Harms from Increasingly Agentic Algorithmic Systems
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
Research in Fairness, Accountability, Transparency, and Ethics (FATE) has established many sources and forms of algorithmic harm, in domains as diverse as health care, finance, policing, and recommendations. Much work remains to be done to mitigate the serious harms of these systems, particularly those disproportionately affecting marginalized communities. Despite these ongoing harms, new systems are being developed and deployed which threaten the perpetuation of the same harms and the creation of novel ones. In response, the FATE community has emphasized the importance of anticipating harms. Our work focuses on the anticipation of harms from increasingly agentic systems. Rather than providing a definition of agency as a binary property, we identify 4 key characteristics which, particularly in combination, tend to increase the agency of a given algorithmic system: underspecification, directness of impact, goal-directedness, and long-term planning. We also discuss important harms which arise from increasing agency -- notably, these include systemic and/or long-range impacts, often on marginalized stakeholders. We emphasize that recognizing agency of algorithmic systems does not absolve or shift the human responsibility for algorithmic harms. Rather, we use the term agency to highlight the increasingly evident fact that ML systems are not fully under human control. Our work explores increasingly agentic algorithmic systems in three parts. First, we explain the notion of an increase in agency for algorithmic systems in the context of diverse perspectives on agency across disciplines. Second, we argue for the need to anticipate harms from increasingly agentic systems. Third, we discuss important harms from increasingly agentic systems and ways forward for addressing them. We conclude by reflecting on implications of our work for anticipating algorithmic harms from emerging systems.
Key facts. Cited by 134 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 86 of its 208 references that are in the map. First posted on arXiv 20 Feb 2023.
Builds on
86 of 208 references.
Closest ancestors · 2
Same direction, newest first
- 2022Language Models as Agent Models3 Dec
- 2022A Generalist Agent12 May
Other references · 84
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2022Emergent Abilities of Large Language Modelscited by 2,483
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2021Decision Transformer: Reinforcement Learning via Sequence Modelingcited by 1,528
- 2018Datasheets for Datasetscited by 1,371
38 more
- 2019Mastering Atari, Go, Chess and Shogi by Planning with a Learned Modelcited by 1,327
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2023Mastering Diverse Domains through World Modelscited by 1,193
- 2018Model Cards for Model Reportingcited by 1,068
- 2022Inner Monologue: Embodied Reasoning through Planning with Language Modelscited by 1,057
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2022In-context Learning and Induction Headscited by 930
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2017Mastering Chess and Shogi by Self-Play with a General Reinforcement Learning Algorithmcited by 723
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2022Socratic Models: Composing Zero-Shot Multimodal Reasoning with Languagecited by 513
- 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 376
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
- 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Modelscited by 312
- 2022Social Simulacra: Creating Populated Prototypes for Social Computing Systemscited by 300
- 2019Measurement and Fairnesscited by 299
- 2022Teaching language models to support answers with verified quotescited by 290
- 2021Mastering Atari Games with Limited Datacited by 235
- 2022Predictability and Surprise in Large Generative Modelscited by 209
- 2021Reinforcement learning based recommender systems: A surveycited by 187
- 2022Defining and Characterizing Reward Hackingcited by 184
- 2018Delayed Impact of Fair Machine Learningcited by 183
- 2016Fairness in Learning: Classic and Contextual Banditscited by 167
- 2020Open Problems in Cooperative AIcited by 167
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
- 2023Human-Timescale Adaptation in an Open-Ended Task Spacecited by 136
- 2021The Benchmark Lotterycited by 133
- 2022Mastering the Game of Stratego with Model-Free Multiagent Reinforcement Learningcited by 129
- 2021Goal Misgeneralization in Deep Reinforcement Learningcited by 122
- 2022Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goalscited by 120
- 2022Broken Neural Scaling Lawscited by 102
- 2023A Tutorial on Meta-Reinforcement Learningcited by 102
- 2016Fairness in Reinforcement Learningcited by 93
- 2022The Fallacy of AI Functionalitycited by 88
- 2022Meaning without reference in large language modelscited by 76
- 2019Degenerate Feedback Loops in Recommender Systemscited by 67
50 most cited of 84 All 84 (JSON)
Built on by
Citing papers per year: 2023: 15; 2024: 28; 2025: 58; 2026: 33.
134 papers.
Sort:
By area:
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 424
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2024AI Agents That Mattercited by 199
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023Model evaluation for extreme riskscited by 167
- 2025AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challengescited by 167
- 2023Getting aligned on representational alignmentcited by 142
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2025ELEPHANT: Measuring and understanding social sycophancy in LLMscited by 115
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2024Visibility into AI Agentscited by 77
38 more
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 72
- 2024Clio: Privacy-Preserving Insights into Real-World AI Usecited by 66
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
- 2025SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agentscited by 58
- 2025Multi-Agent Systems Execute Arbitrary Malicious Codecited by 52
- 2023Managing extreme AI risks amid rapid progresscited by 48
- 2025Agentic AI: A Comprehensive Survey of Architectures, Applications, and Future Directionscited by 46
- 2025Levels of Autonomy for AI Agentscited by 45
- 2024Current state of LLM Risks and AI Guardrailscited by 44
- 2025Fully Autonomous AI Agents Should Not be Developedcited by 43
- 2025Infrastructure for AI Agentscited by 40
- 2025Ctrl-Z: Controlling AI Agents via Resamplingcited by 40
- 2024Cocoa: Co-Planning and Co-Execution with AI Agentscited by 38
- 2024Agent Design Pattern Catalogue: A Collection of Architectural Patterns for Foundation Model based Agentscited by 35
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
- 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
- 2023Mirages: On Anthropomorphism in Dialogue Systemscited by 30
- 2025Characterizing AI Agents for Alignment and Governancecited by 30
- 2025Representation Bending for Large Language Model Safetycited by 28
- 2024Risks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementationcited by 27
- 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systemscited by 27
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challengescited by 26
- 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agentscited by 22
- 2023Compositional Capabilities of Autoregressive Transformers: A Study on Synthetic, Interpretable Taskscited by 21
- 2023What does ChatGPT return about human values? Exploring value bias in ChatGPT using a descriptive value theorycited by 19
- 2025Agentic AI Needs a Systems Theorycited by 19
- 2024IDs for AI Systemscited by 18
- 2026Intelligent AI Delegationcited by 16
- 2025Evaluating the Goal-Directedness of Large Language Modelscited by 15
- 2025The AI Agent Indexcited by 14
- 2025Agentic AI Systems Applied to tasks in Financial Services: Modeling and model risk management crewscited by 12
- 2025A Large Scale Analysis of Gender Biases in Text-to-Image Generative Modelscited by 12
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2024Characterizing and modeling harms from interactions with design patterns in AI interfacescited by 11
- 2024Evaluating AI Evaluation: Perils and Prospectscited by 11
- 2024Challenges in Human-Agent Communicationcited by 11
- 2025Dehumanizing Machines: Mitigating Anthropomorphic Behaviors in Text Generation Systemscited by 11
50 most cited of 134 All 134 (JSON)
- 2026Value-Sensitive Delegation in Everyday AI Agent Use: Evidence from OpenClaw18 Sep 2026
- 2026Who Audits Whom, on What Substrate, with What Evidence? An Independence-Graded Audit Protocol for Agentic AI16 Sep 2026
- 2026Value-Preserving Architectures for Agentic AI Systems3 Sep 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026Agent Inheritance Protocol: Speculating on Feralized Agents After Principals Die15 Aug 2026
- 2026Governing Agentic AI in FinTech11 Aug 2026
- 2026Metanormative Theory for RL-Based Moral Agents8 Aug 2026
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems10 Jul 2026
- 2026Towards Agentic AI Governance: A Preliminary Assessment8 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026A Technical Typology of AI Systems in Public Administration30 Jun 2026
- 2026Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents3 Jun 2026
38 more
- 2026Language model agents show in-group trust bias invisible to standard behavioural audits27 May 2026
- 2026Progressive Autonomy as Preference Learning: A Formalization of Trust Calibration for Agentic Tool Use18 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026Responsible Agentic AI Requires Explicit Provenance16 May 2026
- 2026Mechanical Enforcement for LLM Governance:Evidence of Governance-Task Decoupling in Financial Decision Systems14 May 2026
- 2026From Tool to Agent: How Worker Needs Reorganize Across the Agentic Roles of Workplace AI4 May 2026
- 2026Causal Foundations of Collective Agency30 Apr 2026
- 2026Beyond Single-Agent Alignment: Preventing Context-Fragmented Violations in Multi-Agent Systems24 Apr 2026
- 2026Post-AGI Economies: Autonomy and the First Fundamental Theorem of Welfare Economics23 Apr 2026
- 2026Where are the Humans? A Scoping Review of Fairness in Multi-agent AI Systems16 Apr 2026
- 2026How are AI agents used? Evidence from 177,000 MCP tools25 Mar 2026
- 2026Herding CATs: ALARA for Agent Harness Engineering in Portable Composable Multi-Agent Teams20 Mar 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026The Controllability Trap: A Governance Framework for Military AI Agents3 Mar 2026
- 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems19 Feb 2026
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunities18 Feb 2026
- 2026Human Attribution of Causality to AI Across Agency, Misuse, and Misalignment17 Feb 2026
- 2026Intelligent AI Delegation12 Feb 2026
- 2026Does My Chatbot Have an Agenda? Understanding Human and AI Agency in Human-Human-like Chatbot Interaction30 Jan 2026
- 2026SHARP: Social Harm Analysis via Risk Profiles for Measuring Inequities in Large Language Models29 Jan 2026
- 2026Agent Benchmarks Fail Public Sector Requirements28 Jan 2026
- 2025On the Regulatory Potential of User Interfaces for AI Agent Governance30 Nov 2025
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Evaluating LLMs in Open-Source Games29 Nov 2025
- 2025Perspectives on a Reliability Monitoring Framework for Agentic AI Systems12 Nov 2025
- 2025When Assisting One Disempowers Another6 Nov 2025
- 2025Validity Is What You Need31 Oct 2025
- 2025Agentic AI: A Comprehensive Survey of Architectures, Applications, and Future Directions29 Oct 2025
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges27 Oct 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
- 2025Regulating the Agency of LLM-based Agents25 Sep 2025
- 2025Is the `Agent' Paradigm a Limiting Framework for Next-Generation Intelligent Systems?13 Sep 2025
- 2025Co-Investigator AI: The Rise of Agentic AI for Smarter, Trustworthy AML Compliance Narratives10 Sep 2025
- 2025Measuring and mitigating overreliance to build human-compatible AI8 Sep 2025
- 2025Accountability Framework for Healthcare AI Systems: Towards Joint Accountability in Decision Making3 Sep 2025
- 2025Attacks and Defenses Against LLM Fingerprinting12 Aug 2025
- 2025Dimensional Characterization and Pathway Modeling for Catastrophic AI Risks8 Aug 2025
- 2025Agent Identity Evals: Measuring Agentic Identity23 Jul 2025
50 newest of 134 All 134 (JSON)
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 424
- 2025AI Agents vs. Agentic AI: A Conceptual Taxonomy, Applications and Challengescited by 167
- 2025SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agentscited by 58
- 2025Multi-Agent Systems Execute Arbitrary Malicious Codecited by 52
- 2025Agentic AI: A Comprehensive Survey of Architectures, Applications, and Future Directionscited by 46
- 2024Agent Design Pattern Catalogue: A Collection of Architectural Patterns for Foundation Model based Agentscited by 35
- 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systemscited by 27
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challengescited by 26
- 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agentscited by 22
- 2025The AI Agent Indexcited by 14
- 2025Agentic AI Systems Applied to tasks in Financial Services: Modeling and model risk management crewscited by 12
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
12 most cited of 42 All 42 (JSON)
- 2026Value-Sensitive Delegation in Everyday AI Agent Use: Evidence from OpenClaw18 Sep 2026
- 2026Who Audits Whom, on What Substrate, with What Evidence? An Independence-Graded Audit Protocol for Agentic AI16 Sep 2026
- 2026Value-Preserving Architectures for Agentic AI Systems3 Sep 2026
- 2026Governing Agentic AI in FinTech11 Aug 2026
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems10 Jul 2026
- 2026Towards Agentic AI Governance: A Preliminary Assessment8 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents3 Jun 2026
- 2026Language model agents show in-group trust bias invisible to standard behavioural audits27 May 2026
- 2026Progressive Autonomy as Preference Learning: A Formalization of Trust Calibration for Agentic Tool Use18 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026Responsible Agentic AI Requires Explicit Provenance16 May 2026
12 newest of 42 All 42 (JSON)
- 2024Current state of LLM Risks and AI Guardrailscited by 44
- 2025Representation Bending for Large Language Model Safetycited by 28
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agentscited by 0
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Representation Bending for Large Language Model Safety2 Apr 2025
- 2024Current state of LLM Risks and AI Guardrails16 Jun 2024
- 2025Agentic AI Needs a Systems Theorycited by 19
- 2025Agentic AI Needs a Systems Theory28 Feb 2025
- 2024AI Agents That Mattercited by 199
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023Model evaluation for extreme riskscited by 167
- 2023Getting aligned on representational alignmentcited by 142
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2025ELEPHANT: Measuring and understanding social sycophancy in LLMscited by 115
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2024Visibility into AI Agentscited by 77
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 72
- 2024Clio: Privacy-Preserving Insights into Real-World AI Usecited by 66
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
12 most cited of 83 All 83 (JSON)
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026Agent Inheritance Protocol: Speculating on Feralized Agents After Principals Die15 Aug 2026
- 2026Metanormative Theory for RL-Based Moral Agents8 Aug 2026
- 2026A Technical Typology of AI Systems in Public Administration30 Jun 2026
- 2026Mechanical Enforcement for LLM Governance:Evidence of Governance-Task Decoupling in Financial Decision Systems14 May 2026
- 2026From Tool to Agent: How Worker Needs Reorganize Across the Agentic Roles of Workplace AI4 May 2026
- 2026Causal Foundations of Collective Agency30 Apr 2026
- 2026Post-AGI Economies: Autonomy and the First Fundamental Theorem of Welfare Economics23 Apr 2026
- 2026Where are the Humans? A Scoping Review of Fairness in Multi-agent AI Systems16 Apr 2026
- 2026Herding CATs: ALARA for Agent Harness Engineering in Portable Composable Multi-Agent Teams20 Mar 2026
- 2026Human Attribution of Causality to AI Across Agency, Misuse, and Misalignment17 Feb 2026
- 2026Intelligent AI Delegation12 Feb 2026
12 newest of 83 All 83 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Agentic AI: Autonomy, Accountability, and the Algorithmic Society
- 2025Socio-technical aspects of Agentic AI
- 2026A three-dimensional typology of agency for advanced AI systems
- 2025Moral Responsibility or Obedience: What Do We Want from AI?
- 2026Human Control Is the Anchor, Not the Answer: Early Divergence of Oversight in Agentic AI Communities
- 2025AI Agents and the Law
- 2026The Doctor Will (Still) See You Now: On the Structural Limits of Agentic AI in Healthcare
- 2026Beyond Benchmark Islands: Toward Representative Trustworthiness Evaluation for Agentic AI