MasDrift測越權風險

Computer Science > Multiagent Systems arXiv:2608.

07556 (cs) [Submitted on 2 Aug 2026 (v1), last revised 11 Aug 2026 (this version, v2)] Title:MasDrift: Benchmarking Authorization Preservation Across Multi-Agent Architectures Authors:Zhuoning Xu, Xiucheng Zhang, Hanjun Luo, Yingbin Jin, Yinpeng Dong, Hanan Salam View a PDF of the paper titled MasDrift: Benchmarking Authorization Preservation Across Multi-Agent Architectures, by Zhuoning Xu and 5 other authors View PDF HTML (experimental) Abstract:Multi-agent systems (MAS) decompose long-horizon tasks across supervisors and subagents, but delegated goals do not necessarily carry their original authorization boundaries.

Existing safety benchmarks mainly study adversarial compromise, while work on constraint drift lacks controlled architecture-level evaluation.We introduce MasDrift, a benchmark of 600 benign productivity tasks across eight domains.Each task pairs required work with reserved actions.

MasDrift compares single-agent, centralized, and decentralized coordination while varying hierarchy depth and peer width, measuring task completion and authorization preservation.Across generic multi-agent conditions, centralized hierarchies achieve 93.9--98.6% task completion versus 85.7--87.

0% for peer networks, while unauthorized actions occur in 2.7--19.8% of tasks versus 0.6--0.8%, a gap that widens with hierarchy depth.We further compare two defenses that differ in where authorization evidence resides.One re-anchors every pending call to the original user request.

The other carries an attenuated policy along the delegation chain.Re-anchoring reduces unauthorized actions in every model configuration we evaluate, at a cost of 1.6 points of pooled completion.Chain propagation blocks required work instead, forfeiting up to 36.3 points.

A heterogeneous case study confirms that the failure follows from coordination rather than model strength.MasDrift exposes a centralization tradeoff and makes authorization preservation a measurable property of MAS design.Comments: preprint Subjects: Multiagent Systems (cs.

MA); Artificial Intelligence (cs.AI) Cite as: arXiv:2608.07556 [cs.MA] (or arXiv:2608.07556v2 [cs.MA] for this version) https://doi.org/10.48550/arXiv.2608.

07556 Focus to learn more arXiv-issued DOI via DataCite Submission history From: Hanjun Luo [view email] [v1] Sun, 2 Aug 2026 04:46:15 UTC (686 KB) [v2] Tue, 11 Aug 2026 07:14:50 UTC (690 KB) Full-text links: Access Paper: View a PDF of the paper titled MasDrift: Benchmarking Authorization Preservation Across Multi-Agent Architectures, by Zhuoning Xu and 5 other authorsView PDFHTML (experimental)TeX Source view license Current browse context: cs.

MA < prev | next > new | recent | 2026-08 Change to browse by: cs cs.AI References & Citations NASA ADSGoogle Scholar Semantic Scholar export BibTeX citation Loading...BibTeX formatted citation × loading...

Data provided by: Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.

ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, Media Code, Data and Media Associated with this Article alphaXiv Toggle alphaXiv (What is alphaXiv?) Links to Code Toggle CatalyzeX Code Finder for Papers (What is CatalyzeX?) DagsHub Toggle DagsHub (What is DagsHub?

) GotitPub Toggle Gotit.pub (What is GotitPub?) Huggingface Toggle Hugging Face (What is Huggingface?) ScienceCast Toggle ScienceCast (What is ScienceCast?) Demos Demos Replicate Toggle Replicate (What is Replicate?) Spaces Toggle Hugging Face Spaces (What is Spaces?) Spaces Toggle TXYZ.

AI (What is TXYZ.AI?) Related Papers Recommenders and Search Tools Link to Influence Flower Influence Flower (What are Influence Flowers?) Core recommender toggle CORE Recommender (What is CORE?

) Author Venue Institution Topic About arXivLabs arXivLabs: experimental projects with community collaborators arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.

Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy.arXiv is committed to these values and only works with partners that adhere to them.

Have an idea for a project that will add value for arXiv's community?Learn more about arXivLabs.Which authors of this paper are endorsers?| Disable MathJax (What is MathJax?)