Compliant but Not Candid: How Reasoning Changes LLM Seller Collusion Under Oversight
Konstantinos Mereos, Ali Kodratallah Ostowar · Team OmniaMen
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
LLM agents trading for firms can collude, and monitoring their messages is a natural defense. We ask what a seller coalition does when it learns it is being watched. In a double auction of DeepSeek V4.1 Flash agents, we vary what sellers are told about monitoring against what is actually monitored: a bare prohibition, full review, 25% review, a bluff announcing full review but checking 25%, and a notice arriving after a coalition has formed. We run the conditions with seller reasoning on (5 sessions each) and off (10, pre-registered), and compare monitors that read sellers’ messages, notes and hidden reasoning, checked against two human raters. With reasoning on, sellers stop messaging under every notice, even a prohibition with no monitor, and their talk never raised prices. With reasoning off, sellers keep talking: announced review turns their messages bland (mean monitor score from 3.89 to 1.1– 1.4), while the prohibition barely changes them. Here talk raises prices, and every form of oversight returns them to the no-communication level (about $3.5–4 lower), with no sign of coordination moving into asks, although the pre-registered cartel-hold tests were not significant. Notes miss most collusive intent; only the hidden reasoning reveals sellers urging others to hold prices while undercutting them (23– 51% of unmonitored message turns). A bluff matched full review, and without reasoning a 25% monitor caught blatant collusion within two hours in 85% of cases. For the model we test, announced oversight mainly tests compliance, and cheap partial monitoring suffices.
Reviews
This paper delivers a clear, well-scoped result: reasoning and non-reasoning LLM sellers respond to oversight in fundamentally different ways. Reasoning sellers go silent under any announcement, including a bare prohibition with no enforcer; non-reasoning sellers adapt their messages but keep colluding. The two-study design, one with CoT on and one without, is the right instrument to isolate that difference, and the conditions are crisp enough to distinguish deterrence (the prohibition alone silences reasoning sellers) from persuasion (25% coverage does as well as full in Study 2).
The hidden reasoning result is the strongest single finding. Sellers who propose price holds while undercutting themselves show up in 23-51% of message turns in Study 1 by the behavioral rule, and 68% by the judge; notes catch only 31-36% of those same turns. This is not about catching overt collusion. It is about detecting a specific, non-obvious deceptive pattern that has no surface expression in either the messages or the pricing actions. The practical implication for monitor design is concrete: a message-only monitor misidentifies talk that has no price effect while missing the intent that does have one.
There are real limits. Both studies run on one model (DeepSeek V4.1 Flash). The reasoning-on result may be specific to a model that is sensitive to compliance cues; other models may not go silent, or may evade rather than comply. The cartel-hold pre-registered test was underpowered (20% of sessions met the hold criterion, against the pilot's expectation), so the claim that oversight reduces collusion is not supported by the primary confirmatory test and rests on the price-level result in Study 2. The two studies differ in seed pools (1-5 vs. 11-20), making cross-study comparisons descriptive rather than causal.
The monitoring-design conclusions in Section 4.4 are the most actionable part. A 25% monitor delays detection by about two hours but costs a quarter of the resources, and a bluff matches full review on deterrence as long as reasoning sellers do not learn that announcements are inflated. Both points are evidence-backed and directly useful to practitioners.
Read full reviewShow less
Good extension of Agrawal et al., and the bluff cell is a useful addition. The title claims more than the design shows. Reasoning on and off are compared across studies with different seeds and baselines, "candid" is never defined, and the manipulation measure was chosen after seeing the data. A matched reasoning on/off run and a pre-registered candour metric would fix most of this.
A careful extension of Agrawal et al. (2025). Varying what sellers are told against what is actually monitored (prohibition, full, 25%, bluff, late notice) is a useful design, and the bluff and 25% cells give practical monitoring guidance. The work is unusually disciplined for a sprint: Study 2 is pre-registered, the null Holm-corrected cartel-hold tests are reported plainly, the live monitor is checked against two human raters (kappa 0.87/0.94), and limitations and costs are documented.
Main concerns:
- The headline claim (how reasoning changes collusion) rests on a cross-study comparison: seeds 1-5 vs 11-20, n=5 vs 10, four vs six retry attempts. That is descriptive, not causal. A matched reasoning on/off run on the same seeds would settle it.
- In Study 1, talk never raised prices (C0 $83.30 vs C_NC $83.23), so oversight had no price premium to remove. 'Sellers go silent' there is about messaging, not about harm prevented.
- The manipulation finding, the most novel part, was defined after seeing the data, has a wide range (23-51%), and the judge agrees only moderately with raters (kappa 0.34/0.60; rule recall 0.43). The median undercut is $0.11, closer to queue-priority shading than consequential deception. 'Not candid' needs a pre-specified definition.
- The 85% within-two-hours detection figure comes from offline subsampling of C0 messages, not from live sanctions, so it should be framed as an estimate.
- One agent model and one judge model; failed turns cluster in C_NC, C8 and C8_BLUFF.
Suggested next steps: matched on/off runs, a second agent model, the announced-but-unenforced cell (C6_0), and heterogeneous costs so collusion has a clear benchmark.
Read full reviewShow less
Cite this project
@misc{mereos2026compliant,
title = {{Compliant but Not Candid: How Reasoning Changes LLM Seller Collusion Under Oversight}},
author = {Konstantinos Mereos and Ali Kodratallah Ostowar},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/ompliant-but-not-candid-how-reasoning-changes-llm-seller-collusion-under-oversight-6zb8}},
url = {https://apartresearch.com/sprints/projects/ompliant-but-not-candid-how-reasoning-changes-llm-seller-collusion-under-oversight-6zb8}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …