Beyond Single-Agent Safety: A Taxonomy of Risks in LLM-to-LLM Interactions

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Bisconti, Piercosma, Galisai, Marcello, Pierucci, Federico, Bracale, Marcantonio, Prandi, Matteo
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866917119002673152
author Bisconti, Piercosma
Galisai, Marcello
Pierucci, Federico
Bracale, Marcantonio
Prandi, Matteo
author_facet Bisconti, Piercosma
Galisai, Marcello
Pierucci, Federico
Bracale, Marcantonio
Prandi, Matteo
contents This paper examines why safety mechanisms designed for human-model interaction do not scale to environments where large language models (LLMs) interact with each other. Most current governance practices still rely on single-agent safety containment, prompts, fine-tuning, and moderation layers that constrain individual model behavior but leave the dynamics of multi-model interaction ungoverned. These mechanisms assume a dyadic setting: one model responding to one user under stable oversight. Yet research and industrial development are rapidly shifting toward LLM-to-LLM ecosystems, where outputs are recursively reused as inputs across chains of agents. In such systems, local compliance can aggregate into collective failure even when every model is individually aligned. We propose a conceptual transition from model-level safety to system-level safety, introducing the framework of the Emergent Systemic Risk Horizon (ESRH) to formalize how instability arises from interaction structure rather than from isolated misbehavior. The paper contributes (i) a theoretical account of collective risk in interacting LLMs, (ii) a taxonomy connecting micro, meso, and macro-level failure modes, and (iii) a design proposal for InstitutionalAI, an architecture for embedding adaptive oversight within multi-agent systems.
format Preprint
id arxiv_https___arxiv_org_abs_2512_02682
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Beyond Single-Agent Safety: A Taxonomy of Risks in LLM-to-LLM Interactions
Bisconti, Piercosma
Galisai, Marcello
Pierucci, Federico
Bracale, Marcantonio
Prandi, Matteo
Multiagent Systems
Artificial Intelligence
This paper examines why safety mechanisms designed for human-model interaction do not scale to environments where large language models (LLMs) interact with each other. Most current governance practices still rely on single-agent safety containment, prompts, fine-tuning, and moderation layers that constrain individual model behavior but leave the dynamics of multi-model interaction ungoverned. These mechanisms assume a dyadic setting: one model responding to one user under stable oversight. Yet research and industrial development are rapidly shifting toward LLM-to-LLM ecosystems, where outputs are recursively reused as inputs across chains of agents. In such systems, local compliance can aggregate into collective failure even when every model is individually aligned. We propose a conceptual transition from model-level safety to system-level safety, introducing the framework of the Emergent Systemic Risk Horizon (ESRH) to formalize how instability arises from interaction structure rather than from isolated misbehavior. The paper contributes (i) a theoretical account of collective risk in interacting LLMs, (ii) a taxonomy connecting micro, meso, and macro-level failure modes, and (iii) a design proposal for InstitutionalAI, an architecture for embedding adaptive oversight within multi-agent systems.
title Beyond Single-Agent Safety: A Taxonomy of Risks in LLM-to-LLM Interactions
topic Multiagent Systems
Artificial Intelligence
url https://arxiv.org/abs/2512.02682