Skip to content
Sprint projectOct 23, 2026

Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games

Soumya Nayak · Team Mutual Information

Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games

Share

Detecting which AI agents are secretly coordinating is a safety problem for multi-agent systems. Bonjour et al. (2022) proposed detecting collusion with mutual information between agents’ actions, including a measure called pairwise net influence, which subtracts the strongest outside influence on each agent. I implemented this measure for the fully observable simultaneous case and tested whether it identifies the colluding pair better than plain correlation (Cramér’s V), a baseline the paper does not include. I simulated four-agent Rock-Paper-Scissors with one hand-crafted colluding pair whose strength is set by a parameter p. My setup differs from the paper in several ways: four players instead of three, a different collusion rule, no poker or learned agents, and ranking pairs by the smaller of the two directional scores instead of applying a detection threshold. I tested four scenarios (no decoy, hub decoy, chain decoy, separate decoy pair) with 200 trials per setting and 95% Wilson confidence intervals. Both methods ranked the planted pair first almost every time once collusion was strong enough (for example p ≥ 0.6 against a separate decoy of strength 0.5, with 500 rounds), and both performed poorly when collusion was weak. Across 7,200 trials the two methods chose different pairs in only 49 (0.7%), mostly in the hub and chain scenarios, where both were wrong in 34 of the 40 disagreements. I found no evidence that net influence outperforms plain correlation in this simple setting.

Reviews

Judging this Sprint?

Review “Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games”

Your public critique appears on the project page without your name. Reviews of strong projects are shared with funders, as you choose below.

Not shown on the project page.

Shown on the project page, without your name.

Only the Apart team reads this, and funders if you agree below.

Decline to score

Only when the quality of the writing makes the work impossible to follow. Say why in your private critique; the project page shows only that a judge declined, not why.

How much would this matter for the field if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.
Sharing your name *

When we share a strong project with funders, your name, scores and public critique go with it, confidentially; this choice is only about whether your name is public. If you think this project deserves funding, please also endorse it: that carries the most weight.

Share my private critique with funders *

See our Privacy Policy.

  1. This project implements the pairwise net influence detector from Bonjour et al. (2022) and compares it with a simple baseline the original paper lacks. The work is careful and honest. The code is short, readable, unit-tested and fully reproducible, and it matches the methods description. The confidence intervals, the disagreement analysis and the “What did not work” section are all good practice. The conclusion, that there is no evidence net influence beats Cramér’s V here, is stated with appropriate restraint. The main concern is whether this setup could have shown a difference at all.

    The baseline is almost the same statistic as the detector’s own input. For a 3×3 table, mutual information and Cramér’s V are nearly monotone transforms of each other, because MI is roughly proportional to χ²/n when dependence is weak. I checked this with the repo’s own simulators. Across 3,600 games covering all four scenarios, raw MI and Cramér’s V chose the same top pair in 3,590 (99.7%). So the real comparison is net influence with the outside-influence subtraction versus without it, not “information-theoretic vs correlation.” Framing it that way would make the finding sharper.

    The decoys can’t be told apart from collusion, so no dependence-based detector could separate them. In every scenario, each decoy link is a direct copy or beat rule with the same form as the planted collusion. The separate-decoy pair (0,1) behaves exactly like a colluding pair and is “innocent” only by label. When the decoy is stronger than the real pair, every method that ranks by dependence strength should pick the decoy. The paper notes this follows from the design, but it means the headline curves mostly measure “p vs q.”

    The case net influence was designed for isn’t measured. The subtraction exists to stop a third agent from creating apparent collusion. In the hub scenario, agents 1 and 2 both copy agent 0, so the pair (1,2) looks dependent without any direct link between them. That indirect link is always weaker than the direct links behind it, so it is almost never the top-ranked pair. The question that matters is whether it gets falsely flagged, and ranking only the top pair hides that. The ranking rule also drops the threshold, which is the paper’s actual decision mechanism. Without it, specificity can’t be assessed at all. A further side effect: when a colluder also has a strong innocent link (hub/chain), the subtraction penalizes the true pair, which may explain some of the “both wrong” cases.

    A suggested redesign. Add no-collusion and confounder-only conditions. Apply the paper’s threshold α and report false-positive and true-positive rates (ROC curves) for each method. Make sure at least one condition has an indirect, confounded link stronger than the real collusion. A setting where the common driver is partly unobserved would make the comparison meaningful.

    Minor issues.

    The intro describes Fish et al. (2024) as showing “sub-competitive” pricing; their finding was supracompetitive pricing.

    Raw LaTeX (\(\gamma(i;j)\)) appears in the intro.

    The reproducibility paragraph still says “(add the link).”

    “Collab” should be “Colab,” and the repo name has a typo (“detetction”).

    Seeds shared across p values make the points on each curve correlated, which the paper rightly notes.

    Agent 3 “beats agent 2’s move” in the same round, which assumes agent 3 can see that move. That’s fine for a toy model but worth stating, since the game is described as simultaneous.

    Overall, this is a solid, well-documented negative result. With a false-positive test and a confounder scenario built for the purpose, it would directly answer the question it poses.

    Read full reviewShow less

Cite this project

@misc{nayak2026detecting,
  title = {{Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games}},
  author = {Soumya Nayak},
  year = {2026},
  month = oct,
  note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/detecting-collusion-with-pairwise-net-influence-a-baseline-comparison-in-toy-multiagent-games-y61g}},
  url = {https://apartresearch.com/sprints/projects/detecting-collusion-with-pairwise-net-influence-a-baseline-comparison-in-toy-multiagent-games-y61g}
}