mlsanityData to 14 Oct 2026

Trace-Level Analysis of Information Contamination in Multi-Agent Systems

arXiv 2604.27586 ↗First posted 30 Apr 2026cs.AI cs.LGcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Reasoning over heterogeneous artifacts (PDFs, spreadsheets, slide decks, etc.) increasingly occurs within structured agent workflows that iteratively extract, transform, and reference external information. In these workflows, uncertainty is not merely an input-quality issue: it can redirect decomposition and routing decisions, reshape intermediate state, and produce qualitatively different execution trajectories. We study this phenomenon by treating uncertainty as a controlled variable: we inject structured perturbations into artifact-derived representations, execute fixed workflows under comprehensive logging, and quantify contamination via trace divergence in plans, tool invocations, and intermediate state. Across 614 paired runs on 32 GAIA tasks with three different language models, we find a decoupling: workflows may diverge substantially yet recover correct answers, or remain structurally similar while producing incorrect outputs. We characterize three manifestation types: silent semantic corruption, behavioral detours with recovery, and combined structural disruption and their control-flow signatures (rerouting, extended execution, early termination). We measure operational costs and characterize why commonly used verification guardrails fail to intercept contamination. We contribute (i) a formal taxonomy of contamination manifestations in structured workflows, (ii) a trace-based measurement framework for detecting and localizing contamination across agent interactions, and (iii) empirical evidence with implications for targeted verification, defensive design, and cost control.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 36 references that are in the map. First posted on arXiv 30 Apr 2026.

Builds on

18 of 36 references.

References · 18

  1. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
  2. 2021Program Synthesis with Large Language Modelscited by 3,637
  3. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  4. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,395
  5. 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,242
  6. 2023GAIA: a benchmark for General AI Assistantscited by 1,128
  7. 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
  8. 2023ChatDev: Communicative Agents for Software Developmentcited by 919
  9. 2020A Review of Uncertainty Quantification in Deep Learning: Techniques, Applications and Challengescited by 819
  10. 2024Mixture-of-Agents Enhances Large Language Model Capabilitiescited by 438
  11. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
  12. 2024AgentBoard: An Analytical Evaluation Board of Multi-turn LLM Agentscited by 339
6 more
  1. 2023Explainability for Large Language Models: A Surveycited by 333
  2. 2023Benchmarking Large Language Models in Retrieval-Augmented Generationcited by 312
  3. 2024Magentic-One: A Generalist Multi-Agent System for Solving Complex Taskscited by 232
  4. 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 226
  5. 2025Towards a Science of Scaling Agent Systemscited by 138
  6. 2023Agent Lumos: Unified and Modular Training for Open-Source Language Agentscited by 72

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents
  2. 2025TRAIL: Trace Reasoning and Agentic Issue Localization
  3. 2026Confident and Wrong: Silent Semantic Failures in Coding Agents
  4. 2026Beyond Fluency: Toward Reliable Trajectories in Agentic IR
  5. 2026Designing for Doubt: The Case for Informed Abstention in Autonomous Agents
  6. 2026MAP-Graph: Provenance-Aware Shared Memory for Multi-Agent Workflows
  7. 2026Behavioral Controllability of Agentic Models for Information Extraction: From Fixed Workflows to Reflective Agents
  8. 2026Correct Is Not Governed: Provenance Integrity in Agentic Workflows