AutoRAS: Learning Robust Agentic Systems with Primitive Representations
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
The automated design of agentic systems offers a promising pathway for scaling large language models (LLMs) beyond single-agent reasoning. While prior work has advanced task performance through handcrafted or automatically generated multi-agent workflows, robustness is often treated as an afterthought, leaving systems vulnerable to external adversaries and internal failures. We propose AutoRAS, a framework for the Automated design of Robust Agentic Systems. AutoRAS formulates system design as generating a sequence of symbolic primitives that jointly encode structural connectivity and behavioral actions, and learns to optimize this sequence using execution-derived safety signals and flow-based sequence-level objectives. Extensive experiments show that AutoRAS achieves the best performance in both vanilla and adversarial settings, with the smallest performance degradation under attacks. Further analyses demonstrate strong transferability, stable optimization behavior, stability across primitive sets, and favorable cost trade-offs. Our code is available at hrefhttps://github.com/guohezuy/AutoRASthis https URL.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 49 of its 69 references that are in the map. First posted on arXiv 19 Jun 2026.
Builds on
49 of 69 references.
Closest ancestors · 4
Same direction, newest first
- 2025OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation29 May
- 2025PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning16 May
- 2024AFlow: Automating Agentic Workflow Generation14 Oct
- 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning13 Jun
Other references · 45
- 2017Attention Is All You Needcited by 59,932
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
33 more
- 2016MS MARCO: A Human Generated MAchine Reading COmprehension Datasetcited by 1,591
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,211
- 2022Towards Reasoning in Large Language Models: A Surveycited by 593
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 559
- 2023Cognitive Architectures for Language Agentscited by 422
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 406
- 2021Flow Network based Generative Models for Non-Iterative Diverse Candidate Generationcited by 384
- 2024Automated Design of Agentic Systemscited by 360
- 2022Trajectory balance: Improved credit assignment in GFlowNetscited by 244
- 2024Data Interpreter: An LLM Agent For Data Sciencecited by 222
- 2024Magentic-One: A Generalist Multi-Agent System for Solving Complex Taskscited by 221
- 2025Large Language Model Agent: A Survey on Methodology, Applications and Challengescited by 194
- 2025Which Agent Causes Task Failures and When? On Automated Failure Attribution of LLM Multi-Agent Systemscited by 170
- 2025Multi-agent Architecture Search via Agentic Supernetcited by 164
- 2024Cut the Crap: An Economical Communication Pipeline for LLM-based Multi-Agent Systemscited by 129
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2025Red-Teaming LLM Multi-Agent Systems via Communication Attackscited by 118
- 2024Symbolic Learning Enables Self-Evolving Agentscited by 104
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 93
- 2024Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplificationcited by 80
- 2024Self-Evolving Multi-Agent Collaboration Networks for Software Developmentcited by 73
- 2025G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systemscited by 56
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
- 2023ChatLLM Network: More brains, More intelligencecited by 37
- 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Managementcited by 35
- 2025Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systemscited by 32
- 2024Defense Against Prompt Injection Attack by Leveraging Attack Techniquescited by 31
- 2025A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?cited by 23
- 2025CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Modelscited by 18
- 2025A2Flow: Automating Agentic Workflow Generation via Self-Adaptive Abstraction Operatorscited by 14
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026The Path Ahead for Agentic AI: Challenges and Opportunities
- 2026AgentFactory: Towards Automated Agentic System Design and Optimization
- 2026GuardianAgentBench: Where Agents Fail and How to Guard Them
- 2025AutoMaAS: Self-Evolving Multi-Agent Architecture Search for Large Language Models
- 2026Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward
- 2025Small Language Models for Agentic Systems: A Survey of Architectures, Capabilities, and Deployment Trade offs
- 2026Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security
- 2026SABER: A Stealthy Agentic Black-Box Attack Framework for Vision-Language-Action Models