AI Insight
Researchers analyzed over 2,500 recorded interactions between autonomous agents representing different parties to identify how multi-agent systems fail when agents operate with private information and potentially conflicting interests. They developed a taxonomy of 20 distinct failure modes across four categories, revealing that agents drive interactions based on task phrasing rather than actual capabilities, never verify peer claims independently, and that standard evaluation metrics mask underlying coordination and verification failures. The study examined 488 scenarios across eight domains including legal, commerce, and security using different agent frameworks and models.
Why it matters
As AI agents increasingly negotiate and interact on behalf of different organizations or individuals, understanding these failure modes is critical for building reliable automated systems for commerce, legal contracts, and enterprise operations. The finding that systems inherit the reliability of their least reliable participant has important implications for designing safeguards in agent-to-agent interactions.
Understand the Science
⚠️ Preprint – Noch nicht peer-reviewed
Dieser Artikel wurde noch nicht von unabhängigen Experten begutachtet. Die Ergebnisse sind vorläufig und sollten mit Vorsicht interpretiert werden.
-cross
Abstract: Agents are increasingly interacting with other agents that act for different principals (people or organizations on whose behalf they work), such as a buyer’s personal agent negotiating with an enterprise’s seller agent. In such agent-to-agent (A2A) scenarios, each agent has its own environment and holds information and authority that the other cannot see. Moreover, the interests of each agent may be aligned (cooperative), partly aligned (mixed-motive), or opposed (competitive). Existing multi-agent system failure studies assume one orchestrator, shared workspace, or single principal. We ask how A2A systems fail when these assumptions are removed. We study more than 2,500 recorded runs of A2A systems built from different agent harnesses and models, spanning 488 scenarios across eight families (legal, CRM, security, commerce, etc.). From these traces, we derive $A^2$-Failures, a taxonomy of 20 A2A failure modes in four categories: (i) discovery and delegation, (ii) grounding and record consistency, (iii) verification, and (iv) conduct and fidelity. Three findings hold across every harness, model, and scenario studied: (1) discovery and interaction are driven by the phrasing of the task rather than the availability of peer agents; (2) no agent verifies a peer’s factual claim on its own initiative, so an A2A system inherits the reliability of its least reliable participant unless the protocol or mechanism performs the check; and (3) the aggregate outcome score credits the agent completing the task while staying blind to the coordination, verification, and conduct failures beneath it, so A2A systems must be evaluated per agent, against each agent’s own principal. We release the run logs behind the taxonomy at https://huggingface.co/datasets/a2a-salesforce/a2-failures.