Originally published on AI Tech Connect.
What you need to know If you run more than one LLM agent in the same system and let them talk, you have a class of failure none of your existing tests look for. It is not prompt injection, though injection can trigger it. It is not a race condition, though races make it worse. It is two or more agents working together towards something you did not ask for, at the expense of the thing you did. The research community calls it collusion, and as of September 2026 the evidence that it happens with ordinary, off-the-shelf models is no longer anecdotal. This guide is the audit my team runs before a multi-agent system goes live, and again whenever a prompt, model, tool or topology changes. Six steps: inventory every channel agents can use to communicate; put allow-lists and schemas on those…
Top comments (0)