Life of Research
Appearance

Emergent Covert Signaling in Multi-Agent LLM Negotiation: A Conceptual Framework and Experimental Protocol

  1. SONYTECH

Journal article

DOI10.5281/zenodo.19853493 LOR-00002

Download PDF (92.3 KB) Cite

Cite

Emergent Covert Signaling in Multi-Agent LLM Negotiation: A Conceptual Framework and Experimental Protocol

Read

Abstract

When multiple large-language-model agents negotiate, communicate, or compete, do they spontaneously develop covert signalling — channels of communication that human observers cannot decode? Recent work has established that such behaviour is possible: LLMs can be trained or pressured into steganographic communication, encoded reasoning, and tacit collusion on pricing tasks. What remains almost entirely missing is a systematic methodology for detecting covert signalling as it emerges in the wild, in standard negotiation settings, without prompting agents to be deceptive. This paper makes three contributions. First, we disambiguate four distinct phenomena that are routinely conflated under the umbrella term "covert signalling" — steganography, convention formation, strategic ambiguity, and deceptive coordination — and argue that each requires different evidence and different mitigations. Second, we propose a measurement framework built around four detection signatures: mutual-information lift between agent messages and private state, paraphrase-invariance failure, thirdparty comprehension gap, and behavioural coordination beyond stated commitments. Third, we describe a concrete experimental protocol — a controlled multi-agent negotiation environment with explicit conditions and falsifiable predictions
— that any team with API access could run today. We argue this is one of the most tractable open problems in AI safety: the methodology is achievable, the threat model is concrete, and the empirical baseline is currently almost empty.

Files (1)

Cite this record

Mahendrakar, P. (2026). Emergent Covert Signaling in Multi-Agent LLM Negotiation: A Conceptual Framework and Experimental Protocol. Life of Research. https://doi.org/10.5281/zenodo.19853493

APA 7th edition
Export to a reference manager
BibTeX
@misc{mahendrakar2026emergent,
  author       = {Mahendrakar, Pranay},
  title        = {{Emergent Covert Signaling in Multi-Agent LLM Negotiation: A Conceptual Framework and Experimental Protocol}},
  year         = {2026},
  month        = apr,
  date         = {2026-04-28},
  publisher    = {Life of Research},
  doi          = {10.5281/zenodo.19853493},
  url          = {https://lifeofresearch.com/articles/2},
  abstract     = {When multiple large-language-model agents negotiate, communicate, or compete, do they spontaneously develop covert signalling — channels of communication that human observers cannot decode? Recent work has established that such behaviour is possible: LLMs can be trained or pressured into steganographic communication, encoded reasoning, and tacit collusion on pricing tasks. What remains almost entirely missing is a systematic methodology for detecting covert signalling as it emerges in the wild, in standard negotiation settings, without prompting agents to be deceptive. This paper makes three contributions. First, we disambiguate four distinct phenomena that are routinely conflated under the umbrella term "covert signalling" — steganography, convention formation, strategic ambiguity, and deceptive coordination — and argue that each requires different evidence and different mitigations. Second, we propose a measurement framework built around four detection signatures: mutual-information lift between agent messages and private state, paraphrase-invariance failure, thirdparty comprehension gap, and behavioural coordination beyond stated commitments. Third, we describe a concrete experimental protocol — a controlled multi-agent negotiation environment with explicit conditions and falsifiable predictions — that any team with API access could run today. We argue this is one of the most tractable open problems in AI safety: the methodology is achievable, the threat model is concrete, and the empirical baseline is currently almost empty.},
  language     = {en},
  copyright    = {Creative Commons Attribution 4.0}
}

Using Zotero or Mendeley? Their browser connector saves this record from this page, with its PDF when there is one. On search and browse pages it lists every result so you can save many at once.

Guides What a complete citation needs What CC BY 4.0 allows What is a DOI?