Preventing Error Propagation in Multi-Agent AI through Runtime Monitoring
Summary
This paper studies how reasoning exchange among multiple AI agents can improve accuracy but also risk error propagation, proposing a runtime monitoring framework to prevent such propagation.
View Cached Full Text
Cached at: 06/30/26, 05:32 AM
# Preventing Error Propagation in Multi-Agent AI through Runtime Monitoring
Source: [https://arxiv.org/html/2606.29026](https://arxiv.org/html/2606.29026)
###### Abstract
Multi\-agent AI systems can improve answer selection by allowing different language models to exchange reasoning traces, revise initial predictions, and support a final decision\. However, such communication may also introduce reliability risks: reasoning from one agent can correct another agent’s mistake, but it can also mislead an agent that was initially correct\. This paper studies reliable multi\-agent AI communication through reasoning exchange and runtime answer revision\. We develop a framework in which agents first answer multiple\-choice questions independently, then share reasoning traces and revise their decisions\. We conduct numerical experiments where we evaluate whether this process improves accuracy, produces more positive than negative answer transitions, and remains effective across domains such as cybersecurity, networking, and general knowledge\. The results help identify when multi\-agent reasoning improves reliability and when it may propagate errors\.
## IIntroduction
Large language model \(LLM\)\-based systems are increasingly moving beyond single\-agent question answering toward multi\-agent workflows, where multiple agents communicate, retrieve information, critique intermediate outputs, and jointly produce final responses\[[23](https://arxiv.org/html/2606.29026#bib.bib29),[19](https://arxiv.org/html/2606.29026#bib.bib25),[9](https://arxiv.org/html/2606.29026#bib.bib23)\]\. In such systems, one agent may serve as an answer generator, another may act as a verifier, while another may challenge unsupported assumptions or search for missing evidence\[[9](https://arxiv.org/html/2606.29026#bib.bib23),[22](https://arxiv.org/html/2606.29026#bib.bib22),[17](https://arxiv.org/html/2606.29026#bib.bib20)\]\. This architecture can improve task decomposition and robustness, especially for complex problems requiring evidence gathering, reasoning, or tool use\[[19](https://arxiv.org/html/2606.29026#bib.bib25),[11](https://arxiv.org/html/2606.29026#bib.bib21)\]\. However, it also introduces new reliability risks because the final answer is no longer produced by a single isolated model\. Instead, it emerges from a sequence of messages, tool calls, retrieved evidences, critiques, and revisions\.
A key challenge in multi\-agent communication is that unreliable information can propagate across agents before the final answer is produced\[[16](https://arxiv.org/html/2606.29026#bib.bib14)\]\. For example, as shown in Fig\.[1](https://arxiv.org/html/2606.29026#S1.F1), an answering agent may retrieve incomplete evidence but still generate a confident response\. A verifier agent may fail to identify the weak evidence support, or a challenger agent may focus on a secondary issue while missing the main unsupported claim\. As a result, an initially unfaithful statement can become embedded in the shared communication context and later be treated as a valid premise by other agents\[[14](https://arxiv.org/html/2606.29026#bib.bib18),[10](https://arxiv.org/html/2606.29026#bib.bib19)\]\. This is particularly concerning under distribution shift, where user questions differ from the agents’ training or evaluation settings, or when external tools fail to retrieve up\-to\-date evidence\[[8](https://arxiv.org/html/2606.29026#bib.bib24)\]\. In these cases, the system may not only make an error, but may also amplify the error through interaction\.
Figure 1:Example vulnerability in two\-agent communication\. Agent 1 generates a confident answer from incomplete evidence, and Agent 2 accepts it after a superficial verification step, allowing an unsupported claim to propagate to the final response\. The fact is that Aspirin is not generally recommended for daily use unless prescribed or advised by a healthcare professional\.Most existing reliability mechanisms focus on evaluating the final answer, applying generic self\-reflection, retrying a tool call, or using another model as a judge\[[25](https://arxiv.org/html/2606.29026#bib.bib10),[26](https://arxiv.org/html/2606.29026#bib.bib9)\]\. While these strategies are useful, they may be insufficient for multi\-agent systems because failures often emerge gradually during the communication process\. A final\-output check may detect that an answer is unsupported, but it does not necessarily reveal when the failure began, which agent contributed to it, whether tool use was unreliable, or what type of correction would be most effective\[[20](https://arxiv.org/html/2606.29026#bib.bib16)\]\. Therefore, trustworthy multi\-agent communication requires runtime indicators that monitor the interaction before finalization\. Such indicators should capture not only the final response quality, but also the reliability of intermediate communication, evidence use, disagreement, revision behavior, and confidence calibration\[[21](https://arxiv.org/html/2606.29026#bib.bib17)\]\.
