S3DAT NEWS
· 8 stories RSS s3dat.com

Anthropic explains why agent messages miss the checkout

Anthropic published a November 11 account of experiments showing how agents serving different users can lose requests before completing shared tasks. The underlying paper dates to September 30; the practical question is what a platform checks before an agent commits an order.

Spec sheet

New write-up
11 November 2026
Original paper
30 September 2026
Benchmark
MAMUBench: 74 scenarios across 3 environments
Study scope
77 scenarios across 4 simulated environments

What changes when each user has an agent?

The study separates two arrangements that can look similar in a product demonstration. A coordinator receives requests from every user and controls the shared task. A peer team gives each person a separate agent, its own context and a way to message the others. Both arrangements can use the same underlying model. The difference is where information lives when an action becomes final. Researchers tested limited compute budgets, appointment calendars, shared orders and a software release queue. These environments force tradeoffs because the available resource cannot satisfy every request independently.

How can a delivered request still be missing?

Consider the study’s shared food cart: one user asks for a side dish while other agents edit the same order. Sending that preference to the agent completing checkout does not guarantee it enters that agent’s context before checkout happens. Across the personal-assistant scenarios and four tested models, the request was sent in 94–99% of committed team episodes. It was actually in the committing agent’s context in only 47–67%. The paper reports that teams honored requests more often when they were in context. This distinction explains why a message-delivery log alone cannot establish that a decision incorporated someone’s instruction.

Does assigning a team leader fix it?

The researchers reran previously failed Claude team episodes with different interventions. Restricting checkout to one designated leader performed roughly like repeating the original setup. A different intervention changed the platform itself: checkout was blocked until the committing agent had read every pending direct message. That guard recovered 73.1% of failed Opus 5 episodes and 62.3% of failed Sonnet 5 episodes. These percentages describe recovery within selected failed episodes, not success across a fresh test population. The paper presents the comparison as evidence that premature checkout contributed to these failures.

What does a reproducible check include?

The public MAMUBench repository contains 74 scenarios covering compute budgets, clinic calendars and personal assistants. Its separate merge-queue environment brings the paper’s total to 77. Runs can select a model, formation, scenario and episode count. The repository also exposes reports and checks against the paper’s results, allowing the coordinator and peer configurations to be compared on the same task. Food orders use a simulated integration and never call a real delivery service. This is a controlled test of coordination, not a record of customers receiving the wrong meal.

Where does this result stop?

The tested models include Claude Opus 5 and Sonnet 5, GPT-5.6 variants and Qwen3.8-max, with coverage varying by environment. The study measures particular tasks and interventions rather than a general ranking of current assistants. Its outcome scores come from environment logs. Separate consent and fabrication labels use model judges without human validation. The authors also describe substantial evaluation costs: running every formation serially takes about 370 hours in their setup. That makes a small, repeatable test of a specific commitment boundary more practical than treating a broad agent benchmark as a quick certification.

Claim check

  • Confirmed Anthropic published its account of the experiments on November 11 [1]
  • Confirmed The underlying paper was submitted September 30 and documents simulated tests [2]
  • Company claim The researchers report 73.1% and 62.3% recovery with the unread-message checkout guard on failed Claude episodes [2]
  • Unclear The results do not establish real-world incident rates or performance for newer model versions [2]

Sources