Tracking and Analysis of Information Contamination in Multi-Agent Systems: How Uncertainty Quietly Distorts Agent Decisions

This study focuses on the problem of information contamination in multi-agent systems. Through systematic perturbation injection and execution trajectory tracking, it reveals three manifestations of information contamination (silent semantic corruption, behavior detour with recovery, and structural destruction combination) and their deep impact on decision paths. The study finds that there is a decoupling phenomenon between execution trajectory differences and output correctness, providing a new framework for reliability verification of agent systems and offering important insights for building trustworthy multi-agent systems.

In modern AI, multi-agent workflows undertake complex reasoning tasks, but uncertainty is not just an input quality issue; it can also redirect decisions and reshape intermediate states. The traditional "garbage in, garbage out" cognition is limited to input quality, while the complexity of multi-agent workflows renders simple models ineffective—tiny uncertainties in each processing round can trigger chain reactions, affecting task decomposition, tool calls, and intermediate states, and the spread of contamination has a hidden nature, making it difficult to be captured by traditional verification methods.

The research team treats uncertainty as a controllable variable, injecting structured perturbations in 614 paired experiments, and comparing trajectory differences between contaminated and clean executions to establish causal relationships. The experiments cover 32 GAIA tasks and 3 language models, tracking impacts from three dimensions: planning trajectory (task decomposition and planning), tool calls (frequency, parameters, etc.), and intermediate states (semantic drift monitoring).

Core findings include: 1. Decoupling between trajectory differences and output correctness (high differences but correct recovery, low differences but wrong output); 2. Three manifestations of contamination: silent semantic corruption (seemingly reasonable but semantically deviated), behavior detour with recovery (self-correction after path deviation), and structural destruction combination (trajectory deviation and wrong output).

Control flow characteristics can serve as contamination signals: rerouting (frequent changes in plan/tool strategies), execution extension (increase in steps/tool calls), and early termination (false completion). Reasons for the failure of existing verification mechanisms: input-level verification cannot detect semantic contamination, output-level consistency checks are ineffective for low-difference errors, and the lack of intermediate state monitoring makes tracing difficult.

Theoretical contributions: establishment of a contamination classification system, trajectory-based measurement framework, and large-scale empirical data. Practical recommendations: targeted verification strategies (semantic verification, path anomaly detection), defensive design (redundancy checks at key nodes), and balancing reliability and computational costs (additional costs of behavior detours).

Future research directions include developing real-time intermediate state monitoring tools, adaptive contamination detection algorithms, and contamination risk assessment models. Only by fully understanding and controlling information contamination can multi-agent systems become trustworthy intelligent partners.