An Offer You Can't Refuse: How Agents Decide to Collude - and How To Stop Them
Tom Loscalzo
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
As recent security incidents have shown, AI agents can collude, circumvent their controls and create unexpected harms in pursuit of their goals. Humans did the same when NASDAQ market makers raised their profits at other traders' expense.
We ran more than 3,500 games on two open models in a simulated market where AI market makers post prices under a regulator.
When agents are able to communicate, they are far more likely to collude.
An agent's initial instructions disproportionately influence collusion: a target price in the prompt becomes the price agents collude at. An ethical persona prompt does not prevent collusion but steers it towards better outcomes.
Collusion can be predicted: agents that open with noncompetitive prices tend to keep them there.
AI can detect prompts which "tempt" other agents to collude, but not themselves; The existence of temptations to collude in prompts is highly predictive of it.
These findings matter for how AI agents are tested, instructed, monitored, and supervised.
Reviews
No public critique yet.
Cite this project
@misc{loscalzo2026offer,
title = {{An Offer You Can't Refuse: How Agents Decide to Collude - and How To Stop Them}},
author = {Tom Loscalzo},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/an-offer-you-cant-refuse-how-agents-decide-to-collude-and-how-to-stop-them-heof}},
url = {https://apartresearch.com/sprints/projects/an-offer-you-cant-refuse-how-agents-decide-to-collude-and-how-to-stop-them-heof}
}More from AI Collusion Research Sprint
- View project: Collusion, Competion and Collapse
Collusion, Competion and Collapse
Atelier Alex Cline
Do AI traders collude when nobody tells them to? We built agora, a six-market benchmark with exact competitive and collusive benchmarks, and ran seven open-weight 2-4B models in 590 completed games under five …
- View project: Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Rogue Agents in Jail 🕵️🕵️♀️👮♂️
In order to advance AI safety research into shaping public policy, the development of technical controls needs to have a clear purpose, evidence, and limitations that are understandable for the people responsible for …
- View project: Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Gamma Ray
We test whether the information-theoretic collusion detector of Bonjour et al, validated on scripted agents, works on LLM agents. Gemma, Mistral and Qwen played 1000 rounds of three-player Rock-Paper-Scissors in three …