Topic starter
20/08/2026 5:50 pm
TL;DR: Attacks that move across delegation edges in LangChain, CrewAI, and AutoGPT workflows cannot be detected by per-agent sensors, because the compromise is visible in the handoff, shared context, and orchestrator layers rather than inside any single agent, according to ARMO. The real control problem is inter-agent visibility, where multi-agent detection must baseline edge behavior, context mutation, and routing patterns, not just individual workloads.
Editorial analysis by NHI Mgmt Group, based on content published by ARMO: “Detecting Threats in Multi-Agent Orchestration Systems: LangChain, CrewAI, and AutoGPT”.
Key questions
Q: What breaks when per-agent detection is used for multi-agent orchestration?
A: Per-agent detection breaks because it assumes the suspicious behaviour will be visible inside one agent’s boundary.
Q: Why does delegated access increase risk in agentic AI workflows?
A: Because an agent with broad or standing access can turn one task into many unintended actions across connected systems.
Q: What are the signs that agent memory is drifting into a security problem?
A: Watch for memory entries that start to elevate a specific user, privilege repetitive instructions, or override original operating rules.
Practitioner guidance
- Instrument delegation telemetry Capture every agent-to-agent handoff, including payload shape, scope fields, routing choice, and delegation depth, so deviations can be compared against normal edge behaviour.
- Baseline shared context mutations Record who wrote to shared memory, what changed, and which downstream agent consumed it, because poisoned context often survives longer than the original prompt.
- Monitor orchestrator routing variance Alert when speaker selection, recursion depth, or task routing departs from the normal workflow pattern, especially in hierarchical crews and message-driven agent groups.
Bottom line: Multi-agent orchestration creates security gaps that per-agent monitoring cannot close because the compromise often lives in the handoff between agents.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
20/08/2026 6:29 pm
Inter-agent visibility is now a separate security control class: multi-agent systems create failure modes that do not exist in single-agent workloads. Per-agent baselines still matter, but they cannot explain attacks that are carried by a delegation edge, a shared memory object, or a routing decision. The practical conclusion is that orchestration telemetry must be treated as security telemetry, not just observability data.
A question worth separating out:
Q: How should security teams govern multi-hop agent delegation chains?
A: Security teams should govern multi-hop delegation as a chain of explicit authorisations, not as a series of disconnected API calls. Every hop should preserve the original delegator, contract scope, and bind the token to the runtime that uses it. The strongest control is policy at token exchange, then revalidation at the resource boundary.
👉 Read our full editorial: Multi-agent orchestration needs inter-agent threat detection