Voluntary Collusion with Secret Tools in Competing LLM Agents
cs.AI, cs.MA
Submitted: 2026-05-26
Updated: 2026-10-05
Comments: 54 pages. v2: revised and extended version
License: http://creativecommons.org/licenses/by/4.0/
The gist: Even when a tool is explicitly described as unfair and harmful to others, ostensibly safety-aligned LLM agents still voluntarily engage in secret collusion whenever doing so confers a strategic
Terminology
Abstract
Even when a tool is explicitly described as unfair and harmful to others, ostensibly safety-aligned LLM agents still voluntarily engage in secret collusion whenever doing so confers a strategic advantage. To investigate this phenomenon, we introduce an empirical framework built on two strategic multi-agent environments: Liar's Bar, a competitive deception scenario, and Cleanup, a mixed-motive resource-management scenario, in which agents are offered secret collusion tools that provide significant advantages while clearly disadvantaging the other agents. Across 12 models (at the 7B, 70B, and proprietary scales) and 6 prompt variants, we find that most agents consistently accept these tools and develop collusive strategies, while explicitly acknowledging the unfairness of the tools before accepting. We further show that neither the unfairness labels nor baseline alignment alone reliably deters collusion: only explicit ethical framing reduces adoption and, even then, smaller models remain susceptible. More broadly, our work presents the first systematic investigation of voluntary collusion adoption in LLM-based multi-agent systems, and suggests that preventing such behaviour requires explicit safeguards rather than reliance on general alignment.
Sources
- Evaluating LLM Agent Collusion in Double Auctions
- StylePredict: Machine Theory of Mind for Human Driver Behavior From Trajectories
- Perfectly Secure Steganography Using Minimum Entropy Coupling
- Algorithmic Collusion by Large Language Models
- Alignment faking in large language models
- Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training
- Scalable Evaluation of Multi-Agent Reinforcement Learning with Melting Pot
- Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems
- Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmark
- Discovering Language Model Behaviors with Model-Written Evaluations
- NOPA: Neurally-guided Online Probabilistic Assistance for Building Socially Intelligent Home Assistants
- Large Language Models can Strategically Deceive their Users when Put Under Pressure
- Stress Testing Deliberative Alignment for Anti-Scheming Training
- Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goals
- Towards Understanding Sycophancy in Language Models
- Prompt Injection Attack to Tool Selection in LLM Agents
- Multi-Party Chat: Conversational Agents in Group Settings with Humans and Models
- Exploring Large Language Models for Communication Games: An Empirical Study on Werewolf
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems