Aaron Snoswell

A Formal Approach to Multi-Agent Communication Safety

As autonomous agents increasingly act without human review, their communication protocols become a safety decision, not just an engineering one. Today's LLM agents talk in natural language or loosely structured formats like MCP, and a classical result in computer science (Rice's theorem) says once messages can express anything, no filter can reliably distinguish safe from adversarial inputs — prompt injection and OpenCLAW's security blunders are the predictable result. With my Sydney-based co-author Hugo O'Connor, we will present CBCL (Common Business Communication Language), an agent communication framework whose safety properties are machine-checked by a theorem prover, and use it to ground a broader argument: formally constraining what agents can say to each other is necessary, but not sufficient, for meaningful human oversight of multi-agent systems. CBCL lets agents teach each other new vocabulary at runtime, so structural safety doesn't come at the cost of flexibility. The work is currently under review at NeurIPS, and we're looking for collaborators interested in scaling and building on the approach.