This paper studies reliability in multi\-agent AI systems through the lens of reasoning exchange, runtime detection, correction, and domain variation\. We develop a multi\-agent framework where language models first answer independently, then share reasoning traces, revise their answers, and optionally pass the revised outputs to an independent judging step\. This setup allows us to examine whether reasoning from one agent can help another agent detect an unreliable initial answer and move toward a better decision\. We then study runtime correction by measuring whether reasoning exchange fixes more initially wrong answers than it disrupts initially correct ones\. Finally, we evaluate the framework across multiple domains, since reasoning quality and model reliability may vary between areas such as cybersecurity, networking, and machine learning\.
## IIBackground and Summary of Contributions
This section reviews prior work on multi\-agent LLM systems, tool\-augmented reasoning, hallucination detection, and correction mechanisms\. We first discuss how recent agent frameworks enable collaborative reasoning and tool use, then identify why existing verification methods remain insufficient for runtime reliability in multi\-agent communication\. Finally, we summarize the main contributions of this paper\.
### II\-ABackground and Motivations
In this section, we review prior work on LLM\-based agents, tool use, hallucination detection, and verification, and discuss why runtime reliability and error propagation remain underexplored in multi\-agent communication\.
#### II\-A1Multi\-agent communication and tool\-augmented reasoning
LLM agents increasingly combine language generation with actions such as search, retrieval, code execution, and tool calls\. The work in\[[23](https://arxiv.org/html/2606.29026#bib.bib29)\]\(ReAct\) introduced an interleaved reasoning\-and\-acting paradigm, where models generate reasoning traces and external actions to improve decision making\. Toolformer, proposed in\[[19](https://arxiv.org/html/2606.29026#bib.bib25)\], further showed that language models can learn to call external APIs for tasks such as calculation, retrieval, and translation\. Retrieval\-augmented generation \(RAG\) also demonstrated that explicit non\-parametric memory can improve factuality in knowledge\-intensive tasks\[[8](https://arxiv.org/html/2606.29026#bib.bib24)\]\. These works move LLMs from closed\-form text generation toward interactive systems that gather external information before answering\. However, tool use also introduces new failure modes: retrieval may be incomplete, sources may be stale, and agents may incorrectly treat weak evidence as sufficient\.
Multi\-agent frameworks extend this idea by allowing several LLM\-based agents to communicate, divide roles, and coordinate toward a final output\. CAMEL studied role\-playing communicative agents for autonomous cooperation\[[9](https://arxiv.org/html/2606.29026#bib.bib23)\], while AutoGen introduced a flexible framework for building applications through multi\-agent conversation\[[22](https://arxiv.org/html/2606.29026#bib.bib22)\]\. AgentBench provided environments for evaluating LLMs as agents across interactive tasks\[[11](https://arxiv.org/html/2606.29026#bib.bib21)\], and ChatDev demonstrated how specialized agents can collaborate through structured communication in software development\[[17](https://arxiv.org/html/2606.29026#bib.bib20)\]\. These systems show the potential of multi\-agent communication, but they also reveal a key risk: when one agent introduces an unsupported claim, later agents may accept, polish, or amplify it\. Thus, reliability is not only a property of individual agents, but also of the communication process among them\.
#### II\-A2Hallucination detection, verification, and correction
A large body of work studies hallucination, truthfulness, and answer verification in LLMs\. TruthfulQA showed that models may reproduce common falsehoods even when they appear fluent and confident\[[10](https://arxiv.org/html/2606.29026#bib.bib19)\]\. SelfCheckGPT proposed a black\-box hallucination detection method based on consistency across sampled responses\[[14](https://arxiv.org/html/2606.29026#bib.bib18)\]\. Self\-consistency improves reasoning by aggregating multiple reasoning paths\[[21](https://arxiv.org/html/2606.29026#bib.bib17)\], while Reflexion allows language agents to improve through verbal feedback stored in memory\[[20](https://arxiv.org/html/2606.29026#bib.bib16)\]\. These works motivate reliability mechanisms that go beyond a single generated response\. However, most of them still operate at the level of final answers, repeated samples, or post\-hoc reflection\. They do not fully address failures that emerge through communication, such as one agent trusting another agent’s weak evidence or repeated claims being mistaken for independent support\.
Recent correction methods also use critique, debate, retrieval, or verifier models to reduce hallucinations and improve factuality\. Constitutional AI showed how AI feedback can guide self\-critique and revision\[[2](https://arxiv.org/html/2606.29026#bib.bib15)\], while multi\-agent debate improves factuality and reasoning by allowing multiple model instances to compare and revise their responses through discussion\[[4](https://arxiv.org/html/2606.29026#bib.bib7)\]\. Retrieval\-based revision can also edit unsupported claims using external evidence\[[5](https://arxiv.org/html/2606.29026#bib.bib6)\]\. However, these methods often rely on generic retry, reflection, debate, or model\-judging strategies\. In multi\-agent communication, different failures may require different interventions, such as query rewriting for failed retrieval, cross\-agent comparison for disagreement, constrained answering for weak evidence, or clarification for ambiguous intent\. Our work shifts the focus from post\-hoc verification to runtime detection and failure\-specific correction, while studying how exchanged reasoning can both correct and propagate errors\[[13](https://arxiv.org/html/2606.29026#bib.bib8)\]\.
