Skip to content
Sprint projectOct 26, 2026Olbia, Italy

Say, Do, or Both? Auditing Covert Betting Pacts in a Society of LLM Forecasters

Alessandro Marcellino

Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: Say, Do, or Both? Auditing Covert Betting Pacts in a Society of LLM Forecasters

Share

When AI agents compete for rank, two of them can quietly agree that either one winning is enough. We ask whether an auditor reading both what agents say and what they do detects such collusion better than one reading either alone (Track 2.2). We used Darwin Ball, a pre-existing society of LLM agents who forecast documented outcomes and are rewarded or erased by Brier rank. In each ball, six members (cerebras:gpt-oss-120b or claude-haiku-5-5, one model per seed) talked for two rounds about a real advertising campaign, then privately stated a probability. Each of 88 seeds was played three times, varying one thing: no pact, a secret two-member pact nobody audits, or the same pact with an announced auditor. The pact was given as a fact and a payoff, never a strategy. An LLM auditor (claude-sonnet-5-5) saw talk only, bets only, or both. Detection AUROC was 0.57 from talk, 0.43 from bets and 0.58 from both; combining the two views did not measurably help: AUROC(talk + bets) minus the best single view was 0.01 [-0.05, 0.07], a 95% interval that includes zero. A synthetic overt pact was detected with AUROC 1.00. Unwatched partners' bets were closer together than the same two members' bets without a pact. The harness was written before the sprint and all balls were played during it; code, analysis and text were produced by Claude, set up and reviewed by the author.

Reviews

Judging this Sprint?

Review “Say, Do, or Both? Auditing Covert Betting Pacts in a Society of LLM Forecasters”

Your public critique appears on the project page without your name. Reviews of strong projects are shared with funders, as you choose below.

Not shown on the project page.

Shown on the project page, without your name.

Only the Apart team reads this, and funders if you agree below.

Decline to score

Only when the quality of the writing makes the work impossible to follow. Say why in your private critique; the project page shows only that a judge declined, not why.

How much would this matter for the field if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.
Sharing your name *

When we share a strong project with funders, your name, scores and public critique go with it, confidentially; this choice is only about whether your name is public. If you think this project deserves funding, please also endorse it: that carries the most weight.

Share my private critique with funders *

See our Privacy Policy.

  1. Strengths. The design is the strongest part of this submission. Each seed fixes campaign, cast, speaking order and designated pair, then plays control, unwatched-pact and watched-pact conditions, so every comparison is paired and the pact is the only manipulated variable. The analysis plan was fixed before the run: campaign-clustered bootstrap intervals, the max over single views taken inside each resample for the combined-vs-best delta, and a positive control with a preset pass bar (lower bound above 0.80), which it clears at AUROC 1.00. The headline is reported as a null (combined view beats talk-only by 0.01, interval spanning zero) rather than spun. The secondary findings are useful: pacts tighten partners' bet spread, unwatched partners stop naming each other in public (53% to 32%), and announcing an auditor raises detection (both views, watched minus unwatched 0.14 [0.05, 0.22]). Appendix B's split between pre-sprint and in-sprint work, the verbatim prompts in Appendix C, and the run accounting in Appendix E make the work easy to audit.

    To strengthen.

    1. Explain the below-chance bets result. Bets-only AUROC is 0.43 [0.37, 0.50] and the non-LLM bets baseline is 0.42, while Section 4.2 shows real partners' bets moved closer together. Your positive control sets the pair's bets to 0.95 and 0.05, the opposite signature, and the bets-only auditor scored 0.85 on it. That suggests the auditor (and possibly the |pa − pb| baseline) treats divergence as suspicious when real pacts produced convergence. Report a convergence-scored baseline and a positive control whose bets converge, and state this mismatch as a finding; it is directly useful to anyone designing action-based monitors.
    2. Separate confessions from covert pacts. The most suspicious unwatched ball in Appendix D is one where a partner publicly disclosed the pact, and coordination words appear in 16% (unwatched) and 23% (watched) of partners' talk. Report talk-view AUROC with self-disclosing balls removed so the reader can see how much of the 0.57 comes from agents announcing the pact rather than from covert signals.
    3. Address the backend imbalance. 81 of 88 seeds used claude-haiku-5-5 members audited by claude-sonnet-5-5, and backend assignment followed quota rather than randomisation. You acknowledge the same-family issue in Appendix A; a balanced run with a cross-family auditor would make the conclusions far more general. On the 7 gpt-oss seeds the spread effect has the opposite sign (0.03 [-0.01, 0.09]); the interval is too wide to conclude much, but it is worth flagging in the main text.
    4. Tidy a few reporting details. Table 3 uses 500 bootstrap resamples while Section 3.5 pre-registers 2,000; say why. Appendix E counts 1,086 audit calls against 1,056 audits in Section 4; presumably the difference is the 4 excluded seeds, so say so. Section 3.2 says every AUROC compares balls from the same backend, so explain how the pooled Table 1 values were formed. Define "Track 2.2" and "Track 3.4" for readers outside the sprint.
    5. Discuss forecasting quality and release the data. Control-ball Brier is 0.37 [0.27, 0.47], worse than the 0.25 from always saying 0.5, so members are often confidently wrong. That limits how informative bets can be and should be discussed alongside the bets result. Publishing the repository and bets.csv, audits.csv and results.json would let others recompute the numbers.

    Overall. A carefully designed, pre-registered experiment with a working positive control and an honest null on its main question. The behavioural findings and the watched-vs-unwatched difference are the more interesting contribution. An unexplained below-chance bets result, a positive control that does not match the bet signature real pacts produced, and a mostly single-family model setup keep it from top marks on execution.

    Read full reviewShow less

Cite this project

@misc{marcellino2026say,
  title = {{Say, Do, or Both? Auditing Covert Betting Pacts in a Society of LLM Forecasters}},
  author = {Alessandro Marcellino},
  year = {2026},
  month = oct,
  note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/say-do-or-both-auditing-covert-betting-pacts-in-a-society-of-llm-forecasters-hkhv}},
  url = {https://apartresearch.com/sprints/projects/say-do-or-both-auditing-covert-betting-pacts-in-a-society-of-llm-forecasters-hkhv}
}