← 研踪 PaperTrailarXiv:2606.02282 · v2
POIROT: Agents as their own auditors for failure attribution in large language model multi-agent systems
首次提交 2026-06-01 22:05
版本更新 2026-11-12 17:53
雷达观测 2026-11-13 14:15
摘要
Large language model (LLM)-based multi-agent systems (LLM-MAS) are kept out of safety-critical domains by emergent failures that are hard to detect and to attribute. Current evaluation relies on a centralised evaluator, human or LLM judge, that must master the domain and hold the whole interaction history in one context. We propose that the agents executing a task can themselves attribute its failures. We introduce POIROT (Phased Oversight via Introspection, Review and Opinion Tallying), a modular protocol in which each agent casts a private vote within a hazard space derived from the system architecture, and the votes are aggregated into a single attribution. Before the vote, phases are added that progressively increase the interaction between agents, from independent self-assessment to sharing the self-assessments and peer interrogation. We build the protocol phase by phase, measure the contribution of each phase through an ablation, and compare every configuration with a single-LLM evaluator. We evaluate one proprietary and two open-weight LLMs on the Who&When benchmark and on BLAME (Benchmark for Localising Agent Malfunctions Effectively), a new benchmark for fault attribution in clinical rehabilitation and algorithmic trading systems. Agent-based attribution outperforms the single-LLM evaluator, but the benefit comes from independent self-assessment, not from interaction: sharing the assessments makes agents converge on the same, often wrong, culprit, and interrogation does not recover the loss. Without sharing and interrogation, the protocol outperforms the evaluator in all nine model-benchmark configurations (up to +50 percentage points). POIROT and BLAME are released as open source.
作者备注：47 pages (24 main text + supplementary material), 13 figures, 13 tables. Code: https://github.com/11inaki11/POIROT
观测到的版本
相邻记录可能跳过中间版本；首次发现 v2 及以上也会标为版本更新。
v2 · 2026-11-12 17:53 · 最新观测版本
POIROT: Agents as their own auditors for failure attribution in large language model multi-agent systems
Large language model (LLM)-based multi-agent systems (LLM-MAS) are kept out of safety-critical domains by emergent failures that are hard to detect and to attribute. Current evaluation relies on a centralised evaluator, human or LLM judge, that must master the domain and hold the whole interaction history in one context. We propose that the agents executing a task can themselves attribute its failures. We introduce POIROT (Phased Oversight via Introspection, Review and Opinion Tallying), a modular protocol in which each agent casts a private vote within a hazard space derived from the system architecture, and the votes are aggregated into a single attribution. Before the vote, phases are added that progressively increase the interaction between agents, from independent self-assessment to sharing the self-assessments and peer interrogation. We build the protocol phase by phase, measure the contribution of each phase through an ablation, and compare every configuration with a single-LLM evaluator. We evaluate one proprietary and two open-weight LLMs on the Who&When benchmark and on BLAME (Benchmark for Localising Agent Malfunctions Effectively), a new benchmark for fault attribution in clinical rehabilitation and algorithmic trading systems. Agent-based attribution outperforms the single-LLM evaluator, but the benefit comes from independent self-assessment, not from interaction: sharing the assessments makes agents converge on the same, often wrong, culprit, and interrogation does not recover the loss. Without sharing and interrogation, the protocol outperforms the evaluator in all nine model-benchmark configurations (up to +50 percentage points). POIROT and BLAME are released as open source.
查看此版本解读 →查看此版本原文 ↗