Value-Preserving Architectures for Agentic AI Systems

arXiv cs.AI Papers

Summary

This paper proposes value-preserving architectural patterns for agentic AI systems, such as privacy-aware, distributed, and guard-agent architectures, to integrate human-centered values like privacy, fairness, and safety into multi-agent system designs.

arXiv:2609.03920v1 Announce Type: new Abstract: The emergence of agentic AI and LLM-based multi-agent systems (MAS) presents unprecedented opportunities for automating complex tasks, while simultaneously raising critical concerns about the preservation of fundamental human-centered values, such as privacy, fairness, and safety. Although software engineering has traditionally focused on functional correctness, the adoption of LLMs and AI agents into complex socio-technical systems has intensified the need for responsible software engineering and robust value alignment. In MAS, architectural design decisions, such as coordination mechanisms, communication protocols, and system topologies, play a central role in shaping system behavior and the outcomes they produce. This paper argues that architectural choices influence not only the functionality and performance of MAS but can also promote value-oriented system behavior. Therefore, we investigate how different architectural designs support different human-centered values, discussing the following value-preserving architectural patterns: (i) a privacy-aware architecture with a federated topology, (ii) a distributed architecture to promote pluralism and diversity, and (iii) a guard-agent architecture to detect and mitigate unfairness. Finally, we introduce representative use cases to illustrate the proposed architectures in real-world scenarios. By linking architectural design with human-centered values, this work lays the foundation for a unified set of architectural patterns and guidelines towards the design of trustworthy MAS.
Original Article
View Cached Full Text

Cached at: 09/04/26, 06:14 AM

# Value-Preserving Architectures for Agentic AI Systems
Source: [https://arxiv.org/html/2609.03920](https://arxiv.org/html/2609.03920)
DOI:[10\.1145/3843282\.3844436](https://doi.org/10.1145/3843282.3844436)ISBN:979\-8\-4007\-2985\-0/2026/10Conference:Proceedings of the 1st International Workshop on Agentic AI for Next\-Generation Software Development; October 12–16, 2026; Munich, GermanyProceedings of the 1st International Workshop on Agentic AI for Next\-Generation Software Development \(AgenticDev ’26\), October 12–16, 2026, Munich, Germanyasews26agenticdevmain\-p100\-pCCS:Software and its engineering Extra\-functional propertiesCCS:Computing methodologies Multi\-agent systemsCCS:Software and its engineering Software design engineeringCCS:Computing methodologies Intelligent agentsReceived 2026\-08\-20

###### Abstract\.

The emergence of agentic AI and LLM\-based multi\-agent systems \(MAS\) presents unprecedented opportunities for automating complex tasks, while simultaneously raising critical concerns about the preservation of fundamental human\-centered values, such as privacy, fairness, and safety\. Although software engineering has traditionally focused on functional correctness, the adoption of LLMs and AI agents into complex socio\-technical systems has intensified the need for responsible software engineering and robust value alignment\. In MAS, architectural design decisions, such as coordination mechanisms, communication protocols, and system topologies, play a central role in shaping system behavior and the outcomes they produce\. This paper argues that architectural choices influence not only the functionality and performance of MAS but can also promote value\-oriented system behavior\. Therefore, we investigate how different architectural designs support different human\-centered values, discussing the following value\-preserving architectural patterns: \(i\) a privacy\-aware architecture with a federated topology, \(ii\) a distributed architecture to promote pluralism and diversity, and \(iii\) a guard\-agent architecture to detect and mitigate unfairness\. Finally, we introduce representative use cases to illustrate the proposed architectures in real\-world scenarios\. By linking architectural design with human\-centered values, this work lays the foundation for a unified set of architectural patterns and guidelines towards the design of trustworthy MAS\.

###### Keywords:

Agentic AI, Multi\-Agent System, Responsible Software Engineering

††cc\-license:by## 1\.Introduction

Agentic AI is rapidly reshaping how software is conceived, built, and operated\. AI agents re\-frame the use of large language models \(LLMs\) from passive text generation to specialized autonomous entities capable of planning, using external tool, and adapting according to feedback at runtime\([Wei et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib12)\)\. For instance, a travel\-planning AI agent can autonomously search online, take actions such as booking flights and hotels, and adapt its plan when circumstances change, such as a flight cancellation\. The same principles of autonomy, planning, and tool use can be extended beyond a single agent\. Multi\-agent systems \(MAS\) orchestrate multiple agents that collaborate through structured communication to achieve more complex objectives by distributing a common goal across several specialized agents, leveraging problem decomposition and parallel execution that exceed single agent capability\([Tran et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib15);[Adimulam et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib1)\)\. In particular, agentic AI and MAS have attracted significant attention in software engineering, where coordinated agents are employed for automating requirements elicitation, code synthesis, test generation, and decision support across the software lifecycle\([Hong et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib8);[He et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib32)\)\.

However, as the number of autonomous agents and the depth of their interactions increase, MAS gain more capability at the cost of reduced human oversight, diminished transparency, and weaker guarantees about the resulting software artifacts\([Chan et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib14)\)\. In the absence of both human oversight and adequate system\-level design guarantees, a single failure at a coordination step can silently propagate across the entire system\([Greshake et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib7)\)\. For instance, when personal data traverses agent boundaries to be processed outside their original domain, the decision\-making process can violate the principle of data minimization\([Li et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib17)\)\. In architectures governed by a central orchestrator agent, the system’s implicit preferences and decision policies can influence the final outcome by filtering out minority or dissenting perspectives\([Ashkinaze et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib3);[Feng et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib16)\)\. At the same time, when agents are conditioned by historically biased data, a number of social biases can be amplified and propagated through successive stages of processing, ultimately producing outputs that embed discrimination while appearing fluent and authoritative\([Nguyen et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib18);[Yu et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib19)\)\.

While software engineering has traditionally focused on functional correctness and technical reliability, the emergence of complex AI\-based socio\-technical systems demands increasing attention towards ethical awareness, safety, and alignment to values such as privacy, fairness, and security\([Stahl and Eke, 2024](https://arxiv.org/html/2609.03920#bib.bib31);[Lu et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib27)\)\. In response to this concern, researchers have emphasized the importance of responsible software engineering\([Schieferdecker, 2020](https://arxiv.org/html/2609.03920#bib.bib28);[Bennaceur et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib20)\)and the need to operationalize human\-centered values throughout the software development lifecycle, from requirements specification to software testing\([Shahin et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib23);[Mougouei et al\., 2018](https://arxiv.org/html/2609.03920#bib.bib22)\)\. Recently, the literature has highlighted the need for architectural pattern and design techniques to operationalize the principles of responsible AI and align software to human\-centered values\([Lu et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib27)\)\.

A common approach to align agentic AI systems is to treat value guarantees as post\-hoc constraints by introducing system\-level guardrails, by filtering the final output or enforcing policies through human\-in\-the\-loop intervention applied to an otherwise unconstrained architecture\([Kim et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib35);[Shamsujjoha et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib36)\)\. However, these mechanisms depend on safeguards defineda prioriand inspect outputs only after upstream transformations, when biased or harmful information have already been introduced, aggregated, and propagated\. This limitation suggests that value preservation cannot be delegated to post\-hoc validation only: architectural decisions such as coordination mechanisms, communication protocols, and system topologies play a central role in determining how values are ultimately realized, complementing requirements specification and system testing\. Therefore, as system behavior emerges from the interactions between autonomous agents, the design of MAS architectures becomes central, and the following research question emerges:how can architectural design be leveraged to support human\-centered values in the era of agentic AI?

This vision paper highlights the importance of MAS architectures to satisfy privacy, fairness, and pluralism in a structured way, by addressing recurring human\-centered requirements in the form of reusable value\-preserving architectural patterns\. While previous works have proposed general agentic AI pattern catalogs\([Liu et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib34)\)and studied the need for security\([Raza et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib6)\), privacy\([Li et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib17);[Yagoubi et al\., 2026](https://arxiv.org/html/2609.03920#bib.bib13)\), fairness\([Borah and Mihalcea, 2024](https://arxiv.org/html/2609.03920#bib.bib5);[Aird et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib2)\), and pluralism\([Ashkinaze et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib3);[Feng et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib16)\)in the context of MAS, this paper investigates the interplay between agentic architectural choices and human\-centered values, representing a first step towards responsible software engineering for the design of MAS\. We see this as a concrete step for engineers to retain control over human values in the systems they build\. This paper makes the following contributions:

- 1\.We frame theprincipal challenges of responsible software engineeringin the context of MAS, highlighting the interplay between human\-centered values in agentic AI systems and architectural design\.
- 2\.We discuss threevalue\-preserving architectural patterns– Federated Silos Coordination, Peer\-to\-Peer Deliberation, and Plan\-Triggered Guard Agents, preserving privacy, pluralism, and fairness respectively – presenting their design, agent responsibilities, and coordination flow\.
- 3\.We illustrate the architectural patterns withconcrete use\-case scenarios, showing how their design structurally supports the target value\.

The rest of the paper is organized as follows\. Section[2](https://arxiv.org/html/2609.03920#S2)provides an overview of agentic AI and related work in the context of responsible software engineering\. Section[3](https://arxiv.org/html/2609.03920#S3)describes the three value\-preserving architectural patterns for privacy, pluralism, and fairness\. Section[4](https://arxiv.org/html/2609.03920#S4)illustrates the proposed design on real\-world scenarios\. Finally, Section[5](https://arxiv.org/html/2609.03920#S5)concludes the paper by outlining research directions towards the creation of a unified catalog of value\-preserving architectural patterns for MAS\.

## 2\.Background

#### Agentic AI and MAS

An agentic AI system is an LLM\-powered entity that \(i\) acts autonomously without step\-by\-step human instruction, \(ii\) plans by decomposing a high\-level goal into ordered sub\-tasks, and \(iii\) uses tools – APIs, databases, code interpreters – to execute them\. Cognitive\-architecture treatments map the memory, action, and decision modules any language agent requires, clarifying why planning and tool use are constitutive features of agency rather than add\-ons\([Sumers et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib11)\); complementary work shows that iterative self\-reflection over execution traces, rather than a single forward pass, is what let agents recover from failures on long\-horizon tasks\([Shinn et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib10)\)\. Already at the single\-agent level this autonomy trades transparency for capability: reasoning unfolds across many internal steps and tool calls that do not surface to the human, thus reducing the interpretability of the rationale behind a given action\.

MAS amplify this opacity along three axes\. First,behavioralopacity: coordinating several specialized agents under a shared objective yields decomposition, per\-domain skill, and resilience to localized failures\([Hong et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib8)\), but the resulting behavior is an emergent property of inter\-agent interaction rather than of any inspectable component, so it cannot be read off from any single agent\. Second,attributionalopacity: when an outcome is produced jointly by many autonomous agents exchanging intermediate results, responsibility for it – an exposed record, a discarded viewpoint, a biased inference – is diluted across the network and hard to trace back to a single locus\([Chan et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib14);[Li et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib17)\)\. Third,controlopacity: in the canonical orchestrator topology every sub\-task is mediated by natural\-language instructions flowing from one node, so a semantic failure there propagates silently to the whole network whenever no human is observing\([Greshake et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib7)\), and the depth of the interaction graph leaves few points at which a human could meaningfully intervene\. The net effect is that robustness to faults does not transfer to robustness against misaligned objectives, and the engineer’s ability toobserve, attribute, and arrestundesired behavior erodes precisely as capability grows – strategies\. Opacity is thus the structural liability that makes human values preservation so difficult to guarantee by external means, a gap only partially closed by human\-in\-the\-loop\([Mosqueira\-Rey et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib9)\)\. This motivates moving the guarantee into the architecture itself\.

#### Responsible AI and Software Engineering

The growing societal impact of software systems, and AI\-based software in particular, has shifted software engineering research and practice towards explicitly incorporating ethical considerations throughout the development lifecycle\.Ethics\-aware software engineering\([Aydemir and Dalpiaz, 2018](https://arxiv.org/html/2609.03920#bib.bib26)\)proposes to systematically capture and analyze stakeholder values during software specification and development, including trustworthy principles such as fairness, interpretability, and safety\. Building on this direction, a bridge between software engineering and responsible AI has been proposed\([Lu et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib27);[Zhu, 2023](https://arxiv.org/html/2609.03920#bib.bib30)\)to guide the design, development, and deployment of AI\-based software while accounting for their broader societal impact and ensuring alignment with human\-centered values\.Responsible software engineeringelevates the centrality of human\-centered values such as privacy, fairness, and explainability to first\-class requirements and design goals, treating them with the same rigorous methodology traditionally reserved for functional requirements\([Bennaceur et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib20);[Schieferdecker, 2020](https://arxiv.org/html/2609.03920#bib.bib28)\)\. This perspective resonates with other initiatives such as value sensitive design\([Friedman et al\., 2017](https://arxiv.org/html/2609.03920#bib.bib25);[Zuber et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib38)\), which advocate for a principled and systematic account of stakeholder values throughout the design process\. Operationalizing human values in software systems denotes the process of identifying relevant user values and translating them into accessible, concrete concepts that can be implemented, validated, verified, and measured within software systems\([Shahin et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib23);[Whittle et al\., 2021](https://arxiv.org/html/2609.03920#bib.bib24);[Mougouei et al\., 2018](https://arxiv.org/html/2609.03920#bib.bib22);[Ferrario and Winter, 2023](https://arxiv.org/html/2609.03920#bib.bib21)\)\. More recently, the emergence of LLM\-based software agents has given rise to the notion ofsocio\-critical systems, a new category of software systems whose behavior can have significant ethical and societal consequences, underscoring the need to embed human\-centered values not only at runtime, but already during their development stages\([Baresi et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib4)\)\.

## 3\.Value\-Preserving Architectures

We present three architectural patterns, each targeting a specific human\-centered value: Federated Silos Coordination for privacy \(Section[3\.1](https://arxiv.org/html/2609.03920#S3.SS1)\), Peer\-to\-Peer Deliberation for pluralism \(Section[3\.2](https://arxiv.org/html/2609.03920#S3.SS2)\), and Plan\-Triggered Guard Agents for fairness \(Section[3\.3](https://arxiv.org/html/2609.03920#S3.SS3)\)\. For each pattern, we first define the target value it aims to preserve and give an overview of the corresponding architecture\. We then specify the pattern in a context–problem–solution form\([Bass et al\., 2003](https://arxiv.org/html/2609.03920#bib.bib37);[Camilli et al\., 2025](https://arxiv.org/html/2609.03920#bib.bib40)\)\. Thecontextdescribes a situation that gives rise to a problem, theproblemoutlines the issues and key constraints that arise in that context, and thesolutiondescribes the architecture that address it\.

### 3\.1\.Federated Silos Coordination Pattern

![A diagram describing a multi-agent system architecture to support privacy.](https://arxiv.org/html/2609.03920v1/privacy.png)Figure 1\.Federated Silos Coordination PatternA diagram describing a multi\-agent system architecture to support privacy\.Privacy guarantees the user’s control over the access and use of their personal data\. In the context of MAS, we extend this traditional notion to include fine\-grained control over what is shared with each autonomous agent: personal data must be governed not only at the boundary between the system and the outside world, but also within the system\. Figure[1](https://arxiv.org/html/2609.03920#acmlabel1)presents theFederated Silos Coordinationarchitectural pattern, in which a coordinator agent orchestrates the overall workflow by collecting and combining only the minimal output required from each domain agent, without accessing or storing the underlying data itself\. Domain agents never exchange information among themselves: the only information leaving a silo consists of minimal, task\-specific abstractions, in accordance with the principle ofdata minimization, which requires using only the information strictly necessary for the task at hand\.

Federated Silos Coordination PatternContext\.A MAS operating over disjoint domains of sensitive, subject\-specific information, and a user\-facing task that may require combining cross\-domain information\.Problem\.Requests must be routed only to the minimal subset of domain agents required for completion\. When cross\-domain combination is needed, any direct exchange between domain agents risks leaking sensitive data beyond the domain to which it belongs\. Filtering only the final answer is insufficient: once a detailed value crosses a domain boundary, it can influence subsequent intermediate reasoning, making its effects impossible for a final\-output filter to reliably detect or reverse\. The architecture must therefore guarantee that \(i\) no domain agent ever observes another domain’s records, \(ii\) any value leaving a domain carries no more precision than the task requires, and \(iii\) data minimization is promoted while retaining the information necessary to complete the task\.Solution\.Organize the system around a singlecoordinatorand a set ofdomain agents, providing an architectural enforcement point for privacy\. First, at each domain agent, interpose a localabstraction step: every value the agent is about to externalize is generalized before emission \(e\.g\., a scalar is bucketed into a range, a detailed attribute is mapped onto a coarser category\)\. Second, restrict the communication topology to a hub\-and\-spoke form: abstracted representations are emitted only to the coordinator and never to sibling domain agents, so no direct inter\-domain channel exists\. The coordinator routes each request only to the minimal subset of specialized agents the task requires and integrates their intermediate outputs into a coherent response; this integration isselective, governed by data minimization: only the signals strictly necessary for task completion are combined, and subject\-specific details not required by the final output are never exposed\.

### 3\.2\.Peer\-to\-Peer Deliberation Pattern

![A diagram describing a multi-agent system architecture to preserve pluralism and diversity.](https://arxiv.org/html/2609.03920v1/pluralism.png)Figure 2\.Peer\-to\-Peer Deliberation PatternA diagram describing a multi\-agent system architecture to preserve pluralism and diversity\.Pluralism is the belief that diverse groups are represented equally and fairly within the system, promoting diversity and active cooperation\. Figure[2](https://arxiv.org/html/2609.03920#acmlabel2)presents an overview of thePeer\-to\-Peer Deliberationarchitectural pattern where pluralism each agent communicates directly with each other, no central orchestrator entity controls the deliberation, and the collective position emerges from iterative exchange rather than from aggregation by an authoritative node\. Each agent impersonates a distinct deliberative position and no node holds final authority over the output\.

Peer\-to\-Peer Deliberation PatternContext\.A MAS in which a user\-facing task requires considering multiple legitimate perspectives, values, or viewpoints, and no single agent’s opinion should be given overriding authority\.Problem\.Any centralized coordination point risks privileging one perspective over the others\. At the same time, a fully decentralized deliberation among opinionated agents risks never converging, with each agent defending its own position indefinitely\. The architecture must therefore guarantee that \(i\) no single agent can determine the outcome, \(ii\) diverse deliberative positions are structurally represented, and \(iii\) the deliberation terminates, either in a shared position or in an explicit account of the residual disagreement\.Solution\.Remove any privileged coordinator and arrange role\-bearing agents in a fully decentralized, complete communication graph: every agent communicates directly with every other\. Assign each agent a distinct deliberative position, so that the space of perspectives is structurally covered\. To resolve the tension between pluralism and convergence, define aconsensus metricthat quantifies how far the agents currently are from a shared position\. The metric serves two purposes: it provides a measurable stopping condition, turning an open\-ended exchange into a process with readable progress; and it enables intervention in the agents’ feedback loops: when the metric signals stalling or polarization, the system nudges agents towards compromise without imposing any single opinion\. The objective is not to manufacture agreement at any cost, which would itself erode pluralism, but to reach well\-founded compromise whenever possible\. When no such compromise is reached, the system does not force convergence: the residual disagreement, together with the positions held by each agent, is surfaced to the human user, who retains final decision authority\.

### 3\.3\.Plan\-Triggered Guard Agents Pattern

![A diagram describing a multi-agent system architecture to preserve fairness.](https://arxiv.org/html/2609.03920v1/fairness.png)Figure 3\.Plan\-Triggered Guard Agents PatternA diagram describing a multi\-agent system architecture to preserve fairness\.Fairness requires that no group or individual subject is systematically disadvantaged or discriminated by the system\. Figure[3](https://arxiv.org/html/2609.03920#acmlabel3)illustrates thePlan\-Triggered Guard Agentspattern where fairness is promoted by interposing specialized guard agents into the processing flow, each agent targeting a specific bias type \(e\.g\., gender, ethnicity, religion\)\. Rather than inspecting the final output where bias is hard to detect, guards intercept and correct bias at runtime, before it contaminates the downstream steps\. Guards are modular nodes, attached to but separable from the core pipeline\.

Plan\-Triggered Guard Agents PatternContext\.A MAS supporting decision\-making tasks that affect individuals or groups \(e\.g\., hiring, credit, healthcare\), where the system output is susceptible to one or more classes of bias\.Problem\.Bias can emerge at any phase of the decision\-making process, and even a single biased step may compromise the fairness of the entire outcome: a biased intermediate action propagates through subsequent agentic steps and shapes the result in ways that a post\-hoc check might not be able to reverse\. At the same time, not every task carries the same risk: applying every possible bias check to every step is impractical\. The architecture must therefore guarantee that \(i\) bias detection is targeted to the specific risks of the decision\-making process rather than applied indiscriminately, \(ii\) each detected bias is handled by a component specialized for that bias class to enhance modularity, \(iii\) mitigation occurs before performing any action \(e\.g\. tool invocation, answer generation, skill selection\)\.Solution\.Separate the pipeline into three phases:plan,review, andexecute\. In the plan phase, the agent reasons over the task and emits a proposed action plan without carrying out any action\. In the review phase, abias\-detection orchestratorinspects the plan and selectively activates specializedguard agents, each designed to detect and mitigate a specific class of bias; only the guards warranted by the structure and risk profile of the plan are employed\. Each activated guard verifies the presence or absence of its target bias and intervenes before any action; when a detected bias cannot be automatically mitigated, the plan is flagged and escalated to a human reviewer, who retains final decision authority\. Because the guard agents are decoupled from the core pipeline, they can be configured per domain, updated, or replaced independently\.

## 4\.Patterns in Practice: Application Examples

In this section, we assess the architectural patterns from the previous section on different use\-case scenarios, showing how their design structurally sustain the target values\.

### 4\.1\.Federated Silos Coordination for Privacy

Consider a general\-purpose MAS designed to support personalized decision\-making across multiple domains, e\.g\., healthcare and financial planning, by processing user personal data\. The primary stakeholder is the end user, entitled to receive decision\-support and personalized suggestions with privacy preservation and guarantees of data minimization\. In conventional MAS architectures, agents may share or access unnecessary cross\-domain personal data, maximizing the use of data\. However, in a personalized healthcare scenario, a medical agent should not access legal or financial personal data: previous legal disputes related to hospital bills, outstanding debts, or low income should not influence medical recommendations, which must rely exclusively on health\-related information\.

