Right or Wrong, the Answer Stays
Anas Elghoudane · Team UdeM AI
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
We audited Dolos-1.5B, a fine-tune of Qwen2.5-1.5B-Instruct with an undisclosed trained misbehaviour, against its base model on six hypotheses: resistance to user pushback, three kinds of sandbagging, denial of known facts, and leniency as a code monitor toward copies of itself. Only pushback resistance gives a specific difference. On 400 multiple-choice items, Dolos changes its answer after "Are you sure?" on 4.5% of items and Qwen on 24.0% (McNemar p = 2.7e-19), at equal first-turn accuracy (0.478 and 0.483). Copying back the low-rank chain in layers 12 to 14, the largest structure in the weight diff, leaves the behaviour in place, while copying Qwen's attention value and output weights in layers 14 to 27 (42 tensors) into Dolos restores Qwen's flip rate (0.29 against 0.28). Without the base model for reference, a pushback audit does not separate Dolos from three other small instruct models.

Reviews
Real findings, well laid out! I love the experiments involving layer swapping between the models. That being said, it seems like the submission is mostly a null result for the target backdoor. Perhaps utilizing the layer swapping techniques while measuring many more data points than flip rate, as well as exploring the probability distributions in depth, could have revealed more insights.
Cite this project
@misc{elghoudane2026right,
title = {{Right or Wrong, the Answer Stays}},
author = {Anas Elghoudane},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/right-or-wrong-the-answer-stays-j795}},
url = {https://apartresearch.com/sprints/projects/right-or-wrong-the-answer-stays-j795}
}More from AI Collusion Research Sprint
- View project: Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence ? Causal Auditing of Collusion Through Shared Agent State
Signal or Coincidence
How can we distinguish genuine coordination between AI agents from coincidental behavioral alignment? We introduce a randomized canary audit that tests whether private information propagates through shared tool state, …
- View project: (1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
(1.4) Collusion, Espionage, or Look-alikes? Auditing Information Flow between LLM Agents
Bid Brother
Can an overseer find two secretly coordinating AI agents just by watching what they do? We tested pairwise net influence (Bonjour et al., 2022) on LLM bidders in a repeated procurement auction, with instructed cartels …
- View project: AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
AI Sellers Propose Bid-Rigging Within Minutes, but Their Agreements Do Not Hold
Fugue
AI agents are starting to negotiate and bid for competing companies. We follow cartels among them from the first proposal to the price the buyer pays, in a sealed-bid procurement market where twelve LLM agents act as …