### II\-BSummary of Contributions
The contributions of this work are summarized below\.
- •We develop a multi\-agent communication setup in which language models first answer independently, then exchange reasoning traces and revise their decisions\. This allows us to study how reasoning from one agent influences another agent’s answer selection\.
- •We propose a runtime detection mechanism based on reasoning\-trace comparison\. By measuring how close or different the agents’ reasoning traces are, we identify cases where communication may reveal uncertainty, disagreement, or possible unreliability before final selection\.
- •We design a reasoning\-guided correction mechanism that combines support from multiple agents’ reasoning traces rather than relying only on initial answer choices\. The correction step selects the answer that is better supported by the exchanged reasoning\.
- •We conduct numerical experiments across different domains to evaluate whether reasoning exchange improves accuracy, corrects more initially wrong answers than it disrupts correct ones, and remains effective under domain\-dependent reasoning variation\.
## IIIProposed Approach
This section presents our multi\-agent framework for studying runtime reliability in language\-model communication\. We first prepare a controlled multi\-agent setting where different agents independently answer a question, exchange reasoning traces, and revise their decisions\. We then use this interaction to study runtime error detection, error correction, and the research questions \(RQ\) on whether agent communication improves accuracy, corrects more mistakes than it introduces, and remains effective across domains\.
### III\-APreparing the Multi\-Agent System
We consider a multi\-agent system composed of K collaborative, reasoning\-enabled language\-model agents,
𝒜=\{A1,A2,…,AK\}\.\\displaystyle\\mathcal\{A\}=\\\{A\_\{1\},A\_\{2\},\\ldots,A\_\{K\}\\\}\.Given a multiple\-choice questionqqwith candidate options𝒪=\{o1,o2,…,oM\}\\mathcal\{O\}=\\\{o\_\{1\},o\_\{2\},\\ldots,o\_\{M\}\\\}, each agent first produces an independent answer and a reasoning trace\. The answer represents the option selected by the agent, while the reasoning trace contains the intermediate explanation used to justify that choice\. This independent stage is important because it provides a baseline for evaluating whether communication among agents improves or harms the original predictions\. It also allows us to observe whether different agents make the same mistake, disagree with each other, or provide complementary reasoning that may help later correction\.
After the independent stage, the agents communicate by sharing their reasoning traces and revising their answers\. For an agentAiA\_\{i\}, its initial output is written as
\(yi,ri\)=Ai\(q,𝒪\),\(y\_\{i\},r\_\{i\}\)=A\_\{i\}\(q,\\mathcal\{O\}\),\(1\)whereyi∈𝒪y\_\{i\}\\in\\mathcal\{O\}is the selected answer andrir\_\{i\}is the generated reasoning trace\. During communication, another agent’s reasoning can be used as additional context for revision\. This setup allows us to study error propagation and correction at runtime: an incorrect answer may be reinforced if another agent accepts weak reasoning, or corrected if the shared reasoning reveals missing evidence or a better explanation\. Therefore, the multi\-agent system provides a controlled environment for examining when communication improves reliability and when it introduces new failures\.
### III\-BRuntime Error Detection
The runtime error detection stage examines whether the reasoning traces produced by two agents are aligned or substantially different before the final answer is selected\. The intuition is that two agents may choose different options because their reasoning focuses on different evidence, assumptions, or elimination steps\. Similarly, even when the selected answers are the same, their reasoning traces may differ in quality or support\. Therefore, instead of only comparing final options, we compare the reasoning traces to detect whether the agents are moving toward a reliable or potentially unstable decision\.
Letrir\_\{i\}andrjr\_\{j\}denote the reasoning traces generated by agentsAiA\_\{i\}andAjA\_\{j\}, respectively\. We define the reasoning distance as
dij=1−sim\(ri,rj\),d\_\{ij\}=1\-\\mathrm\{sim\}\(r\_\{i\},r\_\{j\}\),\(2\)wheresim\(ri,rj\)∈\[0,1\]\\mathrm\{sim\}\(r\_\{i\},r\_\{j\}\)\\in\[0,1\]measures semantic similarity\. A smalldijd\_\{ij\}means the agents use similar reasoning, while a largedijd\_\{ij\}suggests different or potentially conflicting rationales\. This distance helps identify when reasoning exchange may be useful: complementary traces may correct an error, whereas misleading traces may introduce one\. This detection step is directly connected to our first research question\. If reasoning traces contain useful information beyond the selected answer, then allowing one model to use another model’s reasoning should improve answer selection compared with isolated predictions\. We therefore evaluate whether reasoning combination improves performance using the same metrics used throughout the paper: accuracy, positive impact, and negative impact\.
RQ1: Does combining reasoning traces from two language models improve multiple\-choice answer accuracy compared with their original predictions?
### III\-CRuntime Error Correction
The runtime correction stage uses exchanged reasoning traces to revise unreliable answers before the final decision\. Correction should depend not only on whether two agents select the same option, but also on whether their reasoning sufficiently supports it\. If one agent selects a wrong answer but provides useful evidence, another agent may use that trace to move toward the correct option\. Conversely, weak or misleading reasoning may disturb an initially correct answer\. Thus, correction is framed as reasoning\-guided revision rather than majority voting\.
To capture this idea, we define a reasoning\-supported correction score for each candidate optiono∈𝒪o\\in\\mathcal\{O\}:
S\(o\)=λ1ϕ\(o,r1\)\+λ2ϕ\(o,r2\)−λ3δ\(r1,r2,o\),S\(o\)=\\lambda\_\{1\}\\,\\phi\(o,r\_\{1\}\)\+\\lambda\_\{2\}\\,\\phi\(o,r\_\{2\}\)\-\\lambda\_\{3\}\\,\\delta\(r\_\{1\},r\_\{2\},o\),\(3\)whereϕ\(o,ri\)\\phi\(o,r\_\{i\}\)measures how strongly reasoning tracerir\_\{i\}supports optionoo, andδ\(r1,r2,o\)\\delta\(r\_\{1\},r\_\{2\},o\)measures unresolved conflict between the two reasoning traces with respect to that option\. The weightsλ1,λ2,λ3\\lambda\_\{1\},\\lambda\_\{2\},\\lambda\_\{3\}control the influence of each reasoning trace and the penalty for contradiction\. The corrected answer is then selected as the option with the strongest combined reasoning support, rather than the option that was initially chosen most confidently\.
This formulation motivates the need to distinguish useful correction from harmful revision\. Accuracy alone does not reveal whether improvement comes from fixing wrong answers or from a mixture of corrections and newly introduced errors\. Therefore, after applying reasoning\-guided correction, we separately analyze whether the process changes initially wrong answers into correct ones more often than it changes initially correct answers into incorrect ones\.
RQ2: Does reasoning combination correct more initially wrong answers than it changes initially correct answers into incorrect ones?
### III\-DDomain\-Aware Reasoning Variation
The effectiveness of reasoning combination may vary across domains because the same correction score can behave differently depending on the type of reasoning required\. For example, cybersecurity questions may require reasoning about vulnerabilities, attack behavior, and adversarial actions, while networking questions may require protocol logic, routing behavior, and performance trade\-offs\. Therefore, even with the same correction rule in \([3](https://arxiv.org/html/2606.29026#S3.E3)\), the support termϕ\(o,ri\)\\phi\(o,r\_\{i\}\)and the conflict termδ\(r1,r2,o\)\\delta\(r\_\{1\},r\_\{2\},o\)may vary substantially across domains\. In one domain, two reasoning traces may provide complementary support for the correct option, while in another domain, one trace may introduce misleading evidence or increase unresolved conflict\.
Thus, rather than introducing a separate correction rule for each domain, we use the same reasoning\-supported scoreS\(o\)S\(o\)and analyze how its components behave across domains\. A domain where both agents provide consistent support for the correct option should lead to a stronger combined score, while a domain with misleading or contradictory reasoning may increase the conflict penalty and reduce the benefit of correction\. This allows us to study whether reasoning\-guided correction is generally reliable or whether its effectiveness depends on domain\-specific reasoning quality, such as cybersecurity versus networking or machine learning\.
This motivates our domain\-level analysis\. If the support and conflict components of reasoning traces vary across subject areas, then reasoning combination may not provide uniform gains across all domains\. Therefore, we examine whether the observed benefits are consistent across the considered domains or whether some domains are more vulnerable to misleading or conflicting reasoning\.
RQ3: To what extent does the effectiveness of reasoning combination vary across different subject domains?
## IVExperimental Results
### IV\-AExperimental Setup
We evaluate the proposed framework using three domain\-specific subsets from Open Quiz Commons: cybersecurity, machine learning, and networking\[[24](https://arxiv.org/html/2606.29026#bib.bib38)\]\. Each subset contains MCQs with four answer choices and a corresponding ground\-truth answer\. For every domain, we use outputs from two base models, Phi3\-14B\[[1](https://arxiv.org/html/2606.29026#bib.bib40)\]and Gemma2\-9B\[[6](https://arxiv.org/html/2606.29026#bib.bib39)\], where each output includes the model’s predicted reasoning for the same set of questions\. These paired outputs allow us to examine whether combining reasoning traces from different models can improve answer selection\. All answers are normalized to a common multiple\-choice label format before evaluation\.
Fig\.[2](https://arxiv.org/html/2606.29026#S4.F2)illustrates the overall experimental pipeline\. For each Open Quiz Commons domain subset, the corresponding Phi\-3 and Gemma\-2 outputs are loaded and aligned using the shared question and answer options\. After preprocessing, both reasoning traces are retained and used in three experimental stages\. First, Phi\-3 combines its own reasoning with Gemma\-2’s reasoning to produce a revised answer\. Second, Gemma\-2 performs the same reasoning\-combination process\. Finally, Llama 3\.2\[[15](https://arxiv.org/html/2606.29026#bib.bib41)\]acts as an independent judge by considering the two combined answers and the original reasoning traces to produce the final answer\. The resulting predictions are evaluated using accuracy and impact\-based metrics for each domain\.
Figure 2:Overview of the experimental pipeline\. The process begins with domain\-specific datasets, followed by preprocessing, reasoning\-combination experiments, and independent judging\.
### IV\-BEvaluation Metrics
We use three metrics to evaluate performance: accuracy, positive impact, and negative impact\. All answers are converted to the same label format,\{A,B,C,D\}\\\{A,B,C,D\\\}, before comparison with the ground truth\. We report these metrics both overall and by subject domain\.
##### Accuracy\.
Accuracy measures the proportion of examples for which the predicted answer matches the ground\-truth answer\. Given a datasetDDcontainingNNexamples, letyiy\_\{i\}denote the ground\-truth label for exampleii, and lety^i\\hat\{y\}\_\{i\}denote the predicted label\. Accuracy is defined as:
Accuracy=1N∑i=1N𝕀\(y^i=yi\),\\mathrm\{Accuracy\}=\\frac\{1\}\{N\}\\sum\_\{i=1\}^\{N\}\\mathbb\{I\}\(\\hat\{y\}\_\{i\}=y\_\{i\}\),
where𝕀\(⋅\)\\mathbb\{I\}\(\\cdot\)is an indicator function that returns 1 when the condition is true and 0 otherwise\.
##### Positive Impact\.
Positive impact captures cases where the process improves an initially incorrect prediction\. Letbib\_\{i\}denote the answer before the combination or judging step, and letaia\_\{i\}denote the answer after that step\. It is defined as:
PositiveImpact=∑i=1N𝕀\(bi≠yi∧ai=yi\)\.\\mathrm\{Positive\\ Impact\}=\\sum\_\{i=1\}^\{N\}\\mathbb\{I\}\(b\_\{i\}\\neq y\_\{i\}\\land a\_\{i\}=y\_\{i\}\)\.
This metric measures how often the method corrects an error\.
##### Negative Impact\.
Negative impact captures cases where the process changes an initially correct prediction into an incorrect one\. It is defined as:
NegativeImpact=∑i=1N𝕀\(bi=yi∧ai≠yi\)\.\\mathrm\{Negative\\ Impact\}=\\sum\_\{i=1\}^\{N\}\\mathbb\{I\}\(b\_\{i\}=y\_\{i\}\\land a\_\{i\}\\neq y\_\{i\}\)\.
This metric measures how often the method introduces a new error by disrupting an answer that was already correct before reasoning combination\.
### IV\-CFindings by Research Question
##### Does reasoning combination improve accuracy?
The results show that reasoning combination generally improves answer accuracy, although the improvement is not uniform across all model\-domain settings\. As shown in Table[I](https://arxiv.org/html/2606.29026#S4.T1)and Figure[3](https://arxiv.org/html/2606.29026#S4.F3), the largest gain occurs in the cybersecurity domain, where Phi\-3 improves from 60\.34% to 93\.10% after incorporating Gemma\-2’s reasoning\. Gemma\-2 also improves in the same domain, increasing from 87\.93% to 93\.10%\. In ML, the original accuracies are already high, so the gains are smaller but still positive for both models\. Networking shows a more mixed pattern: Phi\-3 improves from 83\.67% to 91\.84%, while Gemma\-2 slightly decreases from 90\.82% to 89\.80%\. This indicates that reasoning combination can improve answer selection when the original model has greater room for correction, but it does not guarantee improvement in every setting\.
Table I:Accuracy comparison across domains for original predictions, reasoning\-combined predictions, and final Llama 3\.2 predictions\.Figure 3:Domain\-wise accuracy comparison across original predictions, reasoning\-combined predictions, and LLaMA 3\.2 predictions\.
