Blolabel
← Notes
comparison 7 min read

iOSWorld's own arXiv abstract says 52% overall, 37% on multi-app; its own ICML listing for the same result says 51% and 36%

iOSWorld, a 133-task benchmark for iOS phone agents, reports its best configuration reaching "52% overall but only 37% on multi-app tasks" in the abstract posted to arXiv on 8 June 2026. The ICML 2026 virtual listing for the same paper, the same workshop poster, the same benchmark run, reports 51% and 36%. Nobody at either venue has to resolve this for the reader: both pages are public, both are citable, and they disagree by one point on both of the paper's two headline numbers.

Abstract technical illustration on a dark grid: two nearly identical glowing percentage readouts side by side, 52 and 51, each feeding from its own thin line toward a shared benchmark icon in the center, with a small persistent one-point gap rendered as a visible notch between the two readouts rather than smoothed away, cool blues and teals with one amber accent marking the gap

What changed, and when

iOSWorld was posted to arXiv as 2606.09764 by six authors at Carnegie Mellon University (Lawrence Keunho Jang, Mareks Woodside, Geronimo Carom, Andrew Keunwoo Jang, Jing Yu Koh and Ruslan Salakhutdinov), submitted 8 June 2026 with no later revision on record. It builds 26 new iOS apps around one persistent, seeded user identity, native to an iOS simulator, and sets 133 tasks across three bands: 27 single-app, 60 multi-app (spanning 2 to 8 apps), and 46 memory-and-personalization tasks that depend on data planted earlier in the same identity. The paper's stated purpose is to test whether agents can use a user's own cross-app history and preferences, not just operate one screen at a time.

The abstract at arxiv.org/abs/2606.09764 states the best configuration reaches "52% overall but only 37% on multi-app tasks," and that privileged vision+XML access, giving the model both a screenshot and the accessibility tree together, improves frontier models by up to 26 percentage points while smaller models see no benefit from the added tree. The paper's own listing at the ICML 2026 workshop "Agents in the Wild: Safety, Security, and Beyond" (icml.cc/virtual/2026/67944), same title, same six authors, states the best configuration reaches 51% overall and 36% on multi-app tasks, repeating the identical up-to-26-point accessibility-tree claim. Both pages were read on 25 October 2026. Neither page references the other's number, and neither flags a correction.

iOSWorld's own two citations of the same result 0 20 40 60 52%arXiv, overall 51%ICML, overall 37%arXiv, multi-app 36%ICML, multi-app Sources: arxiv.org/abs/2606.09764; icml.cc/virtual/2026/67944. Both read 25 October 2026.

A benchmark phoneshell cannot check against either number

phoneshell's own board (site/results.json) runs 58 tasks per model against real, unmodified consumer apps on a physical iPhone 17 Pro Max, iOS 26.6, grading from WebDriverAgent state rather than a model's account of itself; across its six most recently run models the pass rate ranges from 89.7% (Qwen3-Max) to 96.6% (Kimi K3). iOSWorld's 52%-or-51% is not a number phoneshell's pass rate can be checked against: different apps (26 seeded synthetic apps built for the paper versus real third-party software), different task count and shape (133 tasks weighted toward multi-app and memory recall versus 58 single-pass tasks), and a different execution surface (an iOS simulator versus a physical phone). The only thing this piece is checking is whether iOSWorld's two public descriptions of its own result agree with each other, and they do not, by one point each time.

Two sources of a headline percentage iOSWorld, arXiv:2606.09764 133 tasks, 26 seeded synthetic apps iOS simulator, one persistent identity arXiv abstract: 52% / 37% ICML listing: 51% / 36% two citations, two numbers, no reconciliation phoneshell, site/results.json 58 tasks, real unmodified consumer apps physical iPhone 17 Pro Max, iOS 26.6 graded from WebDriverAgent device state 89.7% to 96.6% across six models Sources: arxiv.org/abs/2606.09764; icml.cc/virtual/2026/67944; github.com/Blomega/phoneshell/blob/main/site/results.json, read 25 October 2026.
FigurearXiv abstractICML 2026 listingSource
Overall success rate52%51%arxiv.org/abs/2606.09764; icml.cc/virtual/2026/67944
Multi-app task success rate37%36%same
Accessibility-tree gain, frontier modelsup to 26 percentage pointsup to 26%same (figure matches across both)
Tasks / apps133 tasks, 26 appsnot restated on this pagearxiv.org/abs/2606.09764
phoneshell's equivalent board figure89.7% to 96.6% across six models, 58 tasks, real apps, one physical iPhonegithub.com/Blomega/phoneshell/blob/main/site/results.json

What it means for anyone citing a benchmark number

Check it yourself

# iOSWorld's own two public numbers for the same result
curl -s https://arxiv.org/abs/2606.09764 | grep -o "5[12]% overall but only 3[67]% on multi-app tasks"
curl -s https://icml.cc/virtual/2026/67944 | grep -o "5[12]%.\{0,40\}3[67]%"

# phoneshell's own board, for contrast, not comparison
git clone https://github.com/Blomega/phoneshell && cd phoneshell
python3 -c "import json; d=json.load(open('site/results.json')); print(d['board'])"

What would prove this wrong

We claim iOSWorld's arXiv abstract and its own ICML 2026 workshop listing report two different pairs of numbers, 52%/37% versus 51%/36%, for what both pages describe as the same best-configuration result. That is wrong if either page has since been edited to match the other, or if a camera-ready proceedings version states explicitly that the ICML figure reflects a later, corrected evaluation pass; we found no such statement on either page as of 25 October 2026. If a v2 of arXiv:2606.09764 appears and reconciles the two, this piece should be updated to say so rather than left standing as written.

Sources

  1. Jang, Woodside, Carom, Jang, Koh, Salakhutdinov, iOSWorld: A Benchmark for Personally Intelligent Phone Agents, arXiv:2606.09764, submitted 8 June 2026, read 25 October 2026.
  2. Same paper, ICML 2026 virtual listing, workshop "Agents in the Wild: Safety, Security, and Beyond," read 25 October 2026.
  3. Blolabel, phoneshell/site/results.json, read 25 October 2026.