MoRCA Filtering of Seeded Wrong-Answer Propagation in Qwen3-0.6B Agents
Tyler Rector · Team MoRCA
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
When language-model agents exchange answers, one erroneous claim can return as apparent corroboration. We test whether a task-conditioned communication gate limits this failure in a three-agent Qwen3-0.6B network. Four fixed conditions cover independent agents, externally supplied correct messages, a seeded wrong-answer ring, and a structural cycle without causal return. The proposed severity score combines a harmful message marginal with directed path topology, intervention-based return fidelity, and a Möbius interaction deficit. A gate delivers messages with probability w = (1 + 3S)−1. On 64 held-out seeded-error tasks, accuracy increases from 48/64 without filtering to 55/64 with gating (paired two-sided exact McNemar p = 0.015625). Expected-token-matched random filtering reaches 53/64, not significantly different from MoRCA (p = 0.6875, exploratory). Every measured return-fidelity score is zero, so the tested gate reduces to harmful-marginal filtering. The experiment supports a narrow reliability result under seeded misinformation but does not establish an advantage for the complete mathematical construction or demonstrate collusion detection. A follow-up test must produce verified causal returns before evaluating the proposed interaction.
Reviews
The paper presents a nice experiment. The reporting is good and honest. The main issue for this sprint is that it isn’t a collusion study. The paper says so itself - it models one wrong answer spreading, not agents coordinating on purpose, and it admits the return-fidelity term was zero in every case, so only the simple harm filter was really tested. I appreciate this, many people would hide it.
Most of the paper builds the Möbius, topology and return terms, and in the final experiment none of them did anything. The improvement from 48/64 to 55/64 is real but small, and random filtering got 53/64, which the authors also say is not different enough. So simple filtering helped a little, and the full method is still untested. The results also come from one evaluation seed, and the logs and replays are described but not shared anywhere. There’s also no repo link and no dual-use section, both of which the submission guidelines ask for.
Next I would suggest - run the comparison you already proposed: full MoRCA vs H-only, with matched message budgets on cases where the return term is confirmed to be non-zero. If the extra terms still add nothing, keep the simple gate. Also, use ten or more seeds. This is a study about wrong answers spreading between agents and not collusion. To fit this sprint, extend it to agents who can gain by coordinating against someone else.
Read full reviewShow less
The reporting is good and honest. The paper clearly says it is not detecting collusion, and it admits the return-fidelity term was zero in every case, so only the simple harm filter was really tested. I appreciate this, many people would hide it.
But this also shows the main problem. Most of the paper builds the Möbius, topology and return terms, and in the final experiment none of them did anything. The improvement from 48/64 to 55/64 is real but small, and random filtering got 53/64. One thing worth adding to the paper: in your own results, MoRCA dropped far fewer helpful messages than random filtering (5 of 327 vs 14 of 327), which is a better argument for the gate than accuracy alone. Everything comes from one seed. The repo has the code and results, but the paper never links it, and the code has its comments stripped, which makes it hard for others to check.
Next I would suggest - run the comparison you already proposed: full MoRCA vs H-only, with matched message budgets, on cases where the return term is confirmed to be non-zero. If the extra terms still add nothing, keep the simple gate. Use ten or more seeds, link the repo in the paper, and keep the comments and design notes in it. This is a study about wrong answers spreading between agents, not collusion. To fit this sprint, extend it to agents who can gain by coordinating against someone else.
Read full reviewShow less
Cite this project
@misc{rector2026morca,
title = {{MoRCA Filtering of Seeded Wrong-Answer Propagation in Qwen3-0.6B Agents}},
author = {Tyler Rector},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/morca-filtering-of-seeded-wronganswer-propagation-in-qwen306b-agents-6x2v}},
url = {https://apartresearch.com/sprints/projects/morca-filtering-of-seeded-wronganswer-propagation-in-qwen306b-agents-6x2v}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …