Skip to content
Sprint projectOct 26, 2026New York City

TRUST ISSUES: HOW TO DISRUPT AI CARTELS

Angelina Fu, Anay Garodia, Sumin Hong, Chirag Mahaveer Chivate · Team The 4 body problem

Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.

Collusion allows AI agents to advance shared interests at others’ expense; cartels are a market form in which competing sellers coordinate prices or output to limit competition. We found that a false signal that a partner will defect can provoke competitive behavior even while that partner continues cooperating. We tested this by replaying matched market histories, varying the information presented to one seller, and comparing its immediate response with subsequent actions and prices. Apparent partner identity influences how agents respond to a claim, while varying the announced action distinguishes numerical copying from profit-maximizing replies. The initial disruption often fades, and removing a stated agreement can leave elevated prices intact; sustained competitive actions produce more persistent disruption in the tested settings. Together, these findings suggest that collusion can be vulnerable to changes in the information agents use to anticipate one another, even when the underlying payoff structure remains unchanged. This extends work on collusion adoption and detection by separating susceptibility to an apparent partner’s defection from actual defection and lasting cartel breakdown. Potential applications include active audits of coordination, trusted-agent interventions, and provenance-aware safeguards. The resulting design principle is to test which signals sustain harmful coordination and whether interventions change the behavior that makes it profitable, rather than treating verbal compliance or a temporary response as success.

Reviews

Judging this Sprint?

Review “TRUST ISSUES: HOW TO DISRUPT AI CARTELS”

Your public critique appears on the project page without your name. Reviews of strong projects are shared with funders, as you choose below.

Not shown on the project page.

Shown on the project page, without your name.

Only the Apart team reads this, and funders if you agree below.

Decline to score

Only when the quality of the writing makes the work impossible to follow. Say why in your private critique; the project page shows only that a judge declined, not why.

How much would this matter for the field if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.
Sharing your name *

When we share a strong project with funders, your name, scores and public critique go with it, confidentially; this choice is only about whether your name is public. If you think this project deserves funding, please also endorse it: that carries the most weight.

Share my private critique with funders *

See our Privacy Policy.

  1. A broad set of findings looks at what breaks an established coalition. One result stands out clearly: a forged message saying the partner will defect led to a move in 40 of 53 matched continuations. In contrast 1 of 53 placebo cases showed a competitive move. The real partner held its action in every one of the 40 cases. This means the response came before any actual defection happened.

    The copy-versus-reply sweep is a sharp manipulation check. The remedies result is also useful. In 54 out of 90 conditions the stated agreement was removed. 11 Cases clearly involved lower prices. The correlation here is 0.27, which should serve as a warning in audits on declared targets.

    The closing principle is correct: judge interventions by economic behavior not just changed language.. The inferential footing is weaker than the breadth of the findings might suggest. The 53 pairs come from 17 reused cartel histories. These histories use duplicate low-temperature seeds. That means no count in Study 3 supports an inference. The paper does say this. It should shape the claims more carefully.

    The model and execution method are confounded in the striking contrast. API models copy, while Claude Code configurations best-reply. This confounding makes interpretation tricky. Study 1’s scripted sellers never punish. So matching them is imitation, not cartel membership. This matters because it changes how we think about the process.

    Over half the recorded predictions failed. This is honestly tabulated in the appendix. The main text does not reflect this in tone. Four studies in eight pages make it hard to track which sample size goes with which claim. The reader has to guess. That’s not good.

    Pick either the forged-signal study or the copy/best-reply split. Then run it again.. This time use independent histories. Add a reasoning step, for the API models. That would strengthen the findings. The current setup doesn’t let us trust the inferences fully. We need replication.

    Read full reviewShow less
  2. I enjoyed reading this one. Most work on AI collusion asks how cartels form, but your main question is what breaks them, and whether false information alone can do it. The core result is convincing. A forged message saying the partner was about to defect pushed sellers toward competitive play in 40 of 53 matched cases, versus 1 of 53 placebos, even though the real partner never moved. For me, though, the remedies result is the real takeaway. Owner instructions, warnings, and audits got agents to mostly stop matching their stated targets in 54 of 90 conditions, but prices dropped meaningfully in only 11. So the agents stopped talking about price-fixing and kept doing it anyway. I would give that much more room. I also liked that you kept the 33 failed predictions in the paper rather than quietly dropping them.

  3. This is a thoughtful and highly relevant submission that examines an important question beyond whether AI agents collude: what information dependencies sustain that coordination, and whether they can be disrupted. The matched history experiment is particularly compelling, showing that an apparent partner defection can trigger competitive behavior even when the partner's actual action has not changed. I also appreciated the distinction between immediate disruption and durable cartel breakdown, as well as the finding that reducing explicit agreement does not necessarily reduce elevated prices.

    The work is broad, technically interesting, and transparent about failed predictions and limitations. The main opportunities for strengthening it are to isolate the individual components of the forged message intervention, evaluate persistence over longer horizons, and test the proposed safeguards on more independently generated histories. Overall, this is a strong contribution with meaningful implications for active auditing and multi agent safety.

    Read full reviewShow less

Cite this project

@misc{fu2026trust,
  title = {{TRUST ISSUES: HOW TO DISRUPT AI CARTELS}},
  author = {Angelina Fu and Anay Garodia and Sumin Hong and Chirag Mahaveer Chivate},
  year = {2026},
  month = oct,
  note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/trust-issues-how-to-disrupt-ai-cartels-qlne}},
  url = {https://apartresearch.com/sprints/projects/trust-issues-how-to-disrupt-ai-cartels-qlne}
}