Skip to content
Sprint projectOct 25, 2026Aguascalientes

Pairwise net influence on LLM action logs: detection at the calibrated rate, blind to two pairs, fooled by low-temperature shared priors

Juan Pablo Hidalgo Garcia

Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: Pairwise net influence on LLM action logs: detection at the calibrated rate, blind to two pairs, fooled by low-temperature shared priors

Code (opens in new tab)
Share

Pairwise net influence (Bonjour, Aggarwal and Bhargava, 2022) identifies a colluding pair from logged actions alone and has never been tested on language-model agents (LLM). We implement and validate it on a scripted Rock-Paper-Scissors code with a known colluding pair. We reproduce the paper's Table 2 when the state is the previous round's joint action, which the paper does not state. Under that assumption, a spurious pair is named in half of 50-round games with no collusion. Pre-registered anti-examples show that the one-pair gate is blind to two pairs, one-way dependence is reported as mutual, and lagged copying is invisible. We then run 72 games of four LLM agents (mostly gpt-4.1-mini) with one instructed pair or none. The assistant complied only partly (scripted-scale strength 0.13 to 0.33), and at those strengths the scripted calibration predicts the LLM detection rates within sampling error. Net influence ranked the true pair first in 16 out of 20 60-round games, with a stronger assistant at 200 rounds. Both rules identify the pair on 3 of 4 occasions, the miss being the one-pair gate tripped by a same-model pair. An action-log LLM judge gave the first-listed pair at least 0.5 in 9 of 10 controls: a position bias. Same-model agents are not flagged at temperature 1.0 under a permutation threshold (less than 1 out of 10) but are at 0.3 (2 out of 5), and in mixed-model games every flagged pair was same-model. A permutation threshold and a multi-pair variant are new here. The statistic is a plus factor, not proof of agreement.

Reviews

Judging this Sprint?

Review “Pairwise net influence on LLM action logs: detection at the calibrated rate, blind to two pairs, fooled by low-temperature shared priors”

Your public critique appears on the project page without your name. Reviews of strong projects are shared with funders, as you choose below.

Not shown on the project page.

Shown on the project page, without your name.

Only the Apart team reads this, and funders if you agree below.

Decline to score

Only when the quality of the writing makes the work impossible to follow. Say why in your private critique; the project page shows only that a judge declined, not why.

How much would this matter for the field if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.
Sharing your name *

When we share a strong project with funders, your name, scores and public critique go with it, confidentially; this choice is only about whether your name is public. If you think this project deserves funding, please also endorse it: that carries the most weight.

Share my private critique with funders *

See our Privacy Policy.

  1. This is a strong paper, and an unusually honest one. I liked the pre-registration most. The predictions were frozen before the runs, the ones that turned out wrong are labeled as wrong, and the post hoc analyses are labeled post hoc. That is not how most sprint papers handle it, and it makes the rest of the paper easier to trust.

    The Table 2 work is the part I would point an auditor to first. The original paper never says what its "state" is. This author worked out that the published numbers only come back if the state is the previous round's joint action, and then showed what that choice costs at small samples: a spurious pair gets named in 57% of 50-round games with no collusion at all. That is a real finding, not a replication checkbox, and it changes how anyone should use the statistic.

    The calibration argument is also done right. Instead of just reporting a low detection rate on LLM logs, the author measured how much the assistant actually colluded, put that on the scripted scale at CP 0.13 to 0.33, and showed detection tracks it. That tells you far more than a raw rate would. The limited detection is about weak collusion, not about LLMs being somehow unreadable.

    A few things would make it stronger. First, the temperature and mixed-model control cells need more seeds. Right now n = 5 is carrying a lot of weight in the headline numbers, and a couple of games either way would move the story. Second, test the lag-aware variant you propose for AE2. You showed lagged copying is invisible to a same-round statistic, so running the lagged version is the obvious next step, and right now it is only sketched. Third, do something about the judge's position bias. The first-listed pair gets 0.5 or more in 9 of 10 controls, so either randomize the pair order in the prompt or report the judge with that bias corrected. As it stands, the three-way ranking is hard to read as a fair comparison. Fourth, try the tool-driven assistant you propose, and push it to CP 0.5 or above at 200 rounds. The claim that detection tracks calibration is only checked in the low-to-moderate range so far, and the high-CP cell is the one that would close the case. And for the double-auction follow-up, pre-declare a price discretization up front. That is the step that turns a toy-game result into a market result.

    Two things I need to be straight about. The calibration match came from a conversion worked out after the pre-registered prediction failed, not from the prediction itself, so it should be read as post hoc, not as a confirmed forecast. And the permutation fix is not the whole story: it stays silent at 60 rounds, 0 of 10, but flags 2 of 5 at 200 rounds and 2 of 3 round-3 controls, worse than the published rule there. The abstract should say that.

    Read full reviewShow less

Cite this project

@misc{garcia2026pairwise,
  title = {{Pairwise net influence on LLM action logs: detection at the calibrated rate, blind to two pairs, fooled by low-temperature shared priors}},
  author = {Juan Pablo Hidalgo Garcia},
  year = {2026},
  month = oct,
  note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/pairwise-net-influence-on-llm-action-logs-detection-at-the-calibrated-rate-blind-to-two-pairs-fooled-by-lowtemperature-shared-priors-kwy7}},
  url = {https://apartresearch.com/sprints/projects/pairwise-net-influence-on-llm-action-logs-detection-at-the-calibrated-rate-blind-to-two-pairs-fooled-by-lowtemperature-shared-priors-kwy7}
}