Risk-Sensitive Agent Compositions
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
From software development to robot control, modern agentic systems decompose complex objectives into a sequence of subtasks and choose a set of specialized AI agents to complete them. We formalize agentic workflows as directed acyclic graphs, called agent graphs, where edges represent AI agents and paths correspond to feasible compositions of agents. Real-world deployment requires selecting agent compositions that not only maximize task success but also minimize violations of safety, fairness, and privacy requirements which demands a careful analysis of the low-probability (tail) behaviors of compositions of agents. In this work, we consider risk minimization over the set of feasible agent compositions and seek to minimize the value-at-risk and the conditional value-at-risk of the loss distribution of the agent composition where the loss quantifies violations of these requirements. We introduce an efficient algorithm which traverses the agent graph and finds a near-optimal composition of agents. It uses a dynamic programming approach to approximate the value-at-risk of agent compositions by exploiting a union bound. Furthermore, we prove that the approximation is near-optimal asymptotically for a broad class of practical loss functions. We also show how our algorithm can be used to approximate the conditional value-at-risk as a byproduct. To evaluate our framework, we consider a suite of video game-like control benchmarks that require composing several agents trained with reinforcement learning and demonstrate our algorithm's effectiveness in approximating the value-at-risk and identifying the optimal agent composition.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 26 of its 37 references that are in the map. First posted on arXiv 5 Jun 2025.
Builds on
26 of 37 references.
References · 26
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2018Addressing Function Approximation Error in Actor-Critic Methodscited by 2,417
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2025CoT-VLA: Visual Chain-of-Thought Reasoning for Vision-Language-Action Modelscited by 451
- 2024AFlow: Automating Agentic Workflow Generationcited by 432
- 2023Minigrid & Miniworld: Modular & Customizable Reinforcement Learning Environments for Goal-Oriented Taskscited by 327
- 2018Multi-Goal Reinforcement Learning: Challenging Robotics Environments and Request for Researchcited by 260
- 2025Agentic AI for Scientific Discovery: A Survey of Progress, Challenges, and Future Directionscited by 77
- 2021Compositional Reinforcement Learning from Logical Specificationscited by 67
- 2024Plan-Seq-Learn: Language Model Guided RL for Solving Long Horizon Robotics Taskscited by 52
- 2024Guiding Long-Horizon Task and Motion Planning with Vision Language Modelscited by 47
- 2022Efficient Risk-Averse Reinforcement Learningcited by 43
14 more
- 2025Reflective Planning: Vision-Language Models for Multi-Stage Long-Horizon Robotic Manipulationcited by 42
- 2025Flow: Modularized Agentic Workflow Automationcited by 34
- 2023Near-Minimax-Optimal Risk-Sensitive Reinforcement Learning with CVaRcited by 32
- 2022Regret Bounds for Risk-Sensitive Reinforcement Learningcited by 26
- 2025QualityFlow: An Agentic Workflow for Program Synthesis Controlled by LLM Quality Checkscited by 22
- 2020Risk-Sensitive Sequential Action Control with Multi-Modal Human Trajectory Forecasting for Safe Crowd-Robot Interactioncited by 21
- 2021Risk-Conditioned Distributional Soft Actor-Critic for Risk-Sensitive Navigationcited by 15
- 2021Risk-averse autonomous systems: A brief history and recent developments from the perspective of optimal controlcited by 12
- 2024SPIRE: Synergistic Planning, Imitation, and Reinforcement Learning for Long-Horizon Manipulationcited by 11
- 2023Value-Informed Skill Chaining for Policy Learning of Long-Horizon Tasks with Surgical Robotcited by 9
- 2021Risk-Averse Stochastic Shortest Path Planningcited by 8
- 2022A Survey of Risk-Aware Multi-Armed Banditscited by 8
- 2018Conditional Value-at-Risk for Reachability and Mean Payoff in Markov Decision Processescited by 4
- 2021Risk-Aware Algorithms for Combinatorial Semi-Banditscited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Mathematical Framing for Different Agent Strategies
- 2026When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems
- 2025A Safety and Security Framework for Real-World Agentic Systems
- 2025Automated Composition of Agents: A Knapsack Approach for Agentic Component Selection
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security
- 2026Position: A Three-Layer Probabilistic Assume-Guarantee Architecture Is Structurally Required for Safe LLM Agent Deployment
- 2026SafeAgent: A Runtime Protection Architecture for Agentic Systems
- 2026A Theory of Least Autonomy in AI