Multi-Agentic AI systems, powered by large language models (LLMs), are inherently non-deterministic and prone to silent failures such as drift, cycles, and missing details in outputs, which are difficult to detect. We introduce the task of anomaly detection in agentic trajectories to identify these failures and present a dataset curation pipeline that captures user behavior, agent non-determinism, and LLM variation. Using this pipeline, we curate and label two benchmark datasets comprising \textbf{4,275 and 894} trajectories from Multi-Agentic AI systems. Benchmarking anomaly detection methods on these datasets, we show that supervised (XGBoost) and semi-supervised (SVDD) approaches perform comparably, achieving accuracies up to 98% and 96%, respectively. This work provides the first systematic study of anomaly detection in Multi-Agentic AI systems, offering datasets, benchmarks, and insights to guide future research.
Agentic AI-based Framework for Mitigating Premature Diagnostic Handoff and Silent Hallucination in Healthcare Applications
Distributed Systems (qCLOUDS) Lab, School of Computing;Information Systems, The University of Melbourne, Australia;2Department of Computer Science;Engineering, School of Electrical;Computer Sciences (SECS), Indian Institute of Technology Bhubaneswar, India;3Department of Computer Science Banaras Hindu University, Varanasi, India
Plausible but Wrong: A case study on Agentic Failures in Astrophysical Workflows
Bonn-Aachen International Center for Information Technology, University of Bonn, Germany(波恩-阿森国际信息科技中心,波恩大学,德国);Lamarr Institute for Machine Learning and Artificial Intelligence, Germany(拉马尔机器学习与人工智能研究所,德国)
Agentic AI for Gravitational Wave Data Analysis: A Head-to-Head Comparison of Coding Agents Executing a Matched Filter Pipeline on Einstein Telescope Simulated Data
Coupled Control, Structured Memory, and Verifiable Action in Agentic AI (SCRAT -- Stochastic Control with Retrieval and Auditable Trajectories): A Comparative Perspective from Squirrel Locomotion and Scatter-Hoarding
ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems
UIUC(伊利诺伊大学厄巴纳-香槟分校);University of Chicago(芝加哥大学);University of Georgia(佐治亚大学);United States Military Academy(美国军事学院);eBay;Johns Hopkins University(约翰霍普金斯大学);UCSB(加州大学圣塔芭芭拉分校);Virtue AI
DenoiseFlow: Uncertainty-Aware Denoising for Reliable LLM Agentic Workflows
School of Computer Science, Peking University(北京大学计算机科学学院);School of Electronics Engineering and Computer Science, Peking University(北京大学电子工程与计算机科学学院);SKLCCSE, School of Computer Science and Engineering, Beihang University(北航计算机科学与工程学院);Tsinghua University(清华大学);University of Electronic Science and Technology of China(电子科技大学);Key Laboratory of High Confidence Software Technologies(PKU), MOE(北京大学高可信软件技术重点实验室);Institute of Software, Chinese Academy of Sciences(中国科学院软件研究所);National Engineering Research Center for Software Engineering, Peking University(软件工程国家工程研究中心)
What If Prompt Injection Never Left? Rethinking Agent Security through Cross-Session Stored Prompt Injection
Institute of Information Engineering, Chinese Academy of Sciences(中国科学院信息工程研究所);School of Cyber Security, University of Chinese Academy of Sciences(中国科学院大学网络空间安全学院);AI Sec Lab, Beijing Chaitin Technology Co.,Ltd(北京柴坦科技有限公司AI安全实验室)
RefGrader: Automated Grading of Mathematical Competition Proofs using Agentic Workflows
Pennsylvania State University(宾夕法尼亚州立大学);City University of New York(纽约市立大学);New York University(纽约大学);Amirkabir University of Technology(阿米尔卡比尔理工大学);Autodesk(欧特克公司);Carnegie Mellon University(卡内基梅隆大学)