aiqbench analysis
This research identifies critical vulnerabilities in multi-agent systems where autonomous AI agents fail to coordinate effectively or succumb to malicious exploitation due to flawed communication protocols. The authors propose a layered "social harness" architecture designed to prevent inter-agent failures, detect invalid messages at runtime, and enable post-facto accountability for harmful outcomes. This work addresses essential safety and reliability challenges as the field moves toward large-scale deployments of autonomous agent societies.
Agentic Societies Need a Social Harness
arXiv:2609.17527v1 Announce Type: cross Abstract: An agentic society is a collection of AI agents that coordinate autonomously across trust boundaries, on behalf of different principals whose objectives may only partially align. We show experimentally that in agentic societies even honest, competent agents often fail to reach satisfactory outcomes with existing harnesses and messaging primitives, and that faulty or malicious agents can stall collaboration, influence outcomes, and pursue other harmful goals by exploiting vulnerabilities in communication (``speech''). We argue that agentic societies need a \emph{social harness} for inter-agent interactions, in addition to each agent's \emph{personal harness}, which manages its private context and communication with its principal. We propose a layered architecture for social harnesses which (i) prevents classes of failures outright, (ii) enables agents to detect invalid messages at runtime, and (iii) supports post-facto investigation and consequences, and highlight directions for future research to realize these capabilities.
Abstract:An agentic society is a collection of AI agents that coordinate autonomously across trust boundaries, on behalf of different principals whose objectives may only partially align. We show experimentally that in agentic societies even honest, competent agents often fail to reach satisfactory outcomes with existing harnesses and messaging primitives, and that faulty or malicious agents can stall collaboration, influence outcomes, and pursue other harmful goals by exploiting vulnerabilities in communication (``speech''). We argue that agentic societies need a \emph{social harness} for inter-agent interactions, in addition to each agent's \emph{personal harness}, which manages its private context and communication with its principal. We propose a layered architecture for social harnesses which (i) prevents classes of failures outright, (ii) enables agents to detect invalid messages at runtime, and (iii) supports post-facto investigation and consequences, and highlight directions for future research to realize these capabilities.
Multiagent Systems (cs.MA); Artificial Intelligence (cs.AI); Networking and Internet Architecture (cs.NI)
arXiv:2609.17527 [cs.MA]
(or arXiv:2609.17527v1 [cs.MA] for this version)
https://doi.org/10.48550/arXiv.2609.17527 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 243 words
Related coverage
Links #5: 2026/07
LessWrong · Jul 31, 2026

Humanity’s Last Invention — Richard Socher of Recursive
Latent Space · Sep 14, 2026

Sen. Adam Schiff on AI regulation, free speech, and impeaching Trump one more time
The Verge · Oct 5, 2026

Dr. Jill Lepore on why AI backlash is vital for the future
The Verge · Jul 20, 2026