##### Does it correct more errors than it introduces?
The impact analysis indicates that reasoning combination usually corrects more errors than it introduces, but this behavior depends on the condition being evaluated\. Table[II](https://arxiv.org/html/2606.29026#S4.T2)and Figure[4](https://arxiv.org/html/2606.29026#S4.F4)show that the strongest positive impact appears in cybersecurity\. For example, Phi\-3 Combined corrects 20 initially wrong answers while introducing only 1 new error, producing a net gain of 19\. A similar pattern is observed for Llama 3\.2 when evaluated relative to Phi\-3\. In machine learning, the net gains are smaller because the original predictions are already strong, leaving fewer incorrect answers available to correct\. Networking is less stable: Phi\-3 Combined still produces a positive net impact, but Gemma\-2 Combined and Llama 3\.2 relative to Gemma\-2 introduce slightly more errors than corrections\. Thus, reasoning combination is often beneficial, but the impact metrics reveal cases where additional reasoning can also mislead the final decision\.
Table II:Domain\-wise impact analysis showing how often each condition corrects initially wrong answers or changes initially correct answers into incorrect ones\.\(a\) Cybersecurity
\(b\) Machine Learning
\(c\) Networking
Figure 4:Category\-wise positive and negative impact across reasoning\-combination and Llama 3\.2 judging conditions\. Positive impact indicates where an initially incorrect answer becomes correct, while negative impact indicates cases where an initially correct answer becomes incorrect\.
##### Does the effect vary by domain?
The results demonstrate clear domain\-dependent behavior\. Cybersecurity benefits the most from reasoning combination, both in terms of accuracy and positive impact\. This suggests that the additional reasoning trace provides useful complementary information in a domain where one of the original models performs substantially weaker\. Machine learning shows smaller improvements because both models begin with high baseline accuracy, making large gains less likely\. Networking exhibits the most inconsistent behavior, with improvements for Phi\-3 but weaker outcomes for Gemma\-2 and Llama 3\.2 relative to Gemma\-2\. Overall, the findings suggest that cross\-model reasoning is most effective when the second trace corrects a weaker initial prediction, but its benefit decreases when the original prediction is reliable or the additional reasoning introduces conflicting evidence\.
## VConclusion
This paper studied multi\-agent communication as a runtime reliability problem, focusing on whether reasoning traces from different language models can improve multiple\-choice answer selection\. We developed a framework where agents first answer independently, exchange reasoning traces, revise their decisions, and use a judging step for final selection\. The results show how reasoning exchange can improve accuracy, produce positive corrections, but also introduce negative changes when misleading traces are accepted\. The study further highlights that the benefit of multi\-agent reasoning varies across domains, indicating that communication quality depends on both model behavior and subject\-specific reasoning demands\. Future work will extend this framework to larger agent teams with dynamic roles, where agents can be selected or assigned responsibilities based on task difficulty and reasoning disagreement, following recent multi\-agent designs such as MetaGPT\[[7](https://arxiv.org/html/2606.29026#bib.bib5)\]and DyLAN\[[12](https://arxiv.org/html/2606.29026#bib.bib3)\]\. Another direction is to develop domain\-adaptive\[[18](https://arxiv.org/html/2606.29026#bib.bib2)\]weighting strategies that selectively combine each agent’s reasoning based on domain\-specific reliability\[[3](https://arxiv.org/html/2606.29026#bib.bib4)\]\.
## References
- \[1\]M\. Abdin, S\. A\. Jacobs, A\. A\. Awan,et al\.\(2024\)Phi\-3 technical report: a highly capable language model locally on your phone\.arXiv preprint arXiv:2404\.14219\.Cited by:[§IV\-A](https://arxiv.org/html/2606.29026#S4.SS1.p1.1)\.
- \[2\]Y\. Bai, S\. Kadavath, S\. Kundu, A\. Askell, J\. Kernion, A\. Jones, A\. Chen, A\. Goldie, A\. Mirhoseini, C\. McKinnon,et al\.\(2022\)Constitutional ai: harmlessness from ai feedback\.arXiv preprint arXiv:2212\.08073\.Cited by:[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p2.1)\.
- \[3\]W\. Chen, Y\. Su, J\. Zuo, C\. Yang, C\. Yuan, C\. Chan, H\. Yu, Y\. Lu, Y\. Hung, C\. Qian,et al\.\(2024\)Agentverse: facilitating multi\-agent collaboration and exploring emergent behaviors\.InInternational Conference on Learning Representations,Vol\.2024,pp\. 20094–20136\.Cited by:[§V](https://arxiv.org/html/2606.29026#S5.p1.1)\.
- \[4\]Y\. Du, S\. Li, A\. Torralba, J\. B\. Tenenbaum, and I\. Mordatch\(2024\)Improving factuality and reasoning in language models through multiagent debate\.InForty\-first international conference on machine learning,Cited by:[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p2.1)\.
