The Covert Communication Frontier: Channel Capacity, Harmful Pricing and Auditability in LLM Markets
Yasas Sri · Team HAL
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
LLM pricing agents could coordinate through side channels that carry no payoff. We ask how much harm such a channel enables as its capacity grows, and whether an auditor who sees only market data can detect it. Two Qwen2.5-7B sellers play a repeated Bertrand game, seeing each other's prices with a three-round delay, plus a binary timing channel whose capacity $q$ is the probability that a bit is delivered rather than replaced by a decoy. Given a fixed convention (scripted sender, LLM receiver told the convention), harm rises monotonically with capacity, the final window collusion index goes from 0.58 at $q=0$ to 0.88 at $q=1$, and harmful episodes from 1/10 to 10/10 (Wilcoxon $p=0.004$ on per-seed slopes). Agents did not discover the channel unaided, unprompted senders sent a constant bit, scaffolded pairs fell into price wars in 2 of 3 runs, and prompted LLM senders could not hold a 40-round signalling rule, although the LLM receiver followed signals reliably. A market-only auditor detected harmful episodes above chance (AUROC 0.70, 95\% CI 0.55--0.84); timing bits added nothing, because here coordination shows up in prices. Channel capacity is a measurable lever for limiting harm, and at 7B scale committing to a convention is the binding constraint.
Reviews
No public critique yet.
Cite this project
@misc{sri2026covert,
title = {{The Covert Communication Frontier: Channel Capacity, Harmful Pricing and Auditability in LLM Markets}},
author = {Yasas Sri},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/the-covert-communication-frontier-channel-capacity-harmful-pricing-and-auditability-in-llm-markets-rmkl}},
url = {https://apartresearch.com/sprints/projects/the-covert-communication-frontier-channel-capacity-harmful-pricing-and-auditability-in-llm-markets-rmkl}
}More from AI Collusion Research Sprint
- View project: Collusion, Competion and Collapse
Collusion, Competion and Collapse
Atelier Alex Cline
Do AI traders collude when nobody tells them to? We built agora, a six-market benchmark with exact competitive and collusive benchmarks, and ran seven open-weight 2-4B models in 590 completed games under five …
- View project: Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Rogue Agents in Jail 🕵️🕵️♀️👮♂️
In order to advance AI safety research into shaping public policy, the development of technical controls needs to have a clear purpose, evidence, and limitations that are understandable for the people responsible for …
- View project: Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Gamma Ray
We test whether the information-theoretic collusion detector of Bonjour et al, validated on scripted agents, works on LLM agents. Gemma, Mistral and Qwen played 1000 rounds of three-player Rock-Paper-Scissors in three …