May 27, 2024

LLM Benchmarking with Single-Agent Stochastic Dynamic Simulations

Sai Joseph, Anita Beroza, Eleni Angelou, Sofia Mendez, Evelyn Ciara

A benchmark for evaluating the performance of SOTA LLMs in dynamic real-world scenarios.

Reviewer's Comments

Reviewer's Comments

Arrow
Arrow
Arrow

Good concept, fleshed out. Really like the “applied decision making” that combines human-interpretable ideas of ethics with a formalised benchmark based off game theory.

I really like the idea of using LLMs for creating dynamic benchmarks on the fly! I’d be keen to see more data and analysis to get a sense of the strengths and weaknesses of this approach. I do think more analysis of the methodology itself would be needed before worrying too much about the object-level results. Developing this methodological analysis could be a major contribution though.

This idea is super interesting, and I would like to see future work which builds on some of these concepts! As a fan or roleplaying games, I appreciate the stochastic choose-your-own adventure angle, and think that it could be a really good methodology for getting more comprehensive understanding of model behavior in a general sense, not just for this work, which is awesome; I would really like to see this idea developed further.

One aspect that could be valuable to investigate in the near future would be to increase the stochasticity of the setup. More specifically, I think that varying expected payoff of the three choices per question within the game, as supposed to per game itself, could provide interesting insights.  Another direction which may be worth exploring would be to construct scenarios in which an action from any of the three categories was a substantially reasonable course of action, which may require some additional prompting strategies for scenario construction. Finally, your suggested evaluation sounded quite interesting, and I would have liked to see some of its results.

Very interesting, I'd be curious to see more descriptions in the appendix of the concrete scenarios and why you end up seeing 100% cooperation rate with GPT-4. Similarly, we'd get some interesting information out of running this against something like Grok, Claude Sonnet, Llama, and so on, since we'd like to spot models that are not 100% cooperative. It seems some of the content in the repository could have been moved into the report and it would've been interesting to see some type of conversation plots or cooperation rate by scenario effect sizes, but that's of course difficult if all scenarios result in cooperation. In summary, the methodology seems interesting but could be backed up by more results and evaluation on more models.

Cite this work

@misc {

title={

LLM Benchmarking with Single-Agent Stochastic Dynamic Simulations

},

author={

Sai Joseph, Anita Beroza, Eleni Angelou, Sofia Mendez, Evelyn Ciara

},

date={

5/27/24

},

organization={Apart Research},

note={Research submission to the research sprint hosted by Apart.},

howpublished={https://apartresearch.com}

}

Recent Projects

View All

Feb 2, 2026

Markov Chain Lock Watermarking: Provably Secure Authentication for LLM Outputs

We present Markov Chain Lock (MCL) watermarking, a cryptographically secure framework for authenticating LLM outputs. MCL constrains token generation to follow a secret Markov chain over SHA-256 vocabulary partitions. Using doubly stochastic transition matrices, we prove four theoretical guarantees: (1) exponentially decaying false positive rates via Hoeffding bounds, (2) graceful degradation under adversarial modification with closed-form expected scores, (3) information-theoretic security without key access, and (4) bounded quality loss via KL divergence. Experiments on 173 Wikipedia prompts using Llama-3.2-3B demonstrate that the optimal 7-state soft cycle configuration achieves 100\% detection, 0\% FPR, and perplexity 4.20. Robustness testing confirms detection above 96\% even with 30\% word replacement. The framework enables $O(n)$ model-free detection, addressing EU AI Act Article 50 requirements. Code available at \url{https://github.com/ChenghengLi/MCLW}

Read More

Feb 2, 2026

Prototyping an Embedded Off-Switch for AI Compute

This project prototypes an embedded off-switch for AI accelerators. The security block requires periodic cryptographic authorization to operate: the chip generates a nonce, an external authority signs it, and the chip verifies the signature before granting time-limited permission. Without valid authorization, outputs are gated to zero. The design was implemented in HardCaml and validated in simulation.

Read More

Feb 2, 2026

Fingerprinting All AI Cluster I/O Without Mutually Trusted Processors

We design and simulate a "border patrol" device for generating cryptographic evidence of data traffic entering and leaving an AI cluster, while eliminating the specific analog and steganographic side-channels that post-hoc verification can not close. The device eliminates the need for any mutually trusted logic, while still meeting the security needs of the prover and verifier.

Read More

Feb 2, 2026

Markov Chain Lock Watermarking: Provably Secure Authentication for LLM Outputs

We present Markov Chain Lock (MCL) watermarking, a cryptographically secure framework for authenticating LLM outputs. MCL constrains token generation to follow a secret Markov chain over SHA-256 vocabulary partitions. Using doubly stochastic transition matrices, we prove four theoretical guarantees: (1) exponentially decaying false positive rates via Hoeffding bounds, (2) graceful degradation under adversarial modification with closed-form expected scores, (3) information-theoretic security without key access, and (4) bounded quality loss via KL divergence. Experiments on 173 Wikipedia prompts using Llama-3.2-3B demonstrate that the optimal 7-state soft cycle configuration achieves 100\% detection, 0\% FPR, and perplexity 4.20. Robustness testing confirms detection above 96\% even with 30\% word replacement. The framework enables $O(n)$ model-free detection, addressing EU AI Act Article 50 requirements. Code available at \url{https://github.com/ChenghengLi/MCLW}

Read More

Feb 2, 2026

Prototyping an Embedded Off-Switch for AI Compute

This project prototypes an embedded off-switch for AI accelerators. The security block requires periodic cryptographic authorization to operate: the chip generates a nonce, an external authority signs it, and the chip verifies the signature before granting time-limited permission. Without valid authorization, outputs are gated to zero. The design was implemented in HardCaml and validated in simulation.

Read More

This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.
This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.