- \[5\]L\. Gao, Z\. Dai, P\. Pasupat, A\. Chen, A\. T\. Chaganty, Y\. Fan, V\. Zhao, N\. Lao, H\. Lee, D\. Juan,et al\.\(2023\)RARR: researching and revising what language models say, using language models\.InProceedings of the 61st Annual Meeting of the Association for Computational Linguistics \(Volume 1: Long Papers\),pp\. 16477–16508\.Cited by:[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p2.1)\.
- \[6\]Gemma Team\(2024\)Gemma 2: improving open language models at a practical size\.arXiv preprint arXiv:2408\.00118\.Cited by:[§IV\-A](https://arxiv.org/html/2606.29026#S4.SS1.p1.1)\.
- \[7\]S\. Hong, M\. Zhuge, J\. Chen, X\. Zheng, Y\. Cheng, J\. Wang, C\. Zhang, S\. Yau, Z\. Lin, L\. Zhou,et al\.\(2024\)MetaGPT: meta programming for a multi\-agent collaborative framework\.InInternational Conference on Learning Representations,Vol\.2024,pp\. 23247–23275\.Cited by:[§V](https://arxiv.org/html/2606.29026#S5.p1.1)\.
- \[8\]P\. Lewis, E\. Perez, A\. Piktus, F\. Petroni, V\. Karpukhin, N\. Goyal, H\. Küttler, M\. Lewis, W\. Yih, T\. Rocktäschel,et al\.\(2020\)Retrieval\-augmented generation for knowledge\-intensive nlp tasks\.Advances in neural information processing systems33,pp\. 9459–9474\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p2.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p1.1)\.
- \[9\]G\. Li, H\. Hammoud, H\. Itani, D\. Khizbullin, and B\. Ghanem\(2023\)CAMEL: communicative agents for “mind”’ exploration of large language model society\.Advances in neural information processing systems36,pp\. 51991–52008\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p2.1)\.
- \[10\]S\. Lin, J\. Hilton, and O\. Evans\(2022\)Truthfulqa: measuring how models mimic human falsehoods\.InProceedings of the 60th annual meeting of the association for computational linguistics \(volume 1: long papers\),pp\. 3214–3252\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p2.1),[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p1.1)\.
- \[11\]X\. Liu, H\. Yu, H\. Zhang, Y\. Xu, X\. Lei, H\. Lai, Y\. Gu, H\. Ding, K\. Men, K\. Yang,et al\.\(2024\)Agentbench: evaluating llms as agents\.InInternational Conference on Learning Representations,Vol\.2024,pp\. 52989–53046\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p2.1)\.
- \[12\]Z\. Liu, Y\. Zhang, P\. Li, Y\. Liu, and D\. Yang\(2023\)Dynamic LLM\-agent network: an llm\-agent collaboration framework with agent team optimization\.arXiv preprint arXiv:2310\.02170\.Cited by:[§V](https://arxiv.org/html/2606.29026#S5.p1.1)\.
- \[13\]A\. Madaan, N\. Tandon, P\. Gupta, S\. Hallinan, L\. Gao, S\. Wiegreffe, U\. Alon, N\. Dziri, S\. Prabhumoye, Y\. Yang,et al\.\(2023\)Self\-refine: iterative refinement with self\-feedback\.Advances in neural information processing systems36,pp\. 46534–46594\.Cited by:[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p2.1)\.
- \[14\]P\. Manakul, A\. Liusie, and M\. Gales\(2023\)Selfcheckgpt: zero\-resource black\-box hallucination detection for generative large language models\.InProceedings of the 2023 conference on empirical methods in natural language processing,pp\. 9004–9017\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p2.1),[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p1.1)\.
- \[15\]Meta AI\(2024\)Llama 3\.2 model card\.Note:https://github\.com/meta\-llama/llama\-models/blob/main/models/llama3\_2/MODEL\_CARD\.mdAccessed: 2026\-05\-29Cited by:[§IV\-A](https://arxiv.org/html/2606.29026#S4.SS1.p2.1)\.
- \[16\]J\. S\. Park, J\. O’Brien, C\. J\. Cai, M\. R\. Morris, P\. Liang, and M\. S\. Bernstein\(2023\)Generative agents: interactive simulacra of human behavior\.InProceedings of the 36th annual acm symposium on user interface software and technology,pp\. 1–22\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p2.1)\.
- \[17\]C\. Qian, W\. Liu, H\. Liu, N\. Chen, Y\. Dang, J\. Li, C\. Yang, W\. Chen, Y\. Su, X\. Cong,et al\.\(2024\)Chatdev: communicative agents for software development\.InProceedings of the 62nd annual meeting of the association for computational linguistics \(volume 1: Long papers\),pp\. 15174–15186\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p2.1)\.
- \[18\]D\. Saunders, F\. Stahlberg, A\. de Gispert, and B\. Byrne\(2019\)Domain adaptive inference for neural machine translation\.InProceedings of the 57th Annual Meeting of the Association for Computational Linguistics,pp\. 222–228\.Cited by:[§V](https://arxiv.org/html/2606.29026#S5.p1.1)\.
- \[19\]T\. Schick, J\. Dwivedi\-Yu, R\. Dessì, R\. Raileanu, M\. Lomeli, E\. Hambro, L\. Zettlemoyer, N\. Cancedda, and T\. Scialom\(2023\)Toolformer: language models can teach themselves to use tools\.Advances in neural information processing systems36,pp\. 68539–68551\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p1.1)\.
- \[20\]N\. Shinn, F\. Cassano, A\. Gopinath, K\. Narasimhan, and S\. Yao\(2023\)Reflexion: language agents with verbal reinforcement learning\.Advances in neural information processing systems36,pp\. 8634–8652\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p3.1),[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p1.1)\.
- \[21\]X\. Wang, J\. Wei, D\. Schuurmans, Q\. Le, E\. Chi, S\. Narang, A\. Chowdhery, and D\. Zhou\(2022\)Self\-consistency improves chain of thought reasoning in language models\.arXiv preprint arXiv:2203\.11171\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p3.1),[§II\-A2](https://arxiv.org/html/2606.29026#S2.SS1.SSS2.p1.1)\.
- \[22\]Q\. Wu, G\. Bansal, J\. Zhang, Y\. Wu, B\. Li, E\. Zhu, L\. Jiang, X\. Zhang, S\. Zhang, J\. Liu,et al\.\(2024\)AutoGen: enabling next\-gen LLM applications via multi\-agent conversations\.InFirst conference on language modeling,Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p2.1)\.
- \[23\]S\. Yao, J\. Zhao, D\. Yu, N\. Du, I\. Shafran, K\. Narasimhan, and Y\. Cao\(2022\)ReAct: synergizing reasoning and acting in language models\.arXiv preprint arXiv:2210\.03629\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p1.1),[§II\-A1](https://arxiv.org/html/2606.29026#S2.SS1.SSS1.p1.1)\.
- \[24\]P\. Yeri\(2024\)Open quiz commons: open quiz data bank\.Note:https://github\.com/prahladyeri/open\-quiz\-commonsAccessed: 2026\-05\-28Cited by:[§IV\-A](https://arxiv.org/html/2606.29026#S4.SS1.p1.1)\.
- \[25\]T\. Yuan, Z\. He, L\. Dong, Y\. Wang, R\. Zhao, T\. Xia, L\. Xu, B\. Zhou, F\. Li, Z\. Zhang,et al\.\(2024\)R\-judge: benchmarking safety risk awareness for llm agents\.InFindings of the Association for Computational Linguistics: EMNLP 2024,pp\. 1467–1490\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p3.1)\.
- \[26\]M\. Zhuge, C\. Zhao, D\. R\. Ashley, W\. Wang, D\. Khizbullin, Y\. Xiong, Z\. Liu, E\. Chang, R\. Krishnamoorthi, Y\. Tian,et al\.\(2025\)Agent\-as\-a\-judge: evaluate agents with agents\.InInternational Conference on Machine Learning,pp\. 80569–80611\.Cited by:[§I](https://arxiv.org/html/2606.29026#S1.p3.1)\.Similar Articles
Best tools for monitoring and auditing autonomous AI agent behavior at runtime, what's actually working in prod?
A practitioner shares challenges and tools for monitoring autonomous AI agents in production, covering runtime prompt injection detection, tool-call auditing with reasoning traces, behavioral drift detection, and multi-agent authorization, while testing tools like Arize Phoenix, Protect AI Guardian, Metoro, Alice, Asqav, and Microsoft Agent Governance Toolkit.
@shi_weiyan: Ever watch an agent solve a problem with 100% confidence and get it completely wrong? You can fix it… if you catch it. …
New paper proposes a meta-agent that monitors AI agents and corrects their mistakes, achieving ~2x more task completion autonomously.
3 AM Thought: The real problem with AI agents isn’t runtime enforcement. It’s governance maintenance.
The article argues that the primary challenge for AI agents in production is not runtime enforcement but the ongoing maintenance of governance policies as agents dynamically gain new capabilities and tools, and suggests using intelligent observation to keep policies aligned.
AI agents feel much more reliable once multiple models are involved
An exploration of how using multiple AI models for agent workflows reveals hidden uncertainties and reasoning gaps, suggesting that future systems may rely on cross-model consensus rather than single-model chains.
AgentForesight: Online Auditing for Early Failure Prediction in Multi-Agent Systems
This paper introduces AgentForesight, a framework for online auditing and early failure prediction in LLM-based multi-agent systems. It presents a new dataset, AFTraj-22K, and a specialized model, AgentForesight-7B, which outperforms leading proprietary models in detecting decisive errors during trajectory execution.