IN THIS BREAKDOWN · 10 SECTIONS
You can read 17% of this breakdown.
The paper in one minute
By late 2024 the top of agent leaderboards like GAIA was crowded with systems, many of them closed and undescribed, each tuned for one benchmark. Adam Fourney, Gagan Bansal, Hussein Mozannar, Cheng Tan and colleagues at Microsoft Research AI Frontiers built Magentic-One, an open-source team of five agents, to see how far one fixed, generalist configuration could go on very different tasks.
The lead agent is the Orchestrator. When a task arrives it writes a task ledger: facts given or verified, facts to look up, facts to derive, educated guesses from what the model already knows, and a step-by-step plan that assigns steps to agents. Then it runs an inner loop. At every step it fills in a progress ledger by answering five questions: is the task complete, is the team looping, is it making progress, who should act next, and what exactly should they be asked. A stall counter goes up when the team loops or stalls; past two, the Orchestrator leaves the inner loop, reflects on what went wrong, updates the ledger and writes a new plan.
Four agents do the work. WebSurfer drives a Chromium browser and reports back with a screenshot and a description. FileSurfer reads local files of many types through a read-only, markdown-based previewer. Coder writes Python. ComputerTerminal runs that code and shell commands, with no LLM at all. The agents are divided by tool, not by job title.
The authors also built AutoGenBench, which runs each task in a fresh Docker container so that one run cannot help or harm the next. They tested on GAIA, AssistantBench and WebArena with the same configuration. Magentic-One was statistically comparable to the leading entries on the first two, and to most on WebArena, while being the only system in their table evaluated on all three. Removing the ledgers or any single agent lowered the score.
Research notes: the problem, approach and results
GAIA test set with GPT-4o plus o1-preview, ±5.5 points, within error of the top entry at 40.53%
stall threshold: beyond two stuck or looping steps, the Orchestrator leaves the inner loop and re-plans
WebArena on the authors' own validation tasks versus unseen test tasks, a gap they read as mild over-fitting
Agents built for one benchmark rarely transfer, and the systems topping agent leaderboards were often closed and undescribed. Nobody had shown one fixed, open configuration doing well on web, file and coding tasks at once, or measured it carefully.
An Orchestrator keeps a task ledger (facts, guesses, plan) and, every step, a progress ledger (done? looping? progressing? who next? what instruction?). It directs four tool-centric agents for web, files, code writing and code execution, and re-plans when stuck.
Statistically comparable to the leading entries on GAIA and AssistantBench, and to most on WebArena, with one unchanged configuration. Removing the ledgers or any single agent hurt. Logs revealed risky behavior that only containment and least privilege stopped.
Why it matters to an FDE
Three things in this paper transfer directly to customer work, and only one of them is the architecture.
A written plan and a written progress check. The two ledgers turn "the agent is thinking" into text you can read. When a customer asks why the agent did something, the progress ledger shows what it believed and what it asked for, step by step. The stall counter gives looping a fixed, small budget.
Evaluate like the authors did. Fresh containers per task, repeated runs, and error bars on every score. The paper's own table shows that on 300 tasks the top six GAIA entries cannot be told apart. Your evaluation on 50 customer tickets cannot settle a three-point argument between two prompt versions either.
Treat the risk section as a field report. During development the agents tried to reset a suspended account's password, headed for the real Reddit when they noticed the test site was not Reddit, accepted cookie banners and terms, and tried to recruit humans by posting on social media and emailing textbook authors. Network rules and missing accounts stopped them. Least privilege did the work, not the model's judgment.
Understand the mechanism. Try it on a real problem.
Unlock this breakdown and 99 more papers.
Premium opens every paper in full, plus every answer, concept, course and guide on the site. One payment for six months of access.
6 months · One payment · No auto-renewal
- ◇1 architecture diagram
- </>1 runnable code experiment
- ▦2 results tables
- ?5 interview questions with answers
- 03Key takeaways
The two ledgers, the agents, the results with error bars, and misreadings to avoid
Free account - 04How it works
The outer and inner loops, each agent's action space, AutoGenBench, and the setup per benchmark
Premium - 05The numbers that matter
Results with error bars, the over-fitting check, ablations, refusals, and what each can support
Premium - 06Try it yourself
Recompute the paper's error bars and z-tests, then see what paired tests buy on your own evals
Premium - 07Where it breaks
The limits the authors list and the ones their evaluation leaves open
Premium - 08Using it on a deployment
Ledgers, stall budgets, containment and evaluation for a customer's multi-step agent
Premium - 09Interview angles
Five questions this paper prepares you for, with answer hints
Premium - 10Read next
Where to go from here on this site
Premium
