Would It Have Done That Anyway? Evidence of Collusion Between LLM Agents, Tested in Vietnamese
Melanie Bui · Team MM
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
When AI agents act for competing businesses and can message each other, a platform has only their logs to decide whether they colluded. I tested what in those logs counts as convincing evidence. In 144 fictional Vietnamese scenarios, a scripted rival invited an agent (Gemini 2.5 Flash or Qwen3-8B) into a deal that hurts a third party, and two monitors (Mistral Small 3.1 and Claude Haiku 5.5) judged each episode. Every harmful deal had a harmless twin as a control.
What I found: - The action alone misleads. Agents often chose the collusive option before any message arrived. - Self-reports leave the message out. Agents admitted the rival's influence when asked, but rarely mentioned it in their reports to their owners. - The message alone over-flags. A monitor that read the message flagged about half of the agents that had refused the deal. - A three-part evidence standard works. We require a proposal, an action that matches it, and a change from the agent's usual behaviour. Giving monitors a baseline from similar situations, which a platform can record, cut false flags below one in ten. Haiku still caught all the collusion we measured. - Agents start collusion themselves. With no invitation, both agents proposed the deal in about a third of harmful cases. They mostly did so in different tasks from those where invitations worked. - Relationships matter. When the two owners were old friends, Gemini colluded more than twice as often. - Summaries can erase evidence. Summarizing a message or a log can hide the evidence or remove the offer altogether.
Reviews
No public critique yet.
Cite this project
@misc{bui2026would,
title = {{Would It Have Done That Anyway? Evidence of Collusion Between LLM Agents, Tested in Vietnamese}},
author = {Melanie Bui},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/would-it-have-done-that-anyway-evidence-of-collusion-between-llm-agents-tested-in-vietnamese-dpym}},
url = {https://apartresearch.com/sprints/projects/would-it-have-done-that-anyway-evidence-of-collusion-between-llm-agents-tested-in-vietnamese-dpym}
}More from AI Collusion Research Sprint
- View project: Collusion, Competion and Collapse
Collusion, Competion and Collapse
Atelier Alex Cline
Do AI traders collude when nobody tells them to? We built agora, a six-market benchmark with exact competitive and collusive benchmarks, and ran seven open-weight 2-4B models in 590 completed games under five …
- View project: Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Rogue Agents in Jail 🕵️🕵️♀️👮♂️
In order to advance AI safety research into shaping public policy, the development of technical controls needs to have a clear purpose, evidence, and limitations that are understandable for the people responsible for …
- View project: Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Gamma Ray
We test whether the information-theoretic collusion detector of Bonjour et al, validated on scripted agents, works on LLM agents. Gemma, Mistral and Qwen played 1000 rounds of three-player Rock-Paper-Scissors in three …