The problem starts with a very ordinary sentence
“Order my usual lunch.”
For a human assistant, this sentence is not empty. It carries history. It points to an app, a restaurant, a branch, a meal, maybe a delivery address, maybe a payment method. For a conventional GUI agent, it is a trap wearing casual clothes.
The agent may understand the high-level task: open a food delivery app and place an order. That is the easy part. The hard part is deciding which omitted details are safe to infer. The user did not say “usual” as poetry. The user expects the interface to remember.
That is the bottleneck studied in PersonalAlign: Hierarchical Implicit Intent Alignment for Personalized GUI Agent with Long-Term User-Centric Records.1 The paper’s central claim is not that GUI agents need a larger context window, another vision encoder, or a more charming prompt. It argues that daily GUI use contains a hierarchy of implicit intent, and that agents need memory structures designed around that hierarchy.
That distinction matters. A personalized GUI agent is not simply a normal GUI agent with search over recent history bolted on. Nor is it a chatbot with a user profile and a pair of digital hands. GUI interaction contains action trajectories, repeated selections, temporal habits, app-specific routines, and state-dependent behaviors. Logs are not yet preferences. Preferences are not yet routines. Routines are not yet permission to act.
The paper’s useful contribution is therefore architectural. It gives us a way to think about when an agent should obey, when it should infer, and when it should suggest. That is more valuable than another leaderboard victory, although there is one of those too.
PersonalAlign separates three kinds of intent that products often blur together
The paper defines a task called PersonalAlign, where a GUI agent uses long-term user records to align with implicit intent. The mechanism begins with a three-level hierarchy:
| Intent level | What the user provides | What the agent must do | Product risk if misread |
|---|---|---|---|
| Moment intent | Complete or mostly complete instruction | Execute the stated task | Ordinary execution failure |
| Preference intent | Vague instruction with omitted personal details | Infer stable preferences from history | Wrong app, wrong item, wrong path |
| Routine intent | Current state, possibly no instruction | Suggest a likely next action | Annoying or intrusive proactivity |
The hierarchy is important because each level changes the evidence standard.
A moment intent is a one-off command. The agent should not pretend it knows more than the user said. A preference intent is different: the user leaves out details because prior behavior makes those details recoverable. A routine intent goes further: the agent may infer that an action is relevant from the user’s current time and scenario, even without an explicit instruction.
This is where many “personalization” narratives become sloppy. They treat memory as a magic drawer: retrieve something similar, stuff it into the context, and hope the model behaves. PersonalAlign is more disciplined. It asks whether a behavior is repeated enough, semantically consistent enough, action-consistent enough, and state-consistent enough to support personalization.
That is the paper’s most business-relevant move. It turns “know the user” from a slogan into an evidence problem.
AndroidIntent turns personal habit into something measurable
To evaluate PersonalAlign, the authors construct AndroidIntent, using long-term Android interaction records from 91 users over 60 days. Each user’s records are divided chronologically: the first 80% becomes historical context, while the remaining 20% supplies execution records for annotation and inference.
The resulting benchmark contains 775 preference episodes and 215 routine episodes. The preference subset includes 7,915 GUI actions across 130 daily apps; the routine subset spans 60 apps. The broader dataset comparison reports 775 + 215 episodes across 190 applications, with 91 users, 60 days, and around 200 records per user.
Those numbers are useful, but the more interesting part is the annotation problem. Personal habits are messy. One person’s “routine” may be another person’s coincidence. One repeated action may reflect preference; another may reflect limited options. So the authors do not simply ask annotators to label everything from scratch.
Instead, they use a filter-then-verify pipeline:
- Measure semantic recurrence among user intents.
- Measure state consistency using time and scenario offsets.
- Use the resulting distributions to filter likely moment, preference, and routine candidates.
- Send candidates through human verification.
- For preference cases, create vague instructions that deliberately omit recoverable personal details.
This pipeline has a clear purpose: it is not trying to prove that every repeated behavior is meaningful. It is trying to find cases where historical evidence is strong enough that personalization is testable.
That matters for enterprise systems. A business assistant should not infer policy exceptions, vendor choices, approval flows, or customer-specific workflows from a few accidental clicks. The AndroidIntent construction quietly reminds us that personalization begins with pattern qualification, not model enthusiasm. Very unfashionable. Also necessary.
HIM-Agent starts by compressing behavior into prototypes, not by retrieving raw memories
The paper’s proposed system, HIM-Agent — Hierarchical Intent Memory Agent — is built around a streaming hierarchical memory. Its first move is not to retrieve the nearest record. It is to aggregate similar records into stable record prototypes.
This is a better fit for GUI behavior than plain semantic retrieval. A GUI record is not just text. It includes an instruction, a time, a scenario, screen observations, and an action trajectory. Two instructions may look semantically similar but involve different apps or action paths. Two action sequences may reveal the same preference even when the wording changes.
HIM-Agent uses a Streaming Aggregation Module to update memory incrementally at daily granularity. Rather than preserving every raw interaction as equal evidence, the system forms prototypes that summarize repeated behaviors.
That is the first design lesson: useful agent memory is not archival. It is statistical.
Then the memory is split through two filters.
The Execution-based Preference Filter identifies preference intent. It combines dense semantic similarity, sparse word overlap through Jaccard similarity, and action-trajectory consistency. For trajectory comparison, the paper uses Dynamic Time Warping, because GUI action sequences have order and timing structure. A preference is not merely “the user mentioned this before.” It is something like: similar intent, similar action path, repeated enough to form a stable execution pattern.
The State-based Routine Filter identifies routine intent. It adds frequency, execution coherence, and user-state consistency. Here, state means mainly time and scenario. A behavior that recurs at similar times or in similar contexts becomes a candidate for proactive suggestion.
The structure can be summarized simply:
| HIM-Agent component | Technical role | Operational meaning |
|---|---|---|
| Streaming Aggregation Module | Converts raw records into evolving prototypes | Avoid treating every click as equally meaningful |
| Execution-based Preference Filter | Uses semantic and action consistency | Infer omitted details during vague instructions |
| State-based Routine Filter | Uses frequency plus time/scenario stability | Decide when proactive suggestions are justified |
This is the mechanism-first lesson of the paper. Personalization is not a single memory feature. It is a pipeline: aggregate, separate, infer, and restrain.
Vague instructions damage fine-grained execution more than high-level recognition
The first major empirical result is about degradation. The paper evaluates several open and closed GUI agents under complete and vague instructions. The authors report that vague instructions cause only about a 3% drop in high-level type accuracy, but roughly a 20% drop in step-wise success rate and about a 45% decline on their cumulative success measure.
The interpretation is straightforward but easy to miss. Vague instructions do not primarily stop agents from understanding the broad goal. They stop agents from choosing the correct fine-grained path.
This is exactly what a business user would experience. The agent “understands” that it should create a report, submit an invoice, book a route, reorder a product, or open the right category of application. Then it picks the wrong account, wrong template, wrong supplier, wrong branch, wrong document folder, or wrong approval flow. The error appears small at the interface level and large at the workflow level.
The paper’s Cumulative Successful Rate is designed to capture that failure pattern. Unlike plain step-wise success, it gives heavier weight to earlier critical-step errors. That makes sense for GUI workflows: choosing the wrong app or wrong entity early can poison the rest of the trajectory.
So the evidence should not be read as “agents become slightly worse when prompts are vague.” The better reading is: agents often preserve the coarse task while losing the user-specific execution path. That is exactly the type of failure normal benchmarks under-detect.
HIM-Agent improves the part of execution that personalization actually touches
The main comparison tests HIM-Agent against simpler approaches on vague-instruction execution. The baseline model is Qwen3-VL. The alternatives include recent-history retrieval, similarity-based retrieval, and an LLM-based user-modeling method that summarizes user profiles.
The results are clearest on CSR:
| Method | Type accuracy | Step-wise success rate | Cumulative successful rate |
|---|---|---|---|
| Base model | 46.6 | 20.6 | 26.6 |
| Recent history | 49.4 | 21.1 | 33.2 |
| Retrieval-based | 51.0 | 22.4 | 35.4 |
| LLM user modeling | 51.2 | 22.3 | 35.2 |
| HIM-Agent | 52.0 | 24.0 | 42.3 |
The type-accuracy gain is modest. That is not a weakness. It confirms the mechanism. The main problem was never only high-level recognition. The large gain appears in CSR, where missing personalized details cause early and compounding errors.
HIM-Agent’s CSR of 42.3 is still not “solved.” Let us not pretend otherwise. But relative to the base model’s 26.6, the improvement is large enough to change the interpretation of memory. Structured memory is not just making the model sound more personalized. It is helping the agent preserve the user’s intended execution path.
The comparison with LLM user modeling is especially useful. Summarizing a user profile helps, but it does not match a memory structure that keeps action-level evidence. A profile may say “the user prefers App A for shopping.” A GUI agent also needs to know the usual action route inside App A. In interface automation, preference without procedure is only half a memory.
Proactivity is not intelligence unless false alarms are controlled
The second major setting is proactive assistance. Here the agent must decide whether the current user state calls for a suggestion. This is harder than vague-instruction completion because the user has not asked for anything.
The paper evaluates proactive performance using intent alignment and identification alignment. The most business-relevant numbers are precision, recall, false-alarm rate, and F1. HIM-Agent achieves:
| Method | Precision | Recall | False-alarm rate | F1-score |
|---|---|---|---|---|
| Recent history | 70.8% | 78.3% | 62.0% | 75.8% |
| Retrieval-based | 74.2% | 82.0% | 64.0% | 77.9% |
| LLM user modeling | 75.6% | 82.3% | 57.0% | 78.8% |
| HIM-Agent | 78.1% | 81.4% | 49.0% | 79.7% |
The story is not simply that HIM-Agent has the highest F1. The more important point is that it lowers false alarms while keeping recall high.
That is the right trade-off for proactivity. A proactive agent that constantly interrupts the user is not “assistant-like.” It is a notification system with a graduate degree. In an enterprise setting, false alarms are not just annoying; they create alert fatigue, undermine trust, and push users back toward manual control.
This is why the State-based Routine Filter matters. The paper’s ablation analysis shows that removing the state filter while keeping all prototypes can push false alarms close to 70%, even worse than using recent individual records. Translation: memory without restraint can make proactivity worse.
That is a product lesson worth putting on a wall. More memory does not automatically mean better personalization. Sometimes it only gives the agent more reasons to bother you.
The ablations explain why the mechanism works
The paper’s ablation studies should be read as mechanism tests, not as a second thesis.
The Execution-based Preference Filter ablation checks whether dense semantic similarity, sparse lexical overlap, and action consistency contribute to vague-instruction execution. The full module reaches CSR 42.3, compared with 33.2 in the setting where memory degenerates toward individual records without the full filter. The authors report that all three components contribute.
The likely purpose of this test is not to prove that Dynamic Time Warping is the only possible trajectory measure. It supports the broader claim that GUI personalization needs both semantic and execution evidence.
The proactive ablation checks the state-related components. Its purpose is to test whether time and scenario consistency are doing real work in routine detection. They are. Without that filtering discipline, proactive suggestions become noisier.
The appendix also includes a robustness-style check on the filtering weights used to separate moment, preference, and routine intents. The authors report that the three Gaussian-like distributions remain separable across multiple hyperparameter settings, although they select one configuration because it gives clearer boundaries for annotation. This supports the dataset construction pipeline, but it does not remove the need for validation on other real-world datasets.
A clean reading is:
| Evidence item | Likely purpose | What it supports | What it does not prove |
|---|---|---|---|
| Vague vs complete instruction comparison | Main evidence | Vague instructions mainly damage fine-grained execution | That current agents are generally unusable |
| HIM-Agent vs retrieval/profile baselines | Main evidence | Structured hierarchical memory improves implicit intent alignment | That this architecture is optimal |
| Preference filter ablation | Ablation | Semantic + action evidence matters | That these exact similarity functions are mandatory |
| State filter ablation | Ablation | Time/scenario consistency reduces proactive false alarms | That time and scenario are sufficient in all domains |
| Hyperparameter distribution check | Robustness/sensitivity test | Filtering pipeline is not entirely dependent on one weight choice | That the benchmark generalizes to all platforms |
| Online evaluation discussion | Implementation boundary | Offline evaluation is chosen for reproducibility | That offline success equals real deployment success |
| Personalized rewriting / proactive executing appendix | Exploratory extension | Alternative product designs exist | That autonomous proactive execution is ready |
This is where the paper is most useful for builders. It gives a structured vocabulary for separating a model improvement, a benchmark design choice, a deployment constraint, and a future product direction. In agentic AI, those four things are often thrown into the same soup. The soup is usually expensive.
The business value is lower instruction burden, not magical autonomy
For business users, the practical pathway is not “deploy a personal Jarvis.” That sentence should probably trigger a compliance review.
The more realistic pathway is narrower:
- Record repeated workflows with user consent.
- Aggregate stable patterns into prototypes.
- Separate one-off actions from preferences.
- Separate preferences from routines using state consistency.
- Use preference memory to complete vague instructions.
- Use routine memory to suggest actions only when evidence is strong.
- Keep proactive execution behind explicit approval until reliability is proven.
The near-term value is lower instruction burden. A user should not need to restate stable preferences every time they perform a repeated workflow. In enterprise settings, this applies to document preparation, CRM updates, procurement flows, inbox triage, dashboard checks, recurring reports, travel booking, ticket handling, and internal knowledge workflows.
But the value is not only speed. It is also fewer wrong micro-actions. Many office workflows fail not because the final goal is unclear, but because the system misses a local convention: which spreadsheet tab, which customer segment, which naming format, which vendor portal, which Slack channel, which approval sequence. These details are boring. That is why they matter. Boring details are where automation quietly dies.
Cognaptus’ inference from the paper is that enterprise GUI agents should treat personalization as an operational memory problem. The system should ask:
| Deployment question | Why it matters |
|---|---|
| Is the behavior repeated across enough history? | Avoid learning from accidents |
| Are the action paths consistent? | Distinguish preference from coincidence |
| Is the state pattern stable? | Avoid noisy proactivity |
| Can the user inspect or correct the memory? | Prevent silent personalization drift |
| Is the inferred action reversible? | Set the right autonomy level |
| Does the workflow involve sensitive data or regulated decisions? | Decide whether memory should stay on-device or require stricter governance |
This is not glamorous. It is much closer to process engineering than science fiction. Good. Process engineering is where ROI usually lives.
The privacy boundary is not a footnote; it is the product
The paper is clear that long-term user records raise privacy risks. Its experiments use the Fingertip dataset and do not introduce additional personal information, but the broader direction depends on collecting or modeling detailed interaction histories.
For consumer agents, that raises obvious concerns. For enterprise agents, the issue becomes sharper. GUI records may expose customer data, trade secrets, financial workflows, HR actions, legal documents, passwords accidentally visible on screen, or regulated business processes. A memory system that learns “how the user works” may also learn “how the company really operates,” including the parts not written in any manual.
This does not make PersonalAlign unusable. It means deployment architecture matters.
Some practical boundaries follow directly from the paper’s design:
- Cold start is real. HIM-Agent needs sufficient history. New users, new roles, and new workflows will not immediately benefit.
- Android-only evidence is a boundary. The authors argue the pipeline can extend to web and desktop because it relies on general GUI primitives, but the reported benchmark is mobile Android.
- Offline evaluation is not the same as live use. The paper primarily uses offline evaluation because real-device online testing is unstable, hard to automate, and often requires manual inspection.
- Multiple valid trajectories complicate scoring. A user’s intent may be achieved through more than one action path, so trajectory-based evaluation can understate alternative valid executions.
- Proactive suggestion is not proactive execution. The paper restricts proactive behavior to predicting user intent or suggesting instructions, not autonomously executing actions without permission.
The last point is especially important. The appendix discusses more advanced settings such as proactive triggering and proactive executing, where an agent might act automatically based on learned routines. But the paper treats those as future directions requiring online-like evaluation and realistic user acceptance or rejection feedback. In less polite language: do not let the agent start clicking through your enterprise systems just because it noticed that Linda usually opens the payroll dashboard at 9:03.
The interface of the future must know when not to guess
The cleanest contribution of PersonalAlign is the hierarchy:
- Moment intent should be executed.
- Preference intent should be inferred.
- Routine intent should be suggested carefully.
This seems simple, but it changes how we should evaluate GUI agents. A good agent is not only one that follows explicit instructions. It is one that knows which missing details are recoverable from history, which repeated behaviors are stable enough to trust, and which apparent routines are too weak to justify interruption.
That is a different standard from obedience. It is also a different standard from personalization theater.
The existing generation of GUI agents is learning to operate interfaces. PersonalAlign asks the next question: can the interface guess back without becoming reckless?
The answer, at least from this paper, is cautiously mechanical. Give the agent long-term records. Do not feed them in raw. Aggregate them into prototypes. Separate preferences from routines. Use action evidence, not just semantic similarity. Control false alarms. Keep the user’s trust as the scarce resource.
The future GUI bottleneck may not be whether the model can see the button.
It may be whether the model knows when the user did not need to say which button.
Cognaptus: Automate the Present, Incubate the Future.
-
Yibo Lyu, Gongwei Chen, Rui Shao, Weili Guan, and Liqiang Nie, “PersonalAlign: Hierarchical Implicit Intent Alignment for Personalized GUI Agent with Long-Term User-Centric Records,” arXiv:2601.09636v2, 2026, https://arxiv.org/abs/2601.09636. ↩︎