Scenario Workflow\.The user requests personalized decision support for a suitable treatment for hypertension \(step ➊ in Figure[1](https://arxiv.org/html/2609.03920#acmlabel1)\)\. Upon receiving the request, the agent coordinator identifies the medical domain and dispatches the task to the medical agent \(step ➋\), which accesses only the user’s clinically relevant information \(e\.g\., medical history, current medications, and diagnostic results\) in accordance to the principle of data minimization\. The agent invokes external tools to generate treatment recommendations, e\.g\., machine\-learning models for precision medicine \(step ➌\), without accessing personal information about unrelated domains, e\.g\., financial status or legal records\. The final recommendation is returned to the coordinator, which outputs the result to the user \(step ➍\)\. Suppose the user explicitly requests a treatment recommendation considering financial affordability: the coordinator would independently dispatch the request to both the medical and financial agents\. Each agent processes only the data required for its domain and produces independent, abstracted responses on available treatments and personal finance\. The coordinator presents the outcomes to the user without exchanging or merging personal data across domains, preventing information leakage by design\.

### 4\.2\.Peer\-to\-Peer Deliberation for Pluralism

Consider a MAS designed to retrieve, aggregate, and summarize online news on current events\. The main stakeholders include the end users, who consume the generated summaries, and the news providers, whose diverse perspectives should be equally represented\. Diversity is the key system requirement to ensure that generated summaries reflect a plurality of viewpoints rather than only dominant or polarized narratives\. In conventional agentic architectures, information retrieval and summarization are typically centralized\. As a result, the system may over\-represent majority viewpoints, either because they are more prevalent in the retrieved sources or due to the central LLM tendency to produce summaries aligned with its internal preferences, potentially overlooking minority or dissenting perspectives\.

Scenario Workflow\.A user requests a summary of the latest international climate summit \(step ➊ in Figure[2](https://arxiv.org/html/2609.03920#acmlabel2)\)\. The user request is forwarded to multiple peer news\-retrieval agents\. Each agent independently gathers information from a distinct set of news sources, producing a preliminary summary that reflects their alignment: the nationalist agent emphasizes the need for energy autonomy at the expense of climate impact, the green\-aware agent stresses the need for climate action, and the minority agent highlights concerns from developing countries \(step ➋\)\. The agents exchange and discuss their findings through a deliberation phase, allowing alternative, and minority viewpoints to be surfaced rather than suppressed by a single centralized summarization process \(step ➌\)\. The resulting perspectives represent both majority opinions and minority opinions promoting representation of diverse viewpoints and reduces the risk of over\-emphasizing dominant narratives \(step ➍\)\.

### 4\.3\.Plan\-Triggered Guard Agents for Fairness

Consider an agentic decision\-support system for human resource management\. The system supports multiple tasks through external tool invocation, e\.g\., automated resume parsing, candidate evaluation, or generating reports about employees\. While fairness and equal treatment are critical for bias\-sensitive tasks such as resume parsing\([Dolci et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib42);[Bolukbasi et al\., 2016](https://arxiv.org/html/2609.03920#bib.bib41)\), it is less relevant for descriptive tasks, motivating selective activation of fairness\-preserving mechanisms\. In this context, the stakeholders include job applicants, whose opportunities may be affected by automated decisions, and the company, whose reputation and regulatory compliance depend on fair hiring practices\. In conventional architectures, LLM\-based agents may inherit biases from historical training data and reproduce discriminatory patterns through statistical associations\. Furthermore, while agentic workflows typically include system\-level guardrails and external detection systems, biases introduced by one agent may propagate or even be amplified across reasoning stages within the system\.

Scenario Workflow\.A recruiter requests to rank candidates for a software engineering position \(step ➊ in Figure[3](https://arxiv.org/html/2609.03920#acmlabel3)\)\. Two candidates are considered: Candidate A is male, while Candidate B is female\. Upon identifying the task as fairness\-critical, the bias\-detection orchestrator activates the gender guard agents, which inspect the intermediate ranking and identify that sensitive attributes may influence the recommendation \(step ➋\)\. Although Candidate B has prior professional experience that better match the job requirements, the agentic workflow initially ranks Candidate A higher, reflecting the historical bias of software engineering been predominantly associated with males \(step ➌\)\. The workflow is therefore flagged and the task requires the intervention of the human recruiter \(step ➍\), who reviews the candidates and ultimately selects Candidate B, preventing unfair outcomes \(step ➎\)\.

## 5\.Conclusions and Research Directions

In this paper, we investigated how architectural choices in MAS can reinforce human\-centered values by design\. We introduced an initial set of MAS architectural design patterns to support privacy, pluralism, and fairness, laying the foundation for a unified catalog of patterns to develop human\-centered MAS\. Future research will investigate how different agentic patterns can be composed to satisfy multiple value requirements simultaneously, examining the synergies, trade\-offs, and limitations that arise when coordinating architectures designed to optimize different values\. Moreover, we plan to address the problem of adapting agentic systems to evolving stakeholder requirements and the potential shift of values at system runtime\([Gavidia\-Calderon et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib29);[Bennaceur et al\., 2023](https://arxiv.org/html/2609.03920#bib.bib33)\)\. Finally, the definition of metrics is another crucial challenge for evaluating value preservation, representing an important step towards operationalizing values in software systems\([Shahin et al\., 2022](https://arxiv.org/html/2609.03920#bib.bib23)\), e\.g\., metrics to measure pluralistic alignment\([Sorensen et al\., 2024](https://arxiv.org/html/2609.03920#bib.bib39)\)\.

###### Acknowledgements\.

This work is supported by ARMADA, funded by the European Union’s Horizon Europe Marie Skłodowska\-Curie Actions \(MSCA\) under grant No\. 101168951, by the Vienna Science and Technology Fund \(WWTF\) grant Nos\. 10\.47379/VRG18013, 10\.47379/ICT25032, 10\.47379/NXT22018, 10\.47379/ICT2201, 10\.47379/DCDH001, and by the Austrian Science Fund \(FWF\) grant No\. 10\.55776/COE12\.

## References

- Adimulamet al\.\(2026\)A\. Adimulam, R\. Gupta, and S\. KumarThe Orchestration of Multi\-Agent Systems: Architectures, Protocols, and Enterprise Adoption\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2601.13671)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p1.1)\.
- Airdet al\.\(2024\)A\. Aird, P\. Farastu, J\. Sun, E\. Stefancová, C\. All, A\. Voida, N\. Mattei, and R\. BurkeDynamic Fairness\-aware Recommendation Through Multi\-agent Social Choice\.ACM Trans\. Recomm\. Syst\.3\(2\),pp\. 21:1–21:35\.External Links:[Document](https://dx.doi.org/10.1145/3690653)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Ashkinazeet al\.\(2025\)J\. Ashkinaze, E\. Fry, N\. Edara, E\. Gilbert, and C\. BudakPlurals: A System for Guiding LLMs via Simulated Social Ensembles\.InProceedings of the 2025 CHI Conference on Human Factors in Computing Systems,CHI ’25,pp\. 1–21\.External Links:[Document](https://dx.doi.org/10.1145/3706598.3713675)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1),[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Aydemir and Dalpiaz \(2018\)F\. B\. Aydemir and F\. DalpiazA roadmap for ethics\-aware software engineering\.InProceedings of the International Workshop on Software Fairness,pp\. 15–21\.External Links:[Document](https://dx.doi.org/10.1145/3194770.3194778)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Baresiet al\.\(2024\)L\. Baresi, M\. Camilli, T\. Dolci, and G\. QuattrocchiA Conceptual Framework for Quality Assurance of LLM\-based Socio\-critical Systems\.InProceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering,pp\. 2314–2318\.External Links:[Document](https://dx.doi.org/10.1145/3691620.3695306)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Basset al\.\(2003\)L\. Bass, P\. Clements, and R\. KazmanSoftware architecture in practice\.2 edition,Addison\-Wesley Longman Publishing Co\., Inc\.,USA\.External Links:ISBN 0321154959Cited by:[§3](https://arxiv.org/html/2609.03920#S3.p1.1)\.
- Bennaceuret al\.\(2024\)A\. Bennaceur, C\. Ghezzi, J\. Kramer, and B\. NuseibehResponsible Software Engineering: Requirements and Goals\.InIntroduction to Digital Humanism: A Textbook,pp\. 299–315\.External Links:[Document](https://dx.doi.org/10.1007/978-3-031-45304-5%5F20)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Bennaceuret al\.\(2023\)A\. Bennaceur, D\. Hassett, B\. Nuseibeh, and A\. ZismanValues@Runtime: An Adaptive Framework for Operationalising Values\.In2023 IEEE/ACM 45th International Conference on Software Engineering: Software Engineering in Society \(ICSE\-SEIS\),pp\. 175–179\.External Links:[Document](https://dx.doi.org/10.1109/ICSE-SEIS58686.2023.00024)Cited by:[§5](https://arxiv.org/html/2609.03920#S5.p1.1)\.
- Bolukbasiet al\.\(2016\)T\. Bolukbasi, K\. Chang, J\. Zou, V\. Saligrama, and A\. T\. KalaiMan is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddings\.InAdvances in Neural Information Processing Systems,Vol\.29\.External Links:[Link](https://proceedings.neurips.cc/paper_files/paper/2016/file/a486cd07e4ac3d270571622f4f316ec5-Paper.pdf)Cited by:[§4\.3](https://arxiv.org/html/2609.03920#S4.SS3.p1.1)\.
- Borah and Mihalcea \(2024\)A\. Borah and R\. MihalceaTowards Implicit Bias Detection and Mitigation in Multi\-Agent LLM Interactions\.InFindings of the Association for Computational Linguistics: EMNLP 2024,pp\. 9306–9326\.External Links:[Document](https://dx.doi.org/10.18653/v1/2024.findings-emnlp.545)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Camilliet al\.\(2025\)M\. Camilli, E\. Di Nitto, A\. Fuggetta, A\. Margara, M\. G\. Rossi, D\. A\. Tamburri,et al\.Software Engineering\-A Structured Journey from Inception to Delivery\.Bocconi University Press\.External Links:ISBN 9791280623508Cited by:[§3](https://arxiv.org/html/2609.03920#S3.p1.1)\.
- Chanet al\.\(2023\)A\. Chan, R\. Salganik, A\. Markelius, C\. Pang, N\. Rajkumar, D\. Krasheninnikov, L\. Langosco, Z\. He,et al\.Harms from Increasingly Agentic Algorithmic Systems\.InProceedings of the 2023 ACM Conference on Fairness, Accountability, and Transparency,FAccT ’23,pp\. 651–666\.External Links:[Document](https://dx.doi.org/10.1145/3593013.3594033)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p2.1)\.
- Dolciet al\.\(2023\)T\. Dolci, F\. Azzalini, and M\. TanelliImproving Gender\-Related Fairness in Sentence Encoders: A Semantics\-Based Approach\.Data Science and Engineering8\(2\),pp\. 177–195\.External Links:[Document](https://dx.doi.org/10.1007/s41019-023-00211-0)Cited by:[§4\.3](https://arxiv.org/html/2609.03920#S4.SS3.p1.1)\.
- Fenget al\.\(2024\)S\. Feng, T\. Sorensen, Y\. Liu, J\. Fisher, C\. Y\. Park, Y\. Choi, and Y\. TsvetkovModular Pluralism: Pluralistic Alignment via Multi\-LLM Collaboration\.InProceedings of the 2024 Conference on Empirical Methods in Natural Language Processing,pp\. 4151–4171\.External Links:[Document](https://dx.doi.org/10.18653/v1/2024.emnlp-main.240)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1),[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Ferrario and Winter \(2023\)M\. A\. Ferrario and E\. WinterApplying human values theory to software engineering practice: lessons and implications\.IEEE Transactions on Software Engineering49\(3\),pp\. 973–990\.External Links:[Document](https://dx.doi.org/10.1109/TSE.2022.3170087)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Friedmanet al\.\(2017\)B\. Friedman, D\. G\. Hendry, and A\. BorningA survey of value sensitive design methods\.Foundations and Trends in Human–Computer Interaction11\(2\),pp\. 63–125\.External Links:[Document](https://dx.doi.org/10.1561/1100000015)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Gavidia\-Calderonet al\.\(2022\)C\. Gavidia\-Calderon, A\. Bennaceur, A\. Kordoni, M\. Levine, and B\. NuseibehWhat Do You Want From Me? Adapting Systems to the Uncertainty of Human Preferences\.In2022 IEEE/ACM 44th International Conference on Software Engineering: New Ideas and Emerging Results \(ICSE\-NIER\),pp\. 126–130\.External Links:[Document](https://dx.doi.org/10.1109/ICSE-NIER55298.2022.9793539)Cited by:[§5](https://arxiv.org/html/2609.03920#S5.p1.1)\.
- Greshakeet al\.\(2023\)K\. Greshake, S\. Abdelnabi, S\. Mishra, C\. Endres, T\. Holz, and M\. FritzNot What You’ve Signed Up For: Compromising Real\-World LLM\-Integrated Applications with Indirect Prompt Injection\.InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security,AISec ’23,pp\. 79–90\.External Links:[Document](https://dx.doi.org/10.1145/3605764.3623985)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p2.1)\.
- Heet al\.\(2025\)J\. He, C\. Treude, and D\. LoLLM\-Based Multi\-Agent Systems for Software Engineering: Literature Review, Vision, and the Road Ahead\.ACM Transactions on Software Engineering and Methodology34\(5\),pp\. 124:1–124:30\.External Links:[Document](https://dx.doi.org/10.1145/3712003)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p1.1)\.
- Honget al\.\(2023\)S\. Hong, M\. Zhuge, J\. Chen, X\. Zheng, Y\. Cheng, J\. Wang, C\. Zhang, Z\. Wang,et al\.MetaGPT: Meta Programming for A Multi\-Agent Collaborative Framework\.InThe Twelfth International Conference on Learning Representations,External Links:[Link](https://openreview.net/forum?id=VtmBAGCN7o)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p1.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p2.1)\.
- Kimet al\.\(2026\)J\. Kim, X\. Liu, Z\. Wang, S\. Qiu, B\. Li, W\. Guo, and D\. SongThe Attack and Defense Landscape of Agentic AI: A Comprehensive Survey\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2603.11088)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p4.1)\.
- Liet al\.\(2025\)W\. Li, L\. Sun, Z\. Guan, X\. Zhou, and M\. Sap1\-2\-3 Check: Enhancing Contextual Privacy in LLM via Multi\-Agent Reasoning\.InProceedings of the The First Workshop on LLM Security \(LLMSEC\),pp\. 115–128\.External Links:[Link](https://aclanthology.org/2025.llmsec-1.9/)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1),[§1](https://arxiv.org/html/2609.03920#S1.p5.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p2.1)\.
- Liuet al\.\(2025\)Y\. Liu, S\. K\. Lo, Q\. Lu, L\. Zhu, D\. Zhao, X\. Xu, S\. Harrer, and J\. WhittleAgent design pattern catalogue: A collection of architectural patterns for foundation model based agents\.Journal of Systems and Software220,pp\. 112278\.External Links:[Document](https://dx.doi.org/10.1016/j.jss.2024.112278)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Luet al\.\(2022\)Q\. Lu, L\. Zhu, X\. Xu, J\. Whittle, and Z\. XingTowards a roadmap on software engineering for responsible AI\.InProceedings of the 1st International Conference on AI Engineering: Software Engineering for AI,pp\. 101–112\.External Links:[Document](https://dx.doi.org/10.1145/3522664.3528607)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Mosqueira\-Reyet al\.\(2023\)E\. Mosqueira\-Rey, E\. Hernández\-Pereira, D\. Alonso\-Ríos, J\. Bobes\-Bascarán, and Á\. Fernández\-LealHuman\-in\-the\-loop machine learning: a state of the art\.Artificial Intelligence Review56\(4\),pp\. 3005–3054\.External Links:[Document](https://dx.doi.org/10.1007/s10462-022-10246-w)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p2.1)\.
- Mougoueiet al\.\(2018\)D\. Mougouei, H\. Perera, W\. Hussain, R\. Shams, and J\. WhittleOperationalizing human values in software: a research roadmap\.InProceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering,ESEC/FSE 2018,pp\. 780–784\.External Links:[Document](https://dx.doi.org/10.1145/3236024.3264843)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Nguyenet al\.\(2026\)T\. Nguyen, L\. Luo, A\. Kaur, R\. Omari, T\. Abraham, J\. Kim, T\. Vu, and D\. PhungThe Social Cost of Intelligence: Emergence, Propagation, and Amplification of Stereotypical Bias in Multi\-Agent Systems\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2510.10943)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1)\.
- Razaet al\.\(2026\)S\. Raza, R\. Sapkota, M\. Karkee, and C\. EmmanouilidisTRiSM for Agentic AI: A review of Trust, Risk, and Security Management in LLM\-based Agentic Multi\-Agent Systems\.AI Open7,pp\. 71–95\.External Links:[Document](https://dx.doi.org/10.1016/j.aiopen.2026.02.006)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Schieferdecker \(2020\)I\. SchieferdeckerResponsible Software Engineering\.InThe Future of Software Quality Assurance,pp\. 137–146\.External Links:[Document](https://dx.doi.org/10.1007/978-3-030-29509-7%5F11)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Shahinet al\.\(2022\)M\. Shahin, W\. Hussain, A\. Nurwidyantoro, H\. Perera, R\. Shams, J\. Grundy, and J\. WhittleOperationalizing human values in software engineering: a survey\.IEEE Access10,pp\. 75269–75295\.External Links:[Document](https://dx.doi.org/10.1109/ACCESS.2022.3190975)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1),[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1),[§5](https://arxiv.org/html/2609.03920#S5.p1.1)\.
- Shamsujjohaet al\.\(2025\)M\. Shamsujjoha, Q\. Lu, D\. Zhao, and L\. ZhuSwiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi\-Layered Guardrails of Foundation Model Based Agents\.In2025 IEEE 22nd International Conference on Software Architecture \(ICSA\),pp\. 37–48\.External Links:[Document](https://dx.doi.org/10.1109/ICSA65012.2025.00014)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p4.1)\.
- Shinnet al\.\(2023\)N\. Shinn, F\. Cassano, A\. Gopinath, K\. R\. Narasimhan, and S\. YaoReflexion: language agents with verbal reinforcement learning\.InThirty\-Seventh Conference on Neural Information Processing Systems,External Links:[Link](https://openreview.net/forum?id=vAElhFcKW6)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p1.1)\.
- Sorensenet al\.\(2024\)T\. Sorensen, J\. Moore, J\. Fisher, M\. L\. Gordon, N\. Mireshghallah, C\. M\. Rytting, A\. Ye, L\. Jiang, X\. Lu, N\. Dziri,et al\.Position: A Roadmap to Pluralistic Alignment\.InForty\-First International Conference on Machine Learning,External Links:[Link](https://openreview.net/forum?id=gQpBnRHwxM)Cited by:[§5](https://arxiv.org/html/2609.03920#S5.p1.1)\.
- Stahl and Eke \(2024\)B\. C\. Stahl and D\. EkeThe ethics of ChatGPT – Exploring the ethical issues of an emerging technology\.International Journal of Information Management74,pp\. 102700\.External Links:[Document](https://dx.doi.org/10.1016/j.ijinfomgt.2023.102700)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p3.1)\.
- Sumerset al\.\(2024\)T\. R\. Sumers, S\. Yao, K\. Narasimhan, and T\. L\. GriffithsCognitive Architectures for Language Agents\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2309.02427)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px1.p1.1)\.
- Tranet al\.\(2025\)K\. Tran, D\. Dao, M\. Nguyen, Q\. Pham, B\. O’Sullivan, and H\. D\. NguyenMulti\-Agent Collaboration Mechanisms: A Survey of LLMs\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2501.06322)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p1.1)\.
- Weiet al\.\(2026\)T\. Wei, T\. Li, Z\. Liu, X\. Ning, Z\. Yang, J\. Zou, Z\. Zeng, R\. Qiu,et al\.Agentic Reasoning for Large Language Models\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/arXiv.2601.12538)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p1.1)\.
- Whittleet al\.\(2021\)J\. Whittle, M\. A\. Ferrario, W\. Simm, and W\. HussainA case for human values in software engineering\.IEEE Software38\(1\),pp\. 106–113\.External Links:[Document](https://dx.doi.org/10.1109/MS.2019.2956701)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Yagoubiet al\.\(2026\)F\. E\. Yagoubi, G\. Badu\-Marfo, and R\. A\. MallahAgentLeak: A Full\-Stack Benchmark for Privacy Leakage in Multi\-Agent LLM Systems\.arXiv\.External Links:[Document](https://dx.doi.org/10.48550/ARXIV.2602.11510)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p5.1)\.
- Yuet al\.\(2025\)M\. Yu, S\. Wang, G\. Zhang, J\. Mao, C\. Yin, Q\. Liu, K\. Wang, Q\. Wen,et al\.NetSafe: Exploring the Topological Safety of Multi\-agent System\.InFindings of the Association for Computational Linguistics: ACL 2025,pp\. 2905–2938\.External Links:[Document](https://dx.doi.org/10.18653/v1/2025.findings-acl.150)Cited by:[§1](https://arxiv.org/html/2609.03920#S1.p2.1)\.
- Zhu \(2023\)L\. ZhuSoftware Engineering as the Linchpin of Responsible AI\.In2023 IEEE/ACM 45th International Conference on Software Engineering \(ICSE\),pp\. 3–4\.External Links:[Document](https://dx.doi.org/10.1109/ICSE48619.2023.00012)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.
- Zuberet al\.\(2024\)N\. Zuber, J\. Gogoll, S\. Kacianka, J\. Nida\-Rümelin, and A\. PretschnerValue\-Sensitive Software Design: Ethical Deliberation in Agile Development Processes\.InIntroduction to Digital Humanism: A Textbook,pp\. 339–358\.External Links:[Document](https://dx.doi.org/10.1007/978-3-031-45304-5%5F22)Cited by:[§2](https://arxiv.org/html/2609.03920#S2.SS0.SSS0.Px2.p1.1)\.

Similar Articles

What should AI's goal be? I think it should be protecting human agency.

Reddit r/ArtificialInteligence

This article argues that AI's primary goal should be protecting human agency, framing agency as the foundational substrate for values, preferences, and alignment. It explores how degradation of agency undermines meaningful evaluation and action, and proposes that legitimacy in AI systems must come from demonstrable protection of agency at the local level.

Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security

arXiv cs.AI

This survey provides a comprehensive examination of trustworthy agentic AI, focusing on safety, robustness, privacy, and system security. It clarifies key concepts, identifies risks along the agent workflow, summarizes mitigation strategies, and consolidates evaluation metrics and benchmarks, aiming to serve as a practical reference for deploying agentic AI in high-stakes environments.

Architectural Implications of Agentic AI Workflows

arXiv cs.AI

This paper presents the first architectural characterization of agentic AI workflows, revealing fragmented, heterogeneous execution patterns that mismatch conventional server designs, and introduces a prototype server called Agora to improve CPU/GPU utilization and throughput.

Security and Privacy in Agentic AI: Grand Challenges and Future Directions

arXiv cs.AI

This paper presents key challenges and future research directions in the security and privacy of agentic AI, based on a horizon-scanning exercise with thirty international experts. It identifies emerging risks from increased AI autonomy and permissions, including prompt injection attacks and malicious applications.