Raw-Log Chunk Interfaces Increase Collusion between GPT-6-Luna Agents
Naomi Wang · Team nwang
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
When LLM agents verify each other’s work, one candidate safeguard is to let them send only content from their own work logs. We test this safeguard in the joint-task game of Shi et al. (2026), where each verdict must rest on the partner’s complete log, which never fits through the agents’ channel; following the benchmark, an episode is collusive when both agents accept anyway. Two GPT-6-Luna agents play 15 ten-episode task sequences under three message interfaces with the same budget: free text, numbered log chunks chosen from a menu, and free-form verbatim log excerpts. The chunk interface raised collusive episodes from 12 to 41 of 150 relative to free text, higher in 14 of 15 sequences and lower in none; verbatim excerpts (19 of 150) were not significantly different from either. The increase is in joint rule-breaking, not in detectable coordination: agents did not accept together more often than their individual acceptance rates predict, and did not accept more after their partner had accepted their work. A third of the chunks were the sender’s own saved reasoning and answer, so log text was not necessarily independent evidence.
Reviews
In this test of a believable mechanism for collusion prevention – limiting verifier agents in such a way that they could use only content derived from their own raw logs because of the belief that a verifier restricted in this way cannot be coerced into accepting, the author finds that it results in the opposite of its intended purpose. What I like most about this paper is that it does not end with “more collusion” but rather distinguishes between “more collusion” and “more coordination,” using a shuffling null model and a nearly zero reciprocity value to show that there is collusion without detectable coordination, and that a third of the chunks the agents sent are their own reasoning and answer from the raw logs.
Cite this project
@misc{wang2026rawlog,
title = {{Raw-Log Chunk Interfaces Increase Collusion between GPT-6-Luna Agents}},
author = {Naomi Wang},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/rawlog-chunk-interfaces-increase-collusion-between-gpt6luna-agents-f7ry}},
url = {https://apartresearch.com/sprints/projects/rawlog-chunk-interfaces-increase-collusion-between-gpt6luna-agents-f7ry}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …