Learning to Report Unsafe Tasks in a Multi-Agent Game
cs.AI, cs.MA
Submitted: 2026-10-06
Updated: 2026-10-09
License: http://creativecommons.org/licenses/by/4.0/
The gist: When a team of agents shares a reward for completed tasks, reporting and stopping unsafe work reduces the team's reward.
Abstract
When a team of agents shares a reward for completed tasks, reporting and stopping unsafe work reduces the team's reward. Random audits that penalize silence can make universal reporting optimal without ensuring that a silent team learns to report. We study this problem in a game where any witness can stop a task by reporting. When a task's k witnesses share a policy and draw actions independently, the derivative of expected reward with respect to the shared silence probability at universal silence counts its benefit k times, while the comparison between universal reporting and silence counts it once. A fully shared policy can therefore be locally attracted to silence even when reporting is optimal. For any grouping into shared policies, we give an audit condition sufficient for exact policy-gradient updates to reach universal reporting and, outside boundary cases, necessary from near universal silence. In a balanced family, meeting the condition with prescribed margins costs k times as much for a fully shared policy as for one policy per role. We test these predictions with PPO on 24 witness graphs, starting from learned silence. Witness groups, which place co-witnesses in separate networks, reduce unsafe task completion by 33.59 percentage points relative to shuffled groups of the same sizes under the same audits (95% graph-bootstrap interval: 21.03-45.13). Only 9 of 48 witness-group runs achieve below 1% unsafe completion while retaining at least 90% legitimate completion. At the same audit budget, a fully shared network meets both thresholds in 0/48 runs with independent action draws and 48/48 with a common draw. On 24 further graphs with witness groups fixed, audits allocated by the condition reduce unsafe completion by 42.22 points relative to audits maximizing a static coalition deterrence ratio at the same budget.
Sources
- Concrete Problems in AI Safety
- Measuring Progress on Scalable Oversight for Large Language Models
- Multi-Agent Risks from Advanced AI
- Training LLMs for Honesty via Confessions
- Adam: A Method for Stochastic Optimization
- Training Agents to Self-Report Misbehavior
- A Case Study on Emergent Cheating and Whistleblowing in Autonomous Research Swarms
- Proximal Policy Optimization Algorithms
- Revisiting Parameter Sharing in Multi-Agent Deep Reinforcement Learning
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems