Search papers, labs, and topics across Lattice.
This paper reviews 336 GUI-agent studies from 2018 to 2026, identifying critical gaps in software engineering practices that hinder the deployment of these systems in real-world applications. Despite a rapid increase in research output since 2024, the authors highlight that current architectures lack essential features such as recovery mechanisms, human oversight, and safety enforcement. The findings emphasize that merely enhancing capabilities is insufficient for ensuring the readiness of GUI agents for practical use, necessitating a shift towards lifecycle-centered testing and governance frameworks.
The rapid evolution of GUI agents is overshadowed by significant engineering shortcomings that threaten their real-world applicability.
GUI agents have advanced rapidly, producing a growing body of frameworks, benchmarks, and applications. However, this growth has outpaced the maturity of the field. GUI agents remain technically brittle, incompletely engineered, and insufficiently validated for sustained real-world use. They are evolving into closed-loop software systems. Within these systems, model reasoning is coupled with interface perception, execution feedback, recovery, and human oversight. This evolution calls for a software engineering perspective that remains largely absent from existing research. We address this gap by reviewing 336 GUI-agent papers from January 2018 to April 2026. Five research questions examine the research landscape, architectures, evaluation, software lifecycle concerns, and future opportunities. Our findings show that the field has expanded sharply since 2024, while mobile and web settings remain dominant. Architectures increasingly adopt modular perceive-reason-act loops, but recovery, human escalation, safety enforcement, and auditability remain underdeveloped. This architectural imbalance extends to evaluation. Evaluations are becoming more interactive, but they remain centered on task success and are difficult to compare across protocols. More broadly, existing studies provide limited support for testing beyond benchmarks and for maintaining agents after release. Observability, privacy engineering, and systematic human oversight are also underdeveloped. Together, these findings show that capability improvements alone cannot ensure deployment readiness. Future research should connect dependable execution with lifecycle-centered testing and reproducible evaluation. It should also integrate permission and privacy controls with cost-aware, human-centered governance. This integration is necessary to build dependable, maintainable, secure, and deployable GUI-agent systems.
