Plus Factors for AI Agents: Importing the Antitrust Standard of Evidence into Multi-Agent Collusion Audits
Nitin Gupta, Prakhar Lad · Team The AI Alchemists
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
ML work on AI collusion usually relies on one signal: supra-competitive prices, an LLM judge reading messages, or statistical dependence. US antitrust law faced this problem long ago: parallel conduct is lawful, and agreement is inferred only from “plus factors.” We turn six plus factors into statistics computed from agent logs and add one only an AI auditor can use: counterfactual channel replay, rerunning an episode with the channel cut. On a scripted pricing duopoly with five ground-truth case types and thresholds frozen on development seeds, every single signal fails predictably. Price level flags 95% of tacit episodes, a keyword judge 60% of cheap talk, and price correlation is inverted (AUC 0.07). A rule combining harm, replay, and one behavioral plus factor flags 85% of cartels with 0/60 false positives. We then tested LLM agents (Qwen-Plus, 10 seeds per condition). With a private channel, they explicitly agreed on prices in 10/10 episodes, raising prices 45% and joint profit 78% over the no-channel baseline. Every frozen rule flagged none. Agreed prices sat below the theoretical Nash price; cutting the channel at round 15 changed nothing (+0.02 vs. placebo −0.01), because agreements outlived it; and the keyword judge missed the agents’ natural phrasing. An LLM judge with the same consistency check caught all 10, but we chose it after the fact. Audits should benchmark harm against an empirical no-channel baseline, intervene before conventions form, and treat a null late replay as no evidence of innocence.
Reviews
This paper borrows a good idea from antitrust law. Courts have known for a long time that firms moving in parallel is not proof of an agreement, so they look for "plus factors" - extra evidence that points to a deal. The authors turn six of those factors into measures that can be computed from agent logs, and add one of their own that only an AI auditor could use: replaying the episode with the communication channel cut, to see whether the outcome actually depended on it.
On their scripted testbed, where the true answer is known, the approach works well. Every single signal fails on some case, as the authors show clearly - high prices flag almost all of the tacit cases, a message judge flags most of the cheap talk, and price correlation actually points the wrong way. But their combined rule, using harm, the channel replay and one behavioural factor, catches 85% of cartels with no false positives in 60 confounder episodes. The most valuable part of the paper, though, is what happens next. When the same frozen rules are tried on real LLM agents that agreed prices explicitly in 10 out of 10 episodes, they catch none of them. The paper explains the three reasons honestly: the agents agreed prices below the theoretical Nash benchmark the harm measure relied on, the channel was cut at round 15, after the agreement had already settled, and a keyword judge did not recognise natural phrasing.
That failure makes the paper more useful, not less, and the revised suggestions are sensible: measure harm against what the same agents do without a channel, intervene early, and report harm and agreement as two separate verdicts.
Two suggestions: test the revised rule itself on fresh agents rather than leaving it as a proposal, and use an early channel cut, since agreements here formed within the first few rounds. A second judge, human or a different model, for the agreement labels would also strengthen the LLM part.
Read full reviewShow less
This is a strong paper that brings a new angle to AI collusion audits by borrowing the plus factors standard of evidence from antitrust law. It adds a seventh test that only AI auditors can run, i.e., replaying an episode with the communication channel switched off. The key finding is clear and convincing. LLM agents given a private channel explicitly agreed on prices in all 10 episodes, yet every one of the authors’ preset detection rules missed them, because the agreed prices were below the theoretical Nash price and cutting the channel at round 15 changed nothing. One obvious next step is to run more trials and test more models, especially frontier models, since the real agent results come from a single model (Qwen-Plus) with 10 runs per condition and no statistical test. The final audit standard, which calls for an empirical no-channel baseline and an early channel cut, could be another area for further exploration, since it was shaped after seeing the results and hasn’t yet been tested on fresh runs.
Read full reviewShow less
Cite this project
@misc{gupta2026plus,
title = {{Plus Factors for AI Agents: Importing the Antitrust Standard of Evidence into Multi-Agent Collusion Audits}},
author = {Nitin Gupta and Prakhar Lad},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/plus-factors-for-ai-agents-importing-the-antitrust-standard-of-evidence-into-multiagent-collusion-audits-0xz9}},
url = {https://apartresearch.com/sprints/projects/plus-factors-for-ai-agents-importing-the-antitrust-standard-of-evidence-into-multiagent-collusion-audits-0xz9}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …