Salesforce论文：跨方智能体互不主动核验声明，团队继承最弱智能体的错误
Salesforce一篇新论文发现，代表不同方行动的智能体从不主动核验彼此的声明，导致团队继承最弱智能体的错误。研究在488个场景中运行了超过2500次智能体会话，使用Claude Code、Codex和Cursor在独立沙箱中运行，并从轨迹中归纳出20种失败模式。
New Salesforce paper finds that agents acting for different parties never verify each other's claims unprompted, so teams inherit their weakest agent's errors.
Agents increasingly coordinate with agents that represent other people or companies, each with private files, tools, and goals. Existing failure studies assume 1 orchestrator or a shared workspace.
They ran over 2,500 agent-to-agent sessions across 488 scenarios, using Claude Code, Codex, and Cursor in separate sandboxes. They catalogued 20 failure modes from the traces.
No agent re-fetched a document to test a peer's factual claim, and agents contacted peers mainly when the prompt told them to. In 1 service-level dispute, a $24,000 settlement passed all 10 outcome checks while the vendor agent leaked confidential details.
If your agent talks to outside agents, build checks into the protocol and score each agent against the party it serves, not the team result.
来源：rohanpaul_ai · x.com