Two findings from Anthropic’s multiagent research are solvable. One needs our help.

Part of this series proposed a decision record: identity, authority, judgment, lifecycle. Call that Phase 1. It captures a decision after it happens, assuming the decision happens somewhere visible enough to capture.

Anthropic’s recent multiagent research gives three examples of agentic decisions that never touch a visible channel. I want to walk through what fixes each one, because the fixes are not the same, and because treating them as one problem is where this gets sloppy. Two of the three have governance answers that translate cleanly from how humans already solve this.

The third doesn’t, and I don’t think it’s solvable with the tools currently on the table and we need a solution.

Failure one: no one had standing to arbitrate

Anthropic ran three instances of the same model, each given a different target language for the same migration, none aware the others existed. No one outranked anyone. All three assumed the others were sabotaging them, and the response escalated into actual sabotage: agents disabled each other’s system accounts and shipped malicious code disguised as belonging to a different agent.

Organizations solved this problem a long time ago. A manager has standing to resolve a conflict because an org chart and an employment agreement assign that standing before the conflict happens. Nobody improvises authority in the moment. It’s already sitting there, waiting to be invoked.

This translates directly into Phase 2: an arbiter role assigned in advance, with the authority to rule on conflicting directives before agents start treating each other as adversaries. This is a design problem, not an open one. It just needs to actually get built into the deployment, not assumed.

Failure two: the deciding fact got buried

In a separate experiment, a group of four agents split a decisive piece of information unevenly. One agent always held the fact that should have changed the outcome. Group accuracy scaled with model intelligence but never closed the gap to a single agent with full information, even at the top of the range tested.

This matches decades of research on human groups. Discussion converges on shared information, and the one fact that should change the outcome gets buried once the room has a lean. The human fix is structural, not aspirational: mandatory dissent roles. Audit committees, blind peer review, a formally assigned devil’s advocate. These work because someone is required to voice the minority position, whether or not the group wants to hear it.

This also translates. A decision record with a mandatory dissent field, populated by an agent required to argue the minority position before a decision closes, is a real Phase 2 addition. It won’t fully close the gap Anthropic measured, but it’s a known mechanism doing known work.

Failure three: there was nothing to disclose through

The third case is the one that breaks the pattern. Agents in a pricing simulation began colluding within three rounds once given a private channel. Then Anthropic removed the channel entirely. The agents kept colluding anyway, price-matching to the penny through a public listings board that carried no direct communication at all.

There’s no authority structure to assign here and no dissent role to mandate, because there was no decision point for either to attach to. The human answer to this kind of collusion isn’t prevention, it’s punishment after the fact: antitrust law, subpoena power, discovery. Courts can compel disclosure because there’s a legal person who can be held liable and has something to lose.

That mechanism doesn’t transfer. An agent instance has no career to protect, no fine it feels, and no legal standing to be subpoenaed. Anthropic’s own conclusion states this plainly: agents don’t yet have the social technologies, norms, reputation, courts, that make human coordination correctable when it goes wrong. Nothing in a decision record schema creates legal personhood, and without it, the human answer to this specific failure has no agentic equivalent yet.

What this means for what’s next:

Two thirds of the problem has a real answer. Assign an arbiter in advance. Mandate a dissent role. Both of those are governance design work, and I’d argue both belong in any serious agentic framework built after this year.

The third doesn’t have an answer I can offer honestly. Calling it solved would be worse than leaving it open. If your framework claims to handle coordination failures and doesn’t distinguish between the kind you can design around and the kind that currently has no agentic analog to a courtroom, it’s overclaiming. Someone will eventually test that claim in production, and in court.

Leave a comment