exist. As instructed, playwright installwas not run; completion of the three-view screenshot checks cannot be claimed.