top of page

Agentforce A2A Architecture: Why One Agent Is Your Biggest Risk

Updated: 2 days ago


The Build That Looks Right Until It Isn't


Most Agentforce deployments start the same way. One agent. One long list of Agent Topics covering billing, renewals, logistics, and pricing. One Atlas Reasoning Engine loop is trying to determine which topic even applies before it can begin doing anything useful.

The symptoms are predictable. Reasoning slows down. Token costs climb. Outputs become unreliable because the agent is stretched across too many domains at once.


Over 18,500 organisations are now running Agentforce. The ones scaling confidently aren't adding more Topics to a single agent. They're building coordinated systems: an Orchestrator that interprets intent and delegates, and Specialized Agents that each own exactly one domain.


That structure is Agent-to-Agent (A2A) architecture. And the gap between a performant deployment and a sluggish, expensive one often comes down to whether this decision was made early - or not at all.


If you're still evaluating whether Agentforce is the right move, Implementology covers how we approach it end-to-end.


The Architecture Gap: Monolithic vs. Coordinated


Most teams don't realise their agent design is the bottleneck until token costs are already high and response quality is already degrading. The difference between a monolithic agent and a coordinated A2A system isn't complexity - it's whether the right structural decisions were made upfront.


Dimension

Monolithic Agent

A2A Architecture

Reasoning Speed

Slow. One loop evaluates every domain before acting.

Fast. Orchestrator delegates; Specialized Agents reason only within their scope.

Token Cost

High and unpredictable. Every prompt traverses all Topics.

Controlled. Each agent reasons against a focused DMO set.

Output Reliability

Degrades as Topics grow. Context bleed between domains.

Stable. Agents are scoped and grounded in a single source of truth.

Governance

Difficult to audit. Behaviour changes when Topics interact.

Enforceable. Per-agent guardrails, Trust Scores, and User Persona rules.

Failure Impact

One broken Topic can affect all outputs.

Isolated. A failing Specialized Agent doesn't take down the system.


The Core Structure: Orchestrator and Specialized Agents


The Orchestrator


The Orchestrator is configured using GenAiPlanner metadata. It holds an Orchestration Topic with Agent Actions that route incoming prompts to the right Specialized Agent via the A2A protocol.


Because the Orchestrator uses the Atlas Reasoning Engine only for delegation decisions - not domain reasoning - its loop stays fast, and its token cost stays low. It doesn't need to understand billing or logistics. It needs to know which agent does.


Specialized Agents


Specialized Agents are headless agents, each scoped to one business domain.

  • A Billing Agent holds a Billing Inquiry Topic grounded in invoice and payment Data Model Objects (DMOs) inside Data 360.

  • A Logistics Agent holds a Shipment Topic grounded in inventory and fulfillment DMOs.


Each Specialized Agent reads live data through Zero Copy - no ETL lag, no data replication. Every reasoning loop runs against the current source of truth.


The governing principle is simple: one Topic, one DMO set, per agent. Focused agents reason faster, cost less to run, and are far easier to govern.


Two Orchestration Patterns


According to the Salesforce Agentic Patterns guide, there are two primary ways to orchestrate Specialized Agents in production.


Collaborative (Swarm)


The Orchestrator dispatches parallel A2A requests to multiple Specialized Agents simultaneously. Each agent queries its own DMOs, executes its Apex-Defined Actions, and returns its findings. The Orchestrator synthesises all responses into one output.


When to use it: A high-value contract needs simultaneous review across Legal, Credit, and Supply Chain. All three Specialized Agents run at once and report back. What used to take days resolves inside a single Agentforce session.


Sequential (Pipeline)


The output of one Specialized Agent becomes the mandatory input for the next. A GenAiPlanner rule validates each handoff before the next agent begins. If the Pricing Agent proposes a discount above a defined threshold, the rule overrides the standard next step and reroutes the A2A request to the VP Finance Agent - not the Order Provisioning Agent.


