Improving the Safety and Trustworthiness of Medical AI via Multi-Agent Evaluation Loops
Zainab Ghafoor, Md Shafiqul Islam, Koushik Howlader, Md Rasel Khondokar, Tanusree Bhattacharjee, Sayantan Chakraborty, Adrito Roy, Ushashi Bhattacharjee, Tirtho Roy
TL;DR
This work tackles the safety and ethical risks of medical LLMs by introducing an inference-time, non-retraining multi-agent refinement loop. It pairs two generators (DeepSeek R1 and Med-PaLM) with two evaluators (LLaMA 3.1 for AMA ethics and Phi-4 for SRA risk) to iteratively revise outputs across 900 adversarial prompts, guided by AMA ethics and SRA-5 criteria. The results show substantial safety gains, with an 89% reduction in ethics violations and a 92% reduction in risk levels, achieved within five iterations for the vast majority of prompts. Importantly, the approach avoids retraining the generator, enabling regulator-aligned, adaptable safety governance that can be updated by altering evaluation policies and prompts. The study demonstrates a scalable pathway to safer medical AI, while acknowledging the need for clinician calibration and broader validation across models and clinical contexts.
Abstract
Large Language Models (LLMs) are increasingly applied in healthcare, yet ensuring their ethical integrity and safety compliance remains a major barrier to clinical deployment. This work introduces a multi-agent refinement framework designed to enhance the safety and reliability of medical LLMs through structured, iterative alignment. Our system combines two generative models - DeepSeek R1 and Med-PaLM - with two evaluation agents, LLaMA 3.1 and Phi-4, which assess responses using the American Medical Association's (AMA) Principles of Medical Ethics and a five-tier Safety Risk Assessment (SRA-5) protocol. We evaluate performance across 900 clinically diverse queries spanning nine ethical domains, measuring convergence efficiency, ethical violation reduction, and domain-specific risk behavior. Results demonstrate that DeepSeek R1 achieves faster convergence (mean 2.34 vs. 2.67 iterations), while Med-PaLM shows superior handling of privacy-sensitive scenarios. The iterative multi-agent loop achieved an 89% reduction in ethical violations and a 92% risk downgrade rate, underscoring the effectiveness of our approach. This study presents a scalable, regulator-aligned, and cost-efficient paradigm for governing medical AI safety.
