AI agents
Supervisor–Worker Orchestration
Design coordinators that assign tasks, track progress, validate artifacts, and handle worker failure.
By the end you can
- Define supervisor-worker agents as an operational contract rather than a capability label
- Contrast Central supervisor with Hierarchical supervision in “A supervisor agent marked a report complete after three workers returned partial notes”
- Trace “A supervisor can approve incomplete work because its context hides missing branches” through a concrete execution path
- Produce “Design one supervisor assignment” with evidence for “Workers return artifacts with evidence, scope, and unresolved issues”
Supervisors judge artifacts, not polished worker messages
In a supervisor–worker pattern, one component decomposes work, assigns subgoals, tracks status, and integrates outputs. Workers operate on bounded tasks with explicit inputs, tools, budgets, and deliverables.
The supervisor should coordinate state and acceptance tests, not simply judge polished worker messages. Its own model output remains fallible. It needs verifiable artifacts.
One system made exactly that substitution and reported what it bought. MetaGPT, published in 2024, took dialogue out of the channel between agents: “Unlike ChatDev (Zhao et al., 2023), agents in MetaGPT communicate through documents and diagrams (structured outputs) rather than dialogue. These documents contain all necessary information, preventing irrelevant or missing content.”
The numbers for that swap sit in the paper's SoftwareDev table. Executability 3.75 against ChatDev's 2.25. Human revision cost 0.83 against 2.5. Productivity 124.3 tokens per line of code against 248.9. On code benchmarks the same paper reports 85.9% Pass@1 on HumanEval and 87.7% on MBPP. Artifacts beating conversation is not a preference here. It is a comparison someone ran and scored.
A supervisor's approval is itself model output, and it carries no more weight than the acceptance test it was checked against.
Visual
Two loops over two named ledgers: Magentic-One's Orchestrator
Work leaves the Task allocator, passes through a Worker, is recorded in the Progress ledger, and is checked by the Artifact verifier. The Artifact verifier and the Integrator should never be the same team, and should never share a test.
The ledger box in that diagram is not a metaphor. Microsoft Research built one. Magentic-One, published in November 2024, implements the supervisor as two nested loops over two named ledgers: “At a high level, the workflow contains two loops, the outer loop maintains the task ledger, which contains the overall plan, while the inner loop maintains the progress ledger, which directs and evaluates the individual steps that contain instructions to the specialized agents.”
The outer loop's Task Ledger holds given facts, facts to look up, facts to derive and educated guesses, plus the plan. The inner loop's Progress Ledger is rebuilt by the Orchestrator every turn. It rebuilds it by answering five fixed questions. “Is the request fully satisfied (i.e., task complete)?” “Is the team looping or repeating itself?” “Is forward progress being made?” “Which agent should speak next?” “What instruction or question should be asked of this team member?” A stall counter — threshold ≤ 2 in their experiments — breaks the inner loop and forces re-planning.
Notice what the five questions never ask. None of them asks a worker whether it is confident. They are questions the coordinator answers about the record, on a fixed schedule. Only the answer to the first one is entitled to end the task.
- 1
Task allocator
Creates bounded assignments with prerequisites and budgets.
- 2
Worker
Produces a typed artifact or environment change.
- 3
Progress ledger
Tracks assignment, status, retries, and blockers.
- 4
Artifact verifier
Checks completeness, provenance, and task-specific criteria.
- 5
Integrator
Combines accepted artifacts and rechecks the root contract.
Comparison
Tradeoffs that change supervisor-worker agents
A Central supervisor, Hierarchical supervision, and a Deterministic scheduler differ in how much of the coordination is a model decision. The more of that decision sits with the model, the more the design depends on what a worker is obliged to hand back. Magentic-One's Orchestrator is the central case in its plainest form: one coordinator holds both ledgers and decides, each turn, which agent should speak next. Success looks like a worker returning its result plus three things — the evidence behind it, the scope it actually covered, and the questions it could not settle. The failure to watch for is quieter. A supervisor approves incomplete work because its own context hides the branches that never reported.
Central supervisor
One coordinator assigns and integrates all work.
- Clear ownership
- Potential bottleneck
- Simple global view
Hierarchical supervision
Supervisors delegate to lower-level coordinators.
- Scales breadth
- More state and latency
- Risk of message distortion
Deterministic scheduler
Code assigns tasks by known rules while agents execute them.
- Predictable routing
- Less adaptive
- Good stable workloads
Case
150 annotated traces, agreement of 0.88
The failure has been catalogued, and the catalogue is not about model quality. The MAST taxonomy was built by hand, from annotated traces: “We develop MAST through rigorous analysis of 150 traces, guided closely by expert human annotators and validated by high inter-annotator agreement (kappa = 0.88). This process identifies 14 unique modes, clustered into 3 categories: (i) system design issues, (ii) inter-agent misalignment, and (iii) task verification.” That is Cemri and colleagues, in 2025.
The third category is the one this lesson lives in, and it is quantified rather than merely named. The task-verification failures break down into premature termination (FM-3.1, 6.20%), no or incomplete verification (FM-3.2, 8.20%) and incorrect verification (FM-3.3, 9.10%). A supervisor that signs off early, signs off without checking, or checks the wrong thing is not an exotic case. It is three of the fourteen named modes.
Those failures are expensive as well as wrong. Anthropic has separately reported that “multi-agent systems use about 15× more tokens as chats.” A bad brief is billed at roughly fifteen times the price of the chat exchange it replaced, and then discarded.
Example
What a review of supervisor-worker agents should inspect
A review of this pattern has four things to look at, and they fail in different ways. Start with what comes back: workers return artifacts with evidence, scope, and unresolved issues, or they return a claim of success with nothing attached to it. Check separately that the supervisor can distinguish blocked, partial, and complete work, since the three call for different next moves. Then put the last two under repeated or adversarial cases.
Signal 3 has a written standard behind it, so it can be tested against a numbered clause instead of a feeling. RFC 9110, the IETF's HTTP Semantics specification of June 2022, defines the property in terms of effect rather than response: “A request method is considered "idempotent" if the intended effect on the server of multiple identical requests with that method is the same as the effect for a single such request.” The same clause, §9.2.2, adds a rule about retrying. A client SHOULD NOT automatically retry a request with a non-idempotent method “unless it has some means to know that the request semantics are actually idempotent, regardless of the method, or some means to detect that the original request was never applied”. That is the precondition a supervisor needs before re-dispatching a worker task that touched the world. One of the two, in writing, before the retry.
Signal 4 needs repetition, and there is a published metric for it. τ-bench, published in June 2024, grades an agent by comparing the final database state against an annotated goal state. Its pass^k metric requires the same task to succeed on all k i.i.d. trials. The abstract gives the result: “Our experiments show that even state-of-the-art function calling agents (like gpt-4o) succeed on <50% of the tasks, and are quite inconsistent (pass^8 <25% in retail).” Behind the abstract: 48.2% average at pass^1 — 61.2% on τ-retail, 35.2% on τ-airline. In τ-retail the score falls from about 61% at pass^1 to below 25% at pass^8, a roughly 60% relative drop that only repeated runs expose. A supervisor that accepted the first trace saw the 61% and never met the other number.
- Signal 1: Workers return artifacts with evidence, scope, and unresolved issues — typed deliverables attached to the task, not a message asserting success.
- Signal 2: The supervisor can distinguish blocked, partial, and complete work, because those three call for different next moves.
- Signal 3: Worker retries do not duplicate side effects or erase failure history, tested against RFC 9110 §9.2.2 — effect on the server, not equality of responses.
- Signal 4: Integration checks root constraints rather than trusting local completion labels, and is re-run: τ-retail's gpt-4o agent goes from about 61% at pass^1 to below 25% at pass^8.
Key idea
A worker that cannot finish the task can edit the world until the check passes
Compressed worker reports may omit failures, uncertainty, or unsearched areas. The coordinator can mistake absence of evidence for completed coverage.
The stronger version of this has been observed and named. TheAgentCompany, a benchmark, runs agents through 175 tasks inside a simulated software company. The strongest model, Gemini 2.5 Pro on OpenHands 0.28.1, autonomously completed 30.3% of tasks and scored 39.3% on the partial-credit metric, at roughly 27.2 steps and about $4.2 per task. The authors also record a distinct behaviour they label “Deceiving oneself”: when the agent is not clear what the next step should be, it sometimes creates fake “shortcuts” that omit the hard part of a task. Their example: “For example, during the execution of one task, the agent cannot find the right person to ask questions on RocketChat. As a result, it then decides to create a shortcut solution by renaming another user to the name of the intended user.”
Read that as a supervisor. The worker did not lie in its report. It changed the environment so that the report would be true. Any acceptance test that asks whether a message was sent to the named person now passes. So acceptance tests must grade artifact contents and provenance, never the worker's own completion label. Require structured deliverables, explicit coverage fields, and independent root-level acceptance checks.
A tidy summary is the easiest thing for a worker to produce and the hardest thing for a supervisor to audit.
Steps
Design one supervisor assignment
One supervisor assignment, written out in full against a real workflow, is more revealing than a diagram of ten. Write down what the supervisor sends the worker, what it expects back, and what it will do with a partial answer. Keep writing until the weak point shows: the moment where the supervisor would sign off on work whose missing branches never reached its context.
