Effective Red-Teaming of Policy-Adherent Agents
Itay Nakash, George Kour, Koren Lazar, Matan Vetzler, Guy Uziel, Ateret Anaby-Tavor
2025-06-16
Summary
This paper talks about CRAFT, a new system designed to test and challenge AI agents that follow strict policies, especially in customer service roles. These AI agents must follow rules like company policies or laws while helping customers, and CRAFT tries to find ways users might trick or confuse these agents by using smart strategies.
What's the problem?
The problem is that AI agents which are programmed to follow rules closely can sometimes be tricked by users who try to get around these rules for their own benefit. This is especially important in customer service, where agents must handle complicated situations and stick to rules like return policies or service limits. If the AI can't handle tricky users well, it might break rules or give wrong responses.
What's the solution?
The solution is CRAFT, which uses a team of AI agents that know the rules well and try different persuasive and tricky tactics to challenge these policy-following agents. By simulating these adversarial interactions, CRAFT helps find weaknesses or tough situations where the agents might fail, allowing developers to improve and make the agents more robust and reliable against such attacks.
Why it matters?
This matters because AI agents are being used more in sensitive tasks like customer service, where breaking rules or making mistakes can cause big problems. By effectively testing these agents against tricky users, CRAFT helps ensure they stay safe and follow the rules properly, making AI systems more trustworthy and useful in real-life situations.
Abstract
CRAFT, a multi-agent system using policy-aware persuasive strategies, challenges policy-adherent LLM-based agents in customer service to assess and improve their robustness against adversarial attacks.