Soft-Label Governance for Distributional Safety in Multi-Agent Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Multi-agent AI systems exhibit emergent risks that no single agent produces in isolation. Existing safety frameworks rely on binary classifications of agent behavior, discarding the uncertainty inherent in proxy-based evaluation. We introduce SWARM (System-Wide Assessment of Risk in Multi-agent systems), a simulation framework that replaces binary good/bad labels with soft probabilistic labels p = P(v=+1) ∈ [0,1], enabling continuous-valued payoff computation, toxicity measurement, and governance intervention. SWARM implements a modular governance engine with configurable levers (transaction taxes, circuit breakers, reputation decay, and random audits) and quantifies their effects through probabilistic metrics including expected toxicity mathbbE[1-p mid accepted] and quality gap mathbbE[p mid accepted] - mathbbE[p mid rejected]. Across seven scenarios with five-seed replication, strict governance reduces welfare by over 40% without improving safety. In parallel, aggressively internalizing system externalities collapses total welfare from a baseline of +262 down to -67, while toxicity remains invariant. Circuit breakers require careful calibration; overly restrictive thresholds severely diminish system value, whereas an optimal threshold balances moderate welfare with minimized toxicity. Companion experiments show soft metrics detect proxy gaming by self-optimizing agents passing conventional binary evaluations. This basic governance layer applies to live LLM-backed agents (Concordia entities, Claude, GPT-4o Mini) without modification. Results show distributional safety requires continuous risk metrics and governance lever calibration involves quantifiable safety-welfare tradeoffs. Source code and project resources are publicly available at https://www.swarm-ai.org/.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 29 of its 56 references that are in the map. First posted on arXiv 19 Mar 2026.
Builds on
29 of 56 references.
Closest ancestors · 3
Same direction, newest first
- 2025Audit the Whisper: Detecting Steganographic Collusion in Multi-Agent LLMs5 Oct
- 2025AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models30 Sep
- 2025OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety8 Jul
Other references · 26
- 2017On Calibration of Modern Neural Networkscited by 4,860
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2016Concrete Problems in AI Safetycited by 1,582
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2019Multi-Agent Reinforcement Learning: A Selective Overview of Theories and Algorithmscited by 555
14 more
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 302
- 2016Safe, Multi-Agent, Reinforcement Learning for Autonomous Drivingcited by 301
- 2021Unsolved Problems in ML Safetycited by 291
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2018Categorizing Variants of Goodhart's Lawcited by 132
- 2023Generative agent-based modeling with actions grounded in physical, social, or digital space using Concordiacited by 119
- 2025Reward Shaping to Mitigate Reward Hacking in RLHFcited by 88
- 2025LLM Economist: Large Population Models and Mechanism Design in Multi-Agent Generative Simulacracited by 20
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systemscited by 17
- 2025A Multi-LLM-Agent-Based Framework for Economic and Public Policy Analysiscited by 11
- 2026The Hot Mess of AI: How Does Misalignment Scale With Model Intelligence and Task Complexity?cited by 8
- 2026Institutional AI: A Governance Framework for Distributional AGI Safetycited by 6
- 2026Some Simple Economics of AGIcited by 5
- 2026CourtGuard: A Model-Agnostic Framework for Zero-Shot Policy Adaptation in LLM Safetycited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026TrustX Agent Risk Classification Framework (ARC): Risk-Tiering Internally Created Agentic AI Systems
- 2025Free Energy Risk Metrics for Systemically Safe AI: Gatekeeping Multi-Agent Study
- 2025Risk Analysis Techniques for Governed LLM-based Multi-Agent Systems
- 2025AGENTSAFE: A Unified Framework for Ethical Assurance and Governance in Agentic AI
- 2026From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI
- 2025MAEBE: Multi-Agent Emergent Behavior Framework
- 2025AURA: An Agent Autonomy Risk Assessment Framework
- 2026Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety