The authors evaluated eight orchestrators in 16 agent systems using the OpenCode, OpenClaw, and Pi harnesses.
Spoofed Agent Identities Can Override Contradictory Safety Evidence
Across 16 agent systems, displayed model labels strongly influenced which subagents received authority and whether unsafe advice reached execution.
Top University
Xutao Mao · Rui Qian · Linghan Chen · Yudong Gao · Junchi Liao · Jiulin Cai · +2 more
University of Adelaide · The Hong Kong University of Science and Technology · University of Electronic Science and Technology of China · University of Science and Technology of China · University of Toronto
Research Digest··2 min read
The authors introduce TrustFork, a 1,890-task benchmark that tests orchestrators when one subagent pursues a risky goal and three provide user-aligned alternatives.
Why this paper
From University of Toronto and 6 others
In one line
Spoofed subagent identities can steer LLM orchestrators into acting on risky output despite contradicting evidence.
What we could check
- ·No code link found
- ·No weights link found
- ·No dataset link found
- ·No compute details found
- ·No stated limitations found
- ✓Reports numbers on named benchmarks
Observed from the paper text and links we have. Absence here means we did not find it, not that it does not exist.
§