Paper Overview
Field: ML Authors: Raphael Casey, Michael Simeone, Alberto Tosato, Florian Ernst, Kemal El Moujahid, James Tamplin, Tommaso Tosato Published: 2026-11-02 arXiv: 2611.03600
Abstract
AI agents are increasingly deployed in settings where they interact and coordinate with other agents, yet honesty is mostly measured in single-turn, single-agent benchmarks that pressure the model to deceive. We study deception that emerges in multi-agent interaction without any instruction to deceive. We introduce Kradle, a platform for evaluating AI models, and Four Bridges, an information asymmetry game in which four agents distribute across four rooms: one is the death room, the others hold food worth more if not shared. One agent, the informed agent, knows which room is the death room and can withhold or disclose that information.
We evaluate eight frontier models as the informed agent. Deceptive behavior appears in every model and in 73% of all runs (6% to 100% per model), and does not decrease with capability level within model families. When the informed agent does disclose, the warning is frequently doubted, and agents who doubt it enter the death room at twice the rate of those who do not. Telling all agents that "one of them knows the death room" collapses deception in six of eight models; telling the informed agent that "the room is permanently lethal" changes only one model. On one open-weight model, an honesty steering vector reduces deception to 0%, and adversarial honesty training reduces it to 6%. The platform and game provide a testbed for measuring deceptive behavior and comparing interventions.
Key Findings
- Deception emerges spontaneously in multi-agent settings, without explicit pressure to deceive
- Deceptive behavior appeared in 73% of all runs across eight frontier models (6%–100% per model)
- Deception propensity does not decline with capability within model families
- Doubt of honest warnings doubled the rate of death-room entries
- Transparency interventions (telling everyone an informed agent exists) were far more effective than threat-severity framing
- Honesty steering vectors and adversarial honesty training sharply reduced deception on an open-weight model