Multi-Agent-Koordination

The Agent Team

Multiple specialists, one shared goal — coordinated by the Orchestrator, secured through permission levels, connected via secure communication channels.

Finance DATEV · Rechnungen Engineering CAD · Statik Sales Customers · Quotes Logistics ERP · Lager HR HR · Zeiterfassung Each agent has its area of responsibility — together they support your team in daily processes.

Konzept

Why Multiple Agents — Not Just One?

An employee responsible for accounting, HR, and engineering simultaneously cannot do any of them well. This applies to people — and equally to AI agents. Separate specialists are not a technical luxury, but a regulatory and architectural necessity.

Need-to-Know-Prinzip

The sales agent cannot see HR data, the HR agent cannot see engineering drawings. Each agent has access exclusively to the data of its own domain — architecturally enforced, not by policy.

DSGVO Art. 25 • ISO 27001 A.9 • BSI IT-Grundschutz ORP.4

Separation of Duties

Whoever books must not also approve. An agent that processes customer data, financial accounting, and personnel files violates the principle of separation of duties. Separate agents technically implement organisational separation lines.

GoBD Tz. 107 • HGB §239 • DSGVO Art. 5

Kontextqualität

With a 14,000-token context window, a generalist uses most of it for its instructions. Specialists use only 17–22% for their prompt — the rest is available for your query, memories, and tools.

→ Architektur: 7 Prinzipien

Prüffähige Protokollierung

Each agent produces its own, separate log. During an audit you can immediately see: welcher Agent, wann, welche Daten, welches Ergebnis. No disentangling a monolithic log.

GoBD Tz. 37 • ISO 9001:2015 Kap. 7.5 • DSGVO Art. 30

Schadenbegrenzung

If an agent malfunctions, it affects only its domain. The other agents continue working undisturbed — like fire compartments in a building.

ISO 27001 A.16 • BSI 200-4 Notfallmanagement

Benutzer-Rollentrennung

The engineer talks to the engineering agent, accounting talks to the finance agent. Each user sees only the data relevant to their role — Privacy by Design at the architecture level.

DSGVO Art. 25 (Privacy by Design)

Fazit: Multiple specialized agents are the consistent implementation of data protection, separation of duties, and quality assurance — just as you would not assign a single person to accounting, HR, and engineering simultaneously in your organisation.

How Collaboration Works

The Orchestrator coordinates who uses the GPU and when. Agents communicate through secure channels and share files — without access to each other's workspace.

Coordination

Agenten im Team

Inter-agent messaging, shared files, and architecturally enforced data privacy.

Inter-Agent Kommunikation

Konstruktions-Agent CAD-Analyse Stücklisten Logistik-Agent Bestandsprüfung ERP Access PostgreSQL Relay message_relay Tabelle "Brauche Stahl-Bestand" Weiterleitung Ping-Pong-Limit: max 3 Runden

Connector Families

Agents of the same connector family share a communication channel. Messages to the family are automatically routed to the responsible agent.

Ping-Pong-Schutz

Maximum 3 back-and-forth rounds between two agents per request. Prevents infinite loops and uncontrolled token consumption.

Workspace & interner Datenschutz

Each agent has its own workspace — like a locked desk. Only deliberately shared files are visible to others.

Mühendis Privat (gesperrt) notes/, calendar.json contacts.json, todo.txt steel_profiles.json public/ (shared) stueckliste.pdf report_projekt_X.dxf Finanz-Agent Privat (gesperrt) notes/, calendar.json market_prices.json contacts.json public/ (shared) kalkulation_projekt_X.pdf read_public gesperrt public/ — all agents can read private — only the owning agent Datei-Austausch via read_public Access denied

public/ — Deliberate Sharing

Reports, exports, BOMs — everything other agents need. The agent decides what to share.

Private Area — Invisible

Notes, calendar, contacts, todo lists, profile databases. No other agent has access — architecturally enforced, not by policy.

Beispiel: The engineering agent reads a DXF file from the engineer's workstation, creates a BOM, and places it in public/. The finance agent reads the BOM and calculates material costs — without access to engineering notes.

Security

Execution Rings

Three trust levels determine which tools an agent may use. Like an operating system kernel.

Ring 2 — Full Access Ring 1 — Standard Ring 0 Read Only sql_query, rest_get memory_search, file_read file_write, sql_execute rest_post, email_send shell_exec memory_recall config_read
0

Ring 0 — Read Only

Lowest risk. The agent may only read: retrieve memory, view configuration. No access to external systems, no write access.

memory_recall config_read time_now
1

Ring 1 — Standard

Read access to external systems. SQL SELECT, REST GET, read files. No write access to production data. Default ring for most agents.

sql_query rest_get file_read memory_search brave_search
2

Ring 2 — Full Access

Full access including write operations. Requires explicit authorisation by the administrator. Human-in-the-loop for critical actions.

file_write sql_execute rest_post email_send shell_exec

Practical Examples

An Agent for Every Department

Each agent is individually configured for its task — with its own skills, connectors, and knowledge base.

Technische Dokumentation

Konstruktions-Agent

Berechnet Tragwerke, optimiert Stahlprofile, prüft Normen. Creates BOMs as draft — the engineer reviews and approves.

PyNite FEM DXF Eurocode 8
Accounting & Finance

Finanz-Agent

Accesses ETA, DATEV, or other accounting systems. Delivers balances and cash flow in seconds. Prepares bookings — the accountant reviews and approves.

ETA V8 DATEV SQL
Lager & Beschaffung

Logistik-Agent

Monitors inventory via ERP interface, detects shortfalls. Creates requisition — Einkäufer gibt Bestellung frei.

SAP Navision REST
Production Control

Manufacturing Agent

Reads machine status, optimises order sequence, creates shift handover reports. Suggests sequence — production manager approves.

OPC-UA MES-API SQL
Personalwesen

HR-Agent

Checks vacation requests against team calendar, tracks onboarding, warns about contract deadlines. Recommends decision — Führungskraft genehmigt.

Personio DATEV iCal
Recht & Verträge

Legal-Agent

Scans contracts for deadlines, generates NDA drafts from templates, reports regulatory changes. Creates draft — the lawyer reviews and approves.

d.velop ELO PDF/OCR
IT-Betrieb

IT-Ops-Agent

Receives monitoring alerts, enriches tickets, monitors license expirations. Priorisiert Incident — the admin reviews and escalates.

Zabbix Jira SNMP
+

Ihr Agent

Individually configured for your department, your systems, your workflows.

Jetzt besprechen

These are examples. AIMOS agents are individually configured per company — every department, every interface, every workflow. More about the agent architecture.