AI agents
Plan-and-Execute Versus Stepwise Control
Compare upfront planning, incremental action, and hybrid replanning for agent tasks.
By the end you can
- Define planning horizon choice as an operational contract rather than a capability label
- Contrast Full upfront plan with Stepwise control in “A migration agent followed a perfect plan after a dependency version changed”
- Trace “Plans become dangerous when they outlive their assumptions” through a concrete execution path
- Produce “Choose a planning horizon” with evidence for “The runtime can state which plan assumptions remain valid”
A plan is a revisable artifact, not standing authority
Plan-and-execute separates a planning phase from execution. Stepwise control does something else. It chooses one action from the current state, then looks again.
That design has a canonical implementation. ReAct, published in 2023, interleaves reasoning traces with actions. Each action is chosen from the state the environment has just reported back. The traces are not decoration. In the authors' phrase, they exist to “induce, track, and update action plans as well as handle exceptions”.
The measured result was large. “On two interactive decision making benchmarks (ALFWorld and WebShop), ReAct outperforms imitation and reinforcement learning methods by an absolute success rate of 34% and 10% respectively, while being prompted with only one or two in-context examples.” Thirty-four absolute points, from one or two examples. That is what it is worth to re-read the world before every move.
Hybrid systems keep a coarse plan while revising near-term actions as observations arrive.
The appropriate horizon depends on environment stability, coordination needs, action cost, and feedback speed. A plan is a revisable artifact. It is not an instruction with unlimited authority.
Commit at the coarsest level the environment will hold still for; anything you bind beyond that is a commitment made with information you did not have yet.
Case
Plan-and-Solve raised a six-dataset average from 70.4% to 76.7%
The literature is split, and both halves are useful.
Plan-and-Solve prompting devises a plan first, then carries out the subtasks in order. Its authors reported in 2023: “The experimental results over GPT-3 show that our proposed zero-shot prompting consistently outperforms Zero-shot-CoT across all datasets by a large margin, is comparable to or exceeds Zero-shot-Program-of-Thought Prompting, and has comparable performance with 8-shot CoT prompting on the math reasoning problem.”
The six pairs behind that sentence are worth reading one at a time. With GPT-3 text-davinci-003, the PS+ variant beat Zero-shot-CoT on every one. MultiArith 83.8 to 91.8. GSM8K 56.4 to 59.3. AddSub 85.3 to 92.2. AQuA 38.9 to 46.0. SingleEq 88.1 to 94.7. SVAMP 69.9 to 75.7. The average rose from 70.4% to 76.7%, just short of few-shot Manual-CoT at 77.6%.
"Beat on every dataset" is true. On GSM8K it is also 56.4 against 59.3. Planning first is a real gain of that size, not a change of kind.
Case
PlanBench: 206 correct plans out of 600 blocks problems
PlanBench put the other half of the record on the table. It runs about 26,250 prompts across two domains. Blocksworld has 600 instances, Logistics 285. Its authors' conclusion in 2023: “Our studies also show that on many critical capabilities–including plan generation–LLM performance falls quite short, even with the SOTA models.”
The size of "falls quite short" is the point. On Blocksworld plan generation, GPT-4 produced a correct plan in 206 of 600 instances, 34.3%. InstructGPT-3 text-davinci-002 managed 41 of 600, 6.8%. This is a toy domain of stacked blocks: fully observable, no tool latency, no changing permissions.
Two thirds of the plans that came back looking like plans did not execute. Planning helps as a structure. It is much weaker as a guarantee.
Key idea
Plans become dangerous when they outlive their assumptions
A detailed sequence can keep the model committed to it even after tools, permissions, or goals change. The model may continue because completing the plan is easier to recognize than revisiting the contract.
This is not a hunch about models. It is a documented failure in human crews, and it has a name.
The NTSB reviewed 37 flightcrew-involved major U.S. air carrier accidents from 1978 through 1990. Its 1994 safety study identified tactical decision errors in 25 of the 37. Three researchers at NASA Ames went back through those errors in 1998. Their finding: “about three quarters of the errors represented plan-continuation errors” — continuing the original plan despite cues that called for changing it. Ambiguous dynamic conditions and goal conflicts were named as the contributing context.
Three quarters of the errors were not wrong plans. They were right plans held too long.
Attach assumptions and expiry to plans. Require validation before consequential segments.
Long after the tools or the goal have moved, an unmarked plan still looks like the right thing to be executing.
Example
A deployment plan valid on seven of eight servers cost $460 million in 45 minutes
Beginning on 27 July 2012, Knight Capital Americas deployed new Retail Liquidity Program code into SMARS in stages. As the SEC later put it, “During the deployment of the new code, however, one of Knight’s technicians did not copy the new code to one of the eight SMARS computer servers.” The plan had been valid at the start. It was valid on seven targets at the end.
The eighth server still held retired “Power Peg” code. Its cumulative-share-counting function had been moved in 2005 and never retested. So when the programme went live on 1 August 2012, the repurposed flag activated it. For 212 incoming parent orders the system sent millions of child orders. That came to 4 million executions in 154 stocks, more than 397 million shares in approximately 45 minutes. It left an approximately $3.5 billion net long position in 80 stocks and an approximately $3.15 billion net short position in 74 stocks. The loss was $460 million.
The SEC's order of 16 October 2013 found that Knight had no written procedures requiring a second technician to review the deployment. It imposed a $12 million penalty.
No step of the sequence errored. The precondition that made the sequence meaningful — that all eight servers were carrying the new code — was never written down anywhere it could be rechecked.
- Decision at stake: Compare upfront planning, incremental action, and hybrid replanning for agent tasks. Knight's deployment was a full upfront plan run across eight targets. Nothing in it re-read the targets before the programme went live.
- Hidden assumption: A detailed plan should be followed unless a tool returns a fatal error. The eighth SMARS server returned no error at all. It ran the 2005 code it still had, correctly and at speed.
- Primary control question: Plans become dangerous when they outlive their assumptions. "All eight servers carry the new code" was the assumption the whole 27 July to 1 August sequence rested on. It stopped being true days before execution.
- Evidence to collect: The runtime can state which plan assumptions remain valid. The SEC found no written procedures requiring a second technician to review the deployment. The absence of that check is what a $460 million loss and a $12 million penalty were assessed against.
Comparison
The same planner, run twice: 11.58 versus 13.41 success rate
How far ahead the system commits is what separates a full upfront plan from stepwise control, and a hierarchical hybrid takes some of each. That claim has been measured directly rather than argued.
LLM-Planner ran the same planner twice on ALFRED in 2023. Once emitting one fixed high-level plan up front. Once re-planning whenever the agent fails to execute an action or a fixed number of timesteps has passed. On the test-unseen split with goal instruction only, static planning scored 11.58 success rate and 18.47 goal-condition. Grounded re-planning scored 13.41 and 22.89. The authors write: “Lastly, we see a considerable improvement from grounded re-planning over static planning, especially in the goal instruction only setting, where it improves 1.83% SR in the unseen test split.”
The paper's failure analysis makes the same contrast at higher absolute numbers. That run used the valid-unseen split in the step-by-step-instruction setting, with an oracle low-level controller substituted in. The gap widens to 42.68 versus 47.32 success rate, and 66.54 versus 78.56 goal-condition. Give the plan a way to notice that the world moved and it converts a chunk of failures into completions. That holds even when the low-level execution is perfect.
Compare the three designs on one question. Once execution has started, can the runtime still state which plan assumptions remain valid? A design that cannot answer that will keep executing a plan long after the ground it was built on has moved.
Full upfront plan
Generate the complete action sequence before execution.
- Coordinates known work
- Efficient for stable tasks
- Brittle under change
Stepwise control
Choose only the next action after each observation.
- Highly adaptive
- Limited global coordination
- Can become myopic
Hierarchical hybrid
Maintain milestones while replanning the local path.
- Balances direction and adaptation
- Needs plan state
- Good long-horizon default
Visual
The validity check decides whether the map still fits the ground
A coarse objective map holds the destination while the near-term step does the work. A validity check decides whether the map still describes the ground. The replan trigger and the commit boundary need separate owners and separate tests.
SayCan, from 2022, is that architecture built and scored. A learned affordance value function rates what is currently possible before each plan step is committed. So the language model's proposal and the question "can this actually be done here, now" stay separate components. Separate components get separate numbers. Across 101 real-world instructions: “In the mock kitchen, SayCan achieved a planning success rate of 84% and an execution rate of 74%.” Ten points of the plans that were right were not carried out.
Moved to a real office kitchen, the two scores came apart further. Planning fell 3 points to 81%. Execution fell 14 points to 60%.
That divergence is the argument for the separation. A single blended score would have shown one number sliding and hidden which half of the system the new environment had broken.
- 1
Coarse objective map
Stable milestones and dependencies that guide the run.
- 2
Near-term step
The next bounded action justified by current evidence.
- 3
Plan validity check
A test for assumptions, versions, resources, and constraints.
- 4
Replan trigger
An event that invalidates part of the current plan.
- 5
Commit boundary
The point after which a change becomes costly or irreversible.
Steps
Choose a planning horizon
Pick the horizon for one workflow deliberately, and write down the assumption that would invalidate it. Writing it down is what makes the danger visible. You now know in advance which fact has to stay true for the plan to be worth following. "All eight servers carry the new code" is one sentence. Unwritten, it cost $460 million. It also leaves behind what a reviewer needs: a named assumption that can be rechecked against the world while the plan is still running.
The last step of this sequence compares a full plan against a purely stepwise baseline before selecting a hybrid. That is not a rhetorical suggestion. It is what LLM-Planner did: one planner, both modes, the same split, 11.58 against 13.41. Run your own version of that A/B before you decide. The size of the gap in your environment is the only thing that tells you how much replanning machinery is worth building.
- 1
Assess volatility
Estimate how often tools, data, users, or constraints change during execution.
- 2
Map coordination needs
Identify work that benefits from shared milestones or reservations.
- 3
Locate commit points
Mark actions where wrong sequencing creates material cost.
- 4
Set replan triggers
Use tool errors, state divergence, new user input, and budget changes.
- 5
Test both extremes
Compare a full plan and purely stepwise baseline before selecting a hybrid.
Recheck a reused plan's preconditions before running it again
Plans should be inspected like code: versioned, tied to assumptions, and invalidated when their preconditions no longer hold. The rule to carry out of this lesson is that plans become dangerous when they outlive their assumptions. A plan that is reused gets its preconditions rechecked before it runs again.
The PlanBench numbers say precisely where that recheck has to be external rather than delegated to the model. Plan reuse is the easy case, where the new instance needs only a prefix of the example plan. In the same Blocksworld evaluation, GPT-4 was correct there in 392 of 600 instances, 65.3%. On replanning after an announced unexpected state change, 289 of 600, 48.1%, against InstructGPT-3's 40 of 600, 6.6%. On plan verification, 352 of 600, 58.6%. On reasoning about the state resulting from executing an action sequence, only 191 of 600, 31.8%.
Read that last figure against the others. The weakest skill of all is working out where the world ends up after the actions run. That is the exact skill a reused plan silently depends on. The authors' own summary is blunt: “Overall, the performance of these LLMs on our benchmark shows that, as of right now, LLMs are pretty ineffective in reasoning about actions and change.”
When the horizon itself is in question, pick the one whose assumptions you can still verify mid-run. And put the verification somewhere other than inside the thing being verified.
Nobody can diff a plan that was never written down as an object, which is exactly where stale assumptions survive.
Key takeaways
- Plan-and-execute separates a planning phase from execution. ReAct is the stepwise alternative, beating imitation and reinforcement learning baselines by 34 absolute points on ALFWorld and 10 on WebShop.
- Planning first is a real but bounded gain: Plan-and-Solve's PS+ raised a six-dataset average from 70.4% to 76.7% with GPT-3 text-davinci-003, against few-shot Manual-CoT at 77.6%.
- A plan that looks right often does not execute: GPT-4 produced a correct Blocksworld plan in 206 of 600 PlanBench instances, 34.3%.
- Plan continuation is a documented failure mode, not a hunch — about three quarters of the tactical decision errors the NTSB identified across 37 accidents were plan-continuation errors.
- Attach assumptions and expiry to plans, and require validation before consequential segments. Knight Capital's unstated "all eight servers" precondition cost $460 million in approximately 45 minutes.
- Plans should be inspected like code: versioned, tied to assumptions, and invalidated when their preconditions no longer hold — GPT-4 reasoned correctly about post-execution state in only 191 of 600 instances, 31.8%.