Two Papers Warn That Safe LLMs Do Not Compose Into Safe Multi-Agent Systems · Polylog