Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games
Soumya Nayak · Team Mutual Information
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
Detecting which AI agents are secretly coordinating is a safety problem for multi-agent systems. Bonjour et al. (2022) proposed detecting collusion with mutual information between agents’ actions, including a measure called pairwise net influence, which subtracts the strongest outside influence on each agent. I implemented this measure for the fully observable simultaneous case and tested whether it identifies the colluding pair better than plain correlation (Cramér’s V), a baseline the paper does not include. I simulated four-agent Rock-Paper-Scissors with one hand-crafted colluding pair whose strength is set by a parameter p. My setup differs from the paper in several ways: four players instead of three, a different collusion rule, no poker or learned agents, and ranking pairs by the smaller of the two directional scores instead of applying a detection threshold. I tested four scenarios (no decoy, hub decoy, chain decoy, separate decoy pair) with 200 trials per setting and 95% Wilson confidence intervals. Both methods ranked the planted pair first almost every time once collusion was strong enough (for example p ≥ 0.6 against a separate decoy of strength 0.5, with 500 rounds), and both performed poorly when collusion was weak. Across 7,200 trials the two methods chose different pairs in only 49 (0.7%), mostly in the hub and chain scenarios, where both were wrong in 34 of the 40 disagreements. I found no evidence that net influence outperforms plain correlation in this simple setting.
Reviews
This project implements the pairwise net influence detector from Bonjour et al. (2022) and compares it with a simple baseline the original paper lacks. The work is careful and honest. The code is short, readable, unit-tested and fully reproducible, and it matches the methods description. The confidence intervals, the disagreement analysis and the “What did not work” section are all good practice. The conclusion, that there is no evidence net influence beats Cramér’s V here, is stated with appropriate restraint. The main concern is whether this setup could have shown a difference at all.
The baseline is almost the same statistic as the detector’s own input. For a 3×3 table, mutual information and Cramér’s V are nearly monotone transforms of each other, because MI is roughly proportional to χ²/n when dependence is weak. I checked this with the repo’s own simulators. Across 3,600 games covering all four scenarios, raw MI and Cramér’s V chose the same top pair in 3,590 (99.7%). So the real comparison is net influence with the outside-influence subtraction versus without it, not “information-theoretic vs correlation.” Framing it that way would make the finding sharper.
The decoys can’t be told apart from collusion, so no dependence-based detector could separate them. In every scenario, each decoy link is a direct copy or beat rule with the same form as the planted collusion. The separate-decoy pair (0,1) behaves exactly like a colluding pair and is “innocent” only by label. When the decoy is stronger than the real pair, every method that ranks by dependence strength should pick the decoy. The paper notes this follows from the design, but it means the headline curves mostly measure “p vs q.”
The case net influence was designed for isn’t measured. The subtraction exists to stop a third agent from creating apparent collusion. In the hub scenario, agents 1 and 2 both copy agent 0, so the pair (1,2) looks dependent without any direct link between them. That indirect link is always weaker than the direct links behind it, so it is almost never the top-ranked pair. The question that matters is whether it gets falsely flagged, and ranking only the top pair hides that. The ranking rule also drops the threshold, which is the paper’s actual decision mechanism. Without it, specificity can’t be assessed at all. A further side effect: when a colluder also has a strong innocent link (hub/chain), the subtraction penalizes the true pair, which may explain some of the “both wrong” cases.
A suggested redesign. Add no-collusion and confounder-only conditions. Apply the paper’s threshold α and report false-positive and true-positive rates (ROC curves) for each method. Make sure at least one condition has an indirect, confounded link stronger than the real collusion. A setting where the common driver is partly unobserved would make the comparison meaningful.
Minor issues.
The intro describes Fish et al. (2024) as showing “sub-competitive” pricing; their finding was supracompetitive pricing.
Raw LaTeX (\(\gamma(i;j)\)) appears in the intro.
The reproducibility paragraph still says “(add the link).”
“Collab” should be “Colab,” and the repo name has a typo (“detetction”).
Seeds shared across p values make the points on each curve correlated, which the paper rightly notes.
Agent 3 “beats agent 2’s move” in the same round, which assumes agent 3 can see that move. That’s fine for a toy model but worth stating, since the game is described as simultaneous.
Overall, this is a solid, well-documented negative result. With a false-positive test and a confounder scenario built for the purpose, it would directly answer the question it poses.
Read full reviewShow less
Cite this project
@misc{nayak2026detecting,
title = {{Detecting Collusion with Pairwise Net Influence: A Baseline Comparison in Toy Multi-Agent Games}},
author = {Soumya Nayak},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/detecting-collusion-with-pairwise-net-influence-a-baseline-comparison-in-toy-multiagent-games-y61g}},
url = {https://apartresearch.com/sprints/projects/detecting-collusion-with-pairwise-net-influence-a-baseline-comparison-in-toy-multiagent-games-y61g}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …