Risk Analysis Techniques for Governed LLM-based Multi-Agent Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Organisations are starting to adopt LLM-based AI agents, with their deployments naturally evolving from single agents towards interconnected, multi-agent networks. Yet a collection of safe agents does not guarantee a safe collection of agents, as interactions between agents over time create emergent behaviours and induce novel failure modes. This means multi-agent systems require a fundamentally different risk analysis approach than that used for a single agent. This report addresses the early stages of risk identification and analysis for multi-agent AI systems operating within governed environments where organisations control their agent configurations and deployment. In this setting, we examine six critical failure modes: cascading reliability failures, inter-agent communication failures, monoculture collapse, conformity bias, deficient theory of mind, and mixed motive dynamics. For each, we provide a toolkit for practitioners to extend or integrate into their existing frameworks to assess these failure modes within their organisational contexts. Given fundamental limitations in current LLM behavioural understanding, our approach centres on analysis validity, and advocates for progressively increasing validity through staged testing across stages of abstraction and deployment that gradually increases exposure to potential negative impacts, while collecting convergent evidence through simulation, observational analysis, benchmarking, and red teaming. This methodology establishes the groundwork for robust organisational risk management as these LLM-based multi-agent systems are deployed and operated.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 48 of its 72 references that are in the map. First posted on arXiv 6 Aug 2025.
Builds on
48 of 72 references.
Closest ancestors · 2
Same direction, newest first
- 2025How to evaluate control measures for LLM agents? A trajectory from today to superintelligence7 Apr
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb
Other references · 46
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
- 2024A Survey on LLM-as-a-Judgecited by 1,423
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 1,011
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 703
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 604
- 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 465
34 more
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 431
- 2025LLMs Get Lost In Multi-Turn Conversationcited by 429
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
- 2024TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Taskscited by 326
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2025Survey on Evaluation of LLM-based Agentscited by 204
- 2024Foundational Challenges in Assuring Alignment and Safety of Large Language Modelscited by 199
- 2025Open Problems in Mechanistic Interpretabilitycited by 179
- 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 178
- 2025Multi-Agent Risks from Advanced AIcited by 163
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 150
- 2022Holistic Evaluation of Language Modelscited by 131
- 2025ELEPHANT: Measuring and understanding social sycophancy in LLMscited by 129
- 2023Generative agent-based modeling with actions grounded in physical, social, or digital space using Concordiacited by 126
- 2024Cooperate or Collapse: Emergence of Sustainable Cooperation in a Society of LLM Agentscited by 125
- 2025SycEval: Evaluating LLM Sycophancycited by 108
- 2025Your Brain on ChatGPT: Accumulation of Cognitive Debt when Using an AI Assistant for Essay Writing Taskcited by 106
- 2023Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiationcited by 96
- 2024What Did I Do Wrong? Quantifying LLMs' Sensitivity and Consistency to Prompt Engineeringcited by 90
- 2025International AI Safety Reportcited by 67
- 2025Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIscited by 67
- 2025Measurement to Meaning: A Validity-Centered Framework for AI Evaluationcited by 57
- 2025Do as We Do, Not as You Think: the Conformity of Large Language Modelscited by 53
- 2024Hypothetical Minds: Scaffolding Theory of Mind for Multi-Agent Tasks with Large Language Modelscited by 48
- 2025Levels of Autonomy for AI Agentscited by 48
- 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 42
- 2025Infrastructure for AI Agentscited by 41
- 2024Conformity in Large Language Modelscited by 34
- 2024Towards evaluations-based safety cases for AI schemingcited by 33
- 2024BeHonest: Benchmarking Honesty in Large Language Modelscited by 24
- 2025SCORE: Systematic COnsistency and Robustness Evaluation for Large Language Modelscited by 19
- 2024Do LLMs Understand Ambiguity in Text? A Case Study in Open-world Question Answeringcited by 13
- 2025Enhancing LLM Code Generation with Ensembles: A Similarity-Based Selection Approachcited by 10
- 2025Reproducibility Study of Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiationcited by 4
Built on by
Citing papers per year: 2025: 2; 2026: 16.
18 papers.
Sort:
By area:
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 20
- 2025The PIMMUR Principles: Ensuring Validity in Collective Behavior of LLM Societiescited by 14
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactionscited by 11
- 2026Game-Theoretic Lens on LLM-based Multi-Agent Systemscited by 3
- 2026When Planning Fails Despite Correct Execution: On Epistemic Calibration for LLM-Based Multi-Agent Systemscited by 3
- 2026Human Society-Inspired Approaches to Agentic AI Security: The 4C Frameworkcited by 2
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Frictioncited by 2
- 2026More Is Different: Toward a Theory of Emergence in AI-Native Software Ecosystemscited by 1
- 2026Harnessing Disagreement: Detecting Correlated Agreement Blindness in Multi-Agent Triagecited by 1
- 2026Sigma-Mem: An Online Reliability Memory for LLM-based Multi-Agent Systemscited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systemscited by 1
6 more
- 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigmscited by 0
- 2026TRUST: A Framework for Decentralized AI Service v.0.1cited by 0
- 2026AI Assurance in UK Defence: Challenges in Operationalising JSP 936cited by 0
- 2026CIPHER: A Decoupled Exploration-Selection Framework for Test-Time Scaling of Data Science Agentscited by 0
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026Rare Event Estimation via Iterative Unalignmentcited by 0
- 2026Rare Event Estimation via Iterative Unalignment21 Sep 2026
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Sigma-Mem: An Online Reliability Memory for LLM-based Multi-Agent Systems30 Jul 2026
- 2026Harnessing Disagreement: Detecting Correlated Agreement Blindness in Multi-Agent Triage22 Jul 2026
- 2026CIPHER: A Decoupled Exploration-Selection Framework for Test-Time Scaling of Data Science Agents15 Jul 2026
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems25 Jun 2026
- 2026AI Assurance in UK Defence: Challenges in Operationalising JSP 9368 Jun 2026
- 2026When Planning Fails Despite Correct Execution: On Epistemic Calibration for LLM-Based Multi-Agent Systems22 May 2026
- 2026TRUST: A Framework for Decentralized AI Service v.0.129 Apr 2026
- 2026More Is Different: Toward a Theory of Emergence in AI-Native Software Ecosystems20 Apr 2026
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Friction23 Mar 2026
6 more
- 2026Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework2 Feb 2026
- 2026Game-Theoretic Lens on LLM-based Multi-Agent Systems21 Jan 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigms6 Jan 2026
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactions7 Dec 2025
- 2025The PIMMUR Principles: Ensuring Validity in Collective Behavior of LLM Societies22 Sep 2025
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 20
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactionscited by 11
- 2026When Planning Fails Despite Correct Execution: On Epistemic Calibration for LLM-Based Multi-Agent Systemscited by 3
- 2026Human Society-Inspired Approaches to Agentic AI Security: The 4C Frameworkcited by 2
- 2026Sigma-Mem: An Online Reliability Memory for LLM-based Multi-Agent Systemscited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systemscited by 1
- 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigmscited by 0
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Sigma-Mem: An Online Reliability Memory for LLM-based Multi-Agent Systems30 Jul 2026
- 2026When Passing Tests Hides Vulnerabilities: An Empirical Study of Silent Failures in Agentic Systems25 Jun 2026
- 2026When Planning Fails Despite Correct Execution: On Epistemic Calibration for LLM-Based Multi-Agent Systems22 May 2026
- 2026Human Society-Inspired Approaches to Agentic AI Security: The 4C Framework2 Feb 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2026LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigms6 Jan 2026
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactions7 Dec 2025
- 2025The PIMMUR Principles: Ensuring Validity in Collective Behavior of LLM Societiescited by 14
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Frictioncited by 2
- 2026More Is Different: Toward a Theory of Emergence in AI-Native Software Ecosystemscited by 1
- 2026Harnessing Disagreement: Detecting Correlated Agreement Blindness in Multi-Agent Triagecited by 1
- 2026AI Assurance in UK Defence: Challenges in Operationalising JSP 936cited by 0
- 2026Rare Event Estimation via Iterative Unalignmentcited by 0
- 2026Rare Event Estimation via Iterative Unalignment21 Sep 2026
- 2026Harnessing Disagreement: Detecting Correlated Agreement Blindness in Multi-Agent Triage22 Jul 2026
- 2026AI Assurance in UK Defence: Challenges in Operationalising JSP 9368 Jun 2026
- 2026More Is Different: Toward a Theory of Emergence in AI-Native Software Ecosystems20 Apr 2026
- 2026Cognitive Agency Surrender: Defending Epistemic Sovereignty via Scaffolded AI Friction23 Mar 2026
- 2025The PIMMUR Principles: Ensuring Validity in Collective Behavior of LLM Societies22 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Individual Intelligence: Surveying Collaboration, Failure Attribution, and Self-Evolution in LLM-based Multi-Agent Systems
- 2025Evaluation and Benchmarking of LLM Agents: A Survey
- 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems
- 2025Beyond Single-Agent Safety: A Taxonomy of Risks in LLM-to-LLM Interactions
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective
- 2026Towards Risk-free AI Agent Deployment
- 2026MAS-FIRE: Fault Injection and Reliability Evaluation for LLM-Based Multi-Agent Systems
- 2026Agents in the Wild: Where Research Meets Deployment