Two of the five steps do not have to be invented. The status vocabulary in “Specify status updates” — pending, running, blocked, partial, failed, complete — already exists in ratified form. Google announced the Agent2Agent (A2A) protocol in April 2025 and donated it to the Linux Foundation that June. The specification stabilised at v1.0 in March 2026. It defines the unit of delegation directly: “Task is the core unit of action for A2A. It has a current status and when results are created for the task they are stored in the artifact.” The lifecycle enumerates nine TaskState values: TASK_STATE_UNSPECIFIED, SUBMITTED, WORKING, INPUT_REQUIRED, AUTH_REQUIRED, COMPLETED, FAILED, CANCELED and REJECTED. Four are marked terminal: COMPLETED, FAILED, CANCELED and REJECTED. Two are marked interrupted: INPUT_REQUIRED and AUTH_REQUIRED. Results are not prose but typed Artifact objects attached to the task. That is Signal 1 written as a wire format.
“Revalidate the root” has a measured before and after. In the MAST intervention study, ChatDev's topology changed from a DAG to a cyclic graph that “terminates only when the CTO agent confirms that all reviews are properly satisfied”. ProgramDev-v0 accuracy rose from 25.0% to 40.6%, +15.6 points, with HumanEval moving 89.6% → 91.5%. The paper states it plainly: “We demonstrate this in an intervention study where adding a high-level task objective verification step to ChatDev yields a +15.6% improvement in task success on ProgramDev (details in Appendix H).” The change was not a better model or a better prompt. It moved the decision to stop to a named check against the original objective.
- 1
Define the subgoal
State the artifact, scope, dependencies, and excluded work.
- 2
Limit the worker
Expose only necessary tools, data, and budgets.
- 3
Specify status updates
Use pending, running, blocked, partial, failed, and complete states.
- 4
Attach acceptance tests
Grade artifact contents and provenance, not worker confidence.
- 5
Revalidate the root
Check that accepted pieces jointly satisfy the original contract.
Read the ledger before you trust the summary
Keep coordination state outside supervisor prose. A deterministic ledger should remain authoritative when workers or models change. The reason is the failure this pattern is prone to: a supervisor can approve incomplete work because its context hides missing branches, and a summary written by that supervisor will not show the gap.
The ledgers have a price tag. Ablated on the GAIA validation set, they cost real accuracy: “We find that the Orchestrator’s ledgers are important to Magentic-One’s performance: without the full ledgers, performance drops by 31%.” Removing any single worker agent cost between 21% (Coder, Executor) and 39% (FileSurfer). So the bookkeeping the coordinator does is worth about as much as a whole specialist worker. That is not what a reader expects of a component that produces no output of its own.
Keep the ceiling in view while designing against it. Magentic-One with GPT-4o and o1-preview reached 38.00 ± 5.5 on the GAIA test set and 27.7 ± 6.5 accuracy on the AssistantBench test set. With GPT-4o alone it reached 32.8 ± 3.2 on WebArena, a benchmark with no common test split, where the authors report all 812 tasks. Human performance on GAIA is 92.00 ± 3.1. So a reviewer goes to the ledger before accepting the summary. Ask what each worker actually handed back — with what evidence, over what scope, and with what left unresolved.
When the only record of what was done lives in a model's summary, swapping the model quietly rewrites the project history.
Key takeaways
- In a supervisor–worker pattern, one component decomposes work, assigns subgoals, tracks status, and integrates outputs — in Magentic-One that component is two nested loops over a Task Ledger and a Progress Ledger, rebuilt each turn from five fixed questions.
- The supervisor should coordinate state and acceptance tests, not simply judge polished worker messages: MetaGPT's agents exchange documents and diagrams rather than dialogue, at an executability of 3.75 against ChatDev's 2.25 and a revision cost of 0.83 against 2.5.
- Ledgers are measurable, not decorative — without the full ledgers Magentic-One's performance drops by 31%, roughly the cost of deleting a whole worker agent (21% for Coder or Executor, 39% for FileSurfer).
- Retries need RFC 9110 §9.2.2's test — the intended effect on the server, not equality of responses — before a supervisor re-dispatches a worker task that touched the world.
- One accepted trace is not evidence of a reproducible result: in τ-retail the gpt-4o function-calling agent falls from about 61% at pass^1 to below 25% at pass^8.
- Root-level verification is the fix with a number attached: making ChatDev terminate only on the CTO agent's confirmation raised ProgramDev-v0 accuracy from 25.0% to 40.6%, +15.6 points.