mlsanityData to 7 Oct 2026

AutoRAS: Learning Robust Agentic Systems with Primitive Representations

arXiv 2606.21445 ↗First posted 19 Jun 2026cs.AIcited by 1

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

The automated design of agentic systems offers a promising pathway for scaling large language models (LLMs) beyond single-agent reasoning. While prior work has advanced task performance through handcrafted or automatically generated multi-agent workflows, robustness is often treated as an afterthought, leaving systems vulnerable to external adversaries and internal failures. We propose AutoRAS, a framework for the Automated design of Robust Agentic Systems. AutoRAS formulates system design as generating a sequence of symbolic primitives that jointly encode structural connectivity and behavioral actions, and learns to optimize this sequence using execution-derived safety signals and flow-based sequence-level objectives. Extensive experiments show that AutoRAS achieves the best performance in both vanilla and adversarial settings, with the smallest performance degradation under attacks. Further analyses demonstrate strong transferability, stable optimization behavior, stability across primitive sets, and favorable cost trade-offs. Our code is available at hrefhttps://github.com/guohezuy/AutoRASthis https URL.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 49 of its 69 references that are in the map. First posted on arXiv 19 Jun 2026.

Builds on

49 of 69 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation29 May
  2. 2025PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning16 May
  3. 2024AFlow: Automating Agentic Workflow Generation14 Oct
  4. 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning13 Jun

Other references · 45

  1. 2017Attention Is All You Needcited by 59,932
  2. 2017Proximal Policy Optimization Algorithmscited by 14,441
  3. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  4. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  6. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
  7. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
  8. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  9. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
  10. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
  11. 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
  12. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
33 more
  1. 2016MS MARCO: A Human Generated MAchine Reading COmprehension Datasetcited by 1,591
  2. 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
  3. 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
  4. 2023AgentBench: Evaluating LLMs as Agentscited by 1,211
  5. 2022Towards Reasoning in Large Language Models: A Surveycited by 593
  6. 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
  7. 2023Cognitive Architectures for Language Agentscited by 422
  8. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 406
  9. 2021Flow Network based Generative Models for Non-Iterative Diverse Candidate Generationcited by 384
  10. 2024Automated Design of Agentic Systemscited by 360
  11. 2022Trajectory balance: Improved credit assignment in GFlowNetscited by 244
  12. 2024Data Interpreter: An LLM Agent For Data Sciencecited by 222
  13. 2024Magentic-One: A Generalist Multi-Agent System for Solving Complex Taskscited by 221
  14. 2025Large Language Model Agent: A Survey on Methodology, Applications and Challengescited by 194
  15. 2025Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systemscited by 170
  16. 2025Multi-agent Architecture Search via Agentic Supernetcited by 164
  17. 2024Cut the Crap: An Economical Communication Pipeline for LLM-based Multi-Agent Systemscited by 129
  18. 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
  19. 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
  20. 2025Red-Teaming LLM Multi-Agent Systems via Communication Attackscited by 118
  21. 2024Symbolic Learning Enables Self-Evolving Agentscited by 104
  22. 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 93
  23. 2024Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplificationcited by 80
  24. 2024Self-Evolving Multi-Agent Collaboration Networks for Software Developmentcited by 73
  25. 2025G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systemscited by 56
  26. 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
  27. 2023ChatLLM Network: More brains, More intelligencecited by 37
  28. 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Managementcited by 35
  29. 2025Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systemscited by 32
  30. 2024Defense Against Prompt Injection Attack by Leveraging Attack Techniquescited by 31
  31. 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?cited by 23
  32. 2025CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Modelscited by 18
  33. 2025A2Flow: Automating Agentic Workflow Generation via Self-Adaptive Abstraction Operatorscited by 14

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026The Path Ahead for Agentic AI: Challenges and Opportunities
  2. 2026AgentFactory: Towards Automated Agentic System Design and Optimization
  3. 2026GuardianAgentBench: Where Agents Fail and How to Guard Them
  4. 2025AutoMaAS: Self-Evolving Multi-Agent Architecture Search for Large Language Models
  5. 2026Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward
  6. 2025Small Language Models for Agentic Systems: A Survey of Architectures, Capabilities, and Deployment Trade offs
  7. 2026Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security
  8. 2026SABER: A Stealthy Agentic Black-Box Attack Framework for Vision-Language-Action Models