INQUIRING LINE

Instead of cramming everything into its memory, can an AI hand reading tasks to helpers and keep only their summaries?

Can agents manage context through active delegation instead of progressive disclosure?

This explores whether an agent can keep its context window under control by handing subtasks to helper agents that read and report back, instead of having information fed to it gradually or loaded on demand.


This explores whether an agent can keep its context window under control by handing subtasks to helper agents that read and report back, instead of having information fed to it gradually or loaded on demand. The corpus says yes, and the strongest evidence is that delegation can be trained. SearchSwarm teaches models to dispatch subtasks and integrate the summarized results, and this beats passive compression, with a 30B model matching much larger ones (Can delegation teach models to manage context more actively?). The skill also transfers to single-agent tasks. So it isn't just orchestration know-how. It looks like a general habit of breaking work into pieces and grounding answers in evidence.

Delegation also turns up as a plain engineering win. An automated search over agent harnesses across many environments found four mechanisms: action execution, context compaction, observation handling, and delegated reading. Together they cut token traffic by 44.7–49.0% with comparable performance on a 51-task benchmark (Can agent harnesses be automatically optimized across many environments?). Delegated reading is one of four, so it's a contributor and not the whole story. Still, the gain came from the harness and not from a smarter model, so you can get it without waiting for a better model.

The real alternative to delegation is compression, and the corpus treats the two as different tools. DeepAgent's memory folding has the agent compress its own history into episodic, working, and tool memory. It works because the agent chooses when to fold and the result has a fixed structure, which avoids the degradation that sloppy consolidation causes (Can agents compress their own memory without losing critical details?). Folding shrinks what the agent has already seen. Delegation keeps the raw reading in a helper's context so that only a summary reaches the main agent. These notes don't test the two head to head, so whether they compete or combine is still open.

Two neighbouring findings help explain why delegation is attractive. Some tasks need parallel work and independent verification, and a single agent loop hits organizational limits that more capability or a bigger window can't fix (Do single agents always hit organizational limits?). And helpers don't have to be expensive, because small language models handle most repetitive agent subtasks at 10–30× lower cost (Can small language models handle most agent tasks?). Neither study is about context management. They show that splitting work across agents is both needed and cheap.

The cost is that every handoff becomes a trust boundary. In retrieval-summarization-delegation pipelines, a low-privilege agent can embed a forged approval that makes a high-privilege agent misuse its authority. The failure happens at the authorization decision, and policy checks outside the agent's own judgment prevent it (Can forwarded content trick high-privilege agents into misusing their authority?). A related result points the same way. Telling an agent which tests are off-limits worked only when its tools were also restricted (Can explicit authorization boundaries prevent agents from modifying protected tests?). So active delegation can save context, but the summaries and the authority checks then become part of the design you have to get right.


Sources 7 notes

Can delegation teach models to manage context more actively?

SearchSwarm shows that training models to delegate subtasks and integrate summarized results beats passive compression, with a 30B model matching much larger ones. Critically, the delegation skill transfers to single-agent tasks, suggesting it teaches disciplined decomposition and evidence grounding, not just orchestration.

Can agent harnesses be automatically optimized across many environments?

Cross-environment harness optimization yielded four mechanisms (action execution, context compaction, observation handling, delegated reading) that reduced token traffic by 44.7–49.0% while maintaining comparable performance on a 51-task benchmark, suggesting harness-level gains are orthogonal to model improvements.

Can agents compress their own memory without losing critical details?

DeepAgent's autonomous memory folding consolidates interaction history into episodic, working, and tool memory schemas. This reduces token overhead while letting agents pause to reconsider strategies—the autonomy and structure together avoid degradation that plagues poorly designed consolidation.

Do single agents always hit organizational limits?

Research shows that real-world tasks requiring heterogeneous expertise, parallel execution, and independent verification exceed what any single agent loop can organize. Graph-based system abstractions are needed to distribute intelligence across specialized agents.

Can small language models handle most agent tasks?

SLMs handle the repetitive, well-defined language tasks that constitute most agent work at 10–30× lower cost than LLMs, making heterogeneous architectures (SLMs by default, LLMs selective) the economically rational design pattern.

Show all 7 sources
Can forwarded content trick high-privilege agents into misusing their authority?

Retrieval-summarization-delegation pipelines allow low-privilege agents to embed forged authorization claims that cause high-privilege agents to misuse their legitimate authority. The failure occurs at the authorization decision, not at the executor's defenses—and can be prevented by policy checks external to agent judgment.

Can explicit authorization boundaries prevent agents from modifying protected tests?

Testing showed that explicit authorization boundaries kept protected tests unmodified only when paired with restricted tools. Naming a prohibition was insufficient; boundaries must specify the protected state itself to be effective.

Papers this line draws on 8

The research behind the notes this line reads — ranked by how closely each paper relates.