The Error That Never Reached the Agent
- Admitted
- 2026-10-05
- Source dataset
- BugReAct (When Agents Fail)
- Source
- GitHub, n8n-io/n8n
- Failure mode
- Other
- Agent system
- Tool-calling
- Tool access
- Write access
- Industry
- Customer service
Presenting Behaviour
An AI Agent workflow was built to answer helpdesk queries using a set of connected tools, including a ticket management integration. The agent's system prompt described explicit error-handling logic: if a tool call fails, try looking up the correct parameters first, then retry. In practice, whenever the ticket management tool returned an error response (for example, a 400-level error from an invalid assignee) the entire workflow terminated immediately. The error was not passed back to the agent as a tool observation. The agent never saw the error, never had a chance to apply its recovery logic, and never produced an answer.
Case Replay
A reconstruction, not a simulation. This sequence is reconstructed from the public incident record and summarised in our own words. It is a static record of what was reported, and nothing here can be run or replayed live.
4 steps
- Helpdesk workflow. An agent uses a ticket tool with a recovery prompt.
- Tool errors. A 400-level error comes back. This is where the agent derailed.
- Workflow terminates. The error never reaches the agent.
- No answer. It never gets to apply its recovery logic.
Differential Diagnosis
A deliberate hard-stop policy (tool errors should always abort) considered and ruled out. The agent had explicit recovery instructions for exactly this scenario, and the framework provides no mechanism to distinguish 'user intended this as a hard stop' from 'user intended the agent to handle this.' The termination was not a policy; it was an unintended side effect of how errors were routed.
A model failure to apply its own recovery instructions, considered and ruled out. The agent never received the error signal to act on. Distinguishing whether the model would have recovered correctly is impossible because the framework ensured it was never given the chance.
Apraxia, most consistent with the evidence: the agent had been given correct recovery logic and the right tools to apply it, but the framework's error routing made the tools effectively unusable, a specific, known type of failure (a 400-level error) could not be handled because the mechanism for communicating it to the agent was absent.
Working Diagnosis
Apraxia: the agent had the right tool and the right recovery instructions, but the framework's error handling prevented the error from reaching the agent at all, making the tool-recovery process impossible to execute.
Discussion
An agent's system-prompt logic can only work on what the agent can see. When an error terminates the workflow before it reaches the model, any error-handling guidance in the system prompt becomes dead letter, not because the agent won't follow it, but because the information never arrives. Framework-level choices about what counts as a 'workflow error' versus what should be returned as a 'tool observation' have direct consequences for what kinds of failures an agent can actually recover from.
Mitigation Strategy
Return tool errors to the agent as observations rather than terminating the workflow.
Governance Guardrails
Framework error handling that surfaces tool failures to the model; testing of error paths.
Typical Presentation in Human Patients
General clinical background, included for context. Not medical advice, and not a diagnosis of any individual.
Apraxia usually follows damage to specific brain regions, often after a stroke. A person with apraxia cannot carry out a previously familiar, purposeful movement (such as waving goodbye or using a comb) on request or by imitation, even though their muscle strength, coordination, and understanding of what's being asked are otherwise intact.
Source Note
GitHub, n8n-io/n8n
https://github.com/n8n-io/n8n/issues/24042