When to use it: An order moves through Sales confirmation, Finance tax calculation, and ERP Provisioning in sequence. Nothing advances until each step is validated and the handoff is verified.


Three Failure Modes to Architect Against


Getting A2A architecture right means designing against the ways it fails. Three failure modes appear most often in production deployments. As Salesforce Ben's A2A architecture deep dive notes, these aren't edge cases - they're predictable structural risks.


Token Storms


Two Specialized Agents with overlapping Agent Topics receive the same A2A request and pass it back and forth indefinitely - burning through Agentforce capacity with no resolution in sight.


The fix: Set a Max Hop Count attribute on the Orchestrator. After five agent transfers, the session terminates and a Human-in-the-Loop escalation triggers automatically. Define this before you wire up multiple agents, not after the first runaway loop.


Hallucination Propagation


In a Sequential pipeline, a wrong output from the first Specialized Agent flows forward and compounds through every agent after it. The error multiplies. It doesn't self-correct.


The fix: Strict DMO grounding. Always pass the Salesforce RecordId as the primary key in every A2A handoff - never a Name field, never a status string. The RecordId ties every downstream agent back to the original Data 360 source record. Without it, a corrupted handoff has no anchor.


Agent Deadlock


Two Specialized Agents are waiting on each other. Both suspended. No path forward.


The fix: Orchestrator-led timeouts. When a Specialized Agent doesn't return an A2A response within the defined window, the Orchestrator publishes a Platform Event into the relevant Slack Channel, creates a Human-in-the-Loop approval task in Service Cloud, and suspends the Flow until a human responds. The system surfaces the blockage - it doesn't silently stall.


A Token Storm that runs unchecked. A hallucination that compounds through three sequential agents. A deadlock with no resolution path. Skip these guardrails, and these surface in a client escalation - not a system check.


Governance That Holds at Scale


A well-designed A2A system isn't just fast. It has to be trustworthy and auditable at scale.

Every A2A call passes through the Einstein Trust Layer, which masks PII before it reaches the LLM and records a full reasoning path for Agentforce Observability. GenAiPlanner rules enforce behavioural guardrails based on User Persona - a junior Sales rep cannot invoke a restricted Agent Action regardless of how their prompt is phrased.


Agent Cards publish each agent's capabilities, compliance tags, and Trust Score to the Orchestrator, enabling secure discovery and delegation across organisations and AgentExchange partners.


If your A2A deployment doesn't have per-agent Trust Scores, defined User Persona guardrails, and an Observability baseline in place before go-live, the governance gaps will surface when an auditor or an executive asks what the agent actually did.


Build the Right Agent First


The teams that succeed with A2A architecture follow the same sequence every time. They build one Specialized Agent, scope it to one Topic and one set of DMOs, validate it in the Agentforce Testing Center, measure token cost and response accuracy - and only then connect it to an Orchestrator.


The teams that struggle try to wire up the full Swarm before proving any single agent works.


Scope one Agent Topic. Ground it in one DMO set. Prove it. Then orchestrate.


Key Takeaways

  • A single overloaded agent is the most common Agentforce bottleneck - A2A architecture is the structural fix.

  • The Orchestrator handles delegation only. Specialized Agents handle domain reasoning. Keeping these responsibilities separate is what makes the system fast and cost-controlled.

  • Collaborative (Swarm) patterns suit parallel, simultaneous workstreams. Sequential (Pipeline) patterns suit ordered, validated handoffs.

  • Design against Token Storms, Hallucination Propagation, and Agent Deadlock from the start - not after the first production incident.

  • Prove a single Specialized Agent before connecting it to an Orchestrator. Swarm failures are harder to isolate than single-agent failures.


Ready to Get Your A2A Architecture Right?


At Implementology, we design Agentforce deployments where Orchestrators, Specialized Agents, and your data model work as one coordinated system - including the governance and failure handling that makes it production-ready.



 
 
 

Comments


bottom of page