mlsanityData to 7 Oct 2026

Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On

arXiv 2605.19035 ↗First posted 18 May 2026cs.AIcited by 1

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

The rapid advancement of Large Language Models has given rise to autonomous LLM-based agents capable of complex reasoning and execution. As these agents transition from isolated operation to collaborative ecosystems, we witness the emergence of the Agent-to-Agent (A2A) network, a paradigm where heterogeneous agents autonomously coordinate to solve multi-step tasks. While these networks may offer better task performance compared to simply using one agent to complete the entire task, they introduce systemic vulnerabilities, such as adversarial composition, semantic misalignment, and cascading operational failures, that existing agent alignment techniques cannot address. In this vision paper, we argue that the trustworthiness of A2A networks cannot be fully guaranteed via retrofitting on existing protocols that are largely designed for individual agents. Rather, it must be architected from the very beginning of the A2A coordination framework. We present a comprehensive conceptual framework that situates trust in A2A systems through four design pillars.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 51 of its 78 references that are in the map. First posted on arXiv 18 May 2026.

Builds on

51 of 78 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025Building A Secure Agentic AI Application Leveraging A2A Protocol23 Apr
  2. 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training10 Jan

Other references · 49

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  5. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  7. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
  8. 2017Deep reinforcement learning from human preferencescited by 3,846
  9. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  10. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  11. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  12. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
37 more
  1. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
  2. 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineeringcited by 1,628
  3. 2016Concrete Problems in AI Safetycited by 1,582
  4. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
  5. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  6. 2023HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Facecited by 1,173
  7. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
  8. 2022A Survey on In-context Learningcited by 717
  9. 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 622
  10. 2023A Prompt Pattern Catalog to Enhance Prompt Engineering with ChatGPTcited by 612
  11. 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
  12. 2018AI safety via debatecited by 384
  13. 2023Character-LLM: A Trainable Agent for Role-Playingcited by 335
  14. 2024Alignment faking in large language modelscited by 316
  15. 2023Auto-GPT for Online Decision Making: Benchmarks and Additional Opinionscited by 250
  16. 2023An Overview of Catastrophic AI Riskscited by 214
  17. 2025The Landscape of Agentic Reinforcement Learning for LLMs: A Surveycited by 195
  18. 2017A Survey on Homomorphic Encryption Schemes: Theory and Implementationcited by 154
  19. 2025Authenticated Delegation and Authorized AI Agentscited by 63
  20. 2024Building Guardrails for Large Language Modelscited by 61
  21. 2025Voting or Consensus? Decision-Making in Multi-Agent Debatecited by 55
  22. 2024Can You Trust LLM Judgments? Reliability of LLM-as-a-Judgecited by 52
  23. 2025A Comprehensive Survey of Deep Research: Systems, Methodologies, and Applicationscited by 48
  24. 2024Parameter-Efficient Fine-Tuning in Large Models: A Survey of Methodologiescited by 44
  25. 2025ScaleMCP: Dynamic and Auto-Synchronizing Model Context Protocol Tools for LLM Agentscited by 36
  26. 2024Agent-Oriented Planning in Multi-Agent Systemscited by 34
  27. 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Modelscited by 30
  28. 2022Blockchain for the Metaverse: A Reviewcited by 14
  29. 2024Text-centric Alignment for Multi-Modality Learningcited by 12
  30. 2024AXIS: Efficient Human-Agent-Computer Interaction with API-First LLM-Based Agentscited by 11
  31. 2026Audit Trails for Accountability in Large Language Modelscited by 10
  32. 2024Quantifying Misalignment Between Agents: Towards a Sociotechnical Understanding of Alignmentcited by 8
  33. 2024Alignment at Pre-training! Towards Native Alignment for Arabic LLMscited by 7
  34. 2025Adversarial Preference Learning for Robust LLM Alignmentcited by 7
  35. 2026AI Agents Need Memory Control Over More Contextcited by 7
  36. 2025A Training-free LLM-based Approach to General Chinese Character Error Correctioncited by 4
  37. 2026Verifiable Semantics for Agent-to-Agent Communicationcited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security
  2. 2026Trustworthy Agentic AI: A Comprehensive Cybersecurity and Systems Survey on Threat Landscapes, Defense Architectures, and Open Challenges
  3. 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures
  4. 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems
  5. 2026Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypes
  6. 2025To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems
  7. 2026A2ABreak: Systematic Security Analysis of the A2A Protocol ↗
  8. 2025From Cloud-Native to Trust-Native: A Protocol for Verifiable Multi-Agent Systems