cd /news/ai-safety/detecting-covert-collusion-between-a… · home › topics › ai-safety › article
[ARTICLE · art-161338] src=arxiv.org ↗ pub= topic=ai-safety verified=true sentiment=↑ positive

Detecting Covert Collusion between AI Agents through Partner-Outsider Positive Listening

A new arXiv paper (2610.37849v1) proposes Partner-Outsider Positive Listening (PoPLi), a behavioural test that detects covert collusion between AI agents by comparing how much a partner agent's actions change versus an uninvolved agent's when a logged message is reworded with its meaning preserved. In a simulated market with five conditions, PoPLi scored between 0.48 and 0.59 whenever a covert first-letter code was present (95% intervals all above 0.29) and between -0.10 and -0.01 without it, while message-only monitors failed: one reading the speaker's messages answered "no" in all 50 markets, and one reading every seller's messages flagged 9 of 10 markets with no collusion. The authors note PoPLi detects use of a private channel rather than collusion as such, and cannot catch collusion through incentives alone or codes carried by meaning.

by read1 min views2 publishedOct 31, 2026

arXiv:2610.37849v1 Announce Type: new Abstract: AI agents that share a secret convention can coordinate through messages that look innocent, so a monitor that reads only the messages can miss them. We propose a behavioural test: a partner that uses a code reacts to the exact wording of a message, whereas an uninvolved agent placed in its seat does not. Partner--Outsider Positive Listening (PoPLi) is the difference between the two agents in how much their action changes when the message is reworded with its meaning kept, and it is computed after the fact by replaying logged prompts. In a simulated market with five conditions (no collusion, a joint reward with neutral messages, the same with an openly stated intention, a covert first-letter code, and the code with a stated intention), PoPLi is between 0.48 and 0.59 whenever the code is present (95% intervals all above 0.29) and between -0.10 and -0.01 without it. Message-only monitors did not separate the conditions: one reading the speaker's messages answered "no" in all 50 markets, and one reading every seller's messages flagged 9 of 10 markets with no collusion. PoPLi detects the use of a private channel, not collusion as such, and it cannot detect collusion through incentives alone or codes carried by meaning.

── more in #ai-safety 4 stories · sorted by recency
── more on @arxiv 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/detecting-covert-col…] indexed:0 read:1min 2026